Code Forge

<?php

/***************************************************************************

 *                               groupcp.php

 *                            -------------------

 *   begin                : Saturday, Feb 13, 2001

 *   copyright            : (C) 2001 The phpBB Group

 *   email                : support@phpbb.com

 *

 *   $Id: groupcp.php 2845 2002-08-08 18:06:53Z  $

 *

 *

 ***************************************************************************/

/***************************************************************************

 *

 *   This program is free software; you can redistribute it and/or modify

 *   it under the terms of the GNU General Public License as published by

 *   the Free Software Foundation; either version 2 of the License, or

 *   (at your option) any later version.

 *

 ***************************************************************************/

define('IN_PHPBB', true);

$phpbb_root_path = './';

include($phpbb_root_path . 'extension.inc');

include($phpbb_root_path . 'common.'.$phpEx);

// -------------------------

//

function generate_user_info(&$row, $date_format, $group_mod, &$from, &$posts, &$joined, &$poster_avatar, &$profile_img, &$profile, &$search_img, &$search, &$pm_img, &$pm, &$email_img, &$email, &$www_img, &$www, &$icq_status_img, &$icq_img, &$icq, &$aim_img, &$aim, &$msn_img, &$msn, &$yim_img, &$yim)

{

        global $lang, $images, $board_config, $phpEx;

        $from = ( !empty($row['user_from']) ) ? $row['user_from'] : ' ';

        $joined = create_date($date_format, $row['user_regdate'], $board_config['board_timezone']);

        $posts = ( $row['user_posts'] ) ? $row['user_posts'] : 0;

        $poster_avatar = '';

        if ( $row['user_avatar_type'] && $row['user_id'] != ANONYMOUS && $row['user_allowavatar'] )

        {

                switch( $row['user_avatar_type'] )

                {

                        case USER_AVATAR_UPLOAD:

                                $poster_avatar = ( $board_config['allow_avatar_upload'] ) ? '<img src="' . $board_config['avatar_path'] . '/' . $row['user_avatar'] . '" alt="" border="0" />' : '';

                                break;

                        case USER_AVATAR_REMOTE:

                                $poster_avatar = ( $board_config['allow_avatar_remote'] ) ? '<img src="' . $row['user_avatar'] . '" alt="" border="0" />' : '';

                                break;

                        case USER_AVATAR_GALLERY:

                                $poster_avatar = ( $board_config['allow_avatar_local'] ) ? '<img src="' . $board_config['avatar_gallery_path'] . '/' . $row['user_avatar'] . '" alt="" border="0" />' : '';

                                break;

                }

        }

        if ( !empty($row['user_viewemail']) || $group_mod )

        {

                $email_uri = ( $board_config['board_email_form'] ) ? append_sid("profile.$phpEx?mode=email&" . POST_USERS_URL .'=' . $row['user_id']) : 'mailto:' . $row['user_email'];

                $email_img = '<a href="' . $email_uri . '"><img src="' . $images['icon_email'] . '" alt="' . $lang['Send_email'] . '" title="' . $lang['Send_email'] . '" border="0" /></a>';

                $email = '<a href="' . $email_uri . '">' . $lang['Send_email'] . '</a>';

        }

        else

        {

                $email_img = ' ';

                $email = ' ';

        }

        $temp_url = append_sid("profile.$phpEx?mode=viewprofile&" . POST_USERS_URL . "=" . $row['user_id']);

        $profile_img = '<a href="' . $temp_url . '"><img src="' . $images['icon_profile'] . '" alt="' . $lang['Read_profile'] . '" title="' . $lang['Read_profile'] . '" border="0" /></a>';

        $profile = '<a href="' . $temp_url . '">' . $lang['Read_profile'] . '</a>';

        $temp_url = append_sid("privmsg.$phpEx?mode=post&" . POST_USERS_URL . "=" . $row['user_id']);

        $pm_img = '<a href="' . $temp_url . '"><img src="' . $images['icon_pm'] . '" alt="' . $lang['Send_private_message'] . '" title="' . $lang['Send_private_message'] . '" border="0" /></a>';

        $pm = '<a href="' . $temp_url . '">' . $lang['Send_private_message'] . '</a>';

        $www_img = ( $row['user_website'] ) ? '<a href="' . $row['user_website'] . '" target="_userwww"><img src="' . $images['icon_www'] . '" alt="' . $lang['Visit_website'] . '" title="' . $lang['Visit_website'] . '" border="0" /></a>' : '';

        $www = ( $row['user_website'] ) ? '<a href="' . $row['user_website'] . '" target="_userwww">' . $lang['Visit_website'] . '</a>' : '';

        if ( !empty($row['user_icq']) )

