<?php

/***********************************************************************

  Copyright (C) 2002-2008  PunBB.org

  This file is part of PunBB.

  PunBB is free software; you can redistribute it and/or modify it

  under the terms of the GNU General Public License as published

  by the Free Software Foundation; either version 2 of the License,

  or (at your option) any later version.

  PunBB is distributed in the hope that it will be useful, but

  WITHOUT ANY WARRANTY; without even the implied warranty of

  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

  GNU General Public License for more details.

  You should have received a copy of the GNU General Public License

  along with this program; if not, write to the Free Software

  Foundation, Inc., 59 Temple Place, Suite 330, Boston,

  MA  02111-1307  USA

************************************************************************/

// if (!defined('PUN_ROOT'))

// 	define('PUN_ROOT', '../');

// require PUN_ROOT.'include/common.php';

require PUN_ROOT.'include/common_admin.php';

// import globals (I really hope this isn't dangerous)

foreach ( $GLOBALS as $key => $_ )

{

  $$key =& $GLOBALS[$key];

}

($hook = get_hook('aus_start')) ? eval($hook) : null;

if (!$pun_user['is_admmod'])

	message($lang_common['No permission']);

// Load the admin.php language file

require PUN_ROOT.'lang/'.$pun_user['language'].'/admin.php';

$GLOBALS['lang_admin'] = $lang_admin;

// Show IP statistics for a certain user ID

if (isset($_GET['ip_stats']))

{

	$ip_stats = intval($_GET['ip_stats']);

	if ($ip_stats < 1)

		message($lang_common['Bad request']);

	($hook = get_hook('aus_ip_stats_selected')) ? eval($hook) : null;

	$query = array(

		'SELECT'	=> 'p.poster_ip, MAX(p.posted) AS last_used, COUNT(p.id) AS used_times',

		'FROM'		=> 'posts AS p',

		'WHERE'		=> 'p.poster_id='.$ip_stats,

		'GROUP BY'	=> 'p.poster_ip',

		'ORDER BY'	=> 'last_used DESC'

	);

	($hook = get_hook('aus_qr_get_user_ips')) ? eval($hook) : null;

	$result = $pun_db->query_build($query) or error(__FILE__, __LINE__);

	$pun_page['num_users'] = $pun_db->num_rows($result);

	// Setup breadcrumbs

	$pun_page['crumbs'] = array(

		array($pun_config['o_board_title'], pun_link($pun_url['index'])),

		array($lang_admin['Forum administration'], pun_link($pun_url['admin_index'])),

		array($lang_admin['Searches'], pun_link($pun_url['admin_users'])),

		$lang_admin['User search results']

	);

	($hook = get_hook('aus_ip_stats_pre_header_load')) ? eval($hook) : null;

	define('PUN_PAGE_SECTION', 'users');

	define('PUN_PAGE', 'admin-users');

	require PUN_ROOT.'header.php';

?>

<div id="pun-main" class="main sectioned admin">

<?php echo generate_admin_menu(); ?>

	<div class="main-head">

		<h1><span>{ <?php echo end($pun_page['crumbs']) ?> }</span></h1>

	</div>

	<div class="main-content frm">

		<div class="frm-head">

			<h2><span><?php printf($lang_admin['IP addresses found'], $pun_page['num_users']) ?></span></h2>

		</div>

		<div class="frm-form">

			<table cellspacing="0">

				<thead>

					<tr>

						<th class="tcl" scope="col"><?php echo $lang_admin['IP address'] ?></th>

						<th class="tc2" scope="col"><?php echo $lang_admin['Last used'] ?></th>

						<th class="tc3" scope="col"><?php echo $lang_admin['Times found'] ?></th>

<?php ($hook = get_hook('aus_ip_stats_table_header_after_used_times')) ? eval($hook) : null; ?>

						<th class="tcr" scope="col"><?php echo $lang_admin['Actions'] ?></th>

<?php ($hook = get_hook('aus_ip_stats_table_header_after_actions')) ? eval($hook) : null; ?>

					</tr>

				</thead>

				<tbody>

<?php

	if ($pun_page['num_users'])

	{

		while ($cur_ip = $pun_db->fetch_assoc($result))

		{

			$pun_page['actions'] = '<a href="'.pun_link($pun_url['admin_users']).'&show_users='.$cur_ip['poster_ip'].'">'.$lang_admin['Find more users'].'</a>';

?>

					<tr>

						<td class="tcl"><a href="<?php echo pun_link($pun_url['get_host'], $cur_ip['poster_ip']) ?>"><?php echo $cur_ip['poster_ip'] ?></a></td>

