account.php

   1 <?php
   2
   3 include_once "includes/common.inc";
   4
   5 page_header();
   6
   7 function account_get_user($name) {
   8   return db_fetch_object(db_query("SELECT * FROM users WHERE name = '". check_input($name) ."'"));
   9 }
  10
  11 function account_email_form() {
  12   global $REQUEST_URI;
  13
  14   $output .= "<p>". t("Lost your password?  Fill out your username and e-mail address, and your password will be mailed to you.") ."</p>\n";
  15
  16   $output .= form_textfield(t("Username"), "login", $edit[login], 30, 64, t("Enter your full name or username."));
  17   $output .= form_textfield(t("E-mail address"), "email", $edit[email], 30, 64, t("You will be sent a new password."));
  18   $output .= form_submit(t("E-mail new password"));
  19
  20   return form($REQUEST_URI, $output);
  21 }
  22
  23 function account_page() {
  24   global $theme;
  25
  26   $theme->header();
  27
  28   if (variable_get("account_register", 1)) {
  29     $theme->box(t("Create user account"), account_create_form());
  30   }
  31
  32   if (variable_get("account_password", 1)) {
  33     $theme->box(t("E-mail new password"), account_email_form());
  34   }
  35
  36   $theme->footer();
  37 }
  38
  39 function account_create_form($edit = array(), $error = "") {
  40   global $theme, $REQUEST_URI;
  41
  42   if ($error) {
  43     $output .= "<p><font color=\"red\">". t("Failed to create new account") .": ". check_output($error) ."</font></p>\n";
  44     watchdog("account", "failed to create new account: $error");
  45   }
  46   else {
  47     $output .= "<p>". t("Registering allows you to comment, to moderate comments and pending submissions, to customize the look and feel of the site and generally helps you interact with the site more efficiently.") ."</p><p>". t("To create an account, simply fill out this form an click the 'Create new account' button below.  An e-mail will then be sent to you with instructions on how to validate your account.") ."</p>\n";
  48   }
  49
  50   $output .= form_textfield(t("Username"), "login", $edit[login], 30, 64, t("Enter your full name or username: only letters, numbers and common special characters like spaces are allowed."));
  51   $output .= form_textfield(t("E-mail address"), "email", $edit[email], 30, 64, t("You will be sent instructions on how to validate your account via this e-mail address: make sure it is accurate."));
  52   $output .= form_submit(t("Create new account"));
  53
  54   return form($REQUEST_URI, $output);
  55 }
  56
  57 function account_session_start($userid, $passwd) {
  58   global $user;
  59
  60   if ($userid && $passwd) {
  61     $user = new User($userid, $passwd);
  62   }
  63
  64   if ($user->id) {
  65     if ($rule = user_ban($user->userid, "username")) {
  66       watchdog("account", "failed to login for '$user->userid': banned by $rule->type rule '$rule->mask'");
  67     }
  68     else if ($rule = user_ban($user->last_host, "hostname")) {
  69       watchdog("account", "failed to login for '$user->userid': banned by $rule->type rule '$rule->mask'");
  70     }
  71     else {
  72       session_register("user");
  73       watchdog("account", "session opened for '$user->userid'");
  74     }
  75   }
  76   else {
  77     watchdog("account", "failed to login for '$userid': invalid password");
  78   }
  79 }
  80
  81 function account_session_close() {
  82   global $user;
  83   watchdog("account", "session closed for user '$user->userid'");
  84   session_unset();
  85   session_destroy();
  86   unset($user);
  87 }
  88
  89 function account_info_edit($error = 0) {
  90   global $theme, $user;
  91
  92   if ($user->id) {
