<?php

/**

*

* This file is part of the phpBB Forum Software package.

*

* @copyright (c) phpBB Limited <https://www.phpbb.com>

* @license GNU General Public License, version 2 (GPL-2.0)

*

* For full copyright and license information, please see

* the docs/CREDITS.txt file.

*

*/

use phpbb\messenger\method\messenger_interface;

/**

* @ignore

*/

if (!defined('IN_PHPBB'))

{

exit;

}

/**

* Obtain user_ids from usernames or vice versa. Returns false on

* success else the error string

*

* @param array &$user_id_ary The user ids to check or empty if usernames used

* @param array &$username_ary The usernames to check or empty if user ids used

* @param mixed $user_type Array of user types to check, false if not restricting by user type

* @param boolean $update_references If false, the supplied array is unset and appears unchanged from where it was called

* @return boolean|string Returns false on success, error string on failure

*/

function user_get_id_name(&$user_id_ary, &$username_ary, $user_type = false, $update_references = false)

{

global $db;

// Are both arrays already filled? Yep, return else

// are neither array filled?

if ($user_id_ary && $username_ary)

{

return false;

}

else if (!$user_id_ary && !$username_ary)

{

return 'NO_USERS';

}

$which_ary = ($user_id_ary) ? 'user_id_ary' : 'username_ary';

if (${$which_ary} && !is_array(${$which_ary}))

{

${$which_ary} = array(${$which_ary});

}

$sql_in = ($which_ary == 'user_id_ary') ? array_map('intval', ${$which_ary}) : array_map('utf8_clean_string', ${$which_ary});

// By unsetting the array here, the values passed in at the point user_get_id_name() was called will be retained.

// Otherwise, if we don't unset (as the array was passed by reference) the original array will be updated below.

if ($update_references === false)

{

unset(${$which_ary});

}

$user_id_ary = $username_ary = array();

// Grab the user id/username records

$sql_where = ($which_ary == 'user_id_ary') ? 'user_id' : 'username_clean';

$sql = 'SELECT user_id, username

FROM ' . USERS_TABLE . '

WHERE ' . $db->sql_in_set($sql_where, $sql_in);

if ($user_type !== false && !empty($user_type))

{

$sql .= ' AND ' . $db->sql_in_set('user_type', $user_type);

}

$result = $db->sql_query($sql);

if (!($row = $db->sql_fetchrow($result)))

{

$db->sql_freeresult($result);

return 'NO_USERS';

}

do

{

$username_ary[$row['user_id']] = $row['username'];

$user_id_ary[] = $row['user_id'];

}

while ($row = $db->sql_fetchrow($result));

$db->sql_freeresult($result);

return false;

}

/**

* Get latest registered username and update database to reflect it

*/

function update_last_username()

{

global $config, $db;

// Get latest username

$sql = 'SELECT user_id, username, user_colour

FROM ' . USERS_TABLE . '

WHERE user_type IN (' . USER_NORMAL . ', ' . USER_FOUNDER . ')

ORDER BY user_id DESC';

$result = $db->sql_query_limit($sql, 1);

$row = $db->sql_fetchrow($result);

$db->sql_freeresult($result);

if ($row)

{

$config->set('newest_user_id', $row['user_id'], false);

$config->set('newest_username', $row['username'], false);

$config->set('newest_user_colour', $row['user_colour'], false);

}

}

/**

* Updates a username across all relevant tables/fields

*

* @param string $old_name the old/current username

* @param string $new_name the new username

*/

function user_update_name($old_name, $new_name)

{

global $config, $db, $cache, $phpbb_dispatcher;

$update_ary = array(

FORUMS_TABLE => array(

'forum_last_poster_id' => 'forum_last_poster_name',

),

MODERATOR_CACHE_TABLE => array(

'user_id' => 'username',

),

POSTS_TABLE => array(

'poster_id' => 'post_username',

),

TOPICS_TABLE => array(

'topic_poster' => 'topic_first_poster_name',

'topic_last_poster_id' => 'topic_last_poster_name',

),

);

foreach ($update_ary as $table => $field_ary)

{

foreach ($field_ary as $id_field => $name_field)

