2004-10-28 02:13:59 +00:00
< ? /*
2008-04-06 19:45:09 +00:00
LibreSSL - CAcert web application
Copyright ( C ) 2004 - 2008 CAcert Inc .
2004-10-28 02:13:59 +00:00
2008-04-06 19:45:09 +00:00
This program is free software ; you can redistribute it and / or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation ; version 2 of the License .
2004-10-28 02:13:59 +00:00
2008-04-06 19:45:09 +00:00
This program is distributed in the hope that it will be useful ,
but WITHOUT ANY WARRANTY ; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
GNU General Public License for more details .
2004-10-28 02:13:59 +00:00
2008-04-06 19:45:09 +00:00
You should have received a copy of the GNU General Public License
along with this program ; if not , write to the Free Software
Foundation , Inc . , 51 Franklin Street , Fifth Floor , Boston , MA 02110 - 1301 USA
2014-06-07 09:15:39 +00:00
*/
2011-10-05 20:03:22 +00:00
include_once ( $_SESSION [ '_config' ][ 'filepath' ] . " /includes/notary.inc.php " );
2014-06-07 09:15:39 +00:00
$ticketno = '' ;
$ticketvalidation = FALSE ;
2011-10-05 20:03:22 +00:00
2014-06-07 09:15:39 +00:00
if ( isset ( $_SESSION [ 'ticketno' ])) {
$ticketno = $_SESSION [ 'ticketno' ];
$ticketvalidation = valid_ticket_number ( $ticketno );
}
if ( isset ( $_SESSION [ 'ticketmsg' ])) {
$ticketmsg = $_SESSION [ 'ticketmsg' ];
} else {
$ticketmsg = '' ;
}
2005-12-04 21:04:05 +00:00
2014-06-07 09:15:39 +00:00
// search for an account by email search, if more than one is found display list to choose
if ( intval ( array_key_exists ( 'userid' , $_REQUEST ) ? $_REQUEST [ 'userid' ] : 0 ) <= 0 )
{
2013-07-15 08:32:06 +00:00
$_REQUEST [ 'userid' ] = 0 ;
2014-06-07 09:15:39 +00:00
$emailsearch = $email = mysql_real_escape_string ( stripslashes ( $_REQUEST [ 'email' ]));
2009-03-09 23:28:18 +00:00
//Disabled to speed up the queries
//if(!strstr($email, "%"))
// $emailsearch = "%$email%";
2011-10-12 08:20:01 +00:00
// bug-975 ted+uli changes --- begin
if ( preg_match ( " /^[0-9]+ $ / " , $email )) {
2014-06-07 09:15:39 +00:00
// $email consists of digits only ==> search for IDs
// Be defensive here (outer join) if primary mail is not listed in email table
$query = " select `users`.`id` as `id`, `email`.`email` as `email`
from `users` left outer join `email` on ( `users` . `id` = `email` . `memid` )
where ( `email` . `id` = '$email' or `users` . `id` = '$email' )
and `users` . `deleted` = 0
group by `users` . `id` limit 100 " ;
2011-10-12 08:20:01 +00:00
} else {
2014-06-07 09:15:39 +00:00
// $email contains non-digits ==> search for mail addresses
// Be defensive here (outer join) if primary mail is not listed in email table
$query = " select `users`.`id` as `id`, `email`.`email` as `email`
from `users` left outer join `email` on ( `users` . `id` = `email` . `memid` )
where ( `email` . `email` like '$emailsearch'
or `users` . `email` like '$emailsearch' )
and `users` . `deleted` = 0
group by `users` . `id` limit 100 " ;
2011-10-12 08:20:01 +00:00
}
2013-06-26 11:02:45 +00:00
// bug-975 ted+uli changes --- end
2008-05-11 15:14:30 +00:00
$res = mysql_query ( $query );
2014-06-07 09:15:39 +00:00
if ( mysql_num_rows ( $res ) > 1 ) {
2004-10-28 02:13:59 +00:00
?>
2014-06-07 09:15:39 +00:00
< table align = " center " valign = " middle " border = " 0 " cellspacing = " 0 " cellpadding = " 0 " class = " wrapper " >
< tr >
< td colspan = " 5 " class = " title " >< ? = _ ( " Select Specific Account Details " ) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " User ID " ) ?> </td>
< td class = " DataTD " >< ? = _ ( " Email " ) ?> </td>
</ tr >
2006-08-07 18:34:48 +00:00
< ?
2014-06-07 09:15:39 +00:00
while ( $row = mysql_fetch_assoc ( $res ))
2006-08-07 18:34:48 +00:00
{
?>
2014-06-07 09:15:39 +00:00
< tr >
< td class = " DataTD " >< a href = " account.php?id=43&userid=<?=intval( $row['id'] )?> " >< ? = intval ( $row [ 'id' ]) ?> </a></td>
< td class = " DataTD " >< a href = " account.php?id=43&userid=<?=intval( $row['id'] )?> " >< ? = sanitizeHTML ( $row [ 'email' ]) ?> </a></td>
</ tr >
2006-08-07 18:34:48 +00:00
< ?
}
2014-06-07 09:15:39 +00:00
if ( mysql_num_rows ( $res ) >= 100 ) {
2006-08-07 18:34:48 +00:00
?>
2014-06-07 09:15:39 +00:00
< tr >
< td class = " DataTD " colspan = " 2 " >< ? = _ ( " Only the first 100 rows are displayed. " ) ?> </td>
</ tr >
2006-08-12 19:39:00 +00:00
< ?
2014-06-07 09:15:39 +00:00
} else {
2006-08-12 19:39:00 +00:00
?>
2014-06-07 09:15:39 +00:00
< tr >
< td class = " DataTD " colspan = " 2 " >< ? printf ( _ ( " %s rows displayed. " ), mysql_num_rows ( $res )); ?> </td>
</ tr >
2004-12-02 11:34:07 +00:00
< ?
2014-06-07 09:15:39 +00:00
}
2011-10-12 08:20:01 +00:00
?>
2014-06-07 09:15:39 +00:00
</ table >< br >< br >
2013-06-26 11:02:45 +00:00
< ?
