mirror of https://github.com/BOINC/boinc.git
582 lines
18 KiB
PHP
582 lines
18 KiB
PHP
<?php
|
|
$cvs_version_tracker[]="\$Id$"; //Generated automatically - do not edit
|
|
|
|
require_once("../inc/db.inc");
|
|
require_once("../inc/util.inc");
|
|
require_once("../inc/sanitize_html.inc");
|
|
require_once("../inc/cache.inc");
|
|
require_once("../inc/user.inc");
|
|
require_once("../inc/translation.inc");
|
|
require_once("../inc/text_transform.inc");
|
|
require_once("../inc/db_forum.inc");
|
|
|
|
define('SMALL_IMG_WIDTH', 64);
|
|
define('SMALL_IMG_HEIGHT', 64);
|
|
|
|
define('MAX_IMG_WIDTH', 800);
|
|
define('MAX_IMG_HEIGHT', 600);
|
|
|
|
define('MAX_DESC_LENGTH', 90);
|
|
|
|
define('GALLERY_WIDTH', 7);
|
|
define('GALLERY_HEIGHT', 4);
|
|
|
|
function profile_screening() {
|
|
$config = get_config();
|
|
return parse_bool($config, "profile_screening");
|
|
}
|
|
|
|
function profile_error_page($str) {
|
|
page_head("Profile error");
|
|
echo "$str<br>\n";
|
|
echo "<p>Click your browser's <b>Back</b> button to try again.\n<p>\n";
|
|
page_tail();
|
|
exit();
|
|
}
|
|
|
|
// output a select form item with the given name,
|
|
// from a list of newline-delineated items from the text file.
|
|
// If $selection is provided, and if it matches one of the entries in the file,
|
|
// it will be selected by default.
|
|
//
|
|
function show_combo_box($name, $filename, $selection=null) {
|
|
if (!file_exists($filename)) {
|
|
echo "ERROR: $filename does not exist! Cannot create combo box.<br>";
|
|
exit();
|
|
}
|
|
echo "<select name=\"$name\">\n";
|
|
|
|
$file = fopen($filename, "r");
|
|
|
|
while ($line = trim(fgets($file, 1024))) {
|
|
if ($line == $selection) {
|
|
echo "<option SELECTED value=\"$line\">$line\n";
|
|
} else {
|
|
echo "<option value=\"$line\">$line\n";
|
|
}
|
|
}
|
|
|
|
echo "</select>\n";
|
|
fclose($file);
|
|
}
|
|
|
|
function get_profile($userid) {
|
|
$result = mysql_query("SELECT * FROM profile WHERE userid = $userid");
|
|
if (!$result) {
|
|
return NULL;
|
|
}
|
|
$profile = mysql_fetch_object($result);
|
|
mysql_free_result($result);
|
|
return $profile;
|
|
}
|
|
|
|
function show_profile_creation_page($user) {
|
|
// If the user already has a profile,
|
|
// fill in the fields with their current values.
|
|
//
|
|
$profile = get_profile($user->id);
|
|
if (isset($_POST['submit']) && $_POST['submit']) {
|
|
process_create_profile($user, $profile);
|
|
exit();
|
|
}
|
|
|
|
if ($profile) {
|
|
page_head("Edit your profile");
|
|
} else {
|
|
page_head("Create a profile");
|
|
}
|
|
|
|
echo "
|
|
<form action=", $_SERVER['PHP_SELF'], " method=\"POST\", ENCTYPE=\"multipart/form-data\">
|
|
";
|
|
start_table_noborder();
|
|
show_description();
|
|
show_questions($profile);
|
|
show_picture_option($profile);
|
|
show_submit();
|
|
end_table();
|
|
echo "</form>";
|
|
page_tail();
|
|
}
|
|
|
|
function show_description() {
|
|
echo "
|
|
<p>
|
|
Your <b>profile</b> lets you share your opinions and background
|
|
with the ".PROJECT." community.
|
|
<p>
|
|
";
|
|
}
|
|
|
|
function show_questions($profile) {
|
|
row1(show_profile_heading1());
|
|
rowify(show_profile_question1().html_info());
|
|
rowify("<br>");
|
|
show_textarea("response1", stripslashes($profile->response1));
|
|
rowify("<br>");
|
|
row1( show_profile_heading2());
|
|
rowify( show_profile_question2().html_info());
|
|
rowify("<br>");
|
|
show_textarea("response2", stripslashes($profile->response2));
|
|
rowify("<br>");
|
|
show_language_selection($profile);
|
|
rowify("<br>");
|
|
}
|
|
|
|
function show_textarea($name, $text) {
|
|
rowify("<textarea name=\"$name\" cols=80 rows=20>" . $text . "</textarea>");
|
|
}
|
|
|
|
// When passed profile->verification, this function is used to tell the
|
|
// user the verification status of their profile.