        {

                $icq_status_img = '<a href="http://wwp.icq.com/' . $row['user_icq'] . '#pager"><img src="http://web.icq.com/whitepages/online?icq=' . $row['user_icq'] . '&img=5" width="18" height="18" border="0" /></a>';

                $icq_img = '<a href="http://wwp.icq.com/scripts/search.dll?to=' . $row['user_icq'] . '"><img src="' . $images['icon_icq'] . '" alt="' . $lang['ICQ'] . '" title="' . $lang['ICQ'] . '" border="0" /></a>';

                $icq =  '<a href="http://wwp.icq.com/scripts/search.dll?to=' . $row['user_icq'] . '">' . $lang['ICQ'] . '</a>';

        }

        else

        {

                $icq_status_img = '';

                $icq_img = '';

                $icq = '';

        }

        $aim_img = ( $row['user_aim'] ) ? '<a href="aim:goim?screenname=' . $row['user_aim'] . '&amp;message=Hello+Are+you+there?"><img src="' . $images['icon_aim'] . '" alt="' . $lang['AIM'] . '" title="' . $lang['AIM'] . '" border="0" /></a>' : '';

        $aim = ( $row['user_aim'] ) ? '<a href="aim:goim?screenname=' . $row['user_aim'] . '&amp;message=Hello+Are+you+there?">' . $lang['AIM'] . '</a>' : '';

        $temp_url = append_sid("profile.$phpEx?mode=viewprofile&" . POST_USERS_URL . "=" . $row['user_id']);

        $msn_img = ( $row['user_msnm'] ) ? '<a href="' . $temp_url . '"><img src="' . $images['icon_msnm'] . '" alt="' . $lang['MSNM'] . '" title="' . $lang['MSNM'] . '" border="0" /></a>' : '';

        $msn = ( $row['user_msnm'] ) ? '<a href="' . $temp_url . '">' . $lang['MSNM'] . '</a>' : '';

        $yim_img = ( $row['user_yim'] ) ? '<a href="http://edit.yahoo.com/config/send_webmesg?.target=' . $row['user_yim'] . '&amp;.src=pg"><img src="' . $images['icon_yim'] . '" alt="' . $lang['YIM'] . '" title="' . $lang['YIM'] . '" border="0" /></a>' : '';

        $yim = ( $row['user_yim'] ) ? '<a href="http://edit.yahoo.com/config/send_webmesg?.target=' . $row['user_yim'] . '&amp;.src=pg">' . $lang['YIM'] . '</a>' : '';

        $temp_url = append_sid("search.$phpEx?search_author=" . urlencode($username) . "&showresults=posts");

        $search_img = '<a href="' . $temp_url . '"><img src="' . $images['icon_search'] . '" alt="' . $lang['Search_user_posts'] . '" title="' . $lang['Search_user_posts'] . '" border="0" /></a>';

        $search = '<a href="' . $temp_url . '">' . $lang['Search_user_posts'] . '</a>';

        return;

}

//

// --------------------------

//

// Start session management

//

$userdata = session_pagestart($user_ip, PAGE_GROUPCP);

init_userprefs($userdata);

//

// End session management

//

$script_name = preg_replace('/^\/?(.*?)\/?$/', "\\1", trim($board_config['script_path']));

$script_name = ( $script_name != '' ) ? $script_name . '/groupcp.'.$phpEx : 'groupcp.'.$phpEx;

$server_name = trim($board_config['server_name']);

$server_protocol = ( $board_config['cookie_secure'] ) ? 'https://' : 'http://';

$server_port = ( $board_config['server_port'] <> 80 ) ? ':' . trim($board_config['server_port']) . '/' : '/';

$server_url = $server_protocol . $server_name . $server_port . $script_name;

if ( isset($HTTP_GET_VARS[POST_GROUPS_URL]) || isset($HTTP_POST_VARS[POST_GROUPS_URL]) )

{

        $group_id = ( isset($HTTP_GET_VARS[POST_GROUPS_URL]) ) ? intval($HTTP_GET_VARS[POST_GROUPS_URL]) : intval($HTTP_POST_VARS[POST_GROUPS_URL]);

}

else

{

        $group_id = '';

}

if ( isset($HTTP_POST_VARS['mode']) || isset($HTTP_GET_VARS['mode']) )

{

        $mode = ( isset($HTTP_POST_VARS['mode']) ) ? $HTTP_POST_VARS['mode'] : $HTTP_GET_VARS['mode'];

}

else

{

        $mode = '';

}

$confirm = ( isset($HTTP_POST_VARS['confirm']) ) ? TRUE : 0;