2014-06-07 09:15:39 +00:00
} elseif ( mysql_num_rows ( $res ) == 1 ) {
$row = mysql_fetch_assoc ( $res );
$_REQUEST [ 'userid' ] = $row [ 'id' ];
} else {
printf ( _ ( " No users found matching %s " ), sanitizeHTML ( $email ));
}
}
// display user information for given user id
if ( intval ( $_REQUEST [ 'userid' ]) > 0 ) {
$userid = intval ( $_REQUEST [ 'userid' ]);
$res = get_user_data ( $userid );
if ( mysql_num_rows ( $res ) <= 0 ) {
echo _ ( " I'm sorry, the user you were looking for seems to have disappeared! Bad things are afoot! " );
} else {
$row = mysql_fetch_assoc ( $res );
$query = " select sum(`points`) as `points` from `notary` where `to`=' " . intval ( $row [ 'id' ]) . " ' and `deleted` = 0 " ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$alerts = get_alerts ( intval ( $row [ 'id' ]));
2009-05-21 22:46:07 +00:00
2014-06-07 09:15:39 +00:00
//display account data
2011-10-05 20:03:22 +00:00
2014-06-07 09:15:39 +00:00
//deletes an assurance
if ( array_key_exists ( 'assurance' , $_REQUEST ) && $_REQUEST [ 'assurance' ] > 0 && $ticketvalidation == true )
{
if ( ! write_se_log ( $userid , $_SESSION [ 'profile' ][ 'id' ], 'SE assurance revoke' , $ticketno )) {
$ticketmsg = _ ( " Writing to the admin log failed. Can't continue. " );
} else {
$assurance = intval ( $_REQUEST [ 'assurance' ]);
$trow = 0 ;
$res = mysql_query ( " select `to` from `notary` where `id`=' " . intval ( $assurance ) . " ' and `deleted` = 0 " );
if ( $res ) {
$trow = mysql_fetch_assoc ( $res );
if ( $trow ) {
mysql_query ( " update `notary` set `deleted`=NOW() where `id`=' " . intval ( $assurance ) . " ' " );
fix_assurer_flag ( $trow [ 'to' ]);
}
}
}
} elseif ( array_key_exists ( 'assurance' , $_REQUEST ) && $_REQUEST [ 'assurance' ] > 0 && $ticketvalidation == FALSE ) {
$ticketmsg = _ ( 'No assurance revoked. Ticket number is missing!' );
}
2009-05-21 22:46:07 +00:00
2014-06-07 09:15:39 +00:00
//Ticket number
2004-10-31 07:08:42 +00:00
?>
2011-10-05 20:03:22 +00:00
2014-06-07 09:15:39 +00:00
< form method = " post " action = " account.php?id=43&userid=<?=intval( $_REQUEST['userid'] )?> " >
< table align = " center " valign = " middle " border = " 0 " cellspacing = " 0 " cellpadding = " 0 " class = " wrapper " >
< tr >
< td colspan = " 2 " class = " title " >< ? = _ ( 'Ticket handling' ) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( 'Ticket no' ) ?> :</td>
< td class = " DataTD " >< input type = " text " name = " ticketno " value = " <?=sanitizeHTML( $ticketno )?> " /></ td >
</ tr >
< tr >
< td colspan = " 2 " class = " DataTDError " >< ? = $ticketmsg ?> </td><?php $_SESSION['ticketmsg']='' ?>
</ tr >
< tr >
< td colspan = " 2 " >< input type = " submit " value = " <?=_('Set ticket number') ?> " ></ td >
</ tr >
</ table >
</ form >
< br />
<!-- display data table -->
< table align = " center " valign = " middle " border = " 0 " cellspacing = " 0 " cellpadding = " 0 " class = " wrapper " >
< tr >
< td colspan = " 5 " class = " title " >< ? printf ( _ ( " %s's Account Details " ), sanitizeHTML ( $row [ 'email' ])); ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Email " ) ?> :</td>
< td class = " DataTD " >< ? = sanitizeHTML ( $row [ 'email' ]) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " First Name " ) ?> :</td>
< td class = " DataTD " >< form method = " post " action = " account.php " onSubmit = " if(!confirm('<?=_( " Are you sure you want to modify this DOB and / or last name ? " )?>')) return false; " >
< input type = " hidden " name = " csrf " value = " <?=make_csrf('admchangepers')?> " />
< input type = " text " name = " fname " value = " <?=sanitizeHTML( $row['fname'] )?> " >
</ td >
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Middle Name " ) ?> :</td>
< td class = " DataTD " >< input type = " text " name = " mname " value = " <?=sanitizeHTML( $row['mname'] )?> " ></ td >
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Last Name " ) ?> :</td>
< td class = " DataTD " > < input type = " hidden " name = " oldid " value = " 43 " >
< input type = " hidden " name = " action " value = " updatedob " >
< input type = " hidden " name = " userid " value = " <?=intval( $userid )?> " >
< input type = " text " name = " lname " value = " <?=sanitizeHTML( $row['lname'] )?> " >
</ td >
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Suffix " ) ?> :</td>
< td class = " DataTD " >< input type = " text " name = " suffix " value = " <?=sanitizeHTML( $row['suffix'] )?> " ></ td >
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Date of Birth " ) ?> :</td>
< td class = " DataTD " >
< ?