						<td class="tc2"><?php echo format_time($cur_ip['last_used']) ?></td>

						<td class="tc3"><?php echo $cur_ip['used_times'] ?></td>

<?php ($hook = get_hook('aus_ip_stats_table_contents_after_used_times')) ? eval($hook) : null; ?>

						<td class="tcr actions"><?php echo $pun_page['actions'] ?></td>

<?php ($hook = get_hook('aus_ip_stats_table_contents_after_actions')) ? eval($hook) : null; ?>

					</tr>

<?php

		}

	}

	else

		echo "\t\t\t\t\t\t".'<tr><td class="tcl" colspan="4">'.$lang_admin['No posts by user'].'</td></tr>'."\n";

?>

				</tbody>

			</table>

		</div>

	</div>

</div>

<?php

	require PUN_ROOT.'footer.php';

}

// Show users that have at one time posted with the specified IP address

else if (isset($_GET['show_users']))

{

	$ip = $_GET['show_users'];

	if (!@preg_match('/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/', $ip))

		message('The supplied IP address is not correctly formatted.');

	($hook = get_hook('aus_show_users_selected')) ? eval($hook) : null;

	// Load the misc.php language file

	require PUN_ROOT.'lang/'.$pun_user['language'].'/misc.php';

	$query = array(

		'SELECT'	=> 'DISTINCT p.poster_id, p.poster',

		'FROM'		=> 'posts AS p',

		'WHERE'		=> 'p.poster_ip=\''.$pun_db->escape($ip).'\'',

		'ORDER BY'	=> 'p.poster DESC'

	);

	($hook = get_hook('aus_qr_get_users_matching_ip')) ? eval($hook) : null;

	$result = $pun_db->query_build($query) or error(__FILE__, __LINE__);

	$pun_page['num_users'] = $pun_db->num_rows($result);

	// Setup breadcrumbs

	$pun_page['crumbs'] = array(

		array($pun_config['o_board_title'], pun_link($pun_url['index'])),

		array($lang_admin['Forum administration'], pun_link($pun_url['admin_index'])),

		array($lang_admin['Searches'], pun_link($pun_url['admin_users'])),

		$lang_admin['User search results']

	);

	($hook = get_hook('aus_show_users_pre_header_load')) ? eval($hook) : null;

	define('PUN_PAGE_SECTION', 'users');

	define('PUN_PAGE', 'admin-users');

	require PUN_ROOT.'header.php';

?>

<div id="pun-main" class="main sectioned admin">

<?php echo generate_admin_menu(); ?>

	<div class="main-head">

		<h1><span>{ <?php echo end($pun_page['crumbs']) ?> }</span></h1>

	</div>

	<div class="main-content frm">

		<div class="frm-head">

			<h2><span><?php printf($lang_admin['Users found'], $pun_page['num_users']) ?></span></h2>

		</div>

		<form class="frm-form" method="post" accept-charset="utf-8" action="<?php echo pun_link($pun_url['admin_users']) ?>&amp;action=modify_users">

			<div class="hidden">

				<input type="hidden" name="csrf_token" value="<?php echo generate_form_token(pun_link($pun_url['admin_users']).'&action=modify_users') ?>" />

			</div>

			<table cellspacing="0">

				<thead>

					<tr>

						<th class="tcl" scope="col"><?php echo $lang_admin['Username column'] ?></th>

						<th class="tc2" scope="col"><?php echo $lang_admin['Title column'] ?></th>

						<th class="tc3" scope="col"><?php echo $lang_admin['Posts'] ?></th>

<?php ($hook = get_hook('aus_show_users_table_header_after_num_posts')) ? eval($hook) : null; ?>

						<th class="tcr actions" scope="col"><?php echo $lang_admin['Actions'] ?></th>

<?php ($hook = get_hook('aus_show_users_table_header_after_actions')) ? eval($hook) : null; if ($session->user_level >= USER_LEVEL_ADMIN): ?>						<th class="tcmod" scope="col"><?php echo $lang_misc['Select'] ?></th>

<?php endif; ?>					</tr>

				</thead>

				<tbody>

<?php

	$num_posts = $pun_db->num_rows($result);

	if ($num_posts)

	{

		// Loop through users and print out some info

		for ($i = 0; $i < $num_posts; ++$i)

		{

			list($poster_id, $poster) = $pun_db->fetch_row($result);