  93
  94     if ($error) {
  95       $form .= "<p><font color=\"red\">$error</font></p>\n";
  96     }
  97
  98     $form .= form_textfield(t("Username"), "userid", $user->userid, 30, 55, t("Required, a unique name that can be used to log on."));
  99     $form .= form_textfield(t("Name"), "name", $user->name, 30, 55, t("Required, a unique name displayed with your contributions."));
 100     $form .= form_item(t("Real e-mail address"), $user->real_email, t("Required, unique, can not be changed.") ." ". t("Your real e-mail address is never displayed publicly: only needed in case you lose your password."));
 101     $form .= form_textfield(t("Fake e-mail address"), "fake_email", $user->fake_email, 30, 55, t("Optional") .". ". t("Displayed publicly so you may spam proof your real e-mail address if you want."));
 102     $form .= form_textfield(t("Homepage"), "url", $user->url, 30, 55, t("Optional") .". ". t("Make sure you enter fully qualified URLs only.  That is, remember to include \"http://\"."));
 103     $form .= form_textarea(t("Bio"), "bio", $user->bio, 35, 5, t("Optional") .". ". t("Maximal 255 characters.") ." ". t("This biographical information is publicly displayed on your user page.") ."<BR>". t("Allowed HTML tags") .": ". htmlspecialchars(variable_get("allowed_html", "")));
 104     $form .= form_textarea(t("Signature"), "signature", $user->signature, 35, 5, t("Optional") .". ". t("Maximal 255 characters.") ." ". t("This information will be publicly displayed at the end of your comments.") ."<BR>". t("Allowed HTML tags") .": ". htmlspecialchars(variable_get("allowed_html", "")));
 105     $form .= form_item(t("Password"), "<INPUT TYPE=\"password\" NAME=\"edit[pass1]\" SIZE=\"10\" MAXLENGTH=\"20\"> <INPUT TYPE=\"password\" NAME=\"edit[pass2]\" SIZE=\"10\" MAXLENGTH=\"20\">", t("Enter your new password twice if you want to change your current password or leave it blank if you are happy with your current password."));
 106     $form .= form_submit(t("Save user information"));
 107
 108     $theme->header();
 109     $theme->box(t("Edit user information"), form("account.php", $form));
 110     $theme->footer();
 111   }
 112   else {
 113     account_page();
 114   }
 115 }
 116
 117 function account_info_save($edit) {
 118   global $user;
 119
 120   if ($error = user_validate_name($edit[userid])) {
 121     return t("Invalid name") .": $error";
 122   }
 123   else if ($error = user_validate_name($edit[name])) {
 124     return t("Invalid name") .": $error";
 125   }
 126   else if (db_num_rows(db_query("SELECT userid FROM users WHERE id != '$user->id' AND (LOWER(userid) = LOWER('$edit[userid]') OR LOWER(name) = LOWER('$edit[userid]'))")) > 0) {
 127     return t("Invalid username") .": the username '$edit[userid]' is already taken.";
 128   }
 129   else if (db_num_rows(db_query("SELECT name FROM users WHERE id != '$user->id' AND (LOWER(userid) = LOWER('$edit[name]') OR LOWER(name) = LOWER('$edit[name]'))")) > 0) {
 130     return t("Invalid name") .": the name '$edit[name]' is already taken.";
 131   }
 132   else if ($user->id) {
 133     $user = user_save($user, array("userid" => $edit[userid], "name" => $edit[name], "fake_email" => $edit[fake_email], "url" => $edit[url], "bio" => $edit[bio], "signature" => $edit[signature]));
 134     if ($edit[pass1] && $edit[pass1] == $edit[pass2]) $user = user_save($user, array("passwd" => $edit[pass1]));
 135   }
 136 }
 137
 138 function account_settings_edit() {
 139   global $cmodes, $corder, $theme, $themes, $languages, $user;
 140
 141   if ($user->id) {
 142     foreach ($themes as $key=>$value) $options .= "<OPTION VALUE=\"$key\"". (($user->theme == $key) ? " SELECTED" : "") .">$key - $value[1]</OPTION>\n";