$year = intval ( substr ( $row [ 'dob' ], 0 , 4 ));
$month = intval ( substr ( $row [ 'dob' ], 5 , 2 ));
$day = intval ( substr ( $row [ 'dob' ], 8 , 2 ));
?>
< nobr >
< select name = " day " >
< ?
for ( $i = 1 ; $i <= 31 ; $i ++ ) {
echo " <option " ;
if ( $day == $i ) {
echo " selected='selected' " ;
}
echo " > $i </option> " ;
}
?>
</ select >
< select name = " month " >
< ?
for ( $i = 1 ; $i <= 12 ; $i ++ ) {
echo " <option value=' $i ' " ;
if ( $month == $i )
echo " selected='selected' " ;
echo " > " . ucwords ( strftime ( " %B " , mktime ( 0 , 0 , 0 , $i , 1 , date ( " Y " )))) . " </option> " ;
}
?>
</ select >
< input type = " text " name = " year " value = " <?= $year ?> " size = " 4 " >
< input type = " submit " value = " Go " >
< input type = " hidden " name = " ticketno " value = " <?=sanitizeHTML( $ticketno )?> " />
</ form >
</ nobr >
</ td >
</ tr >
< ? // list of flags ?>
< tr >
< td class = " DataTD " >< ? = _ ( " CCA accepted " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=57&userid=<?=intval( $row['id'] )?> " >< ? = intval ( get_user_agreement_status ( $row [ 'id' ], 'CCA' )) ? _ ( " Yes " ) : _ ( " No " ) ?> </a></td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Trainings " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=55&userid=<?=intval( $row['id'] )?> " > show </ a ></ td >
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Is Assurer " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=43&assurer=<?=intval( $row['id'] )?>&csrf=<?=make_csrf('admsetassuret')?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = intval ( $row [ 'assurer' ]) ?> </a></td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Blocked Assurer " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=43&assurer_blocked=<?=intval( $row['id'] )?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = intval ( $row [ 'assurer_blocked' ]) ?> </a></td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Account Locking " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=43&locked=<?=intval( $row['id'] )?>&csrf=<?=make_csrf('admactlock')?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = intval ( $row [ 'locked' ]) ?> </a></td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Code Signing " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=43&codesign=<?=intval( $row['id'] )?>&csrf=<?=make_csrf('admcodesign')?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = intval ( $row [ 'codesign' ]) ?> </a></td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Org Assurer " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=43&orgadmin=<?=intval( $row['id'] )?>&csrf=<?=make_csrf('admorgadmin')?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = intval ( $row [ 'orgadmin' ]) ?> </a></td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " TTP Admin " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=43&ttpadmin=<?=intval( $row['id'] )?>&csrf=<?=make_csrf('admttpadmin')?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = intval ( $row [ 'ttpadmin' ]) ?> </a></td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Location Admin " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=43&locadmin=<?=intval( $row['id'] )?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = $row [ 'locadmin' ] ?> </a></td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Admin " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=43&admin=<?=intval( $row['id'] )?>&csrf=<?=make_csrf('admsetadmin')?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = intval ( $row [ 'admin' ]) ?> </a></td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Ad Admin " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=43&adadmin=<?=intval( $row['id'] )?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = intval ( $row [ 'adadmin' ]) ?> </a> (0 = none, 1 = submit, 2 = approve)</td>
</ tr >
<!-- presently not needed
< tr >
< td class = " DataTD " >< ? = _ ( " Tverify Account " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=43&tverify=<?=intval( $row['id'] )?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = intval ( $row [ 'tverify' ]) ?> </a></td>
</ tr >
-->
< tr >
< td class = " DataTD " >< ? = _ ( " General Announcements " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=43&general=<?=intval( $row['id'] )?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = intval ( $alerts [ 'general' ]) ?> </a></td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Country Announcements " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=43&country=<?=intval( $row['id'] )?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = intval ( $alerts [ 'country' ]) ?> </a></td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Regional Announcements " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=43&regional=<?=intval( $row['id'] )?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = intval ( $alerts [ 'regional' ]) ?> </a></td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Within 200km Announcements " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=43&radius=<?=intval( $row['id'] )?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = intval ( $alerts [ 'radius' ]) ?> </a></td>
</ tr >
< ? //change password, view secret questions and delete account section ?>
< tr >
< td class = " DataTD " >< ? = _ ( " Change Password " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=44&userid=<?=intval( $row['id'] )?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = _ ( " Change Password " ) ?> </a></td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Delete Account " ) ?> :</td>
< td class = " DataTD " >< a href = " account.php?id=50&userid=<?=intval( $row['id'] )?>&csrf=<?=make_csrf('admdelaccount')?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = _ ( " Delete Account " ) ?> </a></td>
</ tr >
< ?
// This is intensionally a $_GET for audit purposes. DO NOT CHANGE!!!
if ( array_key_exists ( 'showlostpw' , $_GET ) && $_GET [ 'showlostpw' ] == " yes " && $ticketvalidation == true ) {
if ( ! write_se_log ( $userid , $_SESSION [ 'profile' ][ 'id' ], 'SE view lost password information' , $ticketno )) {
?>
< tr >
< td class = " DataTD " colspan = " 2 " >< ? = _ ( " Writing to the admin log failed. Can't continue. " ) ?> </td>
</ tr >
< tr >
< td class = " DataTD " colspan = " 2 " >< a href = " account.php?id=43&userid=<?=intval( $row['id'] )?>&showlostpw=yes&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = _ ( " Show Lost Password Details " ) ?> </a></td>
</ tr >
< ?
} else {
?>
< tr >
< td class = " DataTD " >< ? = _ ( " Lost Password " ) ?> - Q1:</td>
< td class = " DataTD " >< ? = sanitizeHTML ( $row [ 'Q1' ]) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Lost Password " ) ?> - A1:</td>
< td class = " DataTD " >< ? = sanitizeHTML ( $row [ 'A1' ]) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Lost Password " ) ?> - Q2:</td>
< td class = " DataTD " >< ? = sanitizeHTML ( $row [ 'Q2' ]) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Lost Password " ) ?> - A2:</td>
< td class = " DataTD " >< ? = sanitizeHTML ( $row [ 'A2' ]) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Lost Password " ) ?> - Q3:</td>
< td class = " DataTD " >< ? = sanitizeHTML ( $row [ 'Q3' ]) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Lost Password " ) ?> - A3:</td>
< td class = " DataTD " >< ? = sanitizeHTML ( $row [ 'A3' ]) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Lost Password " ) ?> - Q4:</td>
< td class = " DataTD " >< ? = sanitizeHTML ( $row [ 'Q4' ]) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Lost Password " ) ?> - A4:</td>
< td class = " DataTD " >< ? = sanitizeHTML ( $row [ 'A4' ]) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Lost Password " ) ?> - Q5:</td>
< td class = " DataTD " >< ? = sanitizeHTML ( $row [ 'Q5' ]) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Lost Password " ) ?> - A5:</td>
< td class = " DataTD " >< ? = sanitizeHTML ( $row [ 'A5' ]) ?> </td>
</ tr >
< ?