$cancel = ( isset($HTTP_POST_VARS['cancel']) ) ? TRUE : 0;

$start = ( isset($HTTP_GET_VARS['start']) ) ? intval($HTTP_GET_VARS['start']) : 0;

//

// Default var values

//

$header_location = ( @preg_match('/Microsoft|WebSTAR/', getenv('SERVER_SOFTWARE')) ) ? 'Refresh: 0; URL=' : 'Location: ';

$is_moderator = FALSE;

if ( isset($HTTP_POST_VARS['groupstatus']) && $group_id )

{

        if ( !$userdata['session_logged_in'] )

        {

                header($header_location . append_sid("login.$phpEx?redirect=groupcp.$phpEx&" . POST_GROUPS_URL . "=$group_id", true));

                exit;

        }

        $sql = "SELECT group_moderator 

                FROM " . GROUPS_TABLE . "  

                WHERE group_id = $group_id";

        if ( !($result = $db->sql_query($sql)) )

        {

                message_die(GENERAL_ERROR, 'Could not obtain user and group information', '', __LINE__, __FILE__, $sql);

        }

        $row = $db->sql_fetchrow($result);

        if ( $row['group_moderator'] != $userdata['user_id'] && $userdata['user_level'] != ADMIN )

        {

                $template->assign_vars(array(

                        'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("index.$phpEx") . '">')

                );

                $message = $lang['Not_group_moderator'] . '<br /><br />' . sprintf($lang['Click_return_group'], '<a href="' . append_sid("groupcp.$phpEx?" . POST_GROUPS_URL . "=$group_id") . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid("index.$phpEx") . '">', '</a>');

                message_die(GENERAL_MESSAGE, $message);

        }

        $sql = "UPDATE " . GROUPS_TABLE . " 

                SET group_type = " . intval($HTTP_POST_VARS['group_type']) . "

                WHERE group_id = $group_id";

        if ( !($result = $db->sql_query($sql)) )

        {

                message_die(GENERAL_ERROR, 'Could not obtain user and group information', '', __LINE__, __FILE__, $sql);

        }

        $template->assign_vars(array(

                'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("groupcp.$phpEx?" . POST_GROUPS_URL . "=$group_id") . '">')

        );

        $message = $lang['Group_type_updated'] . '<br /><br />' . sprintf($lang['Click_return_group'], '<a href="' . append_sid("groupcp.$phpEx?" . POST_GROUPS_URL . "=$group_id") . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid("index.$phpEx") . '">', '</a>');

        message_die(GENERAL_MESSAGE, $message);

}

else if ( isset($HTTP_POST_VARS['joingroup']) && $group_id )

{

        //

        // First, joining a group

        // If the user isn't logged in redirect them to login

        //

        if ( !$userdata['session_logged_in'] )

        {

                header($header_location . append_sid("login.$phpEx?redirect=groupcp.$phpEx&" . POST_GROUPS_URL . "=$group_id", true));

                exit;

        }

        $sql = "SELECT ug.user_id, g.group_type

                FROM " . USER_GROUP_TABLE . " ug, " . GROUPS_TABLE . " g 

                WHERE g.group_id = $group_id 

                        AND g.group_type <> " . GROUP_HIDDEN . " 

                        AND ug.group_id = g.group_id";

        if ( !($result = $db->sql_query($sql)) )

        {

                message_die(GENERAL_ERROR, 'Could not obtain user and group information', '', __LINE__, __FILE__, $sql);

        }

        if (        $row = $db->sql_fetchrow($result) )

        {

                if ( $row['group_type'] == GROUP_OPEN )

                {

                        do

                        {

                                if ( $userdata['user_id'] == $row['user_id'] )

                                {

                                        $template->assign_vars(array(

                                                'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("index.$phpEx") . '">')

                                        );

                                        $message = $lang['Already_member_group'] . '<br /><br />' . sprintf($lang['Click_return_group'], '<a href="' . append_sid("groupcp.$phpEx?" . POST_GROUPS_URL . "=$group_id") . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid("index.$phpEx") . '">', '</a>');

                                        message_die(GENERAL_MESSAGE, $message);

                                }

                        } while ( $row = $db->sql_fetchrow($result) );

                }

                else

                {

                        $template->assign_vars(array(

                                'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("index.$phpEx") . '">')

                        );

                        $message = $lang['This_closed_group'] . '<br /><br />' . sprintf($lang['Click_return_group'], '<a href="' . append_sid("groupcp.$phpEx?" . POST_GROUPS_URL . "=$group_id") . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid("index.$phpEx") . '">', '</a>');

