username; $password = $_REQUEST['password']; $confirm_password = scrub_in($_REQUEST['confirm_password']); $fullname = scrub_in($_REQUEST['fullname']); $email = scrub_in($_REQUEST['email']); $offset = scrub_in($_REQUEST['offset_limit']); $user_id = scrub_in($_REQUEST['user_id']); switch ($action) { case 'Change Password': case 'change_password': /* Make sure the passwords match */ if ($confirm_password !== $password || empty($password) ) { $error->add_error('password',_("Error: Password Does Not Match or Empty")); show_edit_profile($username); break; } /* Make sure they have the rights */ if (!$user->has_access(25) || conf('demo_mode')) { $error->add_error('password',_("Error: Insufficient Rights")); show_edit_profile($username); break; } $this_user = new User($user_id); $this_user->update_password($password); show_confirmation("User Updated","Password updated for " . $this_user->username,"user.php?action=show_edit_profile"); break; case 'Update Profile': case 'update_user': if (!$user->has_access(25) || conf('demo_mode')) { $error->add_error('general',_("Error: Insufficient Rights")); show_edit_profile($username); break; } // no rights! $this_user = new User($user_id); $this_user->update_fullname($fullname); $this_user->update_email($email); $this_user->update_offset($offset); show_confirmation("User Updated","User Information for " . $this_user->username . " has been updated","user.php?action=show_edit_profile"); break; case 'Clear Stats': case 'clear_stats': $this_user = new User($user_id); $this_user->delete_stats(); show_confirmation("Statistics Cleared","Your Personal Statistics have been cleared","user.php?action=show_edit_profile"); break; case 'show_edit_profile': default: show_edit_profile($username); break; } // end action switch show_menu_items('Profile'); ?>