}
} elseif ( array_key_exists ( 'showlostpw' , $_GET ) && $_GET [ 'showlostpw' ] == " yes " && $ticketvalidation == false ) {
?>
< tr >
< td class = " DataTD " colspan = " 2 " >< ? = _ ( 'No access granted. Ticket number is missing' ) ?> </td>
</ tr >
< tr >
< td class = " DataTD " colspan = " 2 " >< a href = " account.php?id=43&userid=<?=intval( $row['id'] )?>&showlostpw=yes&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = _ ( " Show Lost Password Details " ) ?> </a></td>
</ tr >
< ?
} else {
?>
< tr >
< td class = " DataTD " colspan = " 2 " >< a href = " account.php?id=43&userid=<?=intval( $row['id'] )?>&showlostpw=yes&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = _ ( " Show Lost Password Details " ) ?> </a></td>
</ tr >
< ? }
// list assurance points
?>
< tr >
< td class = " DataTD " >< ? = _ ( " Assurance Points " ) ?> :</td>
< td class = " DataTD " >< ? = intval ( $drow [ 'points' ]) ?> </td>
</ tr >
< ?
// show account history
?>
< tr >
< td class = " DataTD " colspan = " 2 " >< a href = " account.php?id=59&oldid=43&userid=<?=intval( $row['id'] )?>&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = _ ( 'Show account history' ) ?> </a></td>
</ tr >
</ table >
< br />
< ?
//list secondary email addresses
$dres = get_email_addresses ( intval ( $row [ 'id' ]), $row [ 'email' ]);
if ( mysql_num_rows ( $dres ) > 0 ) {
?>
< table align = " center " valign = " middle " border = " 0 " cellspacing = " 0 " cellpadding = " 0 " class = " wrapper " >
< tr >
< td colspan = " 5 " class = " title " >< ? = _ ( " Alternate Verified Email Addresses " ) ?> </td>
</ tr >
< ?
while ( $drow = mysql_fetch_assoc ( $dres )) {
?>
< tr >
< td class = " DataTD " >< ? = _ ( " Secondary Emails " ) ?> :</td>
< td class = " DataTD " >< ? = sanitizeHTML ( $drow [ 'email' ]) ?> </td>
</ tr >
< ?
}
?>
</ table >
< br />
< ?
}
// list of domains
$dres = get_domains ( intval ( $row [ 'id' ]));
if ( mysql_num_rows ( $dres ) > 0 ) {
?>
< table align = " center " valign = " middle " border = " 0 " cellspacing = " 0 " cellpadding = " 0 " class = " wrapper " >
< tr >
< td colspan = " 5 " class = " title " >< ? = _ ( " Verified Domains " ) ?> </td>
</ tr >
< ?
while ( $drow = mysql_fetch_assoc ( $dres )) {
?>
< tr >
< td class = " DataTD " >< ? = _ ( " Domain " ) ?> :</td>
< td class = " DataTD " >< ? = sanitizeHTML ( $drow [ 'domain' ]) ?> </td>
</ tr >
< ?
}
?>
</ table >
< br />
< ?
}
?>
< ? // Begin - Debug infos ?>
< table align = " center " valign = " middle " border = " 0 " cellspacing = " 0 " cellpadding = " 0 " class = " wrapper " >
< tr >
< td colspan = " 2 " class = " title " >< ? = _ ( " Account State " ) ?> </td>
</ tr >
< ?
// --- bug-975 begin ---
// potential db inconsistency like in a20110804.1
// Admin console -> don't list user account
// User login -> impossible
// Assurer, assure someone -> user displayed
/* regular user account search with regular settings
--- Admin Console find user query
$query = " select `users`.`id` as `id`, `email`.`email` as `email` from `users`,`email`
where `users` . `id` = `email` . `memid` and
( `email` . `email` like '$emailsearch' or `email` . `id` = '$email' or `users` . `id` = '$email' ) and
`email` . `hash` = '' and `email` . `deleted` = 0 and `users` . `deleted` = 0
group by `users` . `id` limit 100 " ;
=> requirements
1. email . hash = ''
2. email . deleted = 0
3. users . deleted = 0
4. email . email = primary - email ( ? ? ? ) or ' d
not covered by admin console find user routine , but may block users login
5. users . verified = 0 | 1
further " special settings "
6. users . locked ( setting displayed in display form )
7. users . assurer_blocked ( setting displayed in display form )
--- User login user query
select * from `users` where `email` = '$email' and ( `password` = old_password ( '$pword' ) or `password` = sha1 ( '$pword' ) or
`password` = password ( '$pword' )) and `verified` = 1 and `deleted` = 0 and `locked` = 0
=> requirements
1. users . verified = 1
2. users . deleted = 0
3. users . locked = 0
4. users . email = primary - email
--- Assurer , assure someone find user query
select * from `users` where `email` = '".mysql_real_escape_string(stripslashes($_POST[' email ']))."'
and `deleted` = 0
=> requirements
1. users . deleted = 0
2. users . email = primary - email
Admin User Assurer
bit Console Login assure someone
1. email . hash = '' Yes No No
2. email . deleted = 0 Yes No No
3. users . deleted = 0 Yes Yes Yes
4. users . verified = 1 No Yes No
5. users . locked = 0 No Yes No
6. users . email = prim - email No Yes Yes
7. email . email = prim - email Yes No No
full usable account needs all 7 requirements fulfilled
so if one setting isn ' t set / cleared there is an inconsistency either way
if eg email . email is not avail , admin console cannot open user info
but user can login and assurer can display user info
if user verified is not set to 1 , admin console displays user record
but user cannot login , but assurer can search for the user and the data displays
consistency check :
1. search primary - email in users . email
2. search primary - email in email . email
3. userid = email . memid
4. check settings from table 1. - 5.