			$query = array(

				'SELECT'	=> 'u.id, u.username, u.email, u.title, u.num_posts, u.admin_note, g.g_id, g.g_user_title',

				'FROM'		=> 'users AS u',

				'JOINS'		=> array(

					array(

						'INNER JOIN'	=> 'groups AS g',

						'ON'			=> 'g.g_id=u.group_id'

					)

				),

				'WHERE'		=> 'u.id>1 AND u.id='.$poster_id

			);

			($hook = get_hook('aus_qr_get_user_details')) ? eval($hook) : null;

			$result2 = $pun_db->query_build($query) or error(__FILE__, __LINE__);

			if ($user_data = $pun_db->fetch_assoc($result2))

			{

				$pun_page['user_title'] = get_title($user_data);

				$pun_page['actions'] = '<span><a href="'.pun_link($pun_url['admin_users']).'&ip_stats='.$user_data['id'].'">'.$lang_admin['View IP stats'].'</a></span> <span><a href="'.pun_link($pun_url['search_user_posts'], $user_data['id']).'">'.$lang_admin['Show posts'].'</a></span>';

?>

					<tr>

						<td class="tcl"><strong><a href="<?php echo pun_link($pun_url['user'], $user_data['id']) ?>"><?php echo htmlspecialchars($user_data['username']) ?></a></strong> <span class="usermail"><a href="mailto:<?php echo $user_data['email'] ?>"><?php echo $user_data['email'] ?></a></span> <?php if ($user_data['admin_note'] != '') echo '<span class="usernote">'.htmlspecialchars($user_data['admin_note']).'</span>' ?></td>

						<td class="tc2"><?php echo $pun_page['user_title'] ?></td>

						<td class="tc3"><?php echo $user_data['num_posts'] ?></td>

<?php ($hook = get_hook('aus_show_users_table_contents_after_num_posts')) ? eval($hook) : null; ?>

						<td class="tcr actions"><?php echo $pun_page['actions'] ?></td>

<?php ($hook = get_hook('aus_show_users_table_contents_after_actions')) ? eval($hook) : null; if ($session->user_level >= USER_LEVEL_ADMIN): ?>						<td class="tcmod"><input type="checkbox" name="users[<?php echo $user_data['id'] ?>]" value="1" /></td>

<?php endif; ?>					</tr>

<?php

			}

			else

			{

?>

					<tr>

						<td class="tcl"><?php echo htmlspecialchars($poster) ?></td>

						<td class="tc2"><?php echo $lang_admin['Guest'] ?></td>

						<td class="tc3">&#160;</td>

<?php ($hook = get_hook('aus_show_users_table_contents_after_num_posts_guest')) ? eval($hook) : null; ?>

						<td class="tcr">&#160;</td>

<?php ($hook = get_hook('aus_show_users_table_contents_after_actions_guest')) ? eval($hook) : null; if ($session->user_level >= USER_LEVEL_ADMIN): ?>						<td class="tcmod">&#160;</td>

<?php endif; ?>					</tr>

<?php

			}

		}

	}

	else

		echo "\t\t\t\t\t".'<tr><td class="tcl" colspan="'.(($session->user_level >= USER_LEVEL_ADMIN) ? '5' : '4').'">'.$lang_admin['Cannot find IP'].'</td></tr>'."\n";

?>

				</tbody>

			</table>

<?php

// Setup control buttons

$pun_page['main_submit'] = array(

	'<span class="submit"><input type="submit" name="ban_users" value="'.$lang_admin['Ban'].'" /></span>',

	'<span class="submit"><input type="submit" name="delete_users" value="'.$lang_admin['Delete'].'" /></span>',

	'<span class="submit"><input type="submit" name="change_group" value="'.$lang_admin['Change group'].'" /></span>'

);

($hook = get_hook('aus_show_users_pre_moderation_buttons')) ? eval($hook) : null;

?>

			<p class="submitting"><?php echo implode("\n\t\t\t", $pun_page['main_submit'])."\n" ?></p>

		</form>

	</div>

</div>

<?php

	require PUN_ROOT.'footer.php';

}

else if (isset($_POST['delete_users']) || isset($_POST['delete_users_comply']) || isset($_POST['delete_users_cancel']))

{

	// User pressed the cancel button

	if (isset($_POST['delete_users_cancel']))

		pun_redirect(pun_link($pun_url['admin_users']), $lang_common['Cancel redirect']);

	if ($session->user_level < USER_LEVEL_ADMIN)

		message($lang_common['No permission']);

	if (empty($_POST['users']))

		message($lang_admin['No users selected']);

