1:   2:   3:   4:   5:   6:   7:   8:   9:  10:  11:  12:  13:  14:  15:  16:  17:  18:  19:  20:  21:  22:  23:  24:  25:  26:  27:  28:  29:  30:  31:  32:  33:  34:  35:  36:  37:  38:  39:  40:  41:  42:  43:  44:  45:  46:  47:  48:  49:  50:  51:  52:  53:  54:  55:  56:  57:  58:  59:  60:  61:  62:  63:  64:  65:  66:  67:  68:  69:  70:  71:  72:  73:  74:  75:  76:  77:  78:  79:  80:  81:  82:  83:  84:  85:  86:  87:  88:  89:  90:  91:  92:  93:  94:  95:  96:  97:  98:  99: 100: 101: 102: 103: 104: 105: 106: 107: 108: 109: 110: 111: 112: 113: 114: 115: 116: 117: 118: 119: 120: 121: 122: 123: 124: 125: 126: 127: 128: 129: 130: 131: 132: 133: 134: 135: 136: 137: 138: 139: 140: 141: 142: 143: 144: 145: 146: 147: 148: 149: 150: 151: 152: 153: 154: 155: 156: 157: 158: 159: 160: 161: 162: 163: 164: 165: 166: 167: 168: 169: 170: 171: 172: 173: 174: 175: 176: 177: 178: 179: 180: 181: 182: 183: 184: 185: 186: 187: 188: 189: 190: 191: 192: 193: 194: 195: 196: 197: 198: 199: 200: 201: 202: 203: 204: 205: 206: 207: 208: 209: 210: 211: 212: 213: 214: 215: 216: 217: 218: 219: 220: 221: 222: 223: 224: 225: 226: 227: 228: 229: 230: 231: 232: 233: 234: 235: 236: 237: 238: 239: 240: 241: 242: 243: 244: 245: 246: 247: 248: 249: 250: 251: 252: 253: 254: 255: 256: 257: 258: 259: 260: 261: 262: 263: 264: 265: 266: 267: 268: 269: 270: 271: 272: 273: 274: 275: 276: 277: 278: 279: 280: 281: 282: 283: 284: 285: 286: 287: 288: 289: 290: 291: 292: 293: 294: 295: 296: 297: 298: 299: 300: 301: 302: 303: 304: 305: 306: 307: 308: 309: 310: 311: 312: 313: 314: 315: 316: 317: 318: 319: 320: 321: 322: 323: 324: 325: 326: 327: 328: 329: 330: 331: 332: 333: 334: 335: 336: 337: 338: 339: 340: 341: 342: 343: 344: 345: 346: 347: 348: 349: 350: 351: 352: 353: 354: 355: 356: 357: 358: 359: 360: 361: 362: 363: 364: 365: 366: 367: 368: 369: 370: 371: 372: 373: 374: 375: 376: 377: 378: 379: 380: 381: 382: 383: 384: 385: 386: 387: 388: 389: 390: 391: 392: 393: 394: 395: 396: 397: 398: 399: 400: 401: 402: 403: 404: 405: 406: 407: 408: 409: 410: 411: 412: 413: 414: 415: 416: 417: 418: 419: 420: 421: 422: 423: 424: 425: 426: 427: 428: 429: 430: 431: 432: 433: 434: 435: 436: 437: 438: 439: 440: 441: 442: 443: 444: 445: 446: 447: 448: 449: 450: 451: 452: 453: 454: 455: 456: 457: 458: 459: 460: 461: 462: 463: 464: 465: 466: 467: 468: 469: 470: 471: 472: 473: 474: 475: 476: 477: 478: 479: 480: 481: 482: 483: 484: 485: 486: 487: 488: 489: 490: 491: 492: 493: 494: 495: 496: 497: 498: 499: 500: 501: 502: 503: 504: 505: 506: 507: 508: 509: 510: 511: 512: 513: 514: 515: 516: 517: 518: 519: 520: 521: 522: 523: 524: 525: 526: 527: 528: 529: 530: 531: 532: 533: 534: 535: 536: 537: 538: 539: 540: 541: 542: 543: 544: 545: 546: 547: 548: 549: 550: 551: 552: 553: 554: 555: 556: 557: 558: 559: 560: 561: 562: 563: 564: 565: 566: 567: 568: 569: 570: 571: 572: 573: 574: 575: 576: 577: 578: 579: 580: 581: 582: 583: 584: 585: 586: 587: 588: 589: 590: 591: 592: 593: 594: 595: 596: 597: 598: 599: 600: 601: 602: 603: 604: 605: 606: 607: 608: 609: 610: 611: 612: 613: 614: 615: 616: 617: 618: 619: 620: 621: 622: 623: 624: 625: 626: 627: 628: 629: 630: 631: 632: 633: 634: 635: 636: 637: 638: 639: 640: 641: 642: 643: 644: 645: 646: 647: 648: 649: 650: 651: 652: 653: 654: 655: 656: 657: 658: 659: 660: 661: 662: 663: 664: 665: 666: 667: 668: 669: 670: 671: 672: 673: 674: 675: 676: 677: 678: 679: 680: 681: 682: 683: 684: 685: 686: 687: 688: 689: 690: 691: 692: 693: 694: 695: 696: 697: 698: 699: 700: 701: 702: 703: 704: 705: 706: 707: 708: 709: 710: 711: 712: 713: 714: 715: 716: 717: 718: 719: 720: 721: 722: 723: 724: 725: 726: 727: 728: 729: 730: 731: 732: 733: 734: 735: 736: 737: 738: 739: 740: 741: 742: 743: 744: 745: 746: 747: 748: 749: 750: 751: 752: 753: 754: 755: 756: 757: 758: 759: 760: 761: 762: 763: 764: 765: 766: 767: 768: 769: 770: 771: 772: 773: 774: 775: 776: 777: 778: 779: 780: 781: 782: 783: 784: 785: 786: 787: 788: 789: 790: 791: 792: 793: 794: 795: 796: 797: 798: 799: 800: 801: 802: 803: 804: 805: 806: 807: 808: 809: 810: 811: 812: 813: 814: 815: 816: 817: 818: 819: 820: 821: 822: 823: 824: 825: 826: 827: 828: 829: 830: 831: 832: 833: 834: 835: 836: 837: 838: 839: 840: 841: 842: 843: 844: 845: 846: 847: 848: 849: 850: 851: 852: 853: 854: 855: 856: 857: 858: 859: 860: 861: 862: 863: 864: 865: 866: 867: 868: 869: 870: 871: 872: 873: 874: 875: 876: 877: 878: 879: 880: 881: 882: 883: 884: 885: 886: 887: 888: 889: 890: 891: 892: 893: 894: 895: 896: 897: 898: 899: 900: 901: 902: 903: 904: 905: 906: 907: 908: 909: 910: 911: 912: 913: 914: 915: 916: 917: 918: 919: 920: 921: 922: 923: 924: 925: 926: 927: 928: 929: 930: 931: 932: 933: 934: 935: 936: 937: 938: 939: 940: 941: 942: 943: 944: 945: 946: 947: 948: 949: 950: 951: 952: 953: 954: 955: 956: 957: 958: 959: 960: 961: 962: 963: 964: 965: 966: 967: 968: 969: 970: 