                        message_die(GENERAL_MESSAGE, $message);

                }

        }

        else

        {

                message_die(GENERAL_MESSAGE, $lang['No_groups_exist']); 

        }

        $sql = "INSERT INTO " . USER_GROUP_TABLE . " (group_id, user_id, user_pending) 

                VALUES ($group_id, " . $userdata['user_id'] . ", 1)";

        if ( !($result = $db->sql_query($sql)) )

        {

                message_die(GENERAL_ERROR, "Error inserting user group subscription", "", __LINE__, __FILE__, $sql);

        }

        $sql = "SELECT u.user_email, u.username, u.user_lang, g.group_name 

                FROM ".USERS_TABLE . " u, " . GROUPS_TABLE . " g 

                WHERE u.user_id = g.group_moderator 

                        AND g.group_id = $group_id";

        if ( !($result = $db->sql_query($sql)) )

        {

                message_die(GENERAL_ERROR, "Error getting group moderator data", "", __LINE__, __FILE__, $sql);

        }

        $moderator = $db->sql_fetchrow($result);

        include($phpbb_root_path . 'includes/emailer.'.$phpEx);

        $emailer = new emailer($board_config['smtp_delivery']);

        $email_headers = 'From: ' . $board_config['board_email'] . "\nReturn-Path: " . $board_config['board_email'] . "\n";

        $emailer->use_template('group_request', $moderator['user_lang']);

        $emailer->email_address($moderator['user_email']);

        $emailer->set_subject();//$lang['Group_request']

        $emailer->extra_headers($email_headers);

        $emailer->assign_vars(array(

                'SITENAME' => $board_config['sitename'], 

                'GROUP_MODERATOR' => $moderator['username'],

                'EMAIL_SIG' => str_replace('<br />', "\n", "-- \n" . $board_config['board_email_sig']), 

                'U_GROUPCP' => $server_url . '?' . POST_GROUPS_URL . "=$group_id&validate=true")

        );

        $emailer->send();

        $emailer->reset();

        $template->assign_vars(array(

                'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("index.$phpEx") . '">')

        );

        $message = $lang['Group_joined'] . '<br /><br />' . sprintf($lang['Click_return_group'], '<a href="' . append_sid("groupcp.$phpEx?" . POST_GROUPS_URL . "=$group_id") . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid("index.$phpEx") . '">', '</a>');

        message_die(GENERAL_MESSAGE, $message);

}

else if ( isset($HTTP_POST_VARS['unsub']) || isset($HTTP_POST_VARS['unsubpending']) && $group_id )

{

        //

        // Second, unsubscribing from a group

        // Check for confirmation of unsub.

        //

        if ( $cancel )

        {

                header($header_location . append_sid("groupcp.$phpEx", true));

                exit;

        }

        elseif ( !$userdata['session_logged_in'] )

        {

                header($header_location . append_sid("login.$phpEx?redirect=groupcp.$phpEx&" . POST_GROUPS_URL . "=$group_id", true));

                exit;

        }

        if ( $confirm )

        {

                $sql = "DELETE FROM " . USER_GROUP_TABLE . " 

                        WHERE user_id = " . $userdata['user_id'] . " 

                                AND group_id = $group_id";

                if ( !($result = $db->sql_query($sql)) )

                {

                        message_die(GENERAL_ERROR, 'Could not delete group memebership data', '', __LINE__, __FILE__, $sql);

                }

                if ( $userdata['user_level'] != ADMIN && $userdata['user_level'] == MOD )

                {

                        $sql = "SELECT COUNT(auth_mod) AS is_auth_mod 

                                FROM " . AUTH_ACCESS_TABLE . " aa, " . USER_GROUP_TABLE . " ug 

                                WHERE ug.user_id = " . $userdata['user_id'] . " 

                                        AND aa.group_id = ug.group_id 

                                        AND aa.auth_mod = 1";

                        if ( !($result = $db->sql_query($sql)) )

                        {

                                message_die(GENERAL_ERROR, 'Could not obtain moderator status', '', __LINE__, __FILE__, $sql);

                        }

                        if ( !($row = $db->sql_fetchrow($result)) )

                        {

                                $sql = "UPDATE " . USERS_TABLE . " 

                                        SET user_level = " . USER . " 

                                        WHERE user_id = " . $userdata['user_id'];

                                if ( !($result = $db->sql_query($sql)) )

                                {

                                        message_die(GENERAL_ERROR, 'Could not update user level', '', __LINE__, __FILE__, $sql);

                                }

                        }

                }

                $template->assign_vars(array(

                        'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("index.$phpEx") . '">')

                );