*/
$inconsistency = 0 ;
$inconsistencydisp = " " ;
$inccause = " " ;
// current userid intval($row['id'])
$query = " select `email` as `uemail`, `deleted` as `udeleted`, `verified`, `locked`
from `users` where `id` = '".intval($row[' id '])."' " ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$uemail = $drow [ 'uemail' ];
$udeleted = $drow [ 'udeleted' ];
$uverified = $drow [ 'verified' ];
$ulocked = $drow [ 'locked' ];
$query = " select `hash`, `email` as `eemail` from `email`
where `memid` = '".intval($row[' id '])."' and
`email` = '".$uemail."' and
`deleted` = 0 " ;
$dres = mysql_query ( $query );
if ( $drow = mysql_fetch_assoc ( $dres )) {
$drow [ 'edeleted' ] = 0 ;
} else {
// try if there are deleted entries
$query = " select `hash`, `deleted` as `edeleted`, `email` as `eemail` from `email`
where `memid` = '".intval($row[' id '])."' and
`email` = '".$uemail."' " ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
}
if ( $drow ) {
$eemail = $drow [ 'eemail' ];
$edeleted = $drow [ 'edeleted' ];
$ehash = $drow [ 'hash' ];
if ( $udeleted != 0 ) {
$inconsistency += 1 ;
$inccause .= ( empty ( $inccause ) ? " " : " <br> " ) . _ ( " Users record set to deleted " );
}
if ( $uverified != 1 ) {
$inconsistency += 2 ;
$inccause .= ( empty ( $inccause ) ? " " : " <br> " ) . _ ( " Users record verified not set " );
}
if ( $ulocked != 0 ) {
$inconsistency += 4 ;
$inccause .= ( empty ( $inccause ) ? " " : " <br> " ) . _ ( " Users record locked set " );
}
if ( $edeleted != 0 ) {
$inconsistency += 8 ;
$inccause .= ( empty ( $inccause ) ? " " : " <br> " ) . _ ( " Email record set deleted " );
}
if ( $ehash != '' ) {
$inconsistency += 16 ;
$inccause .= ( empty ( $inccause ) ? " " : " <br> " ) . _ ( " Email record hash not unset " );
}
} else {
$inconsistency = 32 ;
$inccause = _ ( " Prim. email, Email record doesn't exist " );
}
if ( $inconsistency > 0 ) {
// $inconsistencydisp = _("Yes");
?>
< tr >
< td class = " DataTD " >< ? = _ ( " Account inconsistency " ) ?> :</td>
< td class = " DataTD " >< ? = $inccause ?> <br>code: <?=intval($inconsistency)?></td>
</ tr >
< tr >
< td colspan = " 2 " class = " DataTD " style = " max-width: 75ex; " >
< ? = _ ( " Account inconsistency can cause problems in daily account operations and needs to be fixed manually through arbitration/critical team. " ) ?>
</ td >
</ tr >
< ?
}
// --- bug-975 end ---
?>
</ table >
< br />
< ?
// End - Debug infos
// certificate overview
?>
< table align = " center " valign = " middle " border = " 0 " cellspacing = " 0 " cellpadding = " 0 " class = " wrapper " >
< tr >
< td colspan = " 6 " class = " title " >< ? = _ ( " Certificates " ) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< ? = _ ( " Cert Type " ) ?> :</td>
< td class = " DataTD " >< ? = _ ( " Total " ) ?> </td>
< td class = " DataTD " >< ? = _ ( " Valid " ) ?> </td>
< td class = " DataTD " >< ? = _ ( " Expired " ) ?> </td>
< td class = " DataTD " >< ? = _ ( " Revoked " ) ?> </td>
< td class = " DataTD " >< ? = _ ( " Latest Expire " ) ?> </td>
</ tr >
<!-- server certificates -->
< tr >
< td class = " DataTD " >< ? = _ ( " Server " ) ?> :</td>
< ?
$query = "
select COUNT ( * ) as `total` ,
MAX ( `domaincerts` . `expire` ) as `maxexpire`
from `domains` inner join `domaincerts`
on `domains` . `id` = `domaincerts` . `domid`
where `domains` . `memid` = '".intval($row[' id '])."'
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$total = $drow [ 'total' ];
$maxexpire = " 0000-00-00 00:00:00 " ;
if ( $drow [ 'maxexpire' ]) {
$maxexpire = $drow [ 'maxexpire' ];
}
if ( $total > 0 ) {
$query = "
select COUNT ( * ) as `valid`
from `domains` inner join `domaincerts`
on `domains` . `id` = `domaincerts` . `domid`
where `domains` . `memid` = '".intval($row[' id '])."'
and `revoked` = '0000-00-00 00:00:00'
and `expire` > NOW ()
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$valid = $drow [ 'valid' ];
$query = "
select COUNT ( * ) as `expired`
from `domains` inner join `domaincerts`
on `domains` . `id` = `domaincerts` . `domid`
where `domains` . `memid` = '".intval($row[' id '])."'
and `expire` <= NOW ()
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$expired = $drow [ 'expired' ];
$query = "
select COUNT ( * ) as `revoked`
from `domains` inner join `domaincerts`
on `domains` . `id` = `domaincerts` . `domid`
where `domains` . `memid` = '".intval($row[' id '])."'
and `revoked` != '0000-00-00 00:00:00'
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$revoked = $drow [ 'revoked' ];
?>
< td class = " DataTD " >< ? = intval ( $total ) ?> </td>
< td class = " DataTD " >< ? = intval ( $valid ) ?> </td>
< td class = " DataTD " >< ? = intval ( $expired ) ?> </td>
< td class = " DataTD " >< ? = intval ( $revoked ) ?> </td>
< td class = " DataTD " >< ? = ( $maxexpire != " 0000-00-00 00:00:00 " ) ? substr ( $maxexpire , 0 , 10 ) : _ ( " Pending " ) ?> </td>
< ?
} else { // $total > 0
?>
< td colspan = " 5 " class = " DataTD " >< ? = _ ( " None " ) ?> </td>
< ?
}
?>
</ tr >
<!-- client certificates -->
< tr >
< td class = " DataTD " >< ? = _ ( " Client " ) ?> :</td>
< ?
$query = "
select COUNT ( * ) as `total` , MAX ( `expire` ) as `maxexpire`
from `emailcerts`
where `memid` = '".intval($row[' id '])."'