{

$sql = "UPDATE $table

SET $name_field = '" . $db->sql_escape($new_name) . "'

WHERE $name_field = '" . $db->sql_escape($old_name) . "'

AND $id_field <> " . ANONYMOUS;

$db->sql_query($sql);

}

}

if ($config['newest_username'] == $old_name)

{

$config->set('newest_username', $new_name, false);

}

/**

* Update a username when it is changed

*

* @event core.update_username

* @var string old_name The old username that is replaced

* @var string new_name The new username

* @since 3.1.0-a1

*/

$vars = array('old_name', 'new_name');

extract($phpbb_dispatcher->trigger_event('core.update_username', compact($vars)));

// Because some tables/caches use username-specific data we need to purge this here.

$cache->destroy('sql', MODERATOR_CACHE_TABLE);

}

/**

* Adds an user

*

* @param mixed $user_row An array containing the following keys (and the appropriate values): username, group_id (the group to place the user in), user_email and the user_type(usually 0). Additional entries not overridden by defaults will be forwarded.

* @param array $cp_data custom profile fields, see custom_profile::build_insert_sql_array

* @param array $notifications_data The notifications settings for the new user

* @return int The new user's ID.

*/

function user_add($user_row, $cp_data = false, $notifications_data = null)

{

global $db, $config;

global $phpbb_dispatcher, $phpbb_container;

if (empty($user_row['username']) || !isset($user_row['group_id']) || !isset($user_row['user_email']) || !isset($user_row['user_type']))

{

return false;

}

$username_clean = utf8_clean_string($user_row['username']);

if (empty($username_clean))

{

return false;

}

$sql_ary = array(

'username' => $user_row['username'],

'username_clean' => $username_clean,

'user_password' => (isset($user_row['user_password'])) ? $user_row['user_password'] : '',

'user_email' => strtolower($user_row['user_email']),

'group_id' => $user_row['group_id'],

'user_type' => $user_row['user_type'],

);

// These are the additional vars able to be specified

$additional_vars = array(

'user_permissions' => '',

'user_timezone' => $config['board_timezone'],

'user_dateformat' => $config['default_dateformat'],

'user_lang' => $config['default_lang'],

'user_style' => (int) $config['default_style'],

'user_actkey' => '',

'user_ip' => '',

'user_regdate' => time(),

'user_passchg' => time(),

'user_options' => 230271,

// We do not set the new flag here - registration scripts need to specify it

'user_new' => 0,

'user_inactive_reason' => 0,

'user_inactive_time' => 0,

'user_lastmark' => time(),

'user_lastvisit' => 0,

'user_lastpost_time' => 0,

'user_lastpage' => '',

'user_posts' => 0,

'user_colour' => '',

'user_avatar' => '',

'user_avatar_type' => '',

'user_avatar_width' => 0,

'user_avatar_height' => 0,

'user_new_privmsg' => 0,

'user_unread_privmsg' => 0,

'user_last_privmsg' => 0,

'user_message_rules' => 0,

'user_full_folder' => PRIVMSGS_NO_BOX,

'user_emailtime' => 0,

'user_notify' => 0,

'user_notify_pm' => 1,

'user_allow_pm' => 1,

'user_allow_viewonline' => 1,

'user_allow_viewemail' => 1,

'user_allow_massemail' => 1,

'user_sig' => '',

'user_sig_bbcode_uid' => '',

'user_sig_bbcode_bitfield' => '',

'user_form_salt' => unique_id(),

);

// Now fill the sql array with not required variables

foreach ($additional_vars as $key => $default_value)

{

$sql_ary[$key] = (isset($user_row[$key])) ? $user_row[$key] : $default_value;

}

// Any additional variables in $user_row not covered above?