 143     $form .= form_item(t("Theme"), "<SELECT NAME=\"edit[theme]\">$options</SELECT>", t("Selecting a different theme will change the look and feel of the site."));
 144     for ($zone = -43200; $zone <= 46800; $zone += 3600) $zones[$zone] = date("l, F dS, Y - h:i A", time() - date("Z") + $zone) ." (GMT ". $zone / 3600 .")";
 145     $form .= form_select(t("Timezone"), "timezone", $user->timezone, $zones, t("Select what time you currently have and your timezone settings will be set appropriate."));
 146     $form .= form_select(t("Language"), "language", $user->language, $languages, t("Selecting a different language will change the language of the site."));
 147     $form .= form_select(t("Number of nodes to display"), "nodes", $user->nodes, array(10 => 10, 15 => 15, 20 => 20, 25 => 25, 30 => 30), t("The maximum number of nodes that will be displayed on the main page."));
 148     $form .= form_select(t("Comment display mode"), "mode", $user->mode, $cmodes);
 149     $form .= form_select(t("Comment display order"), "sort", $user->sort, $corder);
 150     for ($count = -1; $count < 6; $count++) $threshold[$count] = t("Filter") ." - $count";
 151     $form .= form_select(t("Comment filter"), "threshold", $user->threshold, $threshold, t("Comments that scored less than this threshold setting will be ignored.  Anonymous comments start at 0, comments of people logged on start at 1 and moderators can add and subtract points."));
 152     $form .= form_submit(t("Save site settings"));
 153
 154     $theme->header();
 155     $theme->box(t("Edit your preferences"), form("account.php", $form));
 156     $theme->footer();
 157   }
 158   else {
 159     account_page();
 160   }
 161 }
 162
 163 function account_settings_save($edit) {
 164   global $user;
 165
 166   if ($user->id) {
 167     $user = user_save($user, array("theme" => $edit[theme], "timezone" => $edit[timezone], "language" => $edit[language], "nodes" => $edit[nodes], "mode" => $edit[mode], "sort" => $edit[sort], "threshold" => $edit[threshold]));
 168   }
 169
 170 }
 171
 172 function account_blocks_edit() {
 173   global $theme, $user;
 174
 175   if ($user->id) {
 176     // construct form:
 177     $result = db_query("SELECT * FROM blocks WHERE status = 1 ORDER BY module");
 178     while ($block = db_fetch_object($result)) {
 179       $entry = db_fetch_object(db_query("SELECT * FROM layout WHERE block = '". check_input($block->name) ."' AND user = '$user->id'"));
 180       $options .= "<input type=\"checkbox\" name=\"edit[$block->name]\"". ($entry->user ? " checked=\"checked\"" : "") ." /> ". t($block->name) ."<br />\n";
 181     }
 182
 183     $form .= form_item(t("Blocks in side bars"), $options, t("Enable the blocks you would like to see displayed in the side bars."));
 184     $form .= form_submit(t("Save block settings"));
 185
 186     // display form:
 187     $theme->header();
 188     $theme->box(t("Edit your content"), form("account.php", $form));
 189     $theme->footer();
 190   }
 191   else {
 192     account_page();
 193   }
 194 }
 195
 196 function account_blocks_save($edit) {
 197   global $user;
 198   if ($user->id) {
 199     db_query("DELETE FROM layout WHERE user = '$user->id'");
 200     foreach (($edit ? $edit : array()) as $block=>$weight) {
 201       db_query("INSERT INTO layout (user, block) VALUES ('$user->id', '". check_input($block) ."')");
 202     }
 203   }
 204 }
 205
 206 function account_user($name) {
 207   global $user, $theme;
 208
 209   if ($user->id && $user->name == $name) {
 210     $output .= "<TABLE BORDER=\"0\" CELLPADDING=\"2\" CELLSPACING=\"2\">\n";
