[geeklog-cvs] geeklog-1.3/public_html usersettings.php,1.80,1.81

[dhaun at geeklog.net]

Update of /usr/cvs/geeklog/geeklog-1.3/public_html
In directory geeklog_prod:/tmp/cvs-serv23996

Modified Files:
	usersettings.php 
Log Message:
Started applying COM_applyFilter (needs more work).


Index: usersettings.php
===================================================================
RCS file: /usr/cvs/geeklog/geeklog-1.3/public_html/usersettings.php,v
retrieving revision 1.80
retrieving revision 1.81
diff -C2 -d -r1.80 -r1.81
*** usersettings.php	11 Jan 2004 19:14:33 -0000	1.80
--- usersettings.php	18 Jan 2004 14:47:16 -0000	1.81
***************
*** 9,13 ****
  // |                                                                           |
  // +---------------------------------------------------------------------------+
! // | Copyright (C) 2000-2003 by the following authors:                         |
  // |                                                                           |
  // | Authors: Tony Bibbs       - tony at tonybibbs.com                            |
--- 9,13 ----
  // |                                                                           |
  // +---------------------------------------------------------------------------+
! // | Copyright (C) 2000-2004 by the following authors:                         |
  // |                                                                           |
  // | Authors: Tony Bibbs       - tony at tonybibbs.com                            |
***************
*** 908,912 ****
  
      // Save theme, when doing so, put in cookie so we can set the user's theme even when they aren't logged in
!     DB_query("UPDATE {$_TABLES['users']} SET theme='{$A["theme"]}',language='{$A["language"]}' WHERE uid = {$_USER['uid']}");
      setcookie ($_CONF['cookie_theme'], $A['theme'], time() + 31536000,
                 $_CONF['cookie_path'], $_CONF['cookiedomain'],
--- 908,912 ----
  
      // Save theme, when doing so, put in cookie so we can set the user's theme even when they aren't logged in
!     DB_query("UPDATE {$_TABLES['users']} SET theme='{$A['theme']}',language='{$A['language']}' WHERE uid = {$_USER['uid']}");
      setcookie ($_CONF['cookie_theme'], $A['theme'], time() + 31536000,
                 $_CONF['cookie_path'], $_CONF['cookiedomain'],
***************
*** 916,920 ****
                 $_CONF['cookiesecure']);
  
!     DB_query("UPDATE {$_TABLES['userprefs']} SET noicons='{$A['noicons']}', willing='{$A["willing"]}', dfid='{$A["dfid"]}', tzid='{$A["tzid"]}', emailfromadmin='{$A['emailfromadmin']}', emailfromuser='{$A['emailfromuser']}', showonline='{$A['showonline']}' WHERE uid='{$_USER['uid']}'");
  
      if (empty ($etids)) {
--- 916,920 ----
                 $_CONF['cookiesecure']);
  
!     DB_query("UPDATE {$_TABLES['userprefs']} SET noicons='{$A['noicons']}', willing='{$A['willing']}', dfid='{$A['dfid']}', tzid='{$A['tzid']}', emailfromadmin='{$A['emailfromadmin']}', emailfromuser='{$A['emailfromuser']}', showonline='{$A['showonline']}' WHERE uid='{$_USER['uid']}'");
  
      if (empty ($etids)) {
***************
*** 928,935 ****
  // MAIN
  if (isset ($HTTP_POST_VARS['mode'])) {
!     $mode = $HTTP_POST_VARS['mode'];
  }
  else if (isset ($HTTP_GET_VARS['mode'])) {
!     $mode = $HTTP_GET_VARS['mode'];
  }
  $display = '';
--- 928,935 ----
  // MAIN
  if (isset ($HTTP_POST_VARS['mode'])) {
!     $mode = COM_applyFilter ($HTTP_POST_VARS['mode']);
  }
  else if (isset ($HTTP_GET_VARS['mode'])) {
!     $mode = COM_applyFilter ($HTTP_GET_VARS['mode']);
  }
  $display = '';
***************
*** 940,945 ****
      case 'comments':
          $display .= COM_siteHeader('menu');
!         if (isset ($HTTP_GET_VARS['msg'])) {
!             $display .= COM_showMessage($HTTP_GET_VARS['msg']);
          }
          $display .= editpreferences();
--- 940,946 ----
      case 'comments':
          $display .= COM_siteHeader('menu');
!         $msg = COM_applyFilter ($HTTP_GET_VARS['msg'], true);
!         if ($msg > 0) {
!             $display .= COM_showMessage ($msg);
          }
          $display .= editpreferences();
***************
*** 948,953 ****
      case 'edit':
          $display .= COM_siteHeader('menu');
!         if (isset ($HTTP_GET_VARS['msg'])) {
!             $display .= COM_showMessage($HTTP_GET_VARS['msg']);
          }
          $display .= edituser();
--- 949,955 ----
      case 'edit':
          $display .= COM_siteHeader('menu');
!         $msg = COM_applyFilter ($HTTP_GET_VARS['msg'], true);
!         if ($msg > 0) {
!             $display .= COM_showMessage ($msg);
          }
          $display .= edituser();
***************
*** 964,971 ****
          break;
      case 'confirmdelete':
!         $display .= confirmAccountDelete ($HTTP_POST_VARS['account_id']);
          break;
      case 'deleteconfirmed':
!         $display .= deleteUserAccount ($HTTP_POST_VARS['account_id']);
          break;
      }
--- 966,983 ----
          break;
      case 'confirmdelete':
!         $accountId = COM_applyFilter ($HTTP_POST_VARS['account_id'], true);
!         if ($accountId > 1) {
!             $display .= confirmAccountDelete ($accountId);
!         } else {
!             $display = COM_refresh ($_CONF['site_url'] . '/index.php');
!         }
          break;
      case 'deleteconfirmed':
!         $accountId = COM_applyFilter ($HTTP_POST_VARS['account_id'], true);
!         if ($accountId > 1) {
!             $display .= deleteUserAccount ($accountId);
!         } else {
!             $display = COM_refresh ($_CONF['site_url'] . '/index.php');
!         }
          break;
      }