|
|
//
|
|
function offensive_profile_warning($verify_flag) {
|
|
if ($verify_flag == 0) {
|
|
return "
|
|
<font size='+2' color='33cc33'>
|
|
Your profile will be made visible to other people<br>
|
|
as soon as it has been approved by the project.<br>
|
|
This may take up to a few days.<br>
|
|
</font>
|
|
";
|
|
} else if ($verify_flag == -1) {
|
|
return "
|
|
<font size='+2' color='ff3333'>
|
|
Your profile has been marked as unacceptable.<br>
|
|
It is not visible to other people. Please change it.<br>
|
|
</font>
|
|
";
|
|
}
|
|
return "";
|
|
}
|
|
|
|
function show_picture_option($profile) {
|
|
row1("Picture");
|
|
|
|
$warning = "";
|
|
if (profile_screening() && $profile->has_picture) {
|
|
$warning = offensive_profile_warning($profile->verification);
|
|
}
|
|
|
|
if ($profile->has_picture) {
|
|
echo "
|
|
<tr><td colspan=2>
|
|
<table border=0 cellpadding=5
|
|
<tr>
|
|
<td valign=top><a href=\"" . IMAGE_URL . $profile->userid . '.jpg' . "\"><img src=\"" . IMAGE_URL . $profile->userid . '_sm.jpg' . "\"></a>
|
|
</td>
|
|
<td valign=top> $warning Your profile picture is shown at left.
|
|
<p>
|
|
To replace it,
|
|
click the \"Browse\" button and select a JPEG or PNG file (50KB or less).
|
|
<input name=picture type=file><br>
|
|
<p>
|
|
To remove it from your profile, check this box:
|
|
<input type=checkbox name=delete_pic>
|
|
<p>
|
|
</td></tr>";
|
|
rowify("<br>");
|
|
end_table();
|
|
echo "</td></tr>";
|
|
} else {
|
|
rowify("
|
|
If you would like include a picture with your profile,
|
|
click the \"Browse\" button and select a JPEG or PNG file.
|
|
Please select images of 50KB or less.
|
|
<p>
|
|
<input name=picture type=file>
|
|
");
|
|
rowify("<br>");
|
|
}
|
|
}
|
|
|
|
function show_language_selection($profile) {
|
|
row1("Language");
|
|
echo "<tr><td>
|
|
<p>
|
|
Select the language in which your profile is written:
|
|
<p>
|
|
";
|
|
if (strlen($profile->language)) {
|
|
show_combo_box("language", LANGUAGE_FILE, $profile->language);
|
|
} else {
|
|
show_combo_box("language", LANGUAGE_FILE, "English");
|
|
}
|
|
echo "</td></tr>\n";
|
|
}
|
|
|
|
function show_submit() {
|
|
row1("Submit profile");
|
|
rowify("<p><input type=submit value=OK name=submit>");
|
|
}
|
|
|
|
// If the user with id = $userid has uploaded a picture his/herself,
|
|
// delete it and its thumbnail.
|
|
//
|
|
function delete_user_pictures($userid) {
|
|
$filename1 = IMAGE_PATH . $userid . '.jpg';
|
|
$filename2 = IMAGE_PATH . $userid . '_sm.jpg';
|
|
|
|
if (file_exists($filename1)) {
|
|
unlink($filename1);
|
|
}
|
|
if (file_exists($filename2)) {
|
|
unlink($filename2);
|
|
}
|
|
}
|
|
|
|
// $profile is null if user doesn't already have a profile.
|
|
// Don't assign to $profile->x if this is the case.