 211     $output .= " <TR><TD ALIGN=\"right\"><B>". t("Name") .":</B></TD><TD>". check_output($user->name) ."</TD></TR>\n";
 212     $output .= " <TR><TD ALIGN=\"right\"><B>". t("E-mail") .":</B></TD><TD>". format_email($user->fake_email) ."</A></TD></TR>\n";
 213     $output .= " <TR><TD ALIGN=\"right\"><B>". t("Homepage") .":</B></TD><TD>". format_url($user->url) ."</TD></TR>\n";
 214     $output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\"><B>". t("Bio") .":</B></TD><TD>". check_output($user->bio, 1) ."</TD></TR>\n";
 215     $output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\"><B>". t("Signature") .":</B></TD><TD>". check_output($user->signature, 1) ."</TD></TR>\n";
 216     $output .= "</TABLE>\n";
 217
 218     // Display account information:
 219     $theme->header();
 220     $theme->box(t("Personal information"), $output);
 221     $theme->footer();
 222   }
 223   elseif ($name && $account = account_get_user($name)) {
 224     $theme->header();
 225
 226     // Display account information:
 227     $output .= "<TABLE BORDER=\"0\" CELLPADDING=\"1\" CELLSPACING=\"1\">\n";
 228     $output .= " <TR><TD ALIGN=\"right\"><B>". t("Name") .":</B></TD><TD>". check_output($account->name) ."</TD></TR>\n";
 229     $output .= " <TR><TD ALIGN=\"right\"><B>". t("E-mail") .":</B></TD><TD>". format_email($account->fake_email) ."</TD></TR>\n";
 230     $output .= " <TR><TD ALIGN=\"right\"><B>". t("Homepage") .":</B></TD><TD>". format_url($account->url) ."</TD></TR>\n";
 231     $output .= " <TR><TD ALIGN=\"right\"><B>". t("Bio") .":</B></TD><TD>". check_output($account->bio) ."</TD></TR>\n";
 232     $output .= "</TABLE>\n";
 233
 234     $theme->box(strtr(t("%a's user information"), array("%a" => $name)), $output);
 235
 236     // Display contributions:
 237     if (user_access("access contents")) {
 238       $result = db_query("SELECT n.nid, n.type, n.title, n.timestamp, COUNT(c.cid) AS count FROM node n LEFT JOIN comments c ON c.lid = n.nid WHERE n.status = '". node_status("posted") ."' AND n.author = '$account->id' GROUP BY n.nid DESC ORDER BY n.nid DESC LIMIT 25");
 239
 240       while ($node = db_fetch_object($result)) {
 241         $nodes .= "<TABLE BORDER=\"0\" CELLPADDING=\"1\" CELLSPACING=\"1\">\n";
 242         $nodes .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\"><B>". t("Subject") .":</B></TD><TD><A HREF=\"node.php?id=$node->nid\">". check_output($node->title) ."</A> (". format_plural($node->count, "comment", "comments") .")</TD></TR>\n";
 243         $nodes .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\"><B>". t("Type") .":</B></TD><TD>". check_output($node->type) ."</A></TD></TR>\n";
 244         $nodes .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\"><B>". t("Date") .":</B></TD><TD>". format_date($node->timestamp) ."</TD></TR>\n";
 245         $nodes .= "</TABLE>\n";
 246         $nodes .= "<P>\n";
 247       }
 248
 249       $theme->box(strtr(t("%a's contributions"), array("%a" => $name)), ($nodes ? $nodes : t("Not posted any nodes.")));
 250     }
 251
 252     if (user_access("access comments")) {
 253       $sresult = db_query("SELECT n.nid, n.title, COUNT(n.nid) AS count FROM comments c LEFT JOIN node n ON c.lid = n.nid WHERE c.author = '$account->id' GROUP BY n.nid DESC ORDER BY n.nid DESC LIMIT 5");
 254
 255       while ($node = db_fetch_object($sresult)) {
 256         $comments .= "<LI>". format_plural($node->count, "comment", "comments") ." ". t("attached to node") ." `<A HREF=\"node.php?id=$node->nid\">". check_output($node->title) ."</A>`:</LI>\n";
 257         $comments .= " <UL>\n";
 258
 259         $cresult = db_query("SELECT * FROM comments WHERE author = '$account->id' AND lid = '$node->nid'");
