IntegraMOD

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /profile.php
----------------

Request-Method: GET

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/profile.php

#
#-----[ FIND ]------------------------------------------
#
define('IN_PHPBB', 1);

#
#-----[ AFTER, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignoregvar = array('');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM

<?php
/***************************************************************************
* profile.php
* -----------
* begin : 08/05/2003
* copyright : Ptirhiik
* email : <a>admin@rpgnet-fr.com</a>
*
* version : 1.0.9 - 17/10/2003
* define('IN_PHPBB', true);
***************************************************************************/

define('IN_PHPBB', 1);
define('CT_SECLEVEL', 'LOW');
$ct_ignorepvar = array('user_realname');
$ct_ignoregvar = array('');
$ct_ignorepvar = array('helpbox','delete','deleteall','phpBBSecurity_question','user_interests');
if ( (isset($HTTP_GET_VARS['mode']) && ($HTTP_GET_VARS['mode'] == 'viewprofile')) || (isset($HTTP_POST_VARS['mode']) && ($HTTP_POST_VARS['mode'] == 'viewprofile')) )
{
define('IN_CASHMOD', true);
define('CM_VIEWPROFILE',true);
}
$phpbb_root_path = './';
include($phpbb_root_path . 'extension.inc');
include($phpbb_root_path . 'common.'.$phpEx);
include($phpbb_root_path . 'profilcp/functions_profile.'.$phpEx);

include($phpbb_root_path . 'includes/functions_selects.'.$phpEx);
include($phpbb_root_path . 'includes/functions_validate.'.$phpEx);
include($phpbb_root_path . 'includes/functions_post.'.$phpEx);
include($phpbb_root_path . 'includes/bbcode.'.$phpEx);
include($phpbb_root_path . 'includes/emailer.'.$phpEx);
include_once($phpbb_root_path . 'includes/functions_topics_list.' . $phpEx);

//
// Start session management
$userdata = session_pagestart($user_ip, PAGE_PROFILE);
init_userprefs($userdata);

//
// Set default email variables
//
$.script_name = preg_replace('/^/?(.*?)/?$/', '1', trim($board_config['.script_path']));
$.script_name = ( $.script_name != '' ) ? $.script_name . '/profile.'.$phpEx : 'profile.'.$phpEx;
$server_name = trim($board_config['server_name']);
$server_protocol = ( $board_config['cookie_secure'] ) ? 'https://' : 'http://';
$server_port = ( $board_config['server_port'] <> 80 ) ? ':' . trim($board_config['server_port']) . '/' : '/';

$server_url = $server_protocol . $server_name . $server_port . $.script_name;

//
// get viewed user id
$view_user_id = ANONYMOUS;
if ( isset($HTTP_POST_VARS[POST_USERS_URL]) || isset($HTTP_GET_VARS[POST_USERS_URL]) )
{
$view_user_id = isset($HTTP_POST_VARS[POST_USERS_URL]) ? intval($HTTP_POST_VARS[POST_USERS_URL]) : intval($HTTP_GET_VARS[POST_USERS_URL]);
}
if ($view_user_id==ANONYMOUS) $view_user_id = $userdata['user_id'];

//
// get the menu
$dir = @opendir($phpbb_root_path . "profilcp");
$setmodules = true;
while( $file = @readdir($dir) )
{
if( preg_match("/^profilcp_.*?." . $phpEx . "$/", $file) )
{
include($phpbb_root_path . "profilcp/" . $file);
}
}
@closedir($dir);

unset($setmodules);
//
// sort
for ($i=0; $i <count>sql_query($sql))
{
message_die(GENERAL_ERROR, 'Couldn't obtain user information.', '', __LINE__, __FILE__, $sql);
}
if (!$user_row = $db->sql_fetchrow($result) )
{
message_die(GENERAL_ERROR, $lang['No_such_user']);
}

// get curopt
$curopt = -1;
for ($i=0; ( ($i < count($module['mode'])) && ($curopt < 0) ); $i++ )
{
if ($mode == $module['mode'][$i])
{
$curopt = $i;
}
}

// sub-option
if ( !isset($module['sub'][$curopt]['mode']) || !in_array($sub, $module['sub'][$curopt]['mode']) )
{
$sub = '';
}

// get cur subopt
$cur_subopt = -1;
for ($i=0; ( ($i < count($module['sub'][$curopt]['mode'])) && ($cur_subopt < 0) ); $i++ ) if ($sub == $module['sub'][$curopt]['mode'][$i]) $cur_subopt = $i;
if ( ($cur_subopt <0> 0) )
{
$cur_subopt = 0;
$sub = $module['sub'][$curopt]['mode'][0];
}