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$total = $drow [ 'total' ];
$maxexpire = " 0000-00-00 00:00:00 " ;
if ( $drow [ 'maxexpire' ]) {
$maxexpire = $drow [ 'maxexpire' ];
}
if ( $total > 0 ) {
$query = "
select COUNT ( * ) as `valid`
from `emailcerts`
where `memid` = '".intval($row[' id '])."'
and `revoked` = '0000-00-00 00:00:00'
and `expire` > NOW ()
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$valid = $drow [ 'valid' ];
$query = "
select COUNT ( * ) as `expired`
from `emailcerts`
where `memid` = '".intval($row[' id '])."'
and `expire` <= NOW ()
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$expired = $drow [ 'expired' ];
$query = "
select COUNT ( * ) as `revoked`
from `emailcerts`
where `memid` = '".intval($row[' id '])."'
and `revoked` != '0000-00-00 00:00:00'
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$revoked = $drow [ 'revoked' ];
?>
< td class = " DataTD " >< ? = intval ( $total ) ?> </td>
< td class = " DataTD " >< ? = intval ( $valid ) ?> </td>
< td class = " DataTD " >< ? = intval ( $expired ) ?> </td>
< td class = " DataTD " >< ? = intval ( $revoked ) ?> </td>
< td class = " DataTD " >< ? = ( $maxexpire != " 0000-00-00 00:00:00 " ) ? substr ( $maxexpire , 0 , 10 ) : _ ( " Pending " ) ?> </td>
< ?
} else { // $total > 0
?>
< td colspan = " 5 " class = " DataTD " >< ? = _ ( " None " ) ?> </td>
< ?
}
?>
</ tr >
<!-- gpg certificates -->
< tr >
< td class = " DataTD " >< ? = _ ( " GPG " ) ?> :</td>
< ?
$query = "
select COUNT ( * ) as `total` , MAX ( `expire` ) as `maxexpire`
from `gpg`
where `memid` = '".intval($row[' id '])."'
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$total = $drow [ 'total' ];
$maxexpire = " 0000-00-00 00:00:00 " ;
if ( $drow [ 'maxexpire' ]) {
$maxexpire = $drow [ 'maxexpire' ];
}
if ( $total > 0 ) {
$query = "
select COUNT ( * ) as `valid`
from `gpg`
where `memid` = '".intval($row[' id '])."'
and `expire` > NOW ()
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$valid = $drow [ 'valid' ];
$query = "
select COUNT ( * ) as `expired`
from `gpg`
where `memid` = '".intval($row[' id '])."'
and `expire` <= NOW ()
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$expired = $drow [ 'expired' ];
?>
< td class = " DataTD " >< ? = intval ( $total ) ?> </td>
< td class = " DataTD " >< ? = intval ( $valid ) ?> </td>
< td class = " DataTD " >< ? = intval ( $expired ) ?> </td>
< td class = " DataTD " ></ td >
< td class = " DataTD " >< ? = ( $maxexpire != " 0000-00-00 00:00:00 " ) ? substr ( $maxexpire , 0 , 10 ) : _ ( " Pending " ) ?> </td>
< ?
} else { // $total > 0
?>
< td colspan = " 5 " class = " DataTD " >< ? = _ ( " None " ) ?> </td>
< ?
}
?>
</ tr >
<!-- org server certificates -->
< tr >
< td class = " DataTD " >< a href = " account.php?id=58&userid=<?=intval( $row['id'] )?> " >< ? = _ ( " Org Server " ) ?> </a>:</td>
< ?
$query = "
select COUNT ( * ) as `total` ,
MAX ( `orgcerts` . `expire` ) as `maxexpire`
from `orgdomaincerts` as `orgcerts` inner join `org`
on `orgcerts` . `orgid` = `org` . `orgid`
where `org` . `memid` = '".intval($row[' id '])."'
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$total = $drow [ 'total' ];
$maxexpire = " 0000-00-00 00:00:00 " ;
if ( $drow [ 'maxexpire' ]) {
$maxexpire = $drow [ 'maxexpire' ];
}
if ( $total > 0 ) {
$query = "
select COUNT ( * ) as `valid`
from `orgdomaincerts` as `orgcerts` inner join `org`
on `orgcerts` . `orgid` = `org` . `orgid`
where `org` . `memid` = '".intval($row[' id '])."'
and `orgcerts` . `revoked` = '0000-00-00 00:00:00'
and `orgcerts` . `expire` > NOW ()
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$valid = $drow [ 'valid' ];
$query = "
select COUNT ( * ) as `expired`
from `orgdomaincerts` as `orgcerts` inner join `org`
on `orgcerts` . `orgid` = `org` . `orgid`
where `org` . `memid` = '".intval($row[' id '])."'
and `orgcerts` . `expire` <= NOW ()
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$expired = $drow [ 'expired' ];
$query = "
select COUNT ( * ) as `revoked`
from `orgdomaincerts` as `orgcerts` inner join `org`
on `orgcerts` . `orgid` = `org` . `orgid`
where `org` . `memid` = '".intval($row[' id '])."'
and `orgcerts` . `revoked` != '0000-00-00 00:00:00'
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$revoked = $drow [ 'revoked' ];
?>
< td class = " DataTD " >< ? = intval ( $total ) ?> </td>
< td class = " DataTD " >< ? = intval ( $valid ) ?> </td>
< td class = " DataTD " >< ? = intval ( $expired ) ?> </td>
< td class = " DataTD " >< ? = intval ( $revoked ) ?> </td>
< td class = " DataTD " >< ? = ( $maxexpire != " 0000-00-00 00:00:00 " ) ? substr ( $maxexpire , 0 , 10 ) : _ ( " Pending " ) ?> </td>
< ?
} else { // $total > 0
?>
< td colspan = " 5 " class = " DataTD " >< ? = _ ( " None " ) ?> </td>
< ?
}
?>
</ tr >
<!-- org client certificates -->
< tr >
< td class = " DataTD " >< ? = _ ( " Org Client " ) ?> :</td>
< ?