<?php

/**
 * This file handles actions made on a user's profile.
 *
 * Simple Machines Forum (SMF)
 *
 * @package SMF
 * @author Simple Machines https://www.simplemachines.org
 * @copyright 2020 Simple Machines and individual contributors
 * @license https://www.simplemachines.org/about/smf/license.php BSD
 *
 * @version 2.1 RC2
 */

if (!defined('SMF'))
    die('No direct access...');

/**
 * Activate an account.
 *
 * @param int $memID The ID of the member whose account we're activating
 */
function activateAccount($memID)
{
    global $sourcedir, $context, $user_profile, $modSettings;

    isAllowedTo('moderate_forum');

    if (isset($_REQUEST['save']) && isset($user_profile[$memID]['is_activated']) && $user_profile[$memID]['is_activated'] != 1)
    {
        // If we are approving the deletion of an account, we do something special ;)
        if ($user_profile[$memID]['is_activated'] == 4)
        {
            require_once($sourcedir . '/Subs-Members.php');
            deleteMembers($context['id_member']);
            redirectexit();
        }

        // Let the integrations know of the activation.
        call_integration_hook('integrate_activate', array($user_profile[$memID]['member_name']));

        // Actually update this member now, as it guarantees the unapproved count can't get corrupted.
        updateMemberData($context['id_member'], array('is_activated' => $user_profile[$memID]['is_activated'] >= 10 ? 11 : 1, 'validation_code' => ''));

        // Log what we did?
        require_once($sourcedir . '/Logging.php');
        logAction('approve_member', array('member' => $memID), 'admin');

        // If we are doing approval, update the stats for the member just in case.
        if (in_array($user_profile[$memID]['is_activated'], array(3, 4, 5, 13, 14, 15)))
            updateSettings(array('unapprovedMembers' => ($modSettings['unapprovedMembers'] > 1 ? $modSettings['unapprovedMembers'] - 1 : 0)));

        // Make sure we update the stats too.
        updateStats('member', false);
    }

    // Leave it be...
    redirectexit('action=profile;u=' . $memID . ';area=summary');
}

/**
 * Issue/manage an user's warning status.
 *
 * @param int $memID The ID of the user
 */
function issueWarning($memID)
{
    global $txt, $scripturl, $modSettings, $user_info, $mbname;
    global $context, $cur_profile, $smcFunc, $sourcedir;

    // Get all the actual settings.
    list ($modSettings['warning_enable'], $modSettings['user_limit']) = explode(',', $modSettings['warning_settings']);

    // This stores any legitimate errors.
    $issueErrors = array();

    // Doesn't hurt to be overly cautious.
    if (empty($modSettings['warning_enable']) || ($context['user']['is_owner'] && !$cur_profile['warning']) || !allowedTo('issue_warning'))
        fatal_lang_error('no_access', false);

    // Get the base (errors related) stuff done.
    loadLanguage('Errors');
    $context['custom_error_title'] = $txt['profile_warning_errors_occured'];

    // Make sure things which are disabled stay disabled.
    $modSettings['warning_watch'] = !empty($modSettings['warning_watch']) ? $modSettings['warning_watch'] : 110;
    $modSettings['warning_moderate'] = !empty($modSettings['warning_moderate']) && !empty($modSettings['postmod_active']) ? $modSettings['warning_moderate'] : 110;
    $modSettings['warning_mute'] = !empty($modSettings['warning_mute']) ? $modSettings['warning_mute'] : 110;

