diff options
Diffstat (limited to 'preferences.php')
-rw-r--r-- | preferences.php | 136 |
1 files changed, 68 insertions, 68 deletions
diff --git a/preferences.php b/preferences.php index f8e7c4d9..330bd66b 100644 --- a/preferences.php +++ b/preferences.php @@ -22,75 +22,75 @@ require 'lib/init.php'; -// Switch on the action -switch($_REQUEST['action']) { +// Switch on the action +switch($_REQUEST['action']) { case 'update_preferences': - if ($_POST['method'] == 'admin' && !Access::check('interface','100')) { - access_denied(); - exit; - } - - if (!Core::form_verify('update_preference','post')) { - access_denied(); - exit; - } - + if ($_POST['method'] == 'admin' && !Access::check('interface','100')) { + access_denied(); + exit; + } + + if (!Core::form_verify('update_preference','post')) { + access_denied(); + exit; + } + /* Reset the Theme */ - if ($_POST['method'] == 'admin') { - $user_id = '-1'; - $fullname = _('Server'); - $_REQUEST['action'] = 'admin'; + if ($_POST['method'] == 'admin') { + $user_id = '-1'; + $fullname = _('Server'); + $_REQUEST['action'] = 'admin'; + } + else { + $user_id = $GLOBALS['user']->id; + $fullname = $GLOBALS['user']->fullname; } - else { - $user_id = $GLOBALS['user']->id; - $fullname = $GLOBALS['user']->fullname; - } /* Update and reset preferences */ - update_preferences($user_id); + update_preferences($user_id); Preference::init(); - $preferences = $GLOBALS['user']->get_preferences($user_id,$_REQUEST['tab']); + $preferences = $GLOBALS['user']->get_preferences($user_id,$_REQUEST['tab']); break; - case 'admin_update_preferences': + case 'admin_update_preferences': // Make sure only admins here - if (!Access::check('interface','100')) { - access_denied(); - exit; - } + if (!Access::check('interface','100')) { + access_denied(); + exit; + } if (!Core::form_verify('update_preference','post')) { access_denied(); exit; } - update_preferences($_POST['user_id']); - header("Location: " . Config::get('web_path') . "/admin/users.php?action=show_preferences&user_id=" . scrub_out($_POST['user_id'])); + update_preferences($_POST['user_id']); + header("Location: " . Config::get('web_path') . "/admin/users.php?action=show_preferences&user_id=" . scrub_out($_POST['user_id'])); break; - case 'admin': + case 'admin': // Make sure only admins here - if (!Access::check('interface','100')) { - access_denied(); + if (!Access::check('interface','100')) { + access_denied(); exit; - } + } $fullname= _('Server'); - $preferences = $GLOBALS['user']->get_preferences(-1,$_REQUEST['tab']); + $preferences = $GLOBALS['user']->get_preferences(-1,$_REQUEST['tab']); break; case 'user': - if (!Access::check('interface','100')) { - access_denied(); - exit; - } - $client = new User($_REQUEST['user_id']); - $fullname = $client->fullname; - $preferences = $client->get_preferences(0,$_REQUEST['tab']); - break; - case 'update_user': + if (!Access::check('interface','100')) { + access_denied(); + exit; + } + $client = new User($_REQUEST['user_id']); + $fullname = $client->fullname; + $preferences = $client->get_preferences(0,$_REQUEST['tab']); + break; + case 'update_user': // Make sure we're a user and they came from the form - if (!Access::check('interface','25') OR !Config::get('use_auth')) { - access_denied(); - exit; - } + if (!Access::check('interface','25') OR !Config::get('use_auth')) { + access_denied(); + exit; + } if (!Core::form_verify('update_user','post')) { access_denied(); @@ -98,38 +98,38 @@ switch($_REQUEST['action']) { } // Remove the value - unset($_SESSION['forms']['account']); + unset($_SESSION['forms']['account']); // Don't let them change access, or username here - unset($_POST['access']); - $_POST['username'] = $GLOBALS['user']->username; - - if (!$GLOBALS['user']->update($_POST)) { - Error::add('general',_('Error Update Failed')); - } - else { - $_REQUEST['action'] = 'confirm'; - $title = _('Updated'); - $text = _('Your Account has been updated'); - $next_url = Config::get('web_path') . '/preferences.php?tab=account'; - } + unset($_POST['access']); + $_POST['username'] = $GLOBALS['user']->username; + + if (!$GLOBALS['user']->update($_POST)) { + Error::add('general',_('Error Update Failed')); + } + else { + $_REQUEST['action'] = 'confirm'; + $title = _('Updated'); + $text = _('Your Account has been updated'); + $next_url = Config::get('web_path') . '/preferences.php?tab=account'; + } break; - default: - $fullname = $GLOBALS['user']->fullname; - $preferences = $GLOBALS['user']->get_preferences(0,$_REQUEST['tab']); + default: + $fullname = $GLOBALS['user']->fullname; + $preferences = $GLOBALS['user']->get_preferences(0,$_REQUEST['tab']); break; } // End Switch Action -show_header(); +show_header(); /** * switch on the view */ -switch ($_REQUEST['action']) { - case 'confirm': - show_confirmation($title,$text,$next_url,$cancel); +switch ($_REQUEST['action']) { + case 'confirm': + show_confirmation($title,$text,$next_url,$cancel); break; - default: + default: // Show the default preferences page require Config::get('prefix') . '/templates/show_preferences.inc.php'; break; |