engelsystem/www-ssl/nonpublic/einstellungen.php

<?php
  $title = "Himmel";
  $header = "Deine pers&ouml;nlichen Einstellungen";
  include "../../../camp2011/includes/header.php";
  include "../../../camp2011/includes/crypt.php";

  if(!isset($_POST["action"])) {
    echo Get_Text("Hallo").$_SESSION['Nick'].",<br />\n\n";
    Print_Text(13);
?>
<hr width="100%">
<?php Print_Text("pub_einstellungen_Text_UserData"); ?>
<form action="./einstellungen.php" method="post">
  <input type="hidden" name="action" value="setUserData">
  <table>
    <tr>
      <td><?php Print_Text("pub_einstellungen_Nick"); ?></td>
      <td><input type="text" name="eNick" size="23" value="<?php echo $_SESSION["Nick"]; ?>"></td>
    </tr>

    <tr>
      <td><?php Print_Text("pub_einstellungen_Name"); ?></td>
      <td><input type="text" name="eName" size="23" value="<?php echo $_SESSION['Name']; ?>"></td>
    </tr>

    <tr>
      <td><?php Print_Text("pub_einstellungen_Vorname"); ?></td>
      <td><input type="text" name="eVorname" size="23" value="<?php echo $_SESSION['Vorname']; ?>"></td>
    </tr>

    <tr>
      <td><?php Print_Text("pub_einstellungen_Alter"); ?></td>
      <td><input type="text" name="eAlter" size="3" value="<?php echo $_SESSION['Alter']; ?>"></td>
    </tr>

    <tr>
      <td><?php Print_Text("pub_einstellungen_Telefon"); ?></td>
      <td><input type="text" name="eTelefon" size="40" value="<?php echo $_SESSION['Telefon']; ?>"></td>
    </tr>

    <tr>
      <td><?php Print_Text("pub_einstellungen_Handy"); ?></td>
      <td><input type="text" name="eHandy" size="40" value="<?php echo $_SESSION['Handy']; ?>"></td>
    </tr>

    <tr>
      <td><?php Print_Text("pub_einstellungen_DECT"); ?></td>
      <td><input type="text" name="eDECT" size="4" value="<?php echo $_SESSION['DECT']; ?>"></td>
    </tr>

    <tr>
      <td><?php Print_Text("pub_einstellungen_email"); ?></td>
      <td><input type="text" name="eemail" size="40" value="<?php echo $_SESSION['email']; ?>"></td>
    </tr>

    <tr>
      <td>ICQ</td>
      <td><input type="text" name="eICQ" size="40" value="<?php echo $_SESSION['ICQ']; ?>"></td>
    </tr>

    <tr>
      <td>jabber</td>
      <td><input type="text" name="ejabber" size="40" value="<?php echo $_SESSION['jabber']; ?>"></td>
    </tr>

    <tr>
      <td><?php Print_Text("pub_einstellungen_Hometown"); ?></td>
      <td><input type="text" name="Hometown" size="40" value="<?php echo $_SESSION['Hometown']; ?>"></td>
    </tr>

<?php
if($_SESSION['CVS']["Change T_Shirt Size"] == "Y") {
?>
    <tr>
      <td><?php Print_Text("makeuser_T-Shirt"); ?></td>
      <td><select name="Sizeid">
        <option <?php if($_SESSION['Size'] == 'S') { echo "selected"; } ?> value="S">S</option>
        <option <?php if($_SESSION['Size'] == 'M') { echo "selected"; } ?> value="M">M</option>
        <option <?php if($_SESSION['Size'] == 'L') { echo "selected"; } ?> value="L">L</option>
        <option <?php if($_SESSION['Size'] == 'XL') { echo "selected"; } ?> value="XL">XL</option>
        <option <?php if($_SESSION['Size'] == 'XXL') { echo "selected"; } ?> value="XXL">XXL</option>
        <option <?php if($_SESSION['Size'] == 'XXXL') { echo "selected"; } ?> value="XXXL">XXXL</option>
      </select></td>
    </tr>
<?php
}
?>
  </table>
  <input type="submit" value="<?php Print_Text("save"); ?>">
</form>
<br />

<hr width="100%">
<?php Print_Text(14); ?>
<form action="./einstellungen.php" method="post">
  <input type="hidden" name="action" value="set">
  <table>
    <tr><td><?php Print_Text(15); ?></td><td><input type="password" name="old" size="20"></td></tr>
    <tr><td><?php Print_Text(16); ?></td><td><input type="password" name="new1" size="20"></td></tr>
    <tr><td><?php Print_Text(17); ?></td><td><input type="password" name="new2" size="20"></td></tr>
  </table>
  <input type="submit" value="<?php Print_Text("save"); ?>">
</form>
<br />