 260         while ($comment = db_fetch_object($cresult)) {
 261           $comments .= "  <LI><A HREF=\"node.php?id=$node->nid&cid=$comment->cid&pid=$comment->pid#$comment->cid\">". check_output($comment->subject) ."</A> (". t("replies") .": ". comment_num_replies($comment->cid) .", ". t("votes") .": $comment->votes, ". t("score") .": ". comment_score($comment) .")</LI>\n";
 262         }
 263         $comments .= " </UL>\n";
 264       }
 265
 266       $theme->box(strtr(t("%a's comments"), array("%a" => $name)), ($comments ? $comments : t("Not posted any comments.")));
 267     }
 268
 269     $theme->footer();
 270   }
 271   else {
 272     account_page();
 273   }
 274 }
 275
 276 function account_email_submit($edit) {
 277   global $theme;
 278
 279   $result = db_query("SELECT id FROM users WHERE (userid = '". check_input($edit[login]) ."' OR name = '". check_input($edit[login]) ."') AND real_email = '". check_input($edit[email]) ."'");
 280
 281   if ($account = db_fetch_object($result)) {
 282
 283     /*
 284     ** Generate a password and a confirmation hash:
 285     */
 286
 287     $passwd = user_password();
 288     $hash = substr(md5("$edit[login]. ". time() .""), 0, 12);
 289     $status = 1;
 290
 291     /*
 292     ** Update the user account in the database:
 293     */
 294
 295     db_query("UPDATE users SET passwd = PASSWORD('$passwd'), hash = '$hash', status = '$status' WHERE userid = '". check_input($edit[login]) ."'");
 296
 297     /*
 298     ** Send out an e-mail with the account details:
 299     */
 300
 301     $link = path_uri() ."account.php?op=confirm&name=". urlencode($edit[login]) ."&hash=$hash";
 302     $subject = strtr(t("Account details for %a"), array("%a" => variable_get(site_name, "drupal")));
 303     $message = strtr(t("%a,\n\n\nyou requested us to e-mail you a new password for your account at %b.  You will need to re-confirm your account or you will not be able to login.  To confirm your account updates visit the URL below:\n\n   %c\n\nOnce confirmed you can login using the following username and password:\n\n   username: %a\n   password: %d\n\n\n-- %b team"), array("%a" => $edit[login], "%b" => variable_get(site_name, "drupal"), "%c" => $link, "%d" => $passwd));
 304
 305     mail($edit[email], $subject, $message, "From: noreply");
 306
 307     watchdog("account", "new password: `$edit[login]' &lt;$edit[email]&gt;");
 308
 309     $output = t("Your password and further instructions have been sent to your e-mail address.");
 310   }
 311   else {
 312     watchdog("account", "new password: '$edit[login]' and &lt;$edit[email]&gt; do not match");
 313
 314     $output = t("Could not sent password: no match for the specified username and e-mail address.");
 315   }
 316
 317   $theme->header();
 318   $theme->box(t("E-mail new password"), $output);
 319   $theme->footer();
 320 }
 321
 322 function account_create_submit($edit) {
 323   global $theme, $HTTP_HOST, $REQUEST_URI;
 324
 325   if (variable_get("account_register", 1)) {
 326
 327     $theme->header();
 328
 329     if ($error = user_validate_name($edit[login])) {
 330       $theme->box(t("Create user account"), account_create_form($edit, $error));
 331     }
 332     else if ($error = user_validate_mail($edit[email])) {
 333       $theme->box(t("Create user account"), account_create_form($edit, $error));
 334     }
 335     else if ($ban = user_ban($edit[login], "username")) {
 336       $theme->box(t("Create user account"), account_create_form($edit, strtr(t("the username '%a' is banned"), array("%a" => $edit[login])) .": <i>$ban->reason</i>."));
 337     }