    $context['warning_limit'] = allowedTo('admin_forum') ? 0 : $modSettings['user_limit'];
    $context['member']['warning'] = $cur_profile['warning'];
    $context['member']['name'] = $cur_profile['real_name'];

    // What are the limits we can apply?
    $context['min_allowed'] = 0;
    $context['max_allowed'] = 100;
    if ($context['warning_limit'] > 0)
    {
        // Make sure we cannot go outside of our limit for the day.
        $request = $smcFunc['db_query']('', '
            SELECT SUM(counter)
            FROM {db_prefix}log_comments
            WHERE id_recipient = {int:selected_member}
                AND id_member = {int:current_member}
                AND comment_type = {string:warning}
                AND log_time > {int:day_time_period}',
            array(
                'current_member' => $user_info['id'],
                'selected_member' => $memID,
                'day_time_period' => time() - 86400,
                'warning' => 'warning',
            )
        );
        list ($current_applied) = $smcFunc['db_fetch_row']($request);
        $smcFunc['db_free_result']($request);

        $context['min_allowed'] = max(0, $cur_profile['warning'] - $current_applied - $context['warning_limit']);
        $context['max_allowed'] = min(100, $cur_profile['warning'] - $current_applied + $context['warning_limit']);
    }

    // Defaults.
    $context['warning_data'] = array(
        'reason' => '',
        'notify' => '',
        'notify_subject' => '',
        'notify_body' => '',
    );

    // Are we saving?
    if (isset($_POST['save']))
    {
        // Security is good here.
        checkSession();

        // This cannot be empty!
        $_POST['warn_reason'] = isset($_POST['warn_reason']) ? trim($_POST['warn_reason']) : '';
        if ($_POST['warn_reason'] == '' && !$context['user']['is_owner'])
            $issueErrors[] = 'warning_no_reason';
        $_POST['warn_reason'] = $smcFunc['htmlspecialchars']($_POST['warn_reason']);

        $_POST['warning_level'] = (int) $_POST['warning_level'];
        $_POST['warning_level'] = max(0, min(100, $_POST['warning_level']));
        if ($_POST['warning_level'] < $context['min_allowed'])
            $_POST['warning_level'] = $context['min_allowed'];
        elseif ($_POST['warning_level'] > $context['max_allowed'])
            $_POST['warning_level'] = $context['max_allowed'];

        // Do we actually have to issue them with a PM?
        $id_notice = 0;
        if (!empty($_POST['warn_notify']) && empty($issueErrors))
        {
            $_POST['warn_sub'] = trim($_POST['warn_sub']);
            $_POST['warn_body'] = trim($_POST['warn_body']);
            if (empty($_POST['warn_sub']) || empty($_POST['warn_body']))
                $issueErrors[] = 'warning_notify_blank';
            // Send the PM?
            else
            {
                require_once($sourcedir . '/Subs-Post.php');
                $from = array(
                    'id' => 0,
                    'name' => $context['forum_name_html_safe'],
                    'username' => $context['forum_name_html_safe'],
                );
                sendpm(array('to' => array($memID), 'bcc' => array()), $_POST['warn_sub'], $_POST['warn_body'], false, $from);

                // Log the notice!
                $id_notice = $smcFunc['db_insert']('',
                    '{db_prefix}log_member_notices',
                    array(
                        'subject' => 'string-255', 'body' => 'string-65534',
                    ),
                    array(
                        $smcFunc['htmlspecialchars']($_POST['warn_sub']), $smcFunc['htmlspecialchars']($_POST['warn_body']),
                    ),
                    array('id_notice'),
                    1
                );
            }
        }

        // Just in case - make sure notice is valid!
        $id_notice = (int) $id_notice;

        // What have we changed?
        $level_change = $_POST['warning_level'] - $cur_profile['warning'];

        // No errors? Proceed! Only log if you're not the owner.
        if (empty($issueErrors))
        {
            // Log what we've done!
            if (!$context['user']['is_owner'])
                $smcFunc['db_insert']('',
                    '{db_prefix}log_comments',
                    array(
                        'id_member' => 'int', 'member_name' => 'string', 'comment_type' => 'string', 'id_recipient' => 'int', 'recipient_name' => 'string-255',
                        'log_time' => 'int', 'id_notice' => 'int', 'counter' => 'int', 'body' => 'string-65534',
                    ),
                    array(
                        $user_info['id'], $user_info['name'], 'warning', $memID, $cur_profile['real_name'],
                        time(), $id_notice, $level_change, $_POST['warn_reason'],
                    ),
                    array('id_comment')
                );

            // Make the change.
            updateMemberData($memID, array('warning' => $_POST['warning_level']));

            // Leave a lovely message.
            $context['profile_updated'] = $context['user']['is_owner'] ? $txt['profile_updated_own'] : $txt['profile_warning_success'];
        }
        else
        {
            // Try to remember some bits.
            $context['warning_data'] = array(
                'reason' => $_POST['warn_reason'],
                'notify' => !empty($_POST['warn_notify']),
                'notify_subject' => isset($_POST['warn_sub']) ? $_POST['warn_sub'] : '',
                'notify_body' => isset($_POST['warn_body']) ? $_POST['warn_body'] : '',
            );
        }