$remaining_vars = array_diff(array_keys($user_row), array_keys($sql_ary));

// Now fill our sql array with the remaining vars

if (count($remaining_vars))

{

foreach ($remaining_vars as $key)

{

$sql_ary[$key] = $user_row[$key];

}

}

/**

* Use this event to modify the values to be inserted when a user is added

*

* @event core.user_add_modify_data

* @var array user_row Array of user details submitted to user_add

* @var array cp_data Array of Custom profile fields submitted to user_add

* @var array sql_ary Array of data to be inserted when a user is added

* @var array notifications_data Array of notification data to be inserted when a user is added

* @since 3.1.0-a1

* @changed 3.1.0-b5 Added user_row and cp_data

* @changed 3.1.11-RC1 Added notifications_data

*/

$vars = array('user_row', 'cp_data', 'sql_ary', 'notifications_data');

extract($phpbb_dispatcher->trigger_event('core.user_add_modify_data', compact($vars)));

$sql = 'INSERT INTO ' . USERS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary);

$db->sql_query($sql);

$user_id = $db->sql_nextid();

// Insert Custom Profile Fields

if ($cp_data !== false && count($cp_data))

{

$cp_data['user_id'] = (int) $user_id;

/* @var $cp \phpbb\profilefields\manager */

$cp = $phpbb_container->get('profilefields.manager');

$sql = 'INSERT INTO ' . PROFILE_FIELDS_DATA_TABLE . ' ' .

$db->sql_build_array('INSERT', $cp->build_insert_sql_array($cp_data));

$db->sql_query($sql);

}

// Place into appropriate group...

$sql = 'INSERT INTO ' . USER_GROUP_TABLE . ' ' . $db->sql_build_array('INSERT', array(

'user_id' => (int) $user_id,

'group_id' => (int) $user_row['group_id'],

'user_pending' => 0)

);

$db->sql_query($sql);

// Now make it the users default group...

group_set_user_default($user_row['group_id'], array($user_id), false);

// Add to newly registered users group if user_new is 1

if ($config['new_member_post_limit'] && $sql_ary['user_new'])

{

$sql = 'SELECT group_id

FROM ' . GROUPS_TABLE . "

WHERE group_name = 'NEWLY_REGISTERED'

AND group_type = " . GROUP_SPECIAL;

$result = $db->sql_query($sql);

$add_group_id = (int) $db->sql_fetchfield('group_id');

$db->sql_freeresult($result);

if ($add_group_id)

{

global $phpbb_log;

// Because these actions only fill the log unnecessarily, we disable it

$phpbb_log->disable('admin');

// Add user to "newly registered users" group and set to default group if admin specified so.

if ($config['new_member_group_default'])

{

group_user_add($add_group_id, $user_id, false, false, true);

$user_row['group_id'] = $add_group_id;

}

else

{

group_user_add($add_group_id, $user_id);

}

$phpbb_log->enable('admin');

}

}

// set the newest user and adjust the user count if the user is a normal user and no activation mail is sent

if ($user_row['user_type'] == USER_NORMAL || $user_row['user_type'] == USER_FOUNDER)

{

$config->set('newest_user_id', $user_id, false);

$config->set('newest_username', $user_row['username'], false);

$config->increment('num_users', 1, false);

$sql = 'SELECT group_colour

FROM ' . GROUPS_TABLE . '

WHERE group_id = ' . (int) $user_row['group_id'];

$result = $db->sql_query_limit($sql, 1);

$row = $db->sql_fetchrow($result);

$db->sql_freeresult($result);

$config->set('newest_user_colour', $row['group_colour'], false);

}

// Use default notifications settings if notifications_data is not set

if ($notifications_data === null)

{

$notifications_data = array(

array(

'item_type' => 'notification.type.post',

'method' => 'notification.method.email',

),

array(

'item_type' => 'notification.type.topic',

'method' => 'notification.method.email',

),

);

}

/**

* Modify the notifications data to be inserted in the database when a user is added

*

* @event core.user_add_modify_notifications_data

* @var array user_row Array of user details submitted to user_add

* @var array cp_data Array of Custom profile fields submitted to user_add

* @var array sql_ary Array of data to be inserted when a user is added

* @var array notifications_data Array of notification data to be inserted when a user is added

* @since 3.2.2-RC1

*/

$vars = array('user_row', 'cp_data', 'sql_ary', 'notifications_data');

extract($phpbb_dispatcher->trigger_event('core.user_add_modify_notifications_data', compact($vars)));