|
|
//
|
|
function process_create_profile($user, $profile) {
|
|
$response1 = $_POST['response1'];
|
|
$response2 = $_POST['response2'];
|
|
$language = $_POST['language'];
|
|
if (isset($_POST['delete_pic'])) {
|
|
$delete_pic = $_POST['delete_pic'];
|
|
} else {
|
|
$delete_pic = "off";
|
|
}
|
|
|
|
if (strlen($response1)==0 &&
|
|
strlen($response2)==0 &&
|
|
$delete_pic != "on" &&
|
|
!is_uploaded_file($_FILES['picture']['tmp_name'])
|
|
) {
|
|
profile_error_page("Your profile submission was empty.");
|
|
exit();
|
|
}
|
|
|
|
if ($delete_pic == "on") {
|
|
delete_user_pictures($profile->userid);
|
|
$profile->has_picture = false;
|
|
$profile->verification = 0;
|
|
}
|
|
|
|
$profile ? $hasPicture = $profile->has_picture: $hasPicture = false;
|
|
|
|
if (is_uploaded_file($_FILES['picture']['tmp_name'])) {
|
|
$hasPicture = true;
|
|
if ($profile) $profile->verification = 0;
|
|
|
|
// echo "<br>Name: " . $_FILES['picture']['name'];
|
|
// echo "<br>Type: " . $_FILES['picture']['type'];
|
|
// echo "<br>Size: " . $_FILES['picture']['size'];
|
|
// echo "<br>Temp name: " . $_FILES['picture']['tmp_name'];
|
|
|
|
$images = getImages($_FILES['picture']['tmp_name']);
|
|
|
|
// Write the original image file to disk.
|
|
// TODO: define a constant for image quality.
|
|
ImageJPEG($images[0], IMAGE_PATH . $user->id . '.jpg');
|
|
ImageJPEG($images[1], IMAGE_PATH . $user->id . '_sm.jpg');
|
|
}
|
|
$response1 = sanitize_html($response1);
|
|
$response2 = sanitize_html($response2);
|
|
if ($profile) {
|
|
$query = 'UPDATE profile SET '
|
|
." response1 = '".mysql_escape_string($response1)."',"
|
|
." response2 = '".mysql_escape_string($response2)."',"
|
|
." language = '".mysql_escape_string($language)."',"
|
|
." has_picture = '$hasPicture',"
|
|
." verification = '$profile->verification'"
|
|
." WHERE userid = '$user->id'";
|
|
$result = mysql_query($query);
|
|
if (!$result) {
|
|
echo mysql_error();
|
|
profile_error_page("Couldn't update profile: database error");
|
|
}
|
|
} else {
|
|
$query = 'INSERT INTO profile SET '
|
|
." userid = '$user->id',"
|
|
." language = '".mysql_escape_string($language)."',"
|
|
." response1 = '".mysql_escape_string($response1)."',"
|
|
." response2 = '".mysql_escape_string($response2)."',"
|
|
." has_picture = '$hasPicture',"
|
|
." verification=0";
|
|
$result = mysql_query($query);
|
|
if (!$result) {
|
|
profile_error_page("Couldn't create profile: database error");
|
|
}
|
|
mysql_query("update user set has_profile=1 where id=$user->id");
|
|
}
|
|
|
|
show_result_page($user);
|
|
}
|
|
|
|
// Returns an array containing:
|
|
// [0]: The original image refered to by $fileName if its dimensions are
|
|
// less than MAX_IMG_WIDTH x MAX_IMG_HEIGHT, or a version scaled to
|
|
// those dimensions if it was too large.
|
|
// [1]: A scaled version of the above.
|
|
|
|
function getImages($fileName) {
|
|
$size = getImageSize($fileName);
|
|
|
|
// Determine if the filetype uploaded is supported.
|
|
// TODO: Change these to constants.
|
|
switch($size[2]) {
|
|
case '2': // JPEG
|
|
$image = imageCreateFromJPEG($fileName);
|
|
break;
|
|
case '3': // PNG
|
|
$image = imageCreateFromPNG($fileName);
|
|
break;
|
|
default:
|
|
profile_error_page("The format of your uploaded image is not supported by our system.");
|
|
}
|
|
|
|
$width = $size[0];
|
|
$height = $size[1];
|
|
|
|
$smallImage = scale_image($image, $width, $height, SMALL_IMG_WIDTH, SMALL_IMG_HEIGHT);
|
|
|
|
if ($width > MAX_IMG_WIDTH || $height > MAX_IMG_HEIGHT) {
|
|
$image = scale_image($image, $width, $height, MAX_IMG_WIDTH, MAX_IMG_HEIGHT);
|
|
}
|
|
|
|
/*
|
|
echo "<br><br>Image type: $size[2]";
|
|
echo "<br>Original width: $width";
|
|
echo "<br>Original height: $height";
|
|
echo "<br>Scalar: $scalar";
|
|
echo "<br>Dest width: " . ($width / $scalar);
|
|
echo "<br>Dest height: " . ($height / $scalar);
|
|
echo "<br>Horizontal offset: $horiz_offset";
|
|
echo "<br>Vertical offset: $vert_offset";
|
|
echo "<br><br><a href=\"images/user_profile/test.jpg\">View result</a>";
|
|
*/
|
|
|
|
return array($image, $smallImage);
|
|
}
|
|
|
|
function scale_image(
|
|
$image, $origWidth, $origHeight, $targetWidth, $targetHeight
|
|
) {
|
|
|
|
// If the image is already smaller than the target dimensions,
|
|
// just return it.