        // Show the new improved warning level.
        $context['member']['warning'] = $_POST['warning_level'];
    }

    if (isset($_POST['preview']))
    {
        $warning_body = !empty($_POST['warn_body']) ? trim(censorText($_POST['warn_body'])) : '';
        $context['preview_subject'] = !empty($_POST['warn_sub']) ? trim($smcFunc['htmlspecialchars']($_POST['warn_sub'])) : '';
        if (empty($_POST['warn_sub']) || empty($_POST['warn_body']))
            $issueErrors[] = 'warning_notify_blank';

        if (!empty($_POST['warn_body']))
        {
            require_once($sourcedir . '/Subs-Post.php');

            preparsecode($warning_body);
            $warning_body = parse_bbc($warning_body, true);
        }

        // Try to remember some bits.
        $context['warning_data'] = array(
            'reason' => $_POST['warn_reason'],
            'notify' => !empty($_POST['warn_notify']),
            'notify_subject' => isset($_POST['warn_sub']) ? $_POST['warn_sub'] : '',
            'notify_body' => isset($_POST['warn_body']) ? $_POST['warn_body'] : '',
            'body_preview' => $warning_body,
        );
    }

    if (!empty($issueErrors))
    {
        // Fill in the suite of errors.
        $context['post_errors'] = array();
        foreach ($issueErrors as $error)
            $context['post_errors'][] = $txt[$error];
    }

    $context['page_title'] = $txt['profile_issue_warning'];

    // Let's use a generic list to get all the current warnings
    require_once($sourcedir . '/Subs-List.php');

    // Work our the various levels.
    $context['level_effects'] = array(
        0 => $txt['profile_warning_effect_none'],
        $modSettings['warning_watch'] => $txt['profile_warning_effect_watch'],
        $modSettings['warning_moderate'] => $txt['profile_warning_effect_moderation'],
        $modSettings['warning_mute'] => $txt['profile_warning_effect_mute'],
    );
    $context['current_level'] = 0;
    foreach ($context['level_effects'] as $limit => $dummy)
        if ($context['member']['warning'] >= $limit)
            $context['current_level'] = $limit;

    $listOptions = array(
        'id' => 'view_warnings',
        'title' => $txt['profile_viewwarning_previous_warnings'],
        'items_per_page' => $modSettings['defaultMaxListItems'],
        'no_items_label' => $txt['profile_viewwarning_no_warnings'],
        'base_href' => $scripturl . '?action=profile;area=issuewarning;sa=user;u=' . $memID,
        'default_sort_col' => 'log_time',
        'get_items' => array(
            'function' => 'list_getUserWarnings',
            'params' => array(
                $memID,
            ),
        ),
        'get_count' => array(
            'function' => 'list_getUserWarningCount',
            'params' => array(
                $memID,
            ),
        ),
        'columns' => array(
            'issued_by' => array(
                'header' => array(
                    'value' => $txt['profile_warning_previous_issued'],
                    'style' => 'width: 20%;',
                ),
                'data' => array(
                    'function' => function($warning)
                    {
                        return $warning['issuer']['link'];
                    },
                ),
                'sort' => array(
                    'default' => 'lc.member_name DESC',
                    'reverse' => 'lc.member_name',
                ),
            ),
            'log_time' => array(
                'header' => array(
                    'value' => $txt['profile_warning_previous_time'],
                    'style' => 'width: 30%;',
                ),
                'data' => array(
                    'db' => 'time',
                ),
                'sort' => array(
                    'default' => 'lc.log_time DESC',
                    'reverse' => 'lc.log_time',
                ),
            ),
            'reason' => array(
                'header' => array(
                    'value' => $txt['profile_warning_previous_reason'],
                ),
                'data' => array(
                    'function' => function($warning) use ($scripturl, $txt)
                    {
                        $ret = '
                        <div class="floatleft">
                            ' . $warning['reason'] . '
                        </div>';

                        if (!empty($warning['id_notice']))
                            $ret .= '
                        <div class="floatright">
                            <a href="' . $scripturl . '?action=moderate;area=notice;nid=' . $warning['id_notice'] . '" onclick="window.open(this.href, \'\', \'scrollbars=yes,resizable=yes,width=400,height=250\');return false;" target="_blank" rel="noopener" title="' . $txt['profile_warning_previous_notice'] . '"><span class="main_icons filter centericon"></span></a>
                        </div>';

                        return $ret;
                    },
                ),
            ),
            'level' => array(
                'header' => array(
                    'value' => $txt['profile_warning_previous_level'],
                    'style' => 'width: 6%;',
                ),
                'data' => array(
                    'db' => 'counter',
                ),
                'sort' => array(
                    'default' => 'lc.counter DESC',
                    'reverse' => 'lc.counter',
                ),
            ),
        ),
    );

    // Create the list for viewing.
    require_once($sourcedir . '/Subs-List.php');
    createList($listOptions);