// action
$set = '';
if ( isset($HTTP_POST_VARS['set']) || isset($HTTP_GET_VARS['set']) )
{
$set = isset($HTTP_POST_VARS['set']) ? $HTTP_POST_VARS['set'] : $HTTP_GET_VARS['set'];
}
$no_header = in_array($set, array('add', 'remove'));

// Control
$submit = ( isset($HTTP_POST_VARS['submit']) || (($mode=='privmsg') && isset($HTTP_POST_VARS['post'])) );
$reset = isset($HTTP_POST_VARS['reset']);
$remove = isset($HTTP_POST_VARS['remove']);
$adduser = isset($HTTP_POST_VARS['adduser']);
$preview = isset($HTTP_POST_VARS['preview']);
$cancel = isset($HTTP_POST_VARS['cancel']);
$confirm = isset($HTTP_POST_VARS['confirm']);

// privmsg
$save = isset($HTTP_POST_VARS['save']);
$mark_list = ( !empty($HTTP_POST_VARS['mark']) ) ? $HTTP_POST_VARS['mark'] : 0;
$save = ($save && $mark_list && ($sub != 'savebox') && ($sub != 'outbox'));

// reload the user row
$view_userdata = $user_row;

if ($submit || $remove || $adduser || $no_header || $save || $confirm)
{
// session id check
if ( ($sid != $userdata['session_id']) && ($set == '') && !$no_header && !defined('NO_SID'))
{
message_die(GENERAL_ERROR, 'Invalid_session');
}

if ( !empty($module['url'][$curopt]) && empty($module['sub'][$curopt]['url'][$cur_subopt]) )
{
@include( $phpbb_root_path . './profilcp/' . $module['url'][$curopt] );
}
if ( !empty($module['sub'][$curopt]['url'][$cur_subopt]) )
{
include( $phpbb_root_path . './profilcp/' . $module['sub'][$curopt]['url'][$cur_subopt] );
}

if (!$error && !$no_header)
{
$ret_link = append_sid("./profile.$phpEx?mode=$mode" . (($cur_subopt <0>assign_vars(array(
'META' => '<meta>')
);
/* PCP Extra :: Altered
$message = $lang['Profile_updated'] . '<br><br>' . sprintf($lang['Click_return_profilcp'], '<a>', "</a>") . '<br><br>';*/
$message = $lang['Profile_updated'] . '<br><br>' . sprintf($lang['Click_return_profilcp'], '<a>', "</a>", $module['sub'][$curopt]['page_title'][$cur_subopt]) . '<br><br>';
message_die(GENERAL_MESSAGE, $message);
}
}
else if ($cancel)
{
redirect(append_sid("./profile.$phpEx?mode=$mode&sub=$sub"));
}
else
{
// set the page title and include the page header
$page_title = $module['page_title'][$curopt];
if ($cur_subopt >= 0) $page_title .= ' :: ' . $module['sub'][$curopt]['page_title'][$cur_subopt];
include ($phpbb_root_path . './includes/page_header.' . $phpEx);

// template file
$template->set_filenames(array(
'profilcp_header' => 'profilcp/profilcp_header.tpl')
);
//
// menu
$nb_opt = count($module['shortcut']);
if ( $nb_opt < 8 ) $nb_opt = 8;
$width = intval(120 / $nb_opt) +1;
$filler_width = 120 - $width * count($module['shortcut']);
if ($filler_width <0>assign_vars(array(
'NBOPT' => $nb_opt,
'WIDTH' => $width,
'FILLER_WIDTH' => $filler_width,
)
);
if ( $nb_opt > count($module['shortcut']) )
{
$template->assign_block_vars('filleropt', array() );
}