 338     else if ($ban = user_ban($edit[real_email], "e-mail address")) {
 339       $theme->box(t("Create user account"), account_create_form($edit, strtr(t("the e-mail '%a' is banned"), array("%a" => $edit[email])) .": <i>$ban->reason</i>."));
 340     }
 341     else if (db_num_rows(db_query("SELECT userid FROM users WHERE (LOWER(userid) = LOWER('$edit[login]') OR LOWER(name) = LOWER('$edit[login]'))")) > 0) {
 342       $theme->box(t("Create user account"), account_create_form($edit, strtr(t("the username '%a' is already taken."), array("%a" => $edit[login]))));
 343     }
 344     else if (db_num_rows(db_query("SELECT real_email FROM users WHERE LOWER(real_email) = LOWER('$edit[email]')")) > 0) {
 345       $theme->box(t("Create user account"), account_create_form($edit, strtr(t("the e-mail address '%a' is already in use by another account."),array("%a" => $edit[email]))));
 346     }
 347     else {
 348
 349       /*
 350       ** Generate a password and a confirmation hash:
 351       */
 352
 353       $edit[passwd] = user_password();
 354       $edit[hash] = substr(md5("$edit[login]. ". time()), 0, 12);
 355
 356       /*
 357       ** Create the new user account in the database:
 358       */
 359
 360       $user = user_save("", array("userid" => $edit[login], "name" => $edit[login], "real_email" => $edit[email], "passwd" => $edit[passwd], "role" => "authenticated user", "status" => 1, "hash" => $edit[hash]));
 361
 362       /*
 363       ** Send out an e-mail with the account details:
 364       */
 365
 366       $link = path_uri() ."account.php?op=confirm&name=". urlencode($edit[login]) ."&hash=$edit[hash]";
 367       $subject = strtr(t("Account details for %a"), array("%a" => variable_get(site_name, "drupal")));
 368       $message = strtr(t("%a,\n\n\nsomeone signed up for a user account on %b and supplied this e-mail address as their contact.  If it wasn't you, don't get your panties in a bundle and simply ignore this mail.  If this was you, you will have to confirm your account first or you will not be able to login.  To confirm your account visit the URL below:\n\n   %c\n\nOnce confirmed you can login using the following username and password:\n\n  username: %a\n   password: %d\n\n\n-- %b team\n"), array("%a" => $edit[login], "%b" => variable_get(site_name, "drupal"), "%c" => $link, "%d" => $edit[passwd]));
 369
 370       mail($edit[email], $subject, $message, "From: noreply");
 371
 372       watchdog("account", "new account: `$edit[login]' &lt;$edit[email]&gt;");
 373
 374       $theme->box(t("Create user account"), t("Congratulations!  Your member account has been successfully created and further instructions on how to confirm your account have been sent to your e-mail address.  You have to confirm your account first or you will not be able to login."));
 375     }
 376
 377     $theme->footer();
 378   }
 379 }
 380
 381 function account_create_confirm($name, $hash) {
 382   global $theme;
 383
 384   $result = db_query("SELECT userid, hash, status FROM users WHERE userid = '$name'");
 385
 386   if ($account = db_fetch_object($result)) {
 387     if ($account->status == 1) {
 388       if ($account->hash == $hash) {
 389         db_query("UPDATE users SET status = '2', hash = '' WHERE userid = '$name'");
 390         $output = t("Your account has been successfully confirmed.");
 391         watchdog("account", "$name: account confirmation successful");
 392       }
 393       else {
 394         $output = t("Confirmation failed: invalid confirmation hash.");
 395         watchdog("warning", "$name: invalid confirmation hash");
 396       }
 397     }
 398     else {
