Folgendes habe ich bis jetzt versucht
<?php
# Copyright by: Manuel
# Support: www.ilch.de
defined('main') or die('no direct access');
$title = $allgAr['title'] . ' :: Users :: Profil';
$hmenu = $extented_forum_menu . '<a class="smalfont" href="?user">Users</a><b> » </b> Profil' . $extented_forum_menu_sufix;
$design = new design($title, $hmenu, 1);
if ($_SESSION['authright'] <= -1)
{
$csrfCheck = chk_antispam('user_profile_edit', true);
if (empty($_POST['submit']) || !$csrfCheck)
{
$design->header();
$abf = 'SELECT email,wohnort,homepage,aim,msn,icq,yahoo,avatar,status,staat,gebdatum,sig,opt_pm_popup,opt_pm,opt_mail,geschlecht,spezrank,game,spielerfahrungen,clan,map,waffe,essen,trinken,film,musik,sport,cpu,mainboard,ram,monitor,grafikkarte,soundkarte,festplatte,i_net_verbindung,tastatur,maus,jappy,facebook,wkw,studivz,myspace,youtube FROM `prefix_user` WHERE id = "' . $_SESSION['authid'] . '"';
$erg = db_query($abf);
if (db_num_rows($erg) > 0)
{
$row = db_fetch_assoc($erg);
$tpl = new tpl('user/profil_edit');
$row['staat'] = '<option></option>' . arliste($row['staat'], get_nationality_array(), $tpl, 'staat');
$row['geschlecht0'] = ($row['geschlecht'] < 1 ? 'checked' : '');
$row['geschlecht1'] = ($row['geschlecht'] == 1 ? 'checked' : '');
$row['geschlecht2'] = ($row['geschlecht'] == 2 ? 'checked' : '');
if ($row['status'] == 1)
{
$row['status1'] = 'checked';
$row['status0'] = '';
}
else
{
$row['status1'] = '';
$row['status0'] = 'checked';
}
if ($row['opt_mail'] == 1)
{
$row['opt_mail1'] = 'checked';
$row['opt_mail0'] = '';
}
else
{
$row['opt_mail1'] = '';
$row['opt_mail0'] = 'checked';
}
if ($row['opt_pm'] == 1)
{
$row['opt_pm1'] = 'checked';
$row['opt_pm0'] = '';
}
else
{
$row['opt_pm1'] = '';
$row['opt_pm0'] = 'checked';
}
if ($row['opt_pm_popup'] == 1)
{
$row['opt_pm_popup1'] = 'checked';
$row['opt_pm_popup0'] = '';
}
else
{
$row['opt_pm_popup1'] = '';
$row['opt_pm_popup0'] = 'checked';
}
$row['avatarbild'] = (file_exists($row['avatar']) ? '<img src="' . $row['avatar'] . '" alt=""><br />' : '');
$row['Fabreite'] = $allgAr['Fabreite'];
$row['Fahohe'] = $allgAr['Fahohe'];
$row['Fasize'] = $allgAr['Fasize'];
$row['forum_max_sig'] = $allgAr['forum_max_sig'];
$row['uid'] = $_SESSION['authid'];
$row['forum_usergallery'] = $allgAr['forum_usergallery'];
$row['antispam'] = get_antispam('user_profile_edit', 0, true);
$tpl->set_ar_out($row, 0);
if ($allgAr['forum_avatar_upload'])
$tpl->out(1);
$tpl->set_ar_out($row, 2);
profilefields_change($_SESSION['authid']);
$tpl->out(3);
}
else
{
$tpl = new tpl('user/login.htm');
$tpl->set_out('WDLINK', 'index.php', 0);
}
}
elseif ($csrfCheck) # submit
{
# change poassword
if (!empty($_POST['np1']) AND !empty($_POST['np2']) AND !empty($_POST['op']))
{
if ($_POST['np1'] == $_POST['np2'])
{
$akpw = db_result(db_query("SELECT pass FROM prefix_user WHERE id = " . $_SESSION['authid']), 0);
if (user_pw_check($_POST['op'], $akpw))
{
$newpw = user_pw_crypt($_POST['np1']);
db_query("UPDATE prefix_user SET pass = '" . $newpw . "' WHERE id = " . $_SESSION['authid']);
user_set_cookie($_SESSION['authid'], $newpw);
$fmsg = $lang['passwortchanged'];
}
else
{