// Subscribe user to notifications if necessary

if (!empty($notifications_data))

{

/* @var $phpbb_notifications \phpbb\notification\manager */

$phpbb_notifications = $phpbb_container->get('notification_manager');

foreach ($notifications_data as $subscription)

{

$phpbb_notifications->add_subscription($subscription['item_type'], 0, $subscription['method'], $user_id);

}

}

/**

* Event that returns user id, user details and user CPF of newly registered user

*

* @event core.user_add_after

* @var int user_id User id of newly registered user

* @var array user_row Array of user details submitted to user_add

* @var array cp_data Array of Custom profile fields submitted to user_add

* @since 3.1.0-b5

*/

$vars = array('user_id', 'user_row', 'cp_data');

extract($phpbb_dispatcher->trigger_event('core.user_add_after', compact($vars)));

return $user_id;

}

/**

* Delete user(s) and their related data

*

* @param string $mode Mode of posts deletion (retain|remove)

* @param mixed $user_ids Either an array of integers or an integer

* @param bool $retain_username True if username should be retained, false otherwise

* @return bool

*/

function user_delete($mode, $user_ids, $retain_username = true)

{

global $cache, $config, $db, $user, $phpbb_dispatcher, $phpbb_container;

global $phpbb_root_path, $phpEx;

$db->sql_transaction('begin');

$user_rows = array();

if (!is_array($user_ids))

{

$user_ids = array($user_ids);

}

$user_id_sql = $db->sql_in_set('user_id', $user_ids);

$sql = 'SELECT *

FROM ' . USERS_TABLE . '

WHERE ' . $user_id_sql;

$result = $db->sql_query($sql);

while ($row = $db->sql_fetchrow($result))

{

$user_rows[(int) $row['user_id']] = $row;

}

$db->sql_freeresult($result);

if (empty($user_rows))

{

return false;

}

/**

* Event before of the performing of the user(s) delete action

*

* @event core.delete_user_before

* @var string mode Mode of posts deletion (retain|remove)

* @var array user_ids ID(s) of the user(s) bound to be deleted

* @var bool retain_username True if username should be retained, false otherwise

* @var array user_rows Array containing data of the user(s) bound to be deleted

* @since 3.1.0-a1

* @changed 3.2.4-RC1 Added user_rows

*/

$vars = array('mode', 'user_ids', 'retain_username', 'user_rows');

extract($phpbb_dispatcher->trigger_event('core.delete_user_before', compact($vars)));

// Before we begin, we will remove the reports the user issued.

$sql = 'SELECT r.post_id, p.topic_id

FROM ' . REPORTS_TABLE . ' r, ' . POSTS_TABLE . ' p

WHERE ' . $db->sql_in_set('r.user_id', $user_ids) . '

AND p.post_id = r.post_id';

$result = $db->sql_query($sql);

$report_posts = $report_topics = array();

while ($row = $db->sql_fetchrow($result))

{

$report_posts[] = $row['post_id'];

$report_topics[] = $row['topic_id'];

}

$db->sql_freeresult($result);

if (count($report_posts))

{

$report_posts = array_unique($report_posts);

$report_topics = array_unique($report_topics);

// Get a list of topics that still contain reported posts

$sql = 'SELECT DISTINCT topic_id

FROM ' . POSTS_TABLE . '

WHERE ' . $db->sql_in_set('topic_id', $report_topics) . '

AND post_reported = 1

AND ' . $db->sql_in_set('post_id', $report_posts, true);

$result = $db->sql_query($sql);

$keep_report_topics = array();

while ($row = $db->sql_fetchrow($result))

{

$keep_report_topics[] = $row['topic_id'];

}

$db->sql_freeresult($result);

if (count($keep_report_topics))

{

$report_topics = array_diff($report_topics, $keep_report_topics);

}

unset($keep_report_topics);

// Now set the flags back

$sql = 'UPDATE ' . POSTS_TABLE . '

SET post_reported = 0

WHERE ' . $db->sql_in_set('post_id', $report_posts);

$db->sql_query($sql);

if (count($report_topics))

{

$sql = 'UPDATE ' . TOPICS_TABLE . '