                $message = $lang['Usub_success'] . '<br /><br />' . sprintf($lang['Click_return_group'], '<a href="' . append_sid("groupcp.$phpEx?" . POST_GROUPS_URL . "=$group_id") . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid("index.$phpEx") . '">', '</a>');

                message_die(GENERAL_MESSAGE, $message);

        }

        else

        {

                $unsub_msg = ( isset($HTTP_POST_VARS['unsub']) ) ? $lang['Confirm_unsub'] : $lang['Confirm_unsub_pending'];

                $s_hidden_fields = '<input type="hidden" name="' . POST_GROUPS_URL . '" value="' . $group_id . '" /><input type="hidden" name="unsub" value="1" />';

                $page_title = $lang['Group_Control_Panel'];

                include($phpbb_root_path . 'includes/page_header.'.$phpEx);

                $template->set_filenames(array(

                        'confirm' => 'confirm_body.tpl')

                );

                $template->assign_vars(array(

                        'MESSAGE_TITLE' => $lang['Confirm'],

                        'MESSAGE_TEXT' => $unsub_msg,

                        'L_YES' => $lang['Yes'],

                        'L_NO' => $lang['No'],

                        'S_CONFIRM_ACTION' => append_sid("groupcp.$phpEx"),

                        'S_HIDDEN_FIELDS' => $s_hidden_fields)

                );

                $template->pparse('confirm');

                include($phpbb_root_path . 'includes/page_tail.'.$phpEx);

        }

}

else if ( $group_id )

{

        //

        // Did the group moderator get here through an email?

        // If so, check to see if they are logged in.

        //

        if ( isset($HTTP_GET_VARS['validate']) )

        {

                if ( !$userdata['session_logged_in'] )

                {

                        header($header_location . append_sid("login.$phpEx?redirect=groupcp.$phpEx&" . POST_GROUPS_URL . "=$group_id", true));

                        exit;

                }

        }

        //

        // For security, get the ID of the group moderator.

        //

        switch(SQL_LAYER)

        {

                case 'postgresql':

                        $sql = "SELECT g.group_moderator, g.group_type, aa.auth_mod 

                                FROM " . GROUPS_TABLE . " g, " . AUTH_ACCESS_TABLE . " aa 

                                WHERE g.group_id = $group_id

                                        AND aa.group_id = g.group_id 

                                        UNION (

                                                SELECT g.group_moderator, g.group_type, NULL 

                                                FROM " . GROUPS_TABLE . " g

                                                WHERE g.group_id = $group_id

                                                        AND NOT EXISTS (

                                                        SELECT aa.group_id 

                                                        FROM " . AUTH_ACCESS_TABLE . " aa 

                                                        WHERE aa.group_id = g.group_id  

                                                )

                                        )";

                        break;

                case 'oracle':

                        $sql = "SELECT g.group_moderator, g.group_type, aa.auth_mod 

                                FROM " . GROUPS_TABLE . " g, " . AUTH_ACCESS_TABLE . " aa 

                                WHERE g.group_id = $group_id

                                        AND aa.group_id = g.group_id(+)";

                        break;

                default:

                        $sql = "SELECT g.group_moderator, g.group_type, aa.auth_mod 

                                FROM ( " . GROUPS_TABLE . " g 

                                LEFT JOIN " . AUTH_ACCESS_TABLE . " aa ON aa.group_id = g.group_id )

                                WHERE g.group_id = $group_id";

                        break;

        }

        if ( !($result = $db->sql_query($sql)) )

        {

                message_die(GENERAL_ERROR, 'Could not get moderator information', '', __LINE__, __FILE__, $sql);

        }

        if ( $group_info = $db->sql_fetchrow($result) )

        {

                $group_moderator = $group_info['group_moderator'];

                if ( $group_moderator == $userdata['user_id'] || $userdata['user_level'] == ADMIN )

                {

                        $is_moderator = TRUE;

                }

                //

                // Handle Additions, removals, approvals and denials

                //

                if ( !empty($HTTP_POST_VARS['add']) || !empty($HTTP_POST_VARS['remove']) || isset($HTTP_POST_VARS['approve']) || isset($HTTP_POST_VARS['deny']) )

                {

                        if ( !$userdata['session_logged_in'] )

                        {

                                header($header_location . append_sid("login.$phpEx?redirect=groupcp.$phpEx&" . POST_GROUPS_URL . "=$group_id", true));

                                exit;

                        }

                        if ( !$is_moderator )

                        {

                                $template->assign_vars(array(

                                        'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("index.$phpEx") . '">')

                                );

                                $message = $lang['Not_group_moderator'] . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid("index.$phpEx") . '">', '</a>');

