<?php

/**
 * CuteBook 多用戶留言本
 * 程式版權 (c) 2001 by midiguy www.jaxp.net
 * 作者Email: midiguy@263.net 歡迎批評指正
 * 請不要修改版權信息,謝謝
 */

class c_user extends c_base {
    // user register
    function reg_form()
    {
        global $info, $lang;

        if (!$info['reg_enabled']) {
            $this->c_error->freeback2($lang['reg_disabled']);
            return;
        } 
        $t = &$this->c_smarty_tpl;
        $t->caching = true;
        $t->display('reg/reg_form.tpl', '', 'reg');
    } 
    // check userid exist
    function userid_exist($userid = -1)
    {
        global $db_table;
        $SQL = "SELECT id FROM " . $db_table['user'] . " where id=" . $userid;
        $result = $this->c_db->query($SQL);
        $count = $this->c_db->num_rows($result);
        return ($count > 0)?true:false;
    } 
    // check manager by userid
    function is_manager_by_userid($userid = -1, $password = '')
    {
        global $db_table;
        $SQL = "SELECT id FROM " . $db_table['user'] . " where id=" . $userid . " and password='" . md5($password) . "'";
        $result = $this->c_db->query($SQL);
        $count = $this->c_db->num_rows($result);
        return ($count > 0)?true:false;
    } 
    // is manager by username check
    function is_manager_by_username($username = '', $password = '', $userid = -1)
    {
        global $db_table;
        $SQL = "SELECT id FROM " . $db_table['user'] . " WHERE id=" . $userid . " AND username='$username' AND password='" . md5($password) . "'";
        $result = $this->c_db->query($SQL);
        $count = $this->c_db->num_rows($result);
        return ($count == 1)?true:false;
    } 
    // user's gbook need auth check
    function need_auth($userid = -1)
    {
        global $db_table;
        $SQL = "SELECT needauth FROM " . $db_table['user'] . " where id=" . $userid;
        $result = $this->c_db->query($SQL);
        $count = $this->c_db->num_rows($result);
        $row = $this->c_db->fetch_array($result);
        $needauth = $row['needauth'];
        return ($needauth == '1')?true:false;
    } 
    // reg save
    function reg_save()
    {
        global $lang, $info, $copyright, $db_table;

        $err = false;
        $err_msg = '';

        if (!isset($_POST['username']) || trim($_POST['username']) == '') {
            $err_msg .= '<br>' . $lang['username_empty'];
            $err = true;
        } 

        if (isset($_POST['username']) && !$this->c_function->username_validate($_POST['username'], 3, 15)) {
            $err_msg .= '<br>' . $lang['username_invalid'];
            $err = true;
        } 

        if (isset($_POST['email']) && trim($_POST['email']) != '' && !$this->c_function->is_email_valid($_POST['email'])) {
            $err_msg .= '<br>' . $lang['email_invalid'];
            $err = true;
        } 

        if (!isset($_POST['sitename']) || trim($_POST['sitename']) == '') {
            $err_msg .= '<br>' . $lang['sitename_empty'];
            $err = true;
        } 

        if (!isset($_POST['siteurl']) || trim($_POST['siteurl']) == '') {
            $err_msg .= '<br>' . $lang['siteurl_empty'];
            $err = true;
        } 

        if (isset($_POST['username']) && $this->is_username_exist($_POST['username'])) {
            $err_msg .= '<br>' . $lang['username_exist'];
            $err = true;
        } 

        if ($err) {
            $this->c_error->freeback2($err_msg);
            return;
        } 

        $username = trim($_POST['username']);
        $password = trim($_POST['password']);
        $sitename = trim($_POST['sitename']);
        $siteurl = trim($_POST['siteurl']);
        $email = trim($_POST['email']);

        $SQL = "	INSERT INTO " . $db_table['user'] . "(username,password,sitename,siteurl,email)
					VALUES('$username','" . md5($password) . "','$sitename','$siteurl','$email')";
        $result = $this->c_db->query($SQL);

        if ($result) {
            $maxid = $this->c_db->insert_id();
            $mail_title = $lang['reg_success'];
            $_url = $lang['reg_gbook_url'] . ":" . $info['cutebook_root'] . "?act=post_list&userid=$maxid<br><br>";
            $mail_body = $_url . $lang['username'] . ":$username<br>" . $lang['password'] . ":$password<br><br>";
            $mail_body .= $copyright['support_mail'];
            @mail($email, $mail_title, $mail_body, "From: " . $copyright['support_mail'] . "\nReply-To: " . $copyright['support_mail'] . "\n");
            $this->c_error->freeback1($lang['reg_success'] . '<br>' . $_url);
        } 
    } 
    // username exist check
    function is_username_exist($username = '')
    {
        global $db_table;
        $SQL = "SELECT id FROM " . $db_table['user'] . " where username='$username'";
        $result = $this->c_db->query($SQL);
        $count = $this->c_db->num_rows($result);
        return ($count > 0)?true:false;
    } 
    // get user's info
    function get_user_info($userid = -1)
    {
        global $db_table, $lang;
        $SQL = "SELECT username,sitename,siteurl,email FROM " . $db_table['user'] . " where id=" . $userid;
        $result = $this->c_db->query($SQL);
        $row = $this->c_db->fetch_array($result);
        $user_info = array('username' => $row['username'], 'sitename' => $row['sitename'],
            'siteurl' => $row['siteurl'], 'email' => $row['email']);
        return $user_info;
    }

    // reg user list
    function reg_user_list($page = 1, $items_size = 10, $pagesize = 30)
    {
        global $db_table, $lang, $c_util;

        $t = &$this->c_smarty_tpl;
        $t->caching = false;

        $userid = isset($_GET['userid'])?$_GET['userid']:'';

        if (isset($_GET['page'])) $page = $_GET['page'];
        $SQL = "SELECT id from " . $db_table['user'];
        $result = $this->c_db->query($SQL);
        $total = $this->c_db->num_rows($result);
        $pagecount = ceil($total / $pagesize);
        $page = ($page > $pagecount)?$pagecount:$page;
        $offset = ($page-1) * $pagesize;

        $SQL = "SELECT * FROM " . $db_table['user'] . " ORDER BY id DESC LIMIT $offset,$pagesize";
        $user_list_info = array();
        $result = $this->c_db->query($SQL);
        while ($row = $this->c_db->fetch_array($result)) {
            $user_list_info[] = array('id' => $row['id'],
                'username' => $row['username'],
                'sitename' => $row['sitename'],
                'siteurl' => $row['siteurl'],
                'email' => $row['email'],
                'topics' => $c_util->get_topics_count_by_user($row['id']),
                'replies' => $c_util->get_replies_count_by_user($row['id']),
                );
        } 

        $c_url = "<a href=./?act=user_list&userid=$userid";
        $_pages_info = $this->c_function->_pages($page, $items_size, $pagecount, $c_url);

        $t->assign(array('user_list_info' => $user_list_info,
                'l_arrow' => $_pages_info['l_arrow'],
                'r_arrow' => $_pages_info['r_arrow'],
                'item_list_info' => $_pages_info['item_list_info'],
                'total' => $total,
                'page' => $page,
                'pagecount' => $pagecount));
        $t->display('user/user_list.tpl', '', 'user');
    } 
} 

?>