SET topic_reported = 0

WHERE ' . $db->sql_in_set('topic_id', $report_topics);

$db->sql_query($sql);

}

}

// Remove reports

$db->sql_query('DELETE FROM ' . REPORTS_TABLE . ' WHERE ' . $user_id_sql);

$num_users_delta = 0;

// Get auth provider collection in case accounts might need to be unlinked

$provider_collection = $phpbb_container->get('auth.provider_collection');

// Some things need to be done in the loop (if the query changes based

// on which user is currently being deleted)

$added_guest_posts = 0;

foreach ($user_rows as $user_id => $user_row)

{

if ($user_row['user_avatar'] && $user_row['user_avatar_type'] == 'avatar.driver.upload')

{

avatar_delete('user', $user_row);

}

// Unlink accounts

foreach ($provider_collection as $provider_name => $auth_provider)

{

$provider_data = $auth_provider->get_auth_link_data($user_id);

if ($provider_data !== null)

{

$link_data = array(

'user_id' => $user_id,

'link_method' => 'user_delete',

);

// BLOCK_VARS might contain hidden fields necessary for unlinking accounts

if (isset($provider_data['BLOCK_VARS']) && is_array($provider_data['BLOCK_VARS']))

{

foreach ($provider_data['BLOCK_VARS'] as $provider_service)

{

if (!array_key_exists('HIDDEN_FIELDS', $provider_service))

{

$provider_service['HIDDEN_FIELDS'] = array();

}

$auth_provider->unlink_account(array_merge($link_data, $provider_service['HIDDEN_FIELDS']));

}

}

else

{

$auth_provider->unlink_account($link_data);

}

}

}

// Decrement number of users if this user is active

if ($user_row['user_type'] != USER_INACTIVE && $user_row['user_type'] != USER_IGNORE)

{

--$num_users_delta;

}

switch ($mode)

{

case 'retain':

if ($retain_username === false)

{

$post_username = $user->lang['GUEST'];

}

else

{

$post_username = $user_row['username'];

}

// If the user is inactive and newly registered

// we assume no posts from the user, and save

// the queries

if ($user_row['user_type'] != USER_INACTIVE || $user_row['user_inactive_reason'] != INACTIVE_REGISTER || $user_row['user_posts'])

{

// When we delete these users and retain the posts, we must assign all the data to the guest user

$sql = 'UPDATE ' . FORUMS_TABLE . '

SET forum_last_poster_id = ' . ANONYMOUS . ", forum_last_poster_name = '" . $db->sql_escape($post_username) . "', forum_last_poster_colour = ''

WHERE forum_last_poster_id = $user_id";

$db->sql_query($sql);

$sql = 'UPDATE ' . POSTS_TABLE . '

SET poster_id = ' . ANONYMOUS . ", post_username = '" . $db->sql_escape($post_username) . "'

WHERE poster_id = $user_id";

$db->sql_query($sql);

$sql = 'UPDATE ' . TOPICS_TABLE . '

SET topic_poster = ' . ANONYMOUS . ", topic_first_poster_name = '" . $db->sql_escape($post_username) . "', topic_first_poster_colour = ''

WHERE topic_poster = $user_id";

$db->sql_query($sql);

$sql = 'UPDATE ' . TOPICS_TABLE . '

SET topic_last_poster_id = ' . ANONYMOUS . ", topic_last_poster_name = '" . $db->sql_escape($post_username) . "', topic_last_poster_colour = ''

WHERE topic_last_poster_id = $user_id";

$db->sql_query($sql);

// Since we change every post by this author, we need to count this amount towards the anonymous user

if ($user_row['user_posts'])

{

$added_guest_posts += $user_row['user_posts'];

}

}

break;

case 'remove':

// there is nothing variant specific to deleting posts

break;

}

}

if ($num_users_delta != 0)

{

$config->increment('num_users', $num_users_delta, false);

}

// Now do the invariant tasks

// all queries performed in one call of this function are in a single transaction

// so this is kosher

if ($mode == 'retain')

{

// Assign more data to the Anonymous user

$sql = 'UPDATE ' . ATTACHMENTS_TABLE . '

SET poster_id = ' . ANONYMOUS . '

WHERE ' . $db->sql_in_set('poster_id', $user_ids);

$db->sql_query($sql);

$sql = 'UPDATE ' . USERS_TABLE . '

SET user_posts = user_posts + ' . $added_guest_posts . '

WHERE user_id = ' . ANONYMOUS;

$db->sql_query($sql);

}

else if ($mode == 'remove')

{

if (!function_exists('delete_posts'))

{

include($phpbb_root_path . 'includes/functions_admin.' . $phpEx);

}

// Delete posts, attachments, etc.

