2 /* make sure that we are not called from outside the scripts,
3 * use a variable defined in config.php to check this
8 $name = $_SESSION["name"];
9 $email = DB_get_email('name',$name);
10 $myid = DB_get_userid('email',$email);
14 /* track what got changed */
16 $changed_password = 0;
18 $changed_timezone = 0;
24 $PREF = DB_get_PREF($myid);
25 $timezone = DB_get_user_timezone($myid);
27 DB_update_user_timestamp($myid);
29 /* does the user want to change some preferences? */
30 if(myisset("timezone"))
32 $newtimezone=$_REQUEST['timezone'];
33 if($newtimezone != $timezone)
35 DB_query("UPDATE User SET timezone=".DB_quote_smart($newtimezone).
36 " WHERE id=".DB_quote_smart($myid));
37 $changed_timezone = 1;
43 $cards=$_REQUEST['cards'];
44 if($cards != $PREF['cardset'])
46 /* check if we already have an entry for the user, if so change it, if not create new one */
47 $result = DB_query("SELECT * from User_Prefs".
48 " WHERE user_id='$myid' AND pref_key='cardset'" );
49 if( DB_fetch_array($result))
50 $result = DB_query("UPDATE User_Prefs SET value=".DB_quote_smart($cards).
51 " WHERE user_id='$myid' AND pref_key='cardset'" );
53 $result = DB_query("INSERT INTO User_Prefs VALUES(NULL,'$myid','cardset',".
54 DB_quote_smart($cards).")");
61 $notify=$_REQUEST['notify'];
62 if($notify != $PREF['email'])
64 /* check if we already have an entry for the user, if so change it, if not create new one */
65 $result = DB_query("SELECT * from User_Prefs".
66 " WHERE user_id='$myid' AND pref_key='email'" );
67 if( DB_fetch_array($result))
68 $result = DB_query("UPDATE User_Prefs SET value=".DB_quote_smart($notify).
69 " WHERE user_id='$myid' AND pref_key='email'" );
71 $result = DB_query("INSERT INTO User_Prefs VALUES(NULL,'$myid','email',".
72 DB_quote_smart($notify).")");
77 if(myisset("password0") && $_REQUEST["password0"]!="" )
79 $changed_password = 1;
81 /* check if old password matches */
82 $oldpasswd = md5($_REQUEST["password0"]);
83 $password = DB_get_passwd_by_userid($myid);
84 if(!( ($password == $oldpasswd) || DB_check_recovery_passwords($oldpasswd,$email) ))
85 $changed_password = -1;
87 /* check if new passwords are types the same twice */
88 if($_REQUEST["password1"] != $_REQUEST["password2"] )
89 $changed_password = -2;
91 if($changed_password==1)
93 DB_query("UPDATE User SET password='".md5($_REQUEST["password1"]).
94 "' WHERE id=".DB_quote_smart($myid));
96 /* error output below */
99 /* get infos again in case they have changed */
100 $PREF = DB_get_PREF($myid);
101 $timezone = DB_get_user_timezone($myid);
103 /* output settings */
105 echo "<div class=\"user\">\n";
106 echo " <form action=\"index.php?action=prefs\" method=\"post\">\n";
107 echo " <h2>Your settings are</h2>\n";
109 echo " <tr><td>Email: </td><td> $email </td></tr>\n";
110 echo " <tr><td>Timezone: </td><td>";
111 output_select_timezone("timezone",$timezone);
112 if($changed_timezone) echo "changed";
114 echo " <tr><td>Notification: </td><td>";
116 echo " <select id=\"notify\" name=\"notify\" size=\"1\">\n";
117 if($PREF['email']=="emailaddict")
119 echo " <option value=\"emailaddict\" selected=\"selected\">less emails</option>\n";
120 echo " <option value=\"emailnonaddict\">lots of emails</option>\n";
124 echo " <option value=\"emailaddict\">less email</option>\n";
125 echo " <option value=\"emailnonaddict\" selected=\"selected\">lots of email</option>\n";
128 if($changed_notify) echo "changed";
129 echo " </td></tr>\n";
130 echo " <tr><td>Card set: </td><td>";
132 echo " <select id=\"cards\" name=\"cards\" size=\"1\">\n";
133 if($PREF['cardset']=="altenburg")
135 echo " <option value=\"altenburg\" selected=\"selected\">German cards</option>\n";
136 echo " <option value=\"english\">English cards</option>\n";
140 echo " <option value=\"altenburg\">German cards</option>\n";
141 echo " <option value=\"english\" selected=\"selected\">English cards</option>\n";
144 if($changed_cards) echo "changed";
145 echo " </td></tr>\n";
146 echo " <tr><td>Password(old): </td><td>",
147 "<input type=\"password\" id=\"password0\" name=\"password0\" size=\"20\" maxlength=\"30\" />";
148 switch($changed_password)
151 echo "The new passwords don't match.";
154 echo "The old password is not correct.";
160 echo " </td></tr>\n";
161 echo " <tr><td>Password(new): </td><td>",
162 "<input type=\"password\" id=\"password1\" name=\"password1\" size=\"20\" maxlength=\"30\" />",
164 echo " <tr><td>Password(new, retype): </td><td>",
165 "<input type=\"password\" id=\"password2\" name=\"password2\" size=\"20\" maxlength=\"30\" />",
167 echo " <tr><td><input type=\"submit\" class=\"submitbutton\" name=\"passwd\" value=\"set\" /></td>",