	($hook = get_hook('aus_delete_users_selected')) ? eval($hook) : null;

	if (!is_array($_POST['users']))

		$users = explode(',', $_POST['users']);

	else

		$users = array_keys($_POST['users']);

	$users = array_map('intval', $users);

	// We check to make sure there are no administrators in this list

	$query = array(

		'SELECT'	=> '1',

		'FROM'		=> 'users AS u',

		'WHERE'		=> 'u.id IN ('.implode(',', $users).') AND u.group_id='.PUN_ADMIN

	);

	($hook = get_hook('aus_qr_check_for_admins')) ? eval($hook) : null;

	$result = $pun_db->query_build($query) or error(__FILE__, __LINE__);

	if ($pun_db->num_rows($result) > 0)

		message($lang_admin['Delete admin message']);

	if (isset($_POST['delete_users_comply']))

	{

		($hook = get_hook('aus_delete_users_form_submitted')) ? eval($hook) : null;

		foreach ($users as $id)

		{

			// We don't want to delete the Guest user

			if ($id > 1)

				delete_user($id, true);

		}

		pun_redirect(pun_link($pun_url['admin_users']), $lang_admin['Users deleted'].' '.$lang_admin['Redirect']);

	}

	// Setup form

	$pun_page['set_count'] = $pun_page['fld_count'] = 0;

	// Setup breadcrumbs

	$pun_page['crumbs'] = array(

		array($pun_config['o_board_title'], pun_link($pun_url['index'])),

		array($lang_admin['Forum administration'], pun_link($pun_url['admin_index'])),

		array($lang_admin['Searches'], pun_link($pun_url['admin_users'])),

		$lang_admin['Delete users']

	);

	($hook = get_hook('aus_delete_users_pre_header_load')) ? eval($hook) : null;

	define('PUN_PAGE_SECTION', 'users');

	define('PUN_PAGE', 'admin-users');

	require PUN_ROOT.'header.php';

?>

<div id="pun-main" class="main sectioned admin">

<?php echo generate_admin_menu(); ?>

	<div class="main-head">

		<h1><span>{ <?php echo end($pun_page['crumbs']) ?> }</span></h1>

	</div>

	<div class="main-content frm">

		<div class="frm-head">

			<h2><span><?php echo $lang_admin['Confirm delete'] ?></span></h2>

		</div>

		<div class="frm-info">

			<p class="warn"><?php echo $lang_admin['Delete warning'] ?></p>

		</div>

		<form class="frm-form" method="post" accept-charset="utf-8" action="<?php echo pun_link($pun_url['admin_users']) ?>&amp;action=modify_users">

			<div class="hidden">

				<input type="hidden" name="csrf_token" value="<?php echo generate_form_token(pun_link($pun_url['admin_users']).'&action=modify_users') ?>" />

				<input type="hidden" name="users" value="<?php echo implode(',', $users) ?>" />

			</div>

			<fieldset class="frm-set set<?php echo ++$pun_page['set_count'] ?>">

				<legend class="frm-legend"><span><?php echo $lang_admin['Delete posts legend'] ?></span></legend>

				<div class="radbox checkbox">

					<label for="fld<?php echo ++$pun_page['fld_count'] ?>"><span class="fld-label"><?php echo $lang_admin['Delete posts'] ?></span><br /><input type="checkbox" id="fld<?php echo ++$fld_count ?>" name="delete_posts" value="1" checked="checked" /> <?php echo $lang_admin['Delete posts label'] ?></label>

				</div>

			</fieldset>

			<div class="frm-buttons">

				<span class="submit"><input type="submit" name="delete_users_comply" value="<?php echo $lang_admin['Delete'] ?>" /></span>

				<span class="cancel"><input type="submit" name="delete_users_cancel" value="<?php echo $lang_common['Cancel'] ?>" /></span>

			</div>

		</form>

	</div>

</div>

<?php

	require PUN_ROOT.'footer.php';

}

else if (isset($_POST['ban_users']) || isset($_POST['ban_users_comply']))

{

	if ($session->user_level < USER_LEVEL_ADMIN)

		message($lang_common['No permission']);

	if (empty($_POST['users']))

		message($lang_admin['No users selected']);

	($hook = get_hook('aus_ban_users_selected')) ? eval($hook) : null;

	if (!is_array($_POST['users']))

		$users = explode(',', $_POST['users']);

	else

		$users = array_keys($_POST['users']);

	$users = array_map('intval', $users);