// delete_posts can handle any number of IDs in its second argument

delete_posts('poster_id', $user_ids);

}

$table_ary = [

USERS_TABLE,

USER_GROUP_TABLE,

TOPICS_WATCH_TABLE,

FORUMS_WATCH_TABLE,

ACL_USERS_TABLE,

TOPICS_TRACK_TABLE,

TOPICS_POSTED_TABLE,

FORUMS_TRACK_TABLE,

PROFILE_FIELDS_DATA_TABLE,

MODERATOR_CACHE_TABLE,

DRAFTS_TABLE,

BOOKMARKS_TABLE,

SESSIONS_KEYS_TABLE,

PRIVMSGS_FOLDER_TABLE,

PRIVMSGS_RULES_TABLE,

$phpbb_container->getParameter('tables.auth_provider_oauth_token_storage'),

$phpbb_container->getParameter('tables.auth_provider_oauth_states'),

$phpbb_container->getParameter('tables.auth_provider_oauth_account_assoc'),

$phpbb_container->getParameter('tables.user_notifications')

];

// Ignore errors on deleting from non-existent tables, e.g. when migrating

$db->sql_return_on_error(true);

// Delete the miscellaneous (non-post) data for the user

foreach ($table_ary as $table)

{

$sql = "DELETE FROM $table

WHERE " . $user_id_sql;

$db->sql_query($sql);

}

$db->sql_return_on_error();

$cache->destroy('sql', MODERATOR_CACHE_TABLE);

// Change user_id to anonymous for posts edited by this user

$sql = 'UPDATE ' . POSTS_TABLE . '

SET post_edit_user = ' . ANONYMOUS . '

WHERE ' . $db->sql_in_set('post_edit_user', $user_ids);

$db->sql_query($sql);

// Change user_id to anonymous for pms edited by this user

$sql = 'UPDATE ' . PRIVMSGS_TABLE . '

SET message_edit_user = ' . ANONYMOUS . '

WHERE ' . $db->sql_in_set('message_edit_user', $user_ids);

$db->sql_query($sql);

// Change user_id to anonymous for posts deleted by this user

$sql = 'UPDATE ' . POSTS_TABLE . '

SET post_delete_user = ' . ANONYMOUS . '

WHERE ' . $db->sql_in_set('post_delete_user', $user_ids);

$db->sql_query($sql);

// Change user_id to anonymous for topics deleted by this user

$sql = 'UPDATE ' . TOPICS_TABLE . '

SET topic_delete_user = ' . ANONYMOUS . '

WHERE ' . $db->sql_in_set('topic_delete_user', $user_ids);

$db->sql_query($sql);

// Delete user log entries about this user

$sql = 'DELETE FROM ' . LOG_TABLE . '

WHERE ' . $db->sql_in_set('reportee_id', $user_ids);

$db->sql_query($sql);

// Change user_id to anonymous for this users triggered events

$sql = 'UPDATE ' . LOG_TABLE . '

SET user_id = ' . ANONYMOUS . '

WHERE ' . $user_id_sql;

$db->sql_query($sql);

// Delete the user_id from the zebra table

$sql = 'DELETE FROM ' . ZEBRA_TABLE . '

WHERE ' . $user_id_sql . '

OR ' . $db->sql_in_set('zebra_id', $user_ids);

$db->sql_query($sql);

// Delete the user_id from the banlist

$sql = 'DELETE FROM ' . BANS_TABLE . "

WHERE ban_mode = 'user'

AND " . $db->sql_in_set('ban_userid', $user_ids);