    // Are they warning because of a message?
    if (isset($_REQUEST['msg']) && 0 < (int) $_REQUEST['msg'])
    {
        $request = $smcFunc['db_query']('', '
            SELECT m.subject
            FROM {db_prefix}messages AS m
            WHERE m.id_msg = {int:message}
                AND {query_see_message_board}
            LIMIT 1',
            array(
                'message' => (int) $_REQUEST['msg'],
            )
        );
        if ($smcFunc['db_num_rows']($request) != 0)
        {
            $context['warning_for_message'] = (int) $_REQUEST['msg'];
            list ($context['warned_message_subject']) = $smcFunc['db_fetch_row']($request);
        }
        $smcFunc['db_free_result']($request);
    }

    // Didn't find the message?
    if (empty($context['warning_for_message']))
    {
        $context['warning_for_message'] = 0;
        $context['warned_message_subject'] = '';
    }

    // Any custom templates?
    $context['notification_templates'] = array();

    $request = $smcFunc['db_query']('', '
        SELECT recipient_name AS template_title, body
        FROM {db_prefix}log_comments
        WHERE comment_type = {literal:warntpl}
            AND (id_recipient = {int:generic} OR id_recipient = {int:current_member})',
        array(
            'generic' => 0,
            'current_member' => $user_info['id'],
        )
    );
    while ($row = $smcFunc['db_fetch_assoc']($request))
    {
        // If we're not warning for a message skip any that are.
        if (!$context['warning_for_message'] && strpos($row['body'], '{MESSAGE}') !== false)
            continue;

        $context['notification_templates'][] = array(
            'title' => $row['template_title'],
            'body' => $row['body'],
        );
    }
    $smcFunc['db_free_result']($request);

    // Setup the "default" templates.
    foreach (array('spamming', 'offence', 'insulting') as $type)
        $context['notification_templates'][] = array(
            'title' => $txt['profile_warning_notify_title_' . $type],
            'body' => sprintf($txt['profile_warning_notify_template_outline' . (!empty($context['warning_for_message']) ? '_post' : '')], $txt['profile_warning_notify_for_' . $type]),
        );

    // Replace all the common variables in the templates.
    foreach ($context['notification_templates'] as $k => $name)
        $context['notification_templates'][$k]['body'] = strtr($name['body'], array('{MEMBER}' => un_htmlspecialchars($context['member']['name']), '{MESSAGE}' => '[url=' . $scripturl . '?msg=' . $context['warning_for_message'] . ']' . un_htmlspecialchars($context['warned_message_subject']) . '[/url]', '{SCRIPTURL}' => $scripturl, '{FORUMNAME}' => $mbname, '{REGARDS}' => $txt['regards_team']));
}

/**
 * Get the number of warnings a user has. Callback for $listOptions['get_count'] in issueWarning()
 *
 * @param int $memID The ID of the user
 * @return int Total number of warnings for the user
 */
function list_getUserWarningCount($memID)
{
    global $smcFunc;

    $request = $smcFunc['db_query']('', '
        SELECT COUNT(*)
        FROM {db_prefix}log_comments
        WHERE id_recipient = {int:selected_member}
            AND comment_type = {literal:warning}',
        array(
            'selected_member' => $memID,
        )
    );
    list ($total_warnings) = $smcFunc['db_fetch_row']($request);
    $smcFunc['db_free_result']($request);

    return $total_warnings;
}

/**
 * Get the data about a user's warnings. Callback function for the list in issueWarning()
 *
 * @param int $start The item to start with (for pagination purposes)
 * @param int $items_per_page How many items to show on each page
 * @param string $sort A string indicating how to sort the results
 * @param int $memID The member ID
 * @return array An array of information about the user's warnings
 */
function list_getUserWarnings($start, $items_per_page, $sort, $memID)
{
    global $smcFunc, $scripturl;

    $request = $smcFunc['db_query']('', '
        SELECT COALESCE(mem.id_member, 0) AS id_member, COALESCE(mem.real_name, lc.member_name) AS member_name,
            lc.log_time, lc.body, lc.counter, lc.id_notice
        FROM {db_prefix}log_comments AS lc
            LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = lc.id_member)
        WHERE lc.id_recipient = {int:selected_member}
            AND lc.comment_type = {literal:warning}
        ORDER BY {raw:sort}
        LIMIT {int:start}, {int:max}',
        array(
            'selected_member' => $memID,
            'sort' => $sort,
            'start' => $start,
            'max' => $items_per_page,
        )
    );
    $previous_warnings = array();
    while ($row = $smcFunc['db_fetch_assoc']($request))
    {
        $previous_warnings[] = array(
            'issuer' => array(
                'id' => $row['id_member'],
                'link' => $row['id_member'] ? ('<a href="' . $scripturl . '?action=profile;u=' . $row['id_member'] . '">' . $row['member_name'] . '</a>') : $row['member_name'],
            ),
            'time' => timeformat($row['log_time']),
            'reason' => $row['body'],
            'counter' => $row['counter'] > 0 ? '+' . $row['counter'] : $row['counter'],
            'id_notice' => $row['id_notice'],
        );
    }
    $smcFunc['db_free_result']($request);

    return $previous_warnings;
}

/**
 * Present a screen to make sure the user wants to be deleted
 *
 * @param int $memID The member ID
 */
function deleteAccount($memID)
{
    global $txt, $context, $modSettings, $cur_profile;

    if (!$context['user']['is_owner'])
        isAllowedTo('profile_remove_any');
    elseif (!allowedTo('profile_remove_any'))
        isAllowedTo('profile_remove_own');