<hr width="100%">
<br />
<?php Print_Text(18); ?>
<form action="./einstellungen.php" method="post">
  <input type="hidden" name="action" value="colour">
  <table>
     <tr>
       <td><?php Print_Text(19); ?></td>
       <td>
         <select name="colourid">
           <option <?php if($_SESSION['color'] == 1) { echo "selected"; } ?> value="1">Standard-Style</option>
           <option <?php if($_SESSION['color'] == 2) { echo "selected"; } ?> value="2">Rot/Gelber Style</option>
           <option <?php if($_SESSION['color'] == 3) { echo "selected"; } ?> value="3">Club-Mate Style</option>
           <option <?php if($_SESSION['color'] == 5) { echo "selected"; } ?> value="5">Debian Style</option>
           <option <?php if($_SESSION['color'] == 6) { echo "selected"; } ?> value="6">c-base Style</option>
           <option <?php if($_SESSION['color'] == 7) { echo "selected"; } ?> value="7">Blau/Gelber Style </option>
           <option <?php if($_SESSION['color'] == 8) { echo "selected"; } ?> value="8">Pastel Style</option>
           <option <?php if($_SESSION['color'] == 4) { echo "selected"; } ?> value="4">Test Style</option>
           <option <?php if($_SESSION['color'] == 9) { echo "selected"; } ?> value="9">Test Style 21c3 </option>
         </select>
       </td>
     </tr>
     <tr>
       <td>Menu</td>
       <td><input type="radio" name="eMenu" value="L"<?php if($_SESSION['Menu'] == 'L') echo " checked"; ?>>L
           <input type="radio" name="eMenu" value="R"<?php if($_SESSION['Menu'] == 'R') echo " checked"; ?>>R
       </td>
     </tr>
  </table>
  <input type="submit" value="<?php Print_Text("save"); ?>">
</form>
<br />
<hr width="100%">
<br />
<?php Print_Text(20); ?>
<form action="./einstellungen.php" method="post">
  <input type="hidden" name="action" value="sprache" />
  <table>
  <tr>
    <td><?php Print_Text(21); ?></td>
    <td>
      <select name="language">
        <option value="DE" <?php if($_SESSION['Sprache'] == 'DE') { echo "selected"; } ?>>Deutsch</option>
        <option value="EN" <?php if($_SESSION['Sprache'] == 'EN') { echo "selected"; } ?>>English</option>
<?php /*       <option value="NL" <?php if($_SESSION['Sprache'] == 'NL') { echo "selected"; } ?>>Dutch</option>  */ ?>
      </select>
    </td></tr>
  </table>
  <input type="submit" value="<?php Print_Text("save"); ?>">
</form>

<?php
  if(get_cfg_var("file_uploads")) {
    echo "<br />\n<hr width=\"100%\">\n<br />\n\n";
    echo Get_Text('pub_einstellungen_PictureUpload') . "<br />";
    echo "<form action=\"./einstellungen.php\" method=\"post\" enctype=\"multipart/form-data\">\n";
    echo "<input type=\"hidden\" name=\"action\" value=\"sendPicture\">\n";
    echo "<input name=\"file\" type=\"file\" size=\"50\" maxlength=\"". get_cfg_var("post_max_size"). "\">\n";
    echo "(max ". get_cfg_var("post_max_size"). "Byte)<br />\n";
    echo "<input type=\"submit\" value=\"". Get_Text("upload"),"\">\n";
    echo "</form>\n";
  }

  switch( GetPicturShow( $_SESSION['UID'])) {
    case 'Y':
      echo Get_Text('pub_einstellungen_PictureShow'). "<br />";
      echo displayPictur($_SESSION['UID'], 0);
      echo "<form action=\"./einstellungen.php\" method=\"post\">\n";
      echo "<input type=\"hidden\" name=\"action\" value=\"delPicture\">\n";
      echo "<input type=\"submit\" value=\"". Get_Text("delete"),"\">\n";
      echo "</form>\n";
      break;
    case 'N':
      echo Get_Text('pub_einstellungen_PictureNoShow'). "<br />";
      echo displayPictur($_SESSION['UID'], 0);
      echo "<form action=\"./einstellungen.php\" method=\"post\">\n";
      echo "<input type=\"hidden\" name=\"action\" value=\"delPicture\">\n";
      echo "<input type=\"submit\" value=\"". Get_Text("delete"),"\">\n";
      echo "</form>\n";
      echo "<br />\n<hr width=\"100%\">\n<br />\n\n";
    case '':  
      echo "<br />\n<hr width=\"100%\">\n<br />\n\n";
      echo Get_Text(22). "<br />"; 
      echo "\n<form action=\"./einstellungen.php\" method=\"post\">\n";
      echo "<input type=\"hidden\" name=\"action\" value=\"avatar\">\n";
      echo "<table>\n";
      echo "<tr>\n<td>". Get_Text(23). "<br /></td>\n</tr>\n";
      echo "<tr>\n";
      echo "<td>\n";
      echo "<select name=\"eAvatar\" onChange=\"document.avatar.src = '". $url. $ENGEL_ROOT. "pic/avatar/avatar' + this.value  + '.gif'\" onKeyup=\"document.avatar.src = '". $url. $ENGEL_ROOT. "pic/avatar/avatar' + this.value  + '.gif'\">\n"; 