|
|
//
|
|
if ($origWidth <= $targetWidth && $origHeight <= $targetHeight) {
|
|
return $image;
|
|
}
|
|
|
|
($origWidth > $origHeight)? $scalar = ($origWidth / $targetWidth) : $scalar = ($origHeight / $targetHeight);
|
|
|
|
if ($scalar != 0) {
|
|
$destWidth = $origWidth / $scalar;
|
|
$destHeight = $origHeight / $scalar;
|
|
} else {
|
|
$destWidth = $origWidth;
|
|
$destHeight = $origHeight;
|
|
}
|
|
|
|
$gd_info = gd_info();
|
|
$newGD = (strstr($gd_info["GD Version"], "2.0")!="");
|
|
if ($newGD) {
|
|
// If you are using a modern PHP/GD installation that does
|
|
// 'truecolor' images, this is what's needed.
|
|
$newImage = ImageCreateTrueColor($destWidth, $destHeight);
|
|
ImageCopyResampled(
|
|
$newImage, $image, 0, 0, 0, 0, $destWidth,
|
|
$destHeight, $origWidth, $origHeight
|
|
);
|
|
} else {
|
|
// If not, use this block.
|
|
// The image quality is lower but it works using older PHP/GD versions.
|
|
$newImage = ImageCreate($destWidth, $destHeight);
|
|
ImageCopyResized(
|
|
$newImage, $image, 0, 0, 0, 0, $destWidth, $destHeight,
|
|
$origWidth, $origHeight
|
|
);
|
|
}
|
|
|
|
return $newImage;
|
|
}
|
|
|
|
function show_result_page($user) {
|
|
page_head("Profile Saved");
|
|
|
|
echo "
|
|
<h2>Congratulations!</h2><p>
|
|
Your profile was successfully entered into our database.<br><br>
|
|
<a href=view_profile.php?userid=$user->id>View your profile</a><br>
|
|
";
|
|
|
|
page_tail();
|
|
}
|
|
|
|
// Builds a summary table of user profiles.
|
|
//
|
|
// $members is an array of userIDs;
|
|
// $offset indicates which entry to begin the table with
|
|
// $numToDisplay indicates how many profiles to display in this table
|
|
// $cols indicates how many profile summaries should be written per row
|
|
// $descriptor is an optional file descriptor to write the table to.
|
|
|
|
function show_user_table($members, $offset, $numToDisplay, $cols) {
|
|
echo "<table class=bordered border=1 cellpadding=5>\n";
|
|
|
|
$rows = ceil($numToDisplay / $cols);
|
|
$count = $offset;
|
|
$numMembers = count($members);
|
|
|
|
for ($row = 0; $row < $rows; $row++) {
|
|
if ($count >= $numMembers) {
|
|
break;
|
|
}
|
|
|
|
echo "<tr>\n";
|
|
|
|
for ($col = 0; $col < $cols; $col++) {
|
|
if ($count < $numMembers) {
|
|
$profile = get_profile($members[$count]);
|
|
if (!$profile) {
|
|
$numMembers--;
|
|
continue;
|
|
}
|
|
|
|
echo "<td class=bordered width=7% height=64><center>";
|
|
|
|
$show_picture = $profile->has_picture;
|
|
if (profile_screening() && $profile->verification != 1) {
|
|
$show_picture = false;
|
|
}
|
|
if ($show_picture) {
|
|
echo "<a href=\"", URL_BASE, "view_profile.php?userid={$members[$count]}\"><img src=\"", URL_BASE, IMAGE_URL, "{$members[$count]}_sm.jpg\"></a>";
|
|
|
|
} else {
|
|
echo " ";
|
|
}
|
|
|
|
echo "</center></td><td class=bordered width=33% height=64>\n", get_profile_summary($profile), "</td>";
|
|
$count++;
|
|
} else {
|
|
echo "<td width=7% height=64></td><td width=33% height=64></td>";
|
|
}
|
|
}
|
|
echo "</tr>\n";
|
|
}
|
|
echo "</table>\n";
|
|
|
|
}
|
|
|
|
// Generates a string containing:
|
|
// 1) the name of the user with ID == $userid,
|
|
// with a link to a view of their profile
|
|
// 2) the first MAX_DESC_LENGTH characters from the response1 field
|
|
// of said user's profile.