    // Permissions for removing stuff...
    $context['can_delete_posts'] = !$context['user']['is_owner'] && allowedTo('moderate_forum');

    // Show an extra option if recycling is enabled...
    $context['show_perma_delete'] = !empty($modSettings['recycle_enable']) && !empty($modSettings['recycle_board']);

    // Can they do this, or will they need approval?
    $context['needs_approval'] = $context['user']['is_owner'] && !empty($modSettings['approveAccountDeletion']) && !allowedTo('moderate_forum');
    $context['page_title'] = $txt['deleteAccount'] . ': ' . $cur_profile['real_name'];
}

/**
 * Actually delete an account.
 *
 * @param int $memID The member ID
 */
function deleteAccount2($memID)
{
    global $user_info, $sourcedir, $context, $cur_profile, $modSettings, $smcFunc;

    // Try get more time...
    @set_time_limit(600);

    // @todo Add a way to delete pms as well?

    if (!$context['user']['is_owner'])
        isAllowedTo('profile_remove_any');
    elseif (!allowedTo('profile_remove_any'))
        isAllowedTo('profile_remove_own');

    checkSession();

    $old_profile = &$cur_profile;

    // Too often, people remove/delete their own only account.
    if (in_array(1, explode(',', $old_profile['additional_groups'])) || $old_profile['id_group'] == 1)
    {
        // Are you allowed to administrate the forum, as they are?
        isAllowedTo('admin_forum');

        $request = $smcFunc['db_query']('', '
            SELECT id_member
            FROM {db_prefix}members
            WHERE (id_group = {int:admin_group} OR FIND_IN_SET({int:admin_group}, additional_groups) != 0)
                AND id_member != {int:selected_member}
            LIMIT 1',
            array(
                'admin_group' => 1,
                'selected_member' => $memID,
            )
        );
        list ($another) = $smcFunc['db_fetch_row']($request);
        $smcFunc['db_free_result']($request);

        if (empty($another))
            fatal_lang_error('at_least_one_admin', 'critical');
    }

    // This file is needed for the deleteMembers function.
    require_once($sourcedir . '/Subs-Members.php');

    // Do you have permission to delete others profiles, or is that your profile you wanna delete?
    if ($memID != $user_info['id'])
    {
        isAllowedTo('profile_remove_any');

        // Before we go any further, handle possible poll vote deletion as well
        if (!empty($_POST['deleteVotes']) && allowedTo('moderate_forum'))
        {
            // First we find any polls that this user has voted in...
            $get_voted_polls = $smcFunc['db_query']('', '
                SELECT DISTINCT id_poll
                FROM {db_prefix}log_polls
                WHERE id_member = {int:selected_member}',
                array(
                    'selected_member' => $memID,
                )
            );

            $polls_to_update = array();

            while ($row = $smcFunc['db_fetch_assoc']($get_voted_polls))
            {
                $polls_to_update[] = $row['id_poll'];
            }

            $smcFunc['db_free_result']($get_voted_polls);

            // Now we delete the votes and update the polls
            if (!empty($polls_to_update))
            {
                $smcFunc['db_query']('', '
                    DELETE FROM {db_prefix}log_polls
                    WHERE id_member = {int:selected_member}',
                    array(
                        'selected_member' => $memID,
                    )
                );

                $smcFunc['db_query']('', '
                    UPDATE {db_prefix}polls
                    SET votes = votes - 1
                    WHERE id_poll IN {array_int:polls_to_update}',
                    array(
                        'polls_to_update' => $polls_to_update
                    )
                );
            }
        }

        // Now, have you been naughty and need your posts deleting?
        // @todo Should this check board permissions?
        if (!empty($_POST['deletePosts']) && in_array($_POST['remove_type'], array('posts', 'topics')) && allowedTo('moderate_forum'))
        {
            // Include RemoveTopics - essential for this type of work!
            require_once($sourcedir . '/RemoveTopic.php');

            $extra = empty($_POST['perma_delete']) ? ' AND t.id_board != {int:recycle_board}' : '';
            $recycle_board = empty($modSettings['recycle_board']) ? 0 : $modSettings['recycle_board'];

            // First off we delete any topics the member has started - if they wanted topics being done.
            if ($_POST['remove_type'] == 'topics')
            {
                // Fetch all topics started by this user within the time period.
                $request = $smcFunc['db_query']('', '
                    SELECT t.id_topic
                    FROM {db_prefix}topics AS t
                    WHERE t.id_member_started = {int:selected_member}' . $extra,
                    array(
                        'selected_member' => $memID,
                        'recycle_board' => $recycle_board,
                    )
                );
                $topicIDs = array();
                while ($row = $smcFunc['db_fetch_assoc']($request))
                    $topicIDs[] = $row['id_topic'];
                $smcFunc['db_free_result']($request);

                // Actually remove the topics. Ignore recycling if we want to perma-delete things...
                // @todo This needs to check permissions, but we'll let it slide for now because of moderate_forum already being had.
                removeTopics($topicIDs, true, !empty($extra));
            }