 399       $output = t("Confirmation failed: your account has already been confirmed.");
 400       watchdog("warning", "$name: attempt to re-confirm account");
 401     }
 402   }
 403   else {
 404     $output = t("Confirmation failed: non-existing account.");
 405     watchdog("warning", "$name: attempt to confirm non-existing account");
 406   }
 407
 408   $theme->header();
 409   $theme->box(t("Create user account"), $output);
 410   $theme->footer();
 411 }
 412
 413 function account_track_comments() {
 414   global $theme, $user;
 415
 416   $sresult = db_query("SELECT n.nid, n.title, COUNT(n.nid) AS count FROM comments c LEFT JOIN node n ON c.lid = n.nid WHERE c.author = '$user->id' GROUP BY n.nid DESC ORDER BY n.nid DESC LIMIT 5");
 417
 418   while ($node = db_fetch_object($sresult)) {
 419     $output .= "<LI>". format_plural($node->count, "comment", "comments") ." ". t("attached to node") ." `<A HREF=\"node.php?id=$node->nid\">". check_output($node->title) ."</A>`:</LI>\n";
 420     $output .= " <UL>\n";
 421
 422     $cresult = db_query("SELECT * FROM comments WHERE author = '$user->id' AND lid = '$node->nid'");
 423     while ($comment = db_fetch_object($cresult)) {
 424       $output .= "  <LI><A HREF=\"node.php?id=$node->nid&cid=$comment->cid&pid=$comment->pid#$comment->cid\">". check_output($comment->subject) ."</A> (". t("replies") .": ". comment_num_replies($comment->cid) .", ". t("votes") .": $comment->votes, ". t("score") .": ". comment_score($comment) .")</LI>\n";
 425     }
 426     $output .= " </UL>\n";
 427   }
 428
 429   $theme->header();
 430   $theme->box(t("Track your comments"), ($output ? $output : t("You have not posted any comments recently.")));
 431   $theme->footer();
 432 }
 433
 434 function account_track_contributions() {
 435   global $theme, $user;
 436
 437   $result = db_query("SELECT n.nid, n.type, n.title, n.timestamp, COUNT(c.cid) AS count FROM node n LEFT JOIN comments c ON c.lid = n.nid WHERE n.status = '". node_status("posted") ."' AND n.author = '$user->id' GROUP BY n.nid DESC ORDER BY n.nid DESC LIMIT 25");
 438
 439   while ($node = db_fetch_object($result)) {
 440     $output .= "<TABLE BORDER=\"0\" CELLPADDING=\"1\" CELLSPACING=\"1\">\n";
 441     $output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\"><B>". t("Subject") .":</B></TD><TD><A HREF=\"node.php?id=$node->nid\">". check_output($node->title) ."</A> (". format_plural($node->count, "comment", "comments") .")</TD></TR>\n";
 442     $output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\"><B>". t("Type") .":</B></TD><TD>". check_output($node->type) ."</A></TD></TR>\n";
 443     $output .= " <TR><TD ALIGN=\"right\" VALIGN=\"top\"><B>". t("Date") .":</B></TD><TD>". format_date($node->timestamp) ."</TD></TR>\n";
 444     $output .= "</TABLE>\n";
 445     $output .= "<P>\n";
 446   }
 447
 448   $theme->header();
 449   $theme->box(t("Track your contributions"), ($output ? $output : t("You have not posted any nodes.")));
 450   $theme->footer();
 451 }
 452
 453 function account_track_site() {
 454   global $theme, $user;
 455
 456   $period = 259200; // 3 days
 457
 458   $theme->header();
 459
 460   $nresult = db_query("SELECT n.nid, n.title, COUNT(c.cid) AS count FROM comments c LEFT JOIN node n ON n.nid = c.lid WHERE n.status = '". node_status("posted") ."' AND c.timestamp > ". (time() - $period) ." GROUP BY c.lid ORDER BY count DESC");
 461   while ($node = db_fetch_object($nresult)) {
 462     $output .= "<LI>". format_plural($node->count, "comment", "comments") ." ". t("attached to") ." '<A HREF=\"node.php?id=$node->nid\">". check_output($node->title) ."</A>':</LI>";
 463