                                message_die(GENERAL_MESSAGE, $message);

                        }

                        if ( isset($HTTP_POST_VARS['add']) )

                        {

                                $username = ( isset($HTTP_POST_VARS['username']) ) ? $HTTP_POST_VARS['username'] : "";

                                $sql = "SELECT user_id, user_email, user_lang, user_level  

                                        FROM " . USERS_TABLE . " 

                                        WHERE username = '" . str_replace("\'", "''", $username) . "'";

                                if ( !($result = $db->sql_query($sql)) )

                                {

                                        message_die(GENERAL_ERROR, "Could not get user information", $lang['Error'], __LINE__, __FILE__, $sql);

                                }

                                if ( !($row = $db->sql_fetchrow($result)) )

                                {

                                        $template->assign_vars(array(

                                                'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("groupcp.$phpEx?" . POST_GROUPS_URL . "=$group_id") . '">')

                                        );

                                        $message = $lang['Could_not_add_user'] . "<br /><br />" . sprintf($lang['Click_return_group'], "<a href=\"" . append_sid("groupcp.$phpEx?" . POST_GROUPS_URL . "=$group_id") . "\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_index'], "<a href=\"" . append_sid("index.$phpEx") . "\">", "</a>");

                                        message_die(GENERAL_MESSAGE, $message);

                                }

                                if ( $row['user_id'] == ANONYMOUS )

                                {

                                        $template->assign_vars(array(

                                                'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("groupcp.$phpEx?" . POST_GROUPS_URL . "=$group_id") . '">')

                                        );

                                        $message = $lang['Could_not_anon_user'] . '<br /><br />' . sprintf($lang['Click_return_group'], '<a href="' . append_sid("groupcp.$phpEx?" . POST_GROUPS_URL . "=$group_id") . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid("index.$phpEx") . '">', '</a>');

                                        message_die(GENERAL_MESSAGE, $message);

                                }

                                $sql = "SELECT ug.user_id, u.user_level 

                                        FROM " . USER_GROUP_TABLE . " ug, " . USERS_TABLE . " u 

                                        WHERE u.user_id = " . $row['user_id'] . " 

                                                AND ug.user_id = u.user_id 

                                                AND ug.group_id = $group_id";

                                if ( !($result = $db->sql_query($sql)) )

                                {

                                        message_die(GENERAL_ERROR, 'Could not get user information', '', __LINE__, __FILE__, $sql);

                                }

                                if ( !($db->sql_fetchrow($result)) )

                                {

                                        $sql = "INSERT INTO " . USER_GROUP_TABLE . " (user_id, group_id, user_pending) 

                                                VALUES (" . $row['user_id'] . ", $group_id, 0)";

                                        if ( !$db->sql_query($sql) )

                                        {

                                                message_die(GENERAL_ERROR, 'Could not add user to group', '', __LINE__, __FILE__, $sql);

                                        }

                                        if ( $row['user_level'] != ADMIN && $row['user_level'] != MOD && $group_info['auth_mod'] )

                                        {

                                                $sql = "UPDATE " . USERS_TABLE . " 

                                                        SET user_level = " . MOD . " 

                                                        WHERE user_id = " . $row['user_id'];

                                                if ( !$db->sql_query($sql) )

                                                {

                                                        message_die(GENERAL_ERROR, 'Could not update user level', '', __LINE__, __FILE__, $sql);

                                                }

                                        }

                                        //

                                        // Get the group name

                                        // Email the user and tell them they're in the group

                                        //

                                        $group_sql = "SELECT group_name 

                                                FROM " . GROUPS_TABLE . " 

                                                WHERE group_id = $group_id";

                                        if ( !($result = $db->sql_query($group_sql)) )

                                        {

                                                message_die(GENERAL_ERROR, 'Could not get group information', '', __LINE__, __FILE__, $group_sql);

                                        }

                                        $group_name_row = $db->sql_fetchrow($result);

                                        $group_name = $group_name_row['group_name'];

                                        include($phpbb_root_path . 'includes/emailer.'.$phpEx);

                                        $emailer = new emailer($board_config['smtp_delivery']);

                                        $email_headers = 'From: ' . $board_config['board_email'] . "\nReturn-Path: " . $board_config['board_email'] . "\n";

                                        $emailer->use_template('group_added', $row['user_lang']);

                                        $emailer->email_address($row['user_email']);

                                        $emailer->set_subject();//$lang['Group_added']

                                        $emailer->extra_headers($email_headers);