	// We check to make sure there are no administrators in this list

	$query = array(

		'SELECT'	=> '1',

		'FROM'		=> 'users AS u',

		'WHERE'		=> 'u.id IN ('.implode(',', $users).') AND u.group_id='.PUN_ADMIN

	);

	($hook = get_hook('aus_qr_check_for_admins2')) ? eval($hook) : null;

	$result = $pun_db->query_build($query) or error(__FILE__, __LINE__);

	if ($pun_db->num_rows($result) > 0)

		message($lang_admin['Ban admin message']);

	if (isset($_POST['ban_users_comply']))

	{

		$ban_message = trim($_POST['ban_message']);

		$ban_expire = trim($_POST['ban_expire']);

		($hook = get_hook('aus_ban_users_form_submitted')) ? eval($hook) : null;

		if ($ban_expire != '' && $ban_expire != 'Never')

		{

			$ban_expire = strtotime($ban_expire);

			if ($ban_expire == -1 || $ban_expire <= time())

				message($lang_admin['Invalid expire message']);

		}

		else

			$ban_expire = 'NULL';

		$ban_message = ($ban_message != '') ? '"'.$pun_db->escape($ban_message).'"' : 'NULL';

		// Get the latest IPs for the posters and store them for a little later

		$query = array(

			'SELECT'	=> 'p.poster_id, p.poster_ip',

			'FROM'		=> 'posts AS p',

			'WHERE'		=> 'p.poster_id IN ('.implode(',', $users).') AND p.poster_id>1',

			'GROUP BY'	=> 'p.poster_id',

			'ORDER BY'	=> 'p.posted DESC'

		);

		($hook = get_hook('aus_qr_get_latest_user_ips')) ? eval($hook) : null;

		$result = $pun_db->query_build($query) or error(__FILE__, __LINE__);

		$ips = array();

		while ($cur_post = $pun_db->fetch_assoc($result))

			$ips[$cur_post['poster_id']] = $cur_post['poster_ip'];

		// Get the rest of the data for the posters, merge in the IP information, create a ban

		$query = array(

			'SELECT'	=> 'u.id, u.username, u.email, u.registration_ip',

			'FROM'		=> 'users AS u',

			'WHERE'		=> 'id IN ('.implode(',', $users).') AND id>1'

		);

		($hook = get_hook('aus_qr_get_users')) ? eval($hook) : null;

		$result = $pun_db->query_build($query) or error(__FILE__, __LINE__);

		while ($cur_user = $pun_db->fetch_assoc($result))

		{

			$ban_ip = isset($ips[$cur_user['id']]) ? $ips[$cur_user['id']] : $cur_user['registration_ip'];

			$query = array(

				'INSERT'	=> 'username, ip, email, message, expire, ban_creator',

				'INTO'		=> 'bans',

				'VALUES'	=> '\''.$pun_db->escape($cur_user['username']).'\', \''.$ban_ip.'\', \''.$pun_db->escape($cur_user['email']).'\', '.$ban_message.', '.$ban_expire.', '.$pun_user['id']

			);

			($hook = get_hook('aus_qr_add_ban')) ? eval($hook) : null;

			$pun_db->query_build($query) or error(__FILE__, __LINE__);

		}

		// Regenerate the bans cache

		require_once PUN_ROOT.'include/cache.php';

		generate_bans_cache();

		pun_redirect(pun_link($pun_url['admin_users']), $lang_admin['Users banned'].' '.$lang_admin['Redirect']);

	}

	// Setup form

	$pun_page['set_count'] = $pun_page['fld_count'] = 0;

	// Setup breadcrumbs

	$pun_page['crumbs'] = array(

		array($pun_config['o_board_title'], pun_link($pun_url['index'])),

		array($lang_admin['Forum administration'], pun_link($pun_url['admin_index'])),

		array($lang_admin['Searches'], pun_link($pun_url['admin_users'])),

		$lang_admin['Ban users']

	);

	($hook = get_hook('aus_ban_users_pre_header_load')) ? eval($hook) : null;

	define('PUN_PAGE_SECTION', 'users');

	define('PUN_PAGE', 'admin-users');

	require PUN_ROOT.'header.php';

?>

<div id="pun-main" class="main sectioned admin">

<?php echo generate_admin_menu(); ?>

	<div class="main-head">

		<h1><span>{ <?php echo end($pun_page['crumbs']) ?> }</span></h1>

	</div>

	<div class="main-content frm">

		<div class="frm-head">

			<h2><span><?php echo $lang_admin['Ban advanced heading'] ?></span></h2>

		</div>

		<div class="frm-info">