$db->sql_query($sql);

// Delete the user_id from the session table

$sql = 'DELETE FROM ' . SESSIONS_TABLE . '

WHERE ' . $db->sql_in_set('session_user_id', $user_ids);

$db->sql_query($sql);

// Clean the private messages tables from the user

if (!function_exists('phpbb_delete_users_pms'))

{

include($phpbb_root_path . 'includes/functions_privmsgs.' . $phpEx);

}

phpbb_delete_users_pms($user_ids);

$phpbb_notifications = $phpbb_container->get('notification_manager');

$phpbb_notifications->delete_notifications('notification.type.admin_activate_user', $user_ids);

$db->sql_transaction('commit');

/**

* Event after the user(s) delete action has been performed

*

* @event core.delete_user_after

* @var string mode Mode of posts deletion (retain|remove)

* @var array user_ids ID(s) of the deleted user(s)

* @var bool retain_username True if username should be retained, false otherwise

* @var array user_rows Array containing data of the deleted user(s)

* @since 3.1.0-a1

* @changed 3.2.2-RC1 Added user_rows

*/

$vars = array('mode', 'user_ids', 'retain_username', 'user_rows');

extract($phpbb_dispatcher->trigger_event('core.delete_user_after', compact($vars)));

// Reset newest user info if appropriate

if (in_array($config['newest_user_id'], $user_ids))

{

update_last_username();

}

return false;

}

/**

* Flips user_type from active to inactive and vice versa, handles group membership updates

*

* @param string $mode can be flip for flipping from active/inactive, activate or deactivate

* @param array $user_id_ary

* @param int $reason

*/

function user_active_flip($mode, $user_id_ary, $reason = INACTIVE_MANUAL)

{

global $config, $db, $user, $auth, $phpbb_dispatcher;

$deactivated = $activated = 0;

$sql_statements = array();

if (!is_array($user_id_ary))

{

$user_id_ary = array($user_id_ary);

}

if (!count($user_id_ary))

{

return;

}

$sql = 'SELECT user_id, group_id, user_type, user_inactive_reason

FROM ' . USERS_TABLE . '

WHERE ' . $db->sql_in_set('user_id', $user_id_ary);

$result = $db->sql_query($sql);

while ($row = $db->sql_fetchrow($result))

{

$sql_ary = array();

if ($row['user_type'] == USER_IGNORE || $row['user_type'] == USER_FOUNDER ||

($mode == 'activate' && $row['user_type'] != USER_INACTIVE) ||

($mode == 'deactivate' && $row['user_type'] == USER_INACTIVE))

{

continue;

}

if ($row['user_type'] == USER_INACTIVE)

{

$activated++;

}

else

{

$deactivated++;

// Remove the users session key...

$user->reset_login_keys($row['user_id']);

}

$sql_ary += array(

'user_type' => ($row['user_type'] == USER_NORMAL) ? USER_INACTIVE : USER_NORMAL,

'user_inactive_time' => ($row['user_type'] == USER_NORMAL) ? time() : 0,

'user_inactive_reason' => ($row['user_type'] == USER_NORMAL) ? $reason : 0,

);

$sql_statements[$row['user_id']] = $sql_ary;

}

$db->sql_freeresult($result);

/**

* Check or modify activated/deactivated users data before submitting it to the database

*

* @event core.user_active_flip_before

* @var string mode User type changing mode, can be: flip|activate|deactivate

* @var int reason Reason for changing user type, can be: INACTIVE_REGISTER|INACTIVE_PROFILE|INACTIVE_MANUAL|INACTIVE_REMIND

* @var int activated The number of users to be activated

* @var int deactivated The number of users to be deactivated

* @var array user_id_ary Array with user ids to change user type

* @var array sql_statements Array with users data to submit to the database, keys: user ids, values: arrays with user data

* @since 3.1.4-RC1

*/

$vars = array('mode', 'reason', 'activated', 'deactivated', 'user_id_ary', 'sql_statements');

extract($phpbb_dispatcher->trigger_event('core.user_active_flip_before', compact($vars)));

if (count($sql_statements))