                                        $emailer->assign_vars(array(

                                                'SITENAME' => $board_config['sitename'], 

                                                'GROUP_NAME' => $group_name,

                                                'EMAIL_SIG' => str_replace('<br />', "\n", "-- \n" . $board_config['board_email_sig']), 

                                                'U_GROUPCP' => $server_url . '?' . POST_GROUPS_URL . "=$group_id")

                                        );

                                        $emailer->send();

                                        $emailer->reset();

                                }

                                else

                                {

                                        $template->assign_vars(array(

                                                'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("groupcp.$phpEx?" . POST_GROUPS_URL . "=$group_id") . '">')

                                        );

                                        $message = $lang['User_is_member_group'] . '<br /><br />' . sprintf($lang['Click_return_group'], '<a href="' . append_sid("groupcp.$phpEx?" . POST_GROUPS_URL . "=$group_id") . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_index'], '<a href="' . append_sid("index.$phpEx") . '">', '</a>');

                                        message_die(GENERAL_MESSAGE, $message);

                                }

                        }

                        else 

                        {

                                if ( ( ( isset($HTTP_POST_VARS['approve']) || isset($HTTP_POST_VARS['deny']) ) && isset($HTTP_POST_VARS['pending_members']) ) || ( isset($HTTP_POST_VARS['remove']) && isset($HTTP_POST_VARS['members']) ) )

                                {

                                        $members = ( isset($HTTP_POST_VARS['approve']) || isset($HTTP_POST_VARS['deny']) ) ? $HTTP_POST_VARS['pending_members'] : $HTTP_POST_VARS['members'];

                                        $sql_in = '';

                                        for($i = 0; $i < count($members); $i++)

                                        {

                                                $sql_in .= ( ( $sql_in != '' ) ? ', ' : '' ) . $members[$i];

                                        }

                                        if ( isset($HTTP_POST_VARS['approve']) )

                                        {

                                                if ( $group_info['auth_mod'] )

                                                {

                                                        $sql = "UPDATE " . USERS_TABLE . " 

                                                                SET user_level = " . MOD . " 

                                                                WHERE user_id IN ($sql_in) 

                                                                        AND user_level NOT IN (" . MOD . ", " . ADMIN . ")";

                                                        if ( !$db->sql_query($sql) )

                                                        {

                                                                message_die(GENERAL_ERROR, 'Could not update user level', '', __LINE__, __FILE__, $sql);

                                                        }

                                                }

                                                $sql = "UPDATE " . USER_GROUP_TABLE . " 

                                                        SET user_pending = 0 

                                                        WHERE user_id IN ($sql_in) 

                                                                AND group_id = $group_id";

                                                $sql_select = "SELECT user_email 

                                                        FROM ". USERS_TABLE . " 

                                                        WHERE user_id IN ($sql_in)"; 

                                        }

                                        else if ( isset($HTTP_POST_VARS['deny']) || isset($HTTP_POST_VARS['remove']) )

                                        {

                                                if ( $group_info['auth_mod'] )

                                                {

                                                        $sql = "SELECT ug.user_id, ug.group_id 

                                                                FROM " . AUTH_ACCESS_TABLE . " aa, " . USER_GROUP_TABLE . " ug 

                                                                WHERE ug.user_id IN  ($sql_in) 

                                                                        AND aa.group_id = ug.group_id 

                                                                        AND aa.auth_mod = 1 

                                                                GROUP BY ug.user_id, ug.group_id 

                                                                ORDER BY ug.user_id, ug.group_id";

                                                        if ( !($result = $db->sql_query($sql)) )

                                                        {

                                                                message_die(GENERAL_ERROR, 'Could not obtain moderator status', '', __LINE__, __FILE__, $sql);

                                                        }

                                                        if ( $row = $db->sql_fetchrow($result) )

                                                        {

                                                                $group_check = array();

                                                                $remove_mod_sql = '';

                                                                do

                                                                {

                                                                        $group_check[$row['user_id']][] = $row['group_id'];

                                                                }

                                                                while ( $row = $db->sql_fetchrow($result) );

                                                                while( list($user_id, $group_list) = @each($group_check) )

                                                                {

                                                                        if ( count($group_list) == 1 )

                                                                        {

                                                                                $remove_mod_sql .= ( ( $remove_mod_sql != '' ) ? ', ' : '' ) . $user_id;

                                                                        }

                                                                }

                                                                if ( $remove_mod_sql != '' )

                                                                {

                                                                        $sql = "UPDATE " . USERS_TABLE . " 

                                                                                SET user_level = " . USER . " 

                                                                                WHERE user_id IN ($remove_mod_sql) 

                                                                                        AND user_level NOT IN (" . ADMIN . ")";