for ($i=0; $i <count> $level_prior[get_user_level($view_userdata)])))) ? 'otheropt' : 'inactopt' );
$template->assign_block_vars('opt', array());
$link = append_sid("./profile.$phpEx?mode=" . $module['mode'][$i] . ( ($view_userdata['user_id'] != ANONYMOUS) ? '&' . POST_USERS_URL . '=' . $view_userdata['user_id'] : '') );
if ( count($module['sub'][$i]['mode']) == 1 )
{
// only one sub-module
$link = append_sid("./profile.$phpEx?mode=" . $module['mode'][$i] . "&sub=" . $module['sub'][$i]['mode'][0] . ( ($view_userdata['user_id'] != ANONYMOUS) ? '&' . POST_USERS_URL . '=' . $view_userdata['user_id'] : '') );
}
$template->assign_block_vars('opt.' . $switch, array(
'SHORTCUT' => $module['shortcut'][$i],
'U_SHORTCUT' => $link,
)
);
}
//
// sub-menu
if ( ($cur_subopt >= 0) && (count($module['sub'][$curopt]['mode']) > 1) )
{
$nb_opt = count($module['sub'][$curopt]['shortcut']);
if ( $nb_opt < 8 ) $nb_opt = 8;
$width = intval(100 / $nb_opt) +1;
$filler_width = 100 - $width * count($module['sub'][$curopt]['shortcut']);
if ($filler_width <0>assign_block_vars('sub_menu', array(
'U_MODULE' => append_sid("./profile.$phpEx?mode=" . $module['mode'][$curopt] . "&sub=$sub" . ( ($view_userdata['user_id'] != ANONYMOUS) ? '&' . POST_USERS_URL . '=' . $view_userdata['user_id'] : '') ),
'L_MODULE' => $module['sub'][$curopt]['page_title'][$cur_subopt],
'NBOPT' => $nb_opt,
'WIDTH' => $width,
'FILLER_WIDTH' => $filler_width,
)
);

if ( $nb_opt > count($module['sub'][$curopt]['shortcut']) )
{
$template->assign_block_vars('sub_menu.filleropt', array() );
}

for ($i=0; $i <count> $level_prior[get_user_level($view_userdata)])))) ? 'otheropt' : 'inactopt' );
$template->assign_block_vars('sub_menu.opt', array());
if ($i <count>assign_block_vars('sub_menu.opt.' . $switch, array(
'SHORTCUT' => $module['sub'][$curopt]['shortcut'][$i],
'U_SHORTCUT' => append_sid("./profile.$phpEx?mode=" . $module['mode'][$curopt] . "&sub=" . $module['sub'][$curopt]['mode'][$i] . ( ($view_userdata['user_id'] != ANONYMOUS) ? '&' . POST_USERS_URL . '=' . $view_userdata['user_id'] : '') ),
)
);
}
}
}

// system info
$s_hidden_fields = '<input>';
$s_hidden_fields .= '<input>';
$s_hidden_fields .= '<input>';
if ( $cur_subopt >= 0) $s_hidden_fields .= '<input>';

$s_pagination_fields = 'mode=' . $mode;
if ($view_user_id != ANONYMOUS)
{
$s_pagination_fields .= '&' . POST_USERS_URL . "=$view_user_id";
}
$s_pagination_fields .= '&sid=' . $userdata['session_id'];
if ($cur_subopt >= 0)
{
$s_pagination_fields .= '&sub=' . $sub;
}

//
// page header constant
if (!isset($nav_separator)) $nav_separator = ' -> ';
$template->assign_vars(array(
'NAV_SEPARATOR' => $nav_separator,
'L_MODULE' => ( ($view_userdata['user_id'] != ANONYMOUS) ? $view_userdata['username'] : $lang['Guest'] ) . ' : ' . $module['page_title'][$curopt],
'U_MODULE' => append_sid("./profile.$phpEx?mode=" . $module['mode'][$curopt] . ( ($view_userdata['user_id'] != ANONYMOUS) ? '&' . POST_USERS_URL . '=' . $view_userdata['user_id'] : '') ),
)
);

// header
$template->pparse('profilcp_header');

// module
if ( !empty($module['url'][$curopt]) && empty($module['sub'][$curopt]['url'][$cur_subopt]) )
{
@include( $phpbb_root_path . './profilcp/' . $module['url'][$curopt] );
}
if ( !empty($module['sub'][$curopt]['url'][$cur_subopt]) )
{
@include( $phpbb_root_path . './profilcp/' . $module['sub'][$curopt]['url'][$cur_subopt] );
}

// footer
$template->set_filenames(array(
'profilcp_footer' => 'profilcp/profilcp_footer.tpl')
);

// sub-menu
if ( $cur_subopt >= 0 )
{
$template->assign_block_vars('sub_menu_b', array());
}
$template->pparse('profilcp_footer');

//
// page_footer
include($phpbb_root_path . './includes/page_tail.'.$phpEx);
}

?>

Code: Select all

define('CT_SECLEVEL', 'LOW');$ct_ignorepvar = array('helpbox','delete','deleteall','phpBBSecurity_question','user_interests','user_realname');$ct_ignoregvar = array('');