$query = "
select COUNT ( * ) as `total` ,
MAX ( `orgcerts` . `expire` ) as `maxexpire`
from `orgemailcerts` as `orgcerts` inner join `org`
on `orgcerts` . `orgid` = `org` . `orgid`
where `org` . `memid` = '".intval($row[' id '])."'
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$total = $drow [ 'total' ];
$maxexpire = " 0000-00-00 00:00:00 " ;
if ( $drow [ 'maxexpire' ]) {
$maxexpire = $drow [ 'maxexpire' ];
}
if ( $total > 0 ) {
$query = "
select COUNT ( * ) as `valid`
from `orgemailcerts` as `orgcerts` inner join `org`
on `orgcerts` . `orgid` = `org` . `orgid`
where `org` . `memid` = '".intval($row[' id '])."'
and `orgcerts` . `revoked` = '0000-00-00 00:00:00'
and `orgcerts` . `expire` > NOW ()
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$valid = $drow [ 'valid' ];
$query = "
select COUNT ( * ) as `expired`
from `orgemailcerts` as `orgcerts` inner join `org`
on `orgcerts` . `orgid` = `org` . `orgid`
where `org` . `memid` = '".intval($row[' id '])."'
and `orgcerts` . `expire` <= NOW ()
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$expired = $drow [ 'expired' ];
$query = "
select COUNT ( * ) as `revoked`
from `orgemailcerts` as `orgcerts` inner join `org`
on `orgcerts` . `orgid` = `org` . `orgid`
where `org` . `memid` = '".intval($row[' id '])."'
and `orgcerts` . `revoked` != '0000-00-00 00:00:00'
" ;
$dres = mysql_query ( $query );
$drow = mysql_fetch_assoc ( $dres );
$revoked = $drow [ 'revoked' ];
?>
< td class = " DataTD " >< ? = intval ( $total ) ?> </td>
< td class = " DataTD " >< ? = intval ( $valid ) ?> </td>
< td class = " DataTD " >< ? = intval ( $expired ) ?> </td>
< td class = " DataTD " >< ? = intval ( $revoked ) ?> </td>
< td class = " DataTD " >< ? = ( $maxexpire != " 0000-00-00 00:00:00 " ) ? substr ( $maxexpire , 0 , 10 ) : _ ( " Pending " ) ?> </td>
< ?
} else { // $total > 0
?>
< td colspan = " 5 " class = " DataTD " >< ? = _ ( " None " ) ?> </td>
< ?
}
?>
</ tr >
< tr >
< td colspan = " 6 " class = " title " >
< form method = " post " action = " account.php " onSubmit = " if(!confirm('<?=_( " Are you sure you want to revoke all private certificates ? " )?>')) return false; " >
< input type = " hidden " name = " action " value = " revokecert " >
< input type = " hidden " name = " oldid " value = " 43 " >
< input type = " hidden " name = " userid " value = " <?=intval( $userid )?> " >
< input type = " submit " value = " <?=_('revoke certificates')?> " >
< input type = " hidden " name = " ticketno " value = " <?=sanitizeHTML( $ticketno )?> " />
</ form >
</ td >
</ tr >
</ table >
< br />
< ? // list assurances ?>
< table align = " center " valign = " middle " border = " 0 " cellspacing = " 0 " cellpadding = " 0 " class = " wrapper " >
< tr >
< td class = " DataTD " >
< a href = " account.php?id=43&userid=<?=intval( $row['id'] )?>&shownotary=assuredto&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = _ ( " Show Assurances the user got " ) ?> </a>
( < a href = " account.php?id=43&userid=<?=intval( $row['id'] )?>&shownotary=assuredto15&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = _ ( " New calculation " ) ?> </a>)
</ td >
</ tr >
< tr >
< td class = " DataTD " >
< a href = " account.php?id=43&userid=<?=intval( $row['id'] )?>&shownotary=assuredby&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = _ ( " Show Assurances the user gave " ) ?> </a>
( < a href = " account.php?id=43&userid=<?=intval( $row['id'] )?>&shownotary=assuredby15&ticketno=<?=sanitizeHTML( $ticketno )?> " >< ? = _ ( " New calculation " ) ?> </a>)
</ td >
</ tr >
</ table >
< ?
// if(array_key_exists('assuredto',$_GET) && $_GET['assuredto'] == "yes") {
function showassuredto ( $ticketno )
{
?>
< table align = " center " valign = " middle " border = " 0 " cellspacing = " 0 " cellpadding = " 0 " class = " wrapper " >
< tr >
< td colspan = " 8 " class = " title " >< ? = _ ( " Assurance Points " ) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< b >< ? = _ ( " ID " ) ?> </b></td>
< td class = " DataTD " >< b >< ? = _ ( " Date " ) ?> </b></td>
< td class = " DataTD " >< b >< ? = _ ( " Who " ) ?> </b></td>
< td class = " DataTD " >< b >< ? = _ ( " Email " ) ?> </b></td>
< td class = " DataTD " >< b >< ? = _ ( " Points " ) ?> </b></td>
< td class = " DataTD " >< b >< ? = _ ( " Location " ) ?> </b></td>
< td class = " DataTD " >< b >< ? = _ ( " Method " ) ?> </b></td>
< td class = " DataTD " >< b >< ? = _ ( " Revoke " ) ?> </b></td>
</ tr >
< ?