$fmsg = $lang['passwortwrong'];
}
}
else
{
$fmsg = $lang['passwortnotequal'];
}
}
# avatar speichern START
$avatar_sql_update = '';
if (!empty($_FILES['avatarfile']['name']) AND $allgAr['forum_avatar_upload'])
{
$file_tmpe = $_FILES['avatarfile']['tmp_name'];
$rile_type = ic_mime_type($_FILES['avatarfile']['tmp_name']);
$file_type = $_FILES['avatarfile']['type'];
$file_size = $_FILES['avatarfile']['size'];
$fmsg = $lang['avatarisnopicture'];
$size = @getimagesize($file_tmpe);
$endar = array(
1 => 'gif',
2 => 'jpg',
3 => 'png'
);
if (($size[2] == 1 OR $size[2] == 2 OR $size[2] == 3) AND $size[0] > 10 AND $size[1] > 10 AND substr($file_type, 0, 6) == 'image/' AND substr($rile_type, 0, 6) == 'image/')
{
$endung = $endar[$size[2]];
$breite = $size[0];
$hoehe = $size[1];
$fmsg = $lang['avatarcannotupload'];
if ($file_size <= $allgAr['Fasize'] AND $breite <= $allgAr['Fabreite'] AND $hoehe <= $allgAr['Fahohe'])
{
$neuer_name = 'include/images/avatars/' . $_SESSION['authid'] . '.' . $endung;
@unlink(db_result(db_query("SELECT avatar FROM prefix_user WHERE id = " . $_SESSION['authid']), 0));
move_uploaded_file($file_tmpe, $neuer_name);
@chmod($neuer_name, 0777);
$avatar_sql_update = "avatar = '" . $neuer_name . "',";
$fmsg = $lang['pictureuploaded'];
}
}
}
elseif (isset($_POST['avatarloeschen']))
{
$fmsg = $lang['picturedelete'];
@unlink(db_result(db_query("SELECT avatar FROM prefix_user WHERE id = " . $_SESSION['authid']), 0));
$avatar_sql_update = "avatar = '',";
}
# avatar speichern ENDE
# email aendern
if ($_POST['email'] != $_POST['aemail'])
{
$id = $_SESSION['authid'] . '||' . md5(uniqid(rand()));
db_query("INSERT INTO prefix_usercheck (`check`,email,datime,ak) VALUES ('" . $id . "','" . escape($_POST['email'], 'string') . "',NOW(),3)");
$page = $_SERVER["HTTP_HOST"] . $_SERVER["SCRIPT_NAME"];
$text = $lang['changedthemail'] . sprintf($lang['registconfirmlink'], $page, $id);
icmail($_POST['email'], $lang['mail'] . ' ' . $lang['changed'], $text);
$fmsg = $lang['pleaseconfirmmail'];
}
# email aendern
#remove account
if (isset($_POST['removeaccount']))
{
$id = $_SESSION['authid'] . '-remove-' . md5(uniqid(rand()));
db_query("INSERT INTO prefix_usercheck (`check`,email,datime,ak) VALUES ('" . $id . "','" . escape($_POST['email'], 'string') . "',NOW(),5)");
$page = $_SERVER["HTTP_HOST"] . $_SERVER["SCRIPT_NAME"];
$text = $lang['removeconfirm'] . sprintf($lang['registconfirmlink'], $page, $id);
icmail($_POST['email'], html_entity_decode($lang['removeaccount'], ILCH_ENTITIES_FLAGS, ILCH_CHARSET), $text);
$fmsg = $lang['pleaseconfirmremove'];
}
#remove account
# statische felder speichern
db_query("UPDATE prefix_user SET
homepage = '" . get_homepage(escape($_POST['homepage'], 'string')) . "',
wohnort = '" . escape($_POST['wohnort'], 'string') . "',
icq = '" . escape($_POST['icq'], 'string') . "',
msn = '" . escape($_POST['msn'], 'string') . "',
yahoo = '" . escape($_POST['yahoo'], 'string') . "',
" . $avatar_sql_update . "
aim = '" . escape($_POST['aim'], 'string') . "',
staat = '" . escape($_POST['staat'], 'string') . "',
geschlecht = '" . escape($_POST['geschlecht'], 'string') . "',