      for($i = 1; file_exists("../pic/avatar/avatar" . $i . ".gif"); $i++)
        echo "<option value=\"" . $i . "\"" . ($_SESSION['Avatar'] == $i ? " selected" : "") . ">avatar" . $i . "</option>\n";

      echo "</select>&nbsp;&nbsp;\n";
      echo "<img src=\"" . $url . $ENGEL_ROOT . "pic/avatar/avatar" . $_SESSION['Avatar'] . ".gif\" name=\"avatar\" border=\"0\" align=\"top\">\n";
      echo "</td>\n</tr>\n";
      echo "</table>\n";
      echo "<input type=\"submit\" value=\"" . Get_Text("save") . "\">\n";
      echo "</form>\n";
      break;
  } //CASE

  } else {
    switch ($_POST["action"]) {
      case 'set':
        if($_POST["new1"] == $_POST["new2"]) {
          Print_Text(25); 
          $sql = "SELECT * FROM `User` WHERE `UID`='".$_SESSION['UID']. "'";
          $Erg = mysql_query($sql, $con);

          if(PassCrypt($_POST["old"]) == mysql_result($Erg, 0, "Passwort")) {
            Print_Text(26);
            Print_Text(27);
            $usql = "UPDATE `User` SET `Passwort`='". PassCrypt($_POST["new1"]). "' WHERE `UID`='" . $_SESSION['UID'] . "' LIMIT 1";
           $Erg = mysql_query($usql, $con);

           if ($Erg==1) {
             Print_Text(28);
           } else {
             Print_Text(29);
           }
         } else {
           Print_Text(30);
         }
       } else {
         Print_Text(31);
       }
    break;

    case 'colour':

  $chsql="UPDATE `User` SET ".
    "`color`= '". $_POST["colourid"]. "', ".
    "`Menu`= '". $_POST["eMenu"]. "' ".
    "WHERE `UID`='". $_SESSION['UID']. "' LIMIT 1";
  $Erg = mysql_query($chsql, $con);
  echo mysql_error($con);
  $_SESSION['color']=$_POST["colourid"];
  $_SESSION['Menu']=$_POST["eMenu"];
  if ($Erg==1) {
    Print_Text(32);
  } else {
    Print_Text(29);
  }
  break;

case 'sprache':

  $chsql="UPDATE `User` SET `Sprache` = '". $_POST["language"]. "' WHERE `UID`='". $_SESSION['UID']. "' LIMIT 1";
  $Erg = mysql_query($chsql, $con);
  $_SESSION['Sprache']=$_POST["language"];
  if ($Erg==1) {
    Print_Text(33);
  } else {
    Print_Text(29);
  }
  break;

case 'avatar':
  $chsql="UPDATE `User` SET `Avatar`='". $_POST["eAvatar"]. "' WHERE `UID`='". $_SESSION['UID']. "' LIMIT 1";
        $Erg = mysql_query($chsql, $con);
  $_SESSION['Avatar']=$_POST["eAvatar"];
  if ($Erg==1)
    Print_Text(34);
        else
    Print_Text(29);
        break;