            // Now delete the remaining messages.
            $request = $smcFunc['db_query']('', '
                SELECT m.id_msg
                FROM {db_prefix}messages AS m
                    INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic
                        AND t.id_first_msg != m.id_msg)
                WHERE m.id_member = {int:selected_member}' . $extra,
                array(
                    'selected_member' => $memID,
                    'recycle_board' => $recycle_board,
                )
            );
            // This could take a while... but ya know it's gonna be worth it in the end.
            while ($row = $smcFunc['db_fetch_assoc']($request))
            {
                if (function_exists('apache_reset_timeout'))
                    @apache_reset_timeout();

                removeMessage($row['id_msg']);
            }
            $smcFunc['db_free_result']($request);
        }

        // Only delete this poor members account if they are actually being booted out of camp.
        if (isset($_POST['deleteAccount']))
            deleteMembers($memID);
    }
    // Do they need approval to delete?
    elseif (!empty($modSettings['approveAccountDeletion']) && !allowedTo('moderate_forum'))
    {
        // Setup their account for deletion ;)
        updateMemberData($memID, array('is_activated' => 4));
        // Another account needs approval...
        updateSettings(array('unapprovedMembers' => true), true);
    }
    // Also check if you typed your password correctly.
    else
    {
        deleteMembers($memID);

        require_once($sourcedir . '/LogInOut.php');
        LogOut(true);

        redirectexit();
    }
}

/**
 * Function for doing all the paid subscription stuff - kinda.
 *
 * @param int $memID The ID of the user whose subscriptions we're viewing
 */
function subscriptions($memID)
{
    global $context, $txt, $sourcedir, $modSettings, $smcFunc, $scripturl;

    // Load the paid template anyway.
    loadTemplate('ManagePaid');
    loadLanguage('ManagePaid');

    // Load all of the subscriptions.
    require_once($sourcedir . '/ManagePaid.php');
    loadSubscriptions();
    $context['member']['id'] = $memID;

    // Remove any invalid ones.
    foreach ($context['subscriptions'] as $id => $sub)
    {
        // Work out the costs.
        $costs = $smcFunc['json_decode']($sub['real_cost'], true);

        $cost_array = array();
        if ($sub['real_length'] == 'F')
        {
            foreach ($costs as $duration => $cost)
            {
                if ($cost != 0)
                    $cost_array[$duration] = $cost;
            }
        }
        else
        {
            $cost_array['fixed'] = $costs['fixed'];
        }

        if (empty($cost_array))
            unset($context['subscriptions'][$id]);
        else
        {
            $context['subscriptions'][$id]['member'] = 0;
            $context['subscriptions'][$id]['subscribed'] = false;
            $context['subscriptions'][$id]['costs'] = $cost_array;
        }
    }

    // Work out what gateways are enabled.
    $gateways = loadPaymentGateways();
    foreach ($gateways as $id => $gateway)
    {
        $gateways[$id] = new $gateway['display_class']();
        if (!$gateways[$id]->gatewayEnabled())
            unset($gateways[$id]);
    }

    // No gateways yet?
    if (empty($gateways))
        fatal_error($txt['paid_admin_not_setup_gateway']);

    // Get the current subscriptions.
    $request = $smcFunc['db_query']('', '
        SELECT id_sublog, id_subscribe, start_time, end_time, status, payments_pending, pending_details
        FROM {db_prefix}log_subscribed
        WHERE id_member = {int:selected_member}',
        array(
            'selected_member' => $memID,
        )
    );
    $context['current'] = array();
    while ($row = $smcFunc['db_fetch_assoc']($request))
    {
        // The subscription must exist!
        if (!isset($context['subscriptions'][$row['id_subscribe']]))
            continue;

        $context['current'][$row['id_subscribe']] = array(
            'id' => $row['id_sublog'],
            'sub_id' => $row['id_subscribe'],
            'hide' => $row['status'] == 0 && $row['end_time'] == 0 && $row['payments_pending'] == 0,
            'name' => $context['subscriptions'][$row['id_subscribe']]['name'],
            'start' => timeformat($row['start_time'], false),
            'end' => $row['end_time'] == 0 ? $txt['not_applicable'] : timeformat($row['end_time'], false),
            'pending_details' => $row['pending_details'],
            'status' => $row['status'],
            'status_text' => $row['status'] == 0 ? ($row['payments_pending'] ? $txt['paid_pending'] : $txt['paid_finished']) : $txt['paid_active'],
        );

        if ($row['status'] == 1)
            $context['subscriptions'][$row['id_subscribe']]['subscribed'] = true;
    }
    $smcFunc['db_free_result']($request);

    // Simple "done"?
    if (isset($_GET['done']))
    {
        $_GET['sub_id'] = (int) $_GET['sub_id'];

        // Must exist but let's be sure...
        if (isset($context['current'][$_GET['sub_id']]))
        {
            // What are the details like?
            $current_pending = $smcFunc['json_decode']($context['current'][$_GET['sub_id']]['pending_details'], true);
            if (!empty($current_pending))
            {
                $current_pending = array_reverse($current_pending);
                foreach ($current_pending as $id => $sub)
                {
                    // Just find one and change it.
                    if ($sub[0] == $_GET['sub_id'] && $sub[3] == 'prepay')
                    {
                        $current_pending[$id][3] = 'payback';
                        break;
                    }
                }

                // Save the details back.
                $pending_details = $smcFunc['json_encode']($current_pending);