status = '" . escape($_POST['status'], 'string') . "',
opt_mail = '" . escape($_POST['opt_mail'], 'string') . "',
opt_pm = '" . escape($_POST['opt_pm'], 'string') . "',
opt_pm_popup = '" . escape($_POST['opt_pm_popup'], 'string') . "',
gebdatum = '" . get_datum(escape($_POST['gebdatum'], 'string')) . "',
game = '" . escape($_POST['game'], 'string') . "',
spielerfahrungen = '" . escape($_POST['spielerfahrungen'], 'string') . "',
clan = '" . escape($_POST['clan'], 'string') . "',
map = '" . escape($_POST['map'], 'string') . "',
waffe = '" . escape($_POST['waffe'], 'string') . "',
essen = '" . escape($_POST['essen'], 'string') . "',
trinken = '" . escape($_POST['trinken'], 'string') . "',
film = '" . escape($_POST['film'], 'string') . "',
musik = '" . escape($_POST['musik'], 'string') . "',
sport = '" . escape($_POST['sport'], 'string') . "',
cpu = '" . escape($_POST['cpu'], 'string') . "',
mainboard = '" . escape($_POST['mainboard'], 'string') . "',
ram = '" . escape($_POST['ram'], 'string') . "',
monitor = '" . escape($_POST['monitor'], 'string') . "',
grafikkarte = '" . escape($_POST['grafikkarte'], 'string') . "',
soundkarte = '" . escape($_POST['soundkarte'], 'string') . "',
festplatte = '" . escape($_POST['festplatte'], 'string') . "',
i_net_verbindung = '" . escape($_POST['i_net_verbindung'], 'string') . "',
tastatur = '" . escape($_POST['tastatur'], 'string') . "',
maus = '" . escape($_POST['maus'], 'string') . "',
jappy = '" . get_homepage(escape($_POST['jappy'], 'string')) . "',
facebook = '" . get_homepage(escape($_POST['facebook'], 'string')) . "',
wkw = '" . get_homepage(escape($_POST['wkw'], 'string')) . "',
studivz = '" . get_homepage(escape($_POST['studivz'], 'string')) . "',
myspace = '" . get_homepage(escape($_POST['myspace'], 'string')) . "',
youtube = '" . get_homepage(escape($_POST['youtube'], 'string')) . "',
sig = '" . substr(escape($_POST['sig'], 'string'), 0, $allgAr['forum_max_sig']) . "'
WHERE id = " . $_SESSION['authid']);
$abf = 'SELECT * FROM `prefix_groups` WHERE 1';
$erg = db_query($abf);
while($row = db_fetch_assoc($erg)) {
$_POST ['game'].= '<option></option>'.arliste('gruppe', array ( $row['id'], $row['name'], $tpl, 'game'));
}
# change other profil fields
profilefields_change_save($_SESSION['authid']);
$design->header();
# definie and print msg
$fmsg = (isset($fmsg) ? $fmsg : $lang['changesuccessful']);
wd('?user-8', $fmsg, 3);
}
}
else
{
$tpl = new tpl('user/login');
$tpl->set_out('WDLINK', '?user-8', 0);
}
$design->footer();
$abf = 'SELECT * FROM prefix_groups WHERE 1';
$erg = db_query($abf);
while($row = db_fetch_assoc($erg)) {
$liste .= $tpl->list_get('gruppe', array ( $row['id'], $row['name']));
}
$tpl->set('gruppe', $liste );
$tpl->out(0);
?>
habe noch mehr stellen ausprobiert wo die abfrage hin kommen könnte, aber ohne erfolg. Kann mir jemand dabei behilflich sein?
In der oben angegebenen variante wird verständlicher weise das komplette edit template unter den footer nochmal aufgefüht. Das positive dabei ist, das die gewünschte liste auch dort ist wo sie hin soll. Das sagt mir, das ich ja nicht ganz falsch bin.
verwendete ilch Version: 1.1 P