$query = " select * from `notary` where `to`=' " . intval ( $_GET [ 'userid' ]) . " ' and `deleted` = 0 " ;
$dres = mysql_query ( $query );
$points = 0 ;
while ( $drow = mysql_fetch_assoc ( $dres )) {
$fromuser = mysql_fetch_assoc ( mysql_query ( " select * from `users` where `id`=' " . intval ( $drow [ 'from' ]) . " ' " ));
$points += $drow [ 'points' ];
?>
< tr >
< td class = " DataTD " >< ? = $drow [ 'id' ] ?> </td>
< td class = " DataTD " >< ? = sanitizeHTML ( $drow [ 'date' ]) ?> </td>
< td class = " DataTD " >< a href = " wot.php?id=9&userid=<?=intval( $drow['from'] )?> " >< ? = sanitizeHTML ( $fromuser [ 'fname' ]) . " " . sanitizeHTML ( $fromuser [ 'lname' ]) ?> </td>
< td class = " DataTD " >< a href = " account.php?id=43&userid=<?=intval( $drow['from'] )?> " >< ? = sanitizeHTML ( $fromuser [ 'email' ]) ?> </a></td>
< td class = " DataTD " >< ? = intval ( $drow [ 'points' ]) ?> </td>
< td class = " DataTD " >< ? = sanitizeHTML ( $drow [ 'location' ]) ?> </td>
< td class = " DataTD " >< ? = sanitizeHTML ( $drow [ 'method' ]) ?> </td>
< td class = " DataTD " >< a href = " account.php?id=43&userid=<?=intval( $drow['to'] )?>&assurance=<?=intval( $drow['id'] )?>&csrf=<?=make_csrf('admdelassurance')?>&ticketno=<?=sanitizeHTML( $ticketno )?> " onclick = " return confirm('<?=sprintf(_( " Are you sure you want to revoke the assurance with ID & quot ; % s & quot ; ? " ),intval( $drow['id'] ))?>'); " >< ? = _ ( " Revoke " ) ?> </a></td>
</ tr >
< ?
}
?>
< tr >
< td class = " DataTD " colspan = " 4 " >< b >< ? = _ ( " Total Points " ) ?> :</b></td>
< td class = " DataTD " >< ? = intval ( $points ) ?> </td>
< td class = " DataTD " colspan = " 3 " >& nbsp ; </ td >
</ tr >
</ table >
< ?
}
function showassuredby ( $ticketno )
{
?>
< table align = " center " valign = " middle " border = " 0 " cellspacing = " 0 " cellpadding = " 0 " class = " wrapper " >
< tr >
< td colspan = " 8 " class = " title " >< ? = _ ( " Assurance Points The User Issued " ) ?> </td>
</ tr >
< tr >
< td class = " DataTD " >< b >< ? = _ ( " ID " ) ?> </b></td>
< td class = " DataTD " >< b >< ? = _ ( " Date " ) ?> </b></td>
< td class = " DataTD " >< b >< ? = _ ( " Who " ) ?> </b></td>
< td class = " DataTD " >< b >< ? = _ ( " Email " ) ?> </b></td>
< td class = " DataTD " >< b >< ? = _ ( " Points " ) ?> </b></td>
< td class = " DataTD " >< b >< ? = _ ( " Location " ) ?> </b></td>
< td class = " DataTD " >< b >< ? = _ ( " Method " ) ?> </b></td>
< td class = " DataTD " >< b >< ? = _ ( " Revoke " ) ?> </b></td>
</ tr >
< ?
$query = " select * from `notary` where `from`=' " . intval ( $_GET [ 'userid' ]) . " ' and `deleted` = 0 " ;
$dres = mysql_query ( $query );
$points = 0 ;
while ( $drow = mysql_fetch_assoc ( $dres )) {
$fromuser = mysql_fetch_assoc ( mysql_query ( " select * from `users` where `id`=' " . intval ( $drow [ 'to' ]) . " ' " ));
$points += intval ( $drow [ 'points' ]);
?>
< tr >
< td class = " DataTD " >< ? = intval ( $drow [ 'id' ]) ?> </td>
< td class = " DataTD " >< ? = $drow [ 'date' ] ?> </td>
< td class = " DataTD " >< a href = " wot.php?id=9&userid=<?=intval( $drow['to'] )?> " >< ? = sanitizeHTML ( $fromuser [ 'fname' ] . " " . $fromuser [ 'lname' ]) ?> </td>
< td class = " DataTD " >< a href = " account.php?id=43&userid=<?=intval( $drow['to'] )?> " >< ? = sanitizeHTML ( $fromuser [ 'email' ]) ?> </a></td>
< td class = " DataTD " >< ? = intval ( $drow [ 'points' ]) ?> </td>
< td class = " DataTD " >< ? = sanitizeHTML ( $drow [ 'location' ]) ?> </td>
< td class = " DataTD " >< ? = sanitizeHTML ( $drow [ 'method' ]) ?> </td>
< td class = " DataTD " >< a href = " account.php?id=43&userid=<?=intval( $drow['from'] )?>&assurance=<?=intval( $drow['id'] )?>&csrf=<?=make_csrf('admdelassurance')?>&ticketno=<?=sanitizeHTML( $ticketno )?> " onclick = " return confirm('<?=sprintf(_( " Are you sure you want to revoke the assurance with ID & quot ; % s & quot ; ? " ),intval( $drow['id'] ))?>'); " >< ? = _ ( " Revoke " ) ?> </a></td>
</ tr >
< ?
}
?>
< tr >
< td class = " DataTD " colspan = " 4 " >< b >< ? = _ ( " Total Points " ) ?> :</b></td>
< td class = " DataTD " >< ? = intval ( $points ) ?> </td>
< td class = " DataTD " colspan = " 3 " >& nbsp ; </ td >
</ tr >
</ table >
< ? } ?>
< br />< br />
2009-05-21 22:46:07 +00:00
< ?
2014-06-07 09:15:39 +00:00
} }
2004-10-31 07:08:42 +00:00
2013-07-15 08:32:06 +00:00
if ( isset ( $_GET [ 'shownotary' ])) {
switch ( $_GET [ 'shownotary' ]) {
case 'assuredto' :
2014-06-07 09:15:39 +00:00
showassuredto ( $ticketno );
2013-07-15 08:32:06 +00:00
break ;
case 'assuredby' :
2014-06-07 09:15:39 +00:00
showassuredby ( $ticketno );
2013-07-15 08:32:06 +00:00
break ;
case 'assuredto15' :
2014-06-07 09:15:39 +00:00
output_received_assurances ( intval ( $_GET [ 'userid' ]), 1 , $ticketno );
2013-07-15 08:32:06 +00:00
break ;
case 'assuredby15' :
2014-06-07 09:15:39 +00:00
output_given_assurances ( intval ( $_GET [ 'userid' ]), 1 , $ticketno );
2013-07-15 08:32:06 +00:00
break ;
}
}