                $smcFunc['db_query']('', '
                    UPDATE {db_prefix}log_subscribed
                    SET payments_pending = payments_pending + 1, pending_details = {string:pending_details}
                    WHERE id_sublog = {int:current_subscription_id}
                        AND id_member = {int:selected_member}',
                    array(
                        'current_subscription_id' => $context['current'][$_GET['sub_id']]['id'],
                        'selected_member' => $memID,
                        'pending_details' => $pending_details,
                    )
                );
            }
        }

        $context['sub_template'] = 'paid_done';
        return;
    }
    // If this is confirmation then it's simpler...
    if (isset($_GET['confirm']) && isset($_POST['sub_id']) && is_array($_POST['sub_id']))
    {
        // Hopefully just one.
        foreach ($_POST['sub_id'] as $k => $v)
            $ID_SUB = (int) $k;

        if (!isset($context['subscriptions'][$ID_SUB]) || $context['subscriptions'][$ID_SUB]['active'] == 0)
            fatal_lang_error('paid_sub_not_active');

        // Simplify...
        $context['sub'] = $context['subscriptions'][$ID_SUB];
        $period = 'xx';
        if ($context['sub']['flexible'])
            $period = isset($_POST['cur'][$ID_SUB]) && isset($context['sub']['costs'][$_POST['cur'][$ID_SUB]]) ? $_POST['cur'][$ID_SUB] : 'xx';

        // Check we have a valid cost.
        if ($context['sub']['flexible'] && $period == 'xx')
            fatal_lang_error('paid_sub_not_active');

        // Sort out the cost/currency.
        $context['currency'] = $modSettings['paid_currency_code'];
        $context['recur'] = $context['sub']['repeatable'];

        if ($context['sub']['flexible'])
        {
            // Real cost...
            $context['value'] = $context['sub']['costs'][$_POST['cur'][$ID_SUB]];
            $context['cost'] = sprintf($modSettings['paid_currency_symbol'], $context['value']) . '/' . $txt[$_POST['cur'][$ID_SUB]];
            // The period value for paypal.
            $context['paypal_period'] = strtoupper(substr($_POST['cur'][$ID_SUB], 0, 1));
        }
        else
        {
            // Real cost...
            $context['value'] = $context['sub']['costs']['fixed'];
            $context['cost'] = sprintf($modSettings['paid_currency_symbol'], $context['value']);

            // Recur?
            preg_match('~(\d*)(\w)~', $context['sub']['real_length'], $match);
            $context['paypal_unit'] = $match[1];
            $context['paypal_period'] = $match[2];
        }

        // Setup the gateway context.
        $context['gateways'] = array();
        foreach ($gateways as $id => $gateway)
        {
            $fields = $gateways[$id]->fetchGatewayFields($context['sub']['id'] . '+' . $memID, $context['sub'], $context['value'], $period, $scripturl . '?action=profile&u=' . $memID . '&area=subscriptions&sub_id=' . $context['sub']['id'] . '&done');
            if (!empty($fields['form']))
                $context['gateways'][] = $fields;
        }

        // Bugger?!
        if (empty($context['gateways']))
            fatal_error($txt['paid_admin_not_setup_gateway']);

        // Now we are going to assume they want to take this out ;)
        $new_data = array($context['sub']['id'], $context['value'], $period, 'prepay');
        if (isset($context['current'][$context['sub']['id']]))
        {
            // What are the details like?
            $current_pending = array();
            if ($context['current'][$context['sub']['id']]['pending_details'] != '')
                $current_pending = $smcFunc['json_decode']($context['current'][$context['sub']['id']]['pending_details'], true);
            // Don't get silly.
            if (count($current_pending) > 9)
                $current_pending = array();
            $pending_count = 0;
            // Only record real pending payments as will otherwise confuse the admin!
            foreach ($current_pending as $pending)
                if ($pending[3] == 'payback')
                    $pending_count++;

            if (!in_array($new_data, $current_pending))
            {
                $current_pending[] = $new_data;
                $pending_details = $smcFunc['json_encode']($current_pending);

                $smcFunc['db_query']('', '
                    UPDATE {db_prefix}log_subscribed
                    SET payments_pending = {int:pending_count}, pending_details = {string:pending_details}
                    WHERE id_sublog = {int:current_subscription_item}
                        AND id_member = {int:selected_member}',
                    array(
                        'pending_count' => $pending_count,
                        'current_subscription_item' => $context['current'][$context['sub']['id']]['id'],
                        'selected_member' => $memID,
                        'pending_details' => $pending_details,
                    )
                );
            }
        }
        // Never had this before, lovely.
        else
        {
            $pending_details = $smcFunc['json_encode'](array($new_data));
            $smcFunc['db_insert']('',
                '{db_prefix}log_subscribed',
                array(
                    'id_subscribe' => 'int', 'id_member' => 'int', 'status' => 'int', 'payments_pending' => 'int', 'pending_details' => 'string-65534',
                    'start_time' => 'int', 'vendor_ref' => 'string-255',
                ),
                array(
                    $context['sub']['id'], $memID, 0, 0, $pending_details,
                    time(), '',
                ),
                array('id_sublog')
            );
        }

        // Change the template.
        $context['sub_template'] = 'choose_payment';

        // Quit.
        return;
    }
    else
        $context['sub_template'] = 'user_subscription';
}

?>