                                                                        if ( !$db->sql_query($sql) )

                                                                        {

                                                                                message_die(GENERAL_ERROR, 'Could not update user level', '', __LINE__, __FILE__, $sql);

                                                                        }

                                                                }

                                                        }

                                                }

                                                $sql = "DELETE FROM " . USER_GROUP_TABLE . " 

                                                        WHERE user_id IN ($sql_in) 

                                                                AND group_id = $group_id";

                                        }

                                        if ( !$db->sql_query($sql) )

                                        {

                                                message_die(GENERAL_ERROR, 'Could not update user group table', '', __LINE__, __FILE__, $sql);

                                        }

                                        //

                                        // Email users when they are approved

                                        //

                                        if ( isset($HTTP_POST_VARS['approve']) )

                                        {

                                                if ( !($result = $db->sql_query($sql_select)) )

                                                {

                                                        message_die(GENERAL_ERROR, 'Could not get user email information', '', __LINE__, __FILE__, $sql);

                                                }

                                                $email_addresses = '';

                                                while( $row = $db->sql_fetchrow($result) )

                                                {

                                                        $email_addresses .= ( ( $email_addresses != '' ) ? ', ' : '' ) . $row['user_email'];

                                                }

                                                //

                                                // Get the group name

                                                //

                                                $group_sql = "SELECT group_name 

                                                        FROM " . GROUPS_TABLE . " 

                                                        WHERE group_id = $group_id";

                                                if ( !($result = $db->sql_query($group_sql)) )

                                                {

                                                        message_die(GENERAL_ERROR, 'Could not get group information', '', __LINE__, __FILE__, $group_sql);

                                                }

                                                $group_name_row = $db->sql_fetchrow($result);

                                                $group_name = $group_name_row['group_name'];

                                                include($phpbb_root_path . 'includes/emailer.'.$phpEx);

                                                $emailer = new emailer($board_config['smtp_delivery']);

                                                $email_headers = 'From: ' . $board_config['board_email'] . "\nReturn-Path: " . $board_config['board_email'] . "\nBcc: " . $email_addresses . "\n";

                                                $emailer->use_template('group_approved');

                                                $emailer->email_address($userdata['user_email']);

                                                $emailer->set_subject();//$lang['Group_approved']

                                                $emailer->extra_headers($email_headers);

                                                $emailer->assign_vars(array(

                                                        'SITENAME' => $board_config['sitename'], 

                                                        'GROUP_NAME' => $group_name,

                                                        'EMAIL_SIG' => str_replace('<br />', "\n", "-- \n" . $board_config['board_email_sig']), 

                                                        'U_GROUPCP' => $server_url . '?' . POST_GROUPS_URL . "=$group_id")

                                                );

                                                $emailer->send();

                                                $emailer->reset();

                                        }

                                }

                        }

                }

                //

                // END approve or deny

                //

        }

        else

        {

                message_die(GENERAL_MESSAGE, $lang['No_groups_exist']);

        }

        //

        // Get group details

        //

        $sql = "SELECT *

                FROM " . GROUPS_TABLE . "

                WHERE group_id = $group_id

                        AND group_single_user = 0";

        if ( !($result = $db->sql_query($sql)) )

        {

                message_die(GENERAL_ERROR, 'Error getting group information', '', __LINE__, __FILE__, $sql);

        }

        if ( !($group_info = $db->sql_fetchrow($result)) )

        {

                message_die(GENERAL_MESSAGE, $lang['Group_not_exist']); 

        }

        //

        // Get moderator details for this group

        //

        $sql = "SELECT username, user_id, user_viewemail, user_posts, user_regdate, user_from, user_website, user_email, user_icq, user_aim, user_yim, user_msnm  

                FROM " . USERS_TABLE . " 

                WHERE user_id = " . $group_info['group_moderator'];

        if ( !($result = $db->sql_query($sql)) )

        {

                message_die(GENERAL_ERROR, 'Error getting user list for group', '', __LINE__, __FILE__, $sql);

        }

        $group_moderator = $db->sql_fetchrow($result); 

        //

        // Get user information for this group

        //

        $sql = "SELECT u.username, u.user_id, u.user_viewemail, u.user_posts, u.user_regdate, u.user_from, u.user_website, u.user_email, u.user_icq, u.user_aim, u.user_yim, u.user_msnm, ug.user_pending 

                FROM " . USERS_TABLE . " u, " . USER_GROUP_TABLE . " ug

                WHERE ug.group_id = $group_id

                        AND u.user_id = ug.user_id

                        AND ug.user_pending = 0 

                        AND ug.user_id <> " . $group_moderator['user_id'] . "