cacert-webdb/pages/account/13.php

<? /*
    LibreSSL - CAcert web application
    Copyright (C) 2004-2008  CAcert Inc.

    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; version 2 of the License.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program; if not, write to the Free Software
    Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
*/ ?>
<?
        $query = "select * from `users` where `id`='".intval($_SESSION['profile']['id'])."' and `users`.`deleted`=0";
        $res = mysql_query($query);
        $user = mysql_fetch_assoc($res);

	$year = intval(substr($user['dob'], 0, 4));
	$month = intval(substr($user['dob'], 5, 2));
	$day = intval(substr($user['dob'], 8, 2));

	$body  = sprintf(_("Hi %s,"),$user['fname'])."\n\n";
	$body .= _("You receive this automatic mail since you yourself or")."\n";
	$body .= _("someone else looked up your secret questions and answers")."\n";
	$body .= _("for a forgotten password.")."\n\n";
	$body .= _("If it was you who looked up or changed that data, or clicked")."\n";
	$body .= _("through the menu in your account, everything is in best order and")."\n";
	$body .= _("you can ignore this mail.")."\n\n";
	$body .= _("But if you received this mail without a recognisable reason,")."\n";
	$body .= _("there is a danger that an unauthorised person accessed your")."\n";
	$body .= _("account, and you should promptly change your password and your")."\n";
	$body .= _("secret questions and answers.")."\n\n";

	$body .= _("With kind regards,")."\n\n"._("CAcert Support");

	sendmail($user['email'], "[CAcert.org] "._("Email Notification"), $body, "support@cacert.org", "", "", "CAcert Support");
?>
<form method="post" action="account.php">
<table align="center" valign="middle" border="0" cellspacing="0" cellpadding="0" class="wrapper" width="400">
  <tr>
    <td colspan="2" class="title"><?=_("My Details")?></td>
  </tr>
<? if($_SESSION['profile']['points'] == 0) { ?>
  <tr>
    <td class="DataTD" width="125"><?=_("First Name")?>: </td>
    <td class="DataTD" width="125"><input type="text" name="fname" value="<?=$user['fname']?>"></td>
  </tr>
  <tr>
    <td class="DataTD" valign="top"><?=_("Middle Name(s)")?><br>
      (<?=_("optional")?>)
    </td>
    <td class="DataTD"><input type="text" name="mname" value="<?=$user['mname']?>"></td>
  </tr>
  <tr>
    <td class="DataTD"><?=_("Last Name")?>: </td>
    <td class="DataTD"><input type="text" name="lname" value="<?=$user['lname']?>"></td>
  </tr>
  <tr>
    <td class="DataTD"><?=_("Suffix")?><br>
      (<?=_("optional")?>)</td>
    <td class="DataTD"><input type="text" name="suffix" value="<?=$user['suffix']?>"></td>
  </tr>
  <tr>
    <td class="DataTD"><?=_("Date of Birth")?><br>
	    (<?=_("dd/mm/yyyy")?>)</td>
    <td class="DataTD"><nobr><select name="day">
<?
	for($i = 1; $i <= 31; $i++)
	{
		echo "<option";
		if($day == $i)
			echo " selected='selected'";
		echo ">$i</option>";
	}
?>
    </select>
    <select name="month">
<?
	for($i = 1; $i <= 12; $i++)
	{
		echo "<option value='$i'";
		if($month == $i)
			echo " selected='selected'";
		echo ">".ucwords(recode("utf-8..html", strftime("%B", mktime(0,0,0,$i,1,date("Y")))))."</option>";
	}
?>
    </select>
    <input type="text" name="year" value="<?=$year?>" size="4"></nobr>
    </td>
  </tr>
<? } else { ?>
  <tr>
    <td class="DataTD" width="125"><?=_("First Name")?>: </td>
    <td class="DataTD" width="125"><?=$user['fname']?></td>
  </tr>
  <tr>
    <td class="DataTD" valign="top"><?=_("Middle Name(s)")?><br>
      (<?=_("optional")?>)
    </td>
    <td class="DataTD"><?=$user['mname']?></td>
  </tr>
  <tr>
    <td class="DataTD"><?=_("Last Name")?>: </td>
    <td class="DataTD"><?=$user['lname']?></td>
  </tr>
  <tr>
    <td class="DataTD"><?=_("Suffix")?><br>
      (<?=_("optional")?>)</td>
    <td class="DataTD"><?=$user['suffix']?></td>
  </tr>
  <tr>
    <td class="DataTD"><?=_("Date of Birth")?><br>
	    (<?=_("dd/mm/yyyy")?>)</td>
    <td class="DataTD"><?=$day?> <?=ucwords(recode("utf-8..html", strftime("%B", mktime(0,0,0,$month,1,1))))?> <?=$year?></td>
  </tr>
<? } ?>
  <tr>
   <td class="DataTD"><?=_("OTP Hash")?><br>
	    (<?=_("Not displayed")?>)</td>
   <td class="DataTD"><input type="text" name="otphash"></td>
  </tr>
  <tr>
   <td class="DataTD"><?=_("OTP PIN")?><br>
	    (<?=_("Not displayed")?>)</td>
   <td class="DataTD"><input type="text" name="otppin"></td>
  </tr>
  <tr>
    <td class="DataTD" colspan="2"><?=_("Lost Pass Phrase Questions")?></td>
  </tr>
  <tr>
    <td class="DataTD">1)&nbsp;<input type="text" name="Q1" size="15" value="<?=sanitizeHTML($user['Q1'])?>"></td>
    <td class="DataTD"><input type="text" name="A1" value="<?=sanitizeHTML($user['A1'])?>"></td>
  </tr>
  <tr>
    <td class="DataTD">2)&nbsp;<input type="text" name="Q2" size="15" value="<?=sanitizeHTML($user['Q2'])?>"></td>
    <td class="DataTD"><input type="text" name="A2" value="<?=sanitizeHTML($user['A2'])?>"></td>
  </tr>
  <tr>
    <td class="DataTD">3)&nbsp;<input type="text" name="Q3" size="15" value="<?=sanitizeHTML($user['Q3'])?>"></td>
    <td class="DataTD"><input type="text" name="A3" value="<?=sanitizeHTML($user['A3'])?>"></td>
  </tr>
  <tr>
    <td class="DataTD">4)&nbsp;<input type="text" name="Q4" size="15" value="<?=sanitizeHTML($user['Q4'])?>"></td>
    <td class="DataTD"><input type="text" name="A4" value="<?=sanitizeHTML($user['A4'])?>"></td>
  </tr>
  <tr>
    <td class="DataTD">5)&nbsp;<input type="text" name="Q5" size="15" value="<?=sanitizeHTML($user['Q5'])?>"></td>
    <td class="DataTD"><input type="text" name="A5" value="<?=sanitizeHTML($user['A5'])?>"></td>
  </tr>
  <tr>
    <td class="DataTD" colspan="2"><input type="submit" name="process" value="<?=_("Update")?>"></td>
  </tr>
</table>
<input type="hidden" name="csrf" value="<?=make_csrf('perschange')?>" />
<input type="hidden" name="oldid" value="<?=$id?>">
</form>