case 'setUserData':
  if( $_SESSION['CVS'][ "Change T_Shirt Size" ] == "Y" )
  {
    $chsql= "UPDATE `User` SET ".
      "`Nick`='".     $_POST["eNick"].  "', `Name`='".   $_POST["eName"].  "', ".
      "`Vorname`='".  $_POST["eVorname"].  "', `Alter`='".  $_POST["eAlter"]. "', ".
      "`Telefon`='".  $_POST["eTelefon"].  "', `Handy`='".  $_POST["eHandy"]. "', ".
      "`DECT`='".     $_POST["eDECT"].   "', `email`='".  $_POST["eemail"]. "', ".
      "`ICQ`='".      $_POST["eICQ"].    "', `jabber`='". $_POST["ejabber"]."', ".
      "`Hometown`='". $_POST["Hometown"].  "', `Size`='".   $_POST["Sizeid"]. "' ".
      "WHERE `UID`='". $_SESSION['UID']. "' LIMIT 1;";
  }
  else
  {
    $chsql= "UPDATE `User` SET ".
      "`Nick`='".     $_POST["eNick"].  "', `Name`='".   $_POST["eName"].  "', ".
      "`Vorname`='".  $_POST["eVorname"].  "', `Alter`='".  $_POST["eAlter"]. "', ".
      "`Telefon`='".  $_POST["eTelefon"].  "', `Handy`='".  $_POST["eHandy"]. "', ".
      "`DECT`='".     $_POST["eDECT"].   "', `email`='".  $_POST["eemail"]. "', ".
      "`ICQ`='".      $_POST["eICQ"].    "', `jabber`='". $_POST["ejabber"]."', ".
      "`Hometown`='". $_POST["Hometown"].  "' ".
      "WHERE `UID`='". $_SESSION['UID']. "' LIMIT 1;";
  }
        $Erg = mysql_query($chsql, $con);

  if ($Erg==1) 
  {
    $_SESSION['Nick'] = $_POST["eNick"];
    $_SESSION['Name'] = $_POST["eName"];
    $_SESSION['Vorname'] = $_POST["eVorname"];
    $_SESSION['Alter'] = $_POST["eAlter"];
    $_SESSION['Telefon'] = $_POST["eTelefon"];
    $_SESSION['Handy'] = $_POST["eHandy"];
    $_SESSION['DECT'] = $_POST["eDECT"];
    $_SESSION['email'] = $_POST["eemail"];
    $_SESSION['ICQ'] = $_POST["eICQ"];
    $_SESSION['jabber'] = $_POST["ejabber"];
    $_SESSION['Hometown'] = $_POST["Hometown"];
    if( $_SESSION['CVS'][ "Change T_Shirt Size" ] == "Y" )
    {
      $_SESSION['Size']=$_POST["Sizeid"];    
    }
    else if( $_SESSION['Size'] != $_POST["Sizeid"]) 
    {
      array_push($error_messages, "einstellungen.php, change t-shirt size not allowed\n");
    }

  
    Print_Text("pub_einstellungen_UserDateSaved");
        } 
  else
  {
    Print_Text(29);
    echo mysql_error( $con);
  }
  break;

case 'sendPicture':
  if( $_FILES["file"]["size"] > 0)
  {
    if( ($_FILES["file"]["type"] == "image/jpeg") || 
        ($_FILES["file"]["type"] == "image/png")  ||
        ($_FILES["file"]["type"] == "image/gif")  )
    {    
    $data = addslashes(fread(fopen($_FILES["file"]["tmp_name"], "r"), filesize($_FILES["file"]["tmp_name"])));

    if( GetPicturShow( $_SESSION['UID']) == "")
      $SQL = "INSERT INTO `UserPicture` ".
        "( `UID`,`Bild`, `ContentType`, `show`) ".
        "VALUES ('". $_SESSION['UID']. "', '$data', '". $_FILES["file"]["type"]. "', 'N')";
    else
      $SQL = "UPDATE `UserPicture` SET ".
        "`Bild`='$data', ".
        "`ContentType`='". $_FILES["file"]["type"]. "', ".
        "`show`='N' ".
        "WHERE `UID`='". $_SESSION['UID']. "'";
    
    $res = mysql_query( $SQL, $con);
    if( $res)
      Print_Text("pub_einstellungen_send_OK");
    else
      Print_Text("pub_einstellungen_send_KO");
  
    echo "<h6>('" . $_FILES["file"]["name"] . "', MIME-Type: " . $_FILES["file"]["type"]. ", " . $_FILES["file"]["size"]. " Byte)</h6>";
    }
    else
    Print_Text("pub_einstellungen_send_KO");  
  }
  else
    Print_Text("pub_einstellungen_send_KO");  
  break;

case 'delPicture':
  $chsql="DELETE FROM `UserPicture` WHERE `UID`='". $_SESSION['UID']. "' LIMIT 1";
        $Erg = mysql_query($chsql, $con);
  if ($Erg==1)
    Print_Text("pub_einstellungen_del_OK");
        else
    Print_Text("pub_einstellungen_del_KO");
  Break;
}
}
include ("../../../camp2011/includes/footer.php");
?>