 464     $cresult = db_query("SELECT c.subject, c.cid, c.pid, u.userid, u.name FROM comments c LEFT JOIN users u ON u.id = c.author WHERE c.lid = $node->nid ORDER BY c.timestamp DESC LIMIT $node->count");
 465     $output .= "<UL>\n";
 466     while ($comment = db_fetch_object($cresult)) {
 467       $output .= " <LI>'<A HREF=\"node.php?id=$node->nid&cid=$comment->cid&pid=$comment->pid#$comment->cid\">". check_output($comment->subject) ."</A>' ". t("by") ." ". format_name($comment->name) ."</LI>\n";
 468     }
 469     $output .= "</UL>\n";
 470   }
 471
 472   $theme->box(t("Recent comments"), ($output ? $output : t("No comments recently.")));
 473
 474   unset($output);
 475
 476   $result = db_query("SELECT n.title, n.nid, n.type, n.status, u.userid, u.name FROM node n LEFT JOIN users u ON n.author = u.id WHERE ". time() ." - n.timestamp < $period ORDER BY n.timestamp DESC LIMIT 10");
 477
 478   if (db_num_rows($result)) {
 479     $output .= "<TABLE BORDER=\"0\" CELLSPACING=\"4\" CELLPADDING=\"4\">\n";
 480     $output .= " <TR><TH>". t("Subject") ."</TH><TH>". t("Author") ."</TH><TH>". t("Type") ."</TH><TH>". t("Status") ."</TH></TR>\n";
 481     while ($node = db_fetch_object($result)) {
 482       $output .= " <TR><TD><A HREF=\"node.php?id=$node->nid\">". check_output($node->title) ."</A></TD><TD ALIGN=\"center\">". format_name($node->name) ."</TD><TD ALIGN=\"center\">$node->type</TD><TD>". node_status($node->status) ."</TD></TR>";
 483     }
 484     $output .= "</TABLE>";
 485   }
 486
 487   $theme->box(t("Recent nodes"), ($output ? $output : t("No nodes recently.")));
 488
 489   $theme->footer();
 490 }
 491
 492 switch ($op) {
 493   case t("E-mail new password"):
 494     account_email_submit($edit);
 495     break;
 496   case t("Create new account"):
 497     account_create_submit($edit);
 498     break;
 499   case t("Save user information"):
 500     if ($error = account_info_save($edit)) {
 501       account_info_edit($error);
 502     }
 503     else {
 504       account_user($user->name);
 505     }
 506     break;
 507   case t("Save site settings"):
 508     account_settings_save($edit);
 509     header("Location: account.php?op=info");
 510     break;
 511   case t("Save block settings"):
 512     account_blocks_save($edit);
 513     account_user($user->name);
 514     break;
 515   case "confirm":
 516     account_create_confirm(check_input($name), check_input($hash));
 517     break;
 518   case "login":
 519     account_session_start(check_input($userid), check_input($passwd));
 520     if($HTTP_REFERER <> "") {
 521       header("Location: $HTTP_REFERER");
 522     }
 523     else {
 524       header("Location: account.php?op=info");
 525     }
 526     break;
 527   case "logout":
 528     account_session_close();
 529     header("Location: account.php?op=info");
 530     break;
 531   case "view":
 532     switch ($type) {
 533       case "information":
 534         account_user($user->name);
 535         break;
 536       case "site":
 537         account_track_site();
 538         break;
 539       case "contributions":
 540         account_track_contributions();
 541         break;
 542       case "comments":
 543         account_track_comments();
 544         break;
 545       default:
 546         account_user(check_input($name));
 547     }
 548     break;
 549   case "edit":
 550     switch ($type) {
 551       case "blocks":
 552         account_blocks_edit();
 553         break;
 554       case "settings":
 555         account_settings_edit();
 556         break;
 557       default:
 558         account_info_edit();
 559     }
 560     break;
 561   default:
 562     account_user($user->name);
 563 }
 564
 565 page_footer();
 566
 567 ?>