0byt3m1n1

Path: /data/applications/aps.bak/postnuke/0.764-3/standard/htdocs/includes/blocks/ [ Home ]
File: user.php
<?php
// File: $Id: user.php 20218 2006-10-08 11:37:42Z larsneo $
// ----------------------------------------------------------------------
// PostNuke Content Management System
// Copyright (C) 2001 by the PostNuke Development Team.
// http://www.postnuke.com/
// ----------------------------------------------------------------------
// Based on:
// PHP-NUKE Web Portal System - http://phpnuke.org/
// Thatware - http://thatware.org/
// ----------------------------------------------------------------------
// LICENSE
//
// This program is free software; you can redistribute it and/or
// modify it under the terms of the GNU General Public License (GPL)
// as published by the Free Software Foundation; either version 2
// of the License, or (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
//
// To read the license please visit http://www.gnu.org/copyleft/gpl.html
// ----------------------------------------------------------------------
// Original Author of file: Francisco Burzi
// Purpose of file:
// ----------------------------------------------------------------------

if (strpos($_SERVER['PHP_SELF'], 'user.php') && strpos($_SERVER['PHP_SELF'], 'blocks')) {
	die ("You can't access this file directly...");
}

$blocks_modules['user'] = array(
    'func_display' => 'blocks_user_block',
    'text_type' => 'User',
    'text_type_long' => "User's Custom Box",
    'allow_multiple' => false,
    'form_content' => false,
    'form_refresh' => false,
    'show_preview' => true
);

// Security
pnSecAddSchema('Userblock::', 'Block title::');

function blocks_user_block($row) 
{
    $dbconn =& pnDBGetConn(true);
    $pntable =& pnDBGetTables();

    if (!pnSecAuthAction(0, 'Userblock::', "$row[title]::", ACCESS_READ)) {
        return;
    }

    if ((pnUserLoggedIn()) && (pnUserGetVar('ublockon') == 1)) {
        $usercolumn = &$pntable['users_column'];
        $usertable = $pntable['users'];
        $uid = pnUserGetVar('uid');
        $query = "SELECT $usercolumn[ublock] FROM $usertable WHERE $usercolumn[uid]='".(int)pnVarPrepForStore($uid)."'";
        $getblock =& $dbconn->Execute($query);
        list($ublock) = $getblock->fields;

        if (pnUserGetVar('name') != '') {
            $row['title'] = _MENUFOR.' '.pnVarPrepForDisplay(pnUserGetVar('name'));
        } else {
            $row['title'] = _MENUFOR.' '.pnVarPrepForDisplay(pnUserGetVar('uname'));
        }
        $row['content'] = pnVarPrepHTMLDisplay($ublock);
        return themesideblock($row);
    }
}

?>