|
|
|
|
function get_profile_summary($profile) {
|
|
$user = get_user_from_id($profile->userid);
|
|
|
|
if (!$user || !$profile) {
|
|
echo "Database error!"; // Change this to a standard error page.
|
|
exit();
|
|
}
|
|
|
|
$description = "";
|
|
|
|
if (strlen($profile->response1) != 0) {
|
|
$temp = $profile->response1;
|
|
$description = "(\"" . sub_sentence(strip_tags($temp), ' ', MAX_DESC_LENGTH, true) . "\")";
|
|
|
|
}
|
|
|
|
$summary = "<a href=\"" . URL_BASE . "view_profile.php?userid=" . $profile->userid . "\">" . $user->name . "</a> " . $description;
|
|
return $summary;
|
|
}
|
|
|
|
// Displays a user's profile (if they have one);
|
|
|
|
function show_profile($userid, $verify_mode = FALSE) {
|
|
$user = get_user_from_id($userid);
|
|
|
|
if (!$user) {
|
|
profile_error_page("No user exists for that ID, or there was a database error.<p>");
|
|
}
|
|
$profile = get_profile($userid);
|
|
if (!$profile) {
|
|
profile_error_page("No user profile exists for that user ID.");
|
|
}
|
|
if (!$verify_mode) {
|
|
$logged_in_user = get_logged_in_user(false);
|
|
if (!$logged_in_user || ($user->id != $logged_in_user->id)) {
|
|
$caching = true;
|
|
$cache_args = "userid=$userid";
|
|
start_cache(USER_PROFILE_TTL,$cache_args);
|
|
}
|
|
}
|
|
|
|
$can_edit = isset($logged_in_user) && $logged_in_user && $user->id == $logged_in_user->id;
|
|
if (!$verify_mode) {
|
|
page_head("Profile: ".$user->name);
|
|
}
|
|
|
|
start_table();
|
|
|
|
if ($can_edit) {
|
|
row1("<a href=create_profile.php>Edit your profile</a>");
|
|
}
|
|
|
|
|
|
// If doing screening, only show picture in certain situations
|
|
//
|
|
$show_picture = $profile->has_picture;
|
|
if (profile_screening()) {
|
|
if (!$verify_mode && !$can_edit && $profile->verification!=1) {
|
|
$show_picture = false;
|
|
}
|
|
}
|
|
if ($show_picture) {
|
|
echo "
|
|
<tr><td colspan=2 align=center>
|
|
<img vspace=6 hspace=9 src=\"" , URL_BASE, IMAGE_URL , $user->id , '.jpg' . "\">
|
|
</td></tr>
|
|
";
|
|
}
|
|
|
|
// If the user is viewing their own picture, display its status if it's not
|
|
// yet verified. This will tell them if other users can't view it yet, or
|
|
// if there is a problem with it and they need to replace it.
|
|
//
|
|
if (profile_screening() && $profile->has_picture && $can_edit && $profile->verification!=1) {
|
|
row1(offensive_profile_warning($profile->verification));
|
|
}
|
|
|
|
show_user_summary_public($user);
|
|
|
|
//Setup text output options based on logged in user forum settings
|
|
if (!verify_mode) {
|
|
$logged_in_user = get_logged_in_user(false);
|
|
$logged_in_user = getForumPreferences($logged_in_user);
|
|
$options = get_transform_settings_from_user($logged_in_user);
|
|
}
|
|
|
|
row1(show_profile_heading1());
|
|
row1(output_transform($profile->response1,$options), 2, "foobar");
|
|
row1(show_profile_heading2());
|
|
row1(output_transform($profile->response2,$options), 2, "foobar");
|
|
|
|
if (!$can_edit and !$verify_mode) {
|
|
row1("Your feedback on this profile");
|
|
row2(
|
|
"Recommend this profile for User of the Day:",
|
|
"I <a href=profile_rate.php?userid=$userid&vote=recommend>like</a> this profile"
|
|
);
|
|
row2(
|
|
"Alert administrators to an offensive profile:",
|
|
"I <a href=profile_rate.php?userid=$userid&vote=reject>don't like</a> this profile"
|
|
);
|
|
}
|
|
|
|
end_table();
|
|
if (!$verify_mode) {
|
|
page_tail();
|
|
} else {
|
|
echo "<hr>";
|
|
}
|
|
if (isset($caching) && $caching) end_cache(USER_PROFILE_TTL,$cache_args);
|
|
}
|
|
?>
|