/*** This function does a save from the profile page, responding to an ajax call
*
* @param mixed the theme info
* @param mixed the user object
*
* @return string a success or failure notice
***/
public static function saveUserTheme($usertheme, $userinfo)
{
$vars = array(
'font_family' => TYPE_STR,
'fontsize' => TYPE_STR,
'title_text_color' => TYPE_STR,
'page_background_color' => TYPE_STR,
'page_background_image' => TYPE_STR,
'page_background_image' => TYPE_STR,
'page_background_repeat' => TYPE_STR,
'module_text_color' => TYPE_STR,
'module_link_color' => TYPE_STR,
'module_background_color' => TYPE_STR,
'module_background_image' => TYPE_STR,
'module_background_repeat' => TYPE_STR,
'module_border' => TYPE_STR,
'moduleinactive_text_color' => TYPE_STR,
'moduleinactive_link_color' => TYPE_STR,
'moduleinactive_background_color' => TYPE_STR,
'moduleinactive_background_image' => TYPE_STR,
'moduleinactive_background_repeat' => TYPE_STR,
'moduleinactive_border' => TYPE_STR,
'headers_text_color' => TYPE_STR,
'headers_link_color' => TYPE_STR,
'headers_background_color' => TYPE_STR,
'headers_background_image' => TYPE_STR,
'headers_background_repeat' => TYPE_STR,
'headers_border' => TYPE_STR,
'content_text_color' => TYPE_STR,
'content_link_color' => TYPE_STR,
'content_background_color' => TYPE_STR,
'content_background_image' => TYPE_STR,
'content_background_repeat' => TYPE_STR,
'content_border' => TYPE_STR,
'button_text_color' => TYPE_STR,
'button_background_color' => TYPE_STR,
'button_background_image' => TYPE_STR,
'button_background_repeat' => TYPE_STR,
'button_border' => TYPE_STR,
'page_link_color' => TYPE_STR);
//We only do this if we're logged in as a user.
if (!intval($userinfo['userid']))
{
return 'profile_save_permission_failed_desc';
}
//We need the array to pass to the GPC cleaner
$vars = array('themeid' => TYPE_UINT,
'deletetheme' => TYPE_UINT,
'saveasdefault' => TYPE_UINT);
//Since we're here, we need to know which vars are controlled by which permission
//might as well do that since we're scanning the array.
$bg_vars = $color_vars = $border_vars = array();
foreach(self::$themevars as $varname)
{
$vars[$varname] = TYPE_STR;
if (strpos(varname, 'border') !== false)
{
$border_vars[] = $varname;
}
else if (strpos(varname, 'background') !== false)
{
$bg_vars[] = $varname;
}
else
{
$color_vars[] = $varname;
}
}
[SIZE="7"]if (!self::$permissions)
{
self::setPermissions();
}[/SIZE]
vB::$vbulletin->input->clean_array_gpc('r', $vars);
$userid = $userinfo['userid'];
//see if the user is trying to save as default
if (vB::$vbulletin->GPC_exists['saveasdefault'] AND (vB::$vbulletin->GPC['saveasdefault'] == 1))
{
require_once DIR . '/includes/adminfunctions.php';
if (can_administer('cansetdefaultprofile'))
{
$userid = -1;
}
}
$savedprofile = vB_dB_Assertor::getInstance()->assertQuery('customprofile',
array('type' => 's', 'userid' => $userid));
//We need to know whether we're updating or saving
if ($savedprofile)
{
$current = $savedprofile->current();
}
//If the user has passed theme = 0 or theme = -1, that means they want the default.
//So we delete their record if it exists.
if (vB::$vbulletin->GPC_exists['deletetheme'] AND (intval(vB::$vbulletin->GPC['deletetheme']) )
AND $current)
{
//We just clear the settings;
$response = vB_dB_Assertor::getInstance()->assertQuery('customprofile',
array('type' => 'd', 'customprofileid' => $current['customprofileid']));
return 'user_profile_reset_to_default';
}
//if we have a themeid and they have permissions, we skip all the individual
// settings and just save the themeid.
//if we got a themeid we handle that directly.
if (vB::$vbulletin->GPC_exists['themeid'] AND intval(vB::$vbulletin->GPC['themeid'])
AND self::$permissions['canusetheme'])
{
//let's trim all the non-theme settings. Otherwise we get strange effects later
// if we currently have background settings and later someone edits their css
$settings = array('themeid' => vB::$vbulletin->GPC['themeid']);
foreach (self::$themevars as $themevar)
{
$settings[$themevar] = '';
}
if ($current)
{
$settings['type'] = 'u';
$settings['customprofileid'] = $current['customprofileid'];
}
else
{
$settings['type'] = 'i';
$settings['userid'] = $userinfo['userid'];
}
$response = vB_dB_Assertor::getInstance()->assertQuery('customprofile', $settings);
}
else
{
//Now we confirm permissions. We unset every variable for which
// they don't have permission.
if ($userid != -1)
{
if (!self::$permissions['caneditfontfamily'] )
{
unset($vars['font_family']);
}
if (!self::$permissions['caneditfontsize'])
{
unset($vars['fontsize']);
}
if (!self::$permissions['caneditcolors'])
{
foreach($color_vars as $varname)
{
unset($vars[$varname]);
}
}
if (!self::$permissions['caneditbgimage'])
{
foreach($bg_vars as $varname)
{
unset($vars[$varname]);
}
}
if (!self::$permissions['caneditborders'])
{
foreach($border_vars as $varname)
{
unset($vars[$varname]);
}
}
}
//let's set the submitted variables
foreach ($vars as $varname => $value)
{
if (vB::$vbulletin->GPC_exists[$varname])
{
if (vB::$vbulletin->GPC[$varname] == 'null')
{
if (strpos($varname, 'image'))
{
$vars[$varname] = 'none';
}
else if (strpos($varname, 'repeat'))
{
$vars[$varname] = 'no-repeat';
}
else
{
$vars[$varname] = 'inherit';
}
}
else
{
if (strpos($varname, 'repeat'))
{
$vars[$varname] = self::cleanRepeat(vB::$vbulletin->GPC[$varname]);
}
else
{
$vars[$varname] = vB::$vbulletin->GPC[$varname];
}
}
}
else
{
unset($vars[$varname]);
}
}
$vars['themeid'] = 0;
//If we are setting as site default, we're ready to save
if ($userid == -1)
{
$savedprofile = vB_dB_Assertor::getInstance()->assertQuery('customprofile',
array('type' => 's', 'userid' => -1));
//We need to know whether we're updating or saving
if ($savedprofile)
{
$current = $savedprofile->current();
}
$vars['userid'] = -1;
if ($current)
{
$vars['customprofileid'] = $current['customprofileid'];
$vars['type'] = 'u';
}
else
{
unset($vars['customprofileid']);
$vars['type'] = 'i';
}
}
else
{
//These are what were passed to the page via ajax load,
// and they are probably wrong. Certainly untrustworthy
unset($vars['userid']);
unset($vars['customprofileid']);
if ($current)
{
$vars['customprofileid'] = $current['customprofileid'];
$vars['type'] = 'u';
}
else
{
$vars[userid] = $userinfo['userid'];
$vars['type'] = 'i';
}
}
$response = vB_dB_Assertor::getInstance()->assertQuery('customprofile', $vars);
}
if ($response)
{
return 'user_profile_saved';
}
else
{
return 'update_failed';
}
}