{

foreach ($sql_statements as $user_id => $sql_ary)

{

$sql = 'UPDATE ' . USERS_TABLE . '

SET ' . $db->sql_build_array('UPDATE', $sql_ary) . '

WHERE user_id = ' . $user_id;

$db->sql_query($sql);

}

$auth->acl_clear_prefetch(array_keys($sql_statements));

}

/**

* Perform additional actions after the users have been activated/deactivated

*

* @event core.user_active_flip_after

* @var string mode User type changing mode, can be: flip|activate|deactivate

* @var int reason Reason for changing user type, can be: INACTIVE_REGISTER|INACTIVE_PROFILE|INACTIVE_MANUAL|INACTIVE_REMIND

* @var int activated The number of users to be activated

* @var int deactivated The number of users to be deactivated

* @var array user_id_ary Array with user ids to change user type

* @var array sql_statements Array with users data to submit to the database, keys: user ids, values: arrays with user data

* @since 3.1.4-RC1

*/

$vars = array('mode', 'reason', 'activated', 'deactivated', 'user_id_ary', 'sql_statements');

extract($phpbb_dispatcher->trigger_event('core.user_active_flip_after', compact($vars)));

if ($deactivated)

{

$config->increment('num_users', $deactivated * (-1), false);

}

if ($activated)

{

$config->increment('num_users', $activated, false);

}

// Update latest username

update_last_username();

}

/**

* Add a ban or ban exclusion to the banlist. Bans either a user, an IP or an email address

*

* @deprecated 4.0.0-a1 (To be removed: 4.1.0)

*

* @param string $mode Type of ban. One of the following: user, ip, email

* @param mixed $ban Banned entity. Either string or array with usernames, ips or email addresses

* @param int $ban_len Ban length in minutes

* @param string $ban_len_other Ban length as a date (YYYY-MM-DD)

* @param string $ban_reason String describing the reason for this ban

* @param string $ban_give_reason

* @return boolean

*/

function user_ban($mode, $ban, $ban_len, $ban_len_other, $ban_reason, $ban_give_reason = '')

{

global $phpbb_container, $user;

/** @var \phpbb\ban\manager $ban_manager */

$ban_manager = $phpbb_container->get('ban.manager');

$items = is_array($ban) ? $ban : [$ban];

$current_time = time();

// Set $ban_end to the unix time when the ban should end. 0 is a permanent ban.

if ($ban_len)

{

if ($ban_len != -1 || !$ban_len_other)

{

$ban_end = max($current_time, $current_time + ($ban_len) * 60);

}

else

{

$ban_other = explode('-', $ban_len_other);

if (count($ban_other) == 3 && ((int) $ban_other[0] < 9999) &&

(strlen($ban_other[0]) == 4) && (strlen($ban_other[1]) == 2) && (strlen($ban_other[2]) == 2))

{

$ban_end = max($current_time, $user->create_datetime()

->setDate((int) $ban_other[0], (int) $ban_other[1], (int) $ban_other[2])

->setTime(0, 0, 0)

->getTimestamp() + $user->timezone->getOffset(new DateTime('UTC')));

}

else

{

trigger_error('LENGTH_BAN_INVALID', E_USER_WARNING);

}

}

}

else

{

$ban_end = 0;

}

$start = new \DateTime();

$start->setTimestamp($current_time);

$end = new \DateTime();

$end->setTimestamp($ban_end);

return $ban_manager->ban($mode, $items, $start, $end, $ban_reason, $ban_give_reason);

}

/**

* Unban User

*

* @deprecated 4.0.0-a1 (To be removed: 4.1.0)

*/

function user_unban($mode, $ban)

{

global $phpbb_container;

$items = is_array($ban) ? $ban : [$ban];

/** @var \phpbb\ban\manager $ban_manager */

$ban_manager = $phpbb_container->get('ban.manager');

$ban_manager->unban($mode, $items);

}

/**

* Internet Protocol Address Whois

* RFC3912: WHOIS Protocol Specification

*

* @param string $ip Ip address, either IPv4 or IPv6.

*

* @return string Empty string if not a valid ip address.

* Otherwise make_clickable()'ed whois result.