mirror of
https://github.com/gosticks/wordpress-develop.git
synced 2026-10-05 23:27:04 +00:00
Changed to superglobals, and eliminated $use_cache (since we always do).
git-svn-id: https://develop.svn.wordpress.org/trunk@1108 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
+29
-29
@@ -13,23 +13,23 @@ function add_magic_quotes($array) {
|
||||
}
|
||||
|
||||
if (!get_magic_quotes_gpc()) {
|
||||
$HTTP_GET_VARS = add_magic_quotes($HTTP_GET_VARS);
|
||||
$HTTP_POST_VARS = add_magic_quotes($HTTP_POST_VARS);
|
||||
$HTTP_COOKIE_VARS = add_magic_quotes($HTTP_COOKIE_VARS);
|
||||
$_GET = add_magic_quotes($_GET);
|
||||
$_POST = add_magic_quotes($_POST);
|
||||
$_COOKIE = add_magic_quotes($_COOKIE);
|
||||
}
|
||||
|
||||
$wpvarstoreset = array('action','standalone','redirect','profile','user');
|
||||
for ($i=0; $i<count($wpvarstoreset); $i += 1) {
|
||||
$wpvar = $wpvarstoreset[$i];
|
||||
if (!isset($$wpvar)) {
|
||||
if (empty($HTTP_POST_VARS["$wpvar"])) {
|
||||
if (empty($HTTP_GET_VARS["$wpvar"])) {
|
||||
if (empty($_POST["$wpvar"])) {
|
||||
if (empty($_GET["$wpvar"])) {
|
||||
$$wpvar = '';
|
||||
} else {
|
||||
$$wpvar = $HTTP_GET_VARS["$wpvar"];
|
||||
$$wpvar = $_GET["$wpvar"];
|
||||
}
|
||||
} else {
|
||||
$$wpvar = $HTTP_POST_VARS["$wpvar"];
|
||||
$$wpvar = $_POST["$wpvar"];
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -43,53 +43,53 @@ case 'update':
|
||||
get_currentuserinfo();
|
||||
|
||||
/* checking the nickname has been typed */
|
||||
if (empty($HTTP_POST_VARS["newuser_nickname"])) {
|
||||
if (empty($_POST["newuser_nickname"])) {
|
||||
die ("<strong>ERROR</strong>: please enter your nickname (can be the same as your login)");
|
||||
return false;
|
||||
}
|
||||
|
||||
/* if the ICQ UIN has been entered, check to see if it has only numbers */
|
||||
if (!empty($HTTP_POST_VARS["newuser_icq"])) {
|
||||
if ((ereg("^[0-9]+$",$HTTP_POST_VARS["newuser_icq"]))==false) {
|
||||
if (!empty($_POST["newuser_icq"])) {
|
||||
if ((ereg("^[0-9]+$",$_POST["newuser_icq"]))==false) {
|
||||
die ("<strong>ERROR</strong>: your ICQ UIN can only be a number, no letters allowed");
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
/* checking e-mail address */
|
||||
if (empty($HTTP_POST_VARS["newuser_email"])) {
|
||||
if (empty($_POST["newuser_email"])) {
|
||||
die ("<strong>ERROR</strong>: please type your e-mail address");
|
||||
return false;
|
||||
} else if (!is_email($HTTP_POST_VARS["newuser_email"])) {
|
||||
} else if (!is_email($_POST["newuser_email"])) {
|
||||
die ("<strong>ERROR</strong>: the email address isn't correct");
|
||||
return false;
|
||||
}
|
||||
|
||||
if ($HTTP_POST_VARS["pass1"] == "") {
|
||||
if ($HTTP_POST_VARS["pass2"] != "")
|
||||
if ($_POST["pass1"] == "") {
|
||||
if ($_POST["pass2"] != "")
|
||||
die ("<strong>ERROR</strong>: you typed your new password only once. Go back to type it twice.");
|
||||
$updatepassword = "";
|
||||
} else {
|
||||
if ($HTTP_POST_VARS["pass2"] == "")
|
||||
if ($_POST["pass2"] == "")
|
||||
die ("<strong>ERROR</strong>: you typed your new password only once. Go back to type it twice.");
|
||||
if ($HTTP_POST_VARS["pass1"] != $HTTP_POST_VARS["pass2"])
|
||||
if ($_POST["pass1"] != $_POST["pass2"])
|
||||
die ("<strong>ERROR</strong>: you typed two different passwords. Go back to correct that.");
|
||||
$newuser_pass = $HTTP_POST_VARS["pass1"];
|
||||
$newuser_pass = $_POST["pass1"];
|
||||
$updatepassword = "user_pass=MD5('$newuser_pass'), ";
|
||||
setcookie("wordpresspass_".$cookiehash,md5($newuser_pass),time()+31536000);
|
||||
}
|
||||
|
||||
$newuser_firstname=addslashes(stripslashes($HTTP_POST_VARS['newuser_firstname']));
|
||||
$newuser_lastname=addslashes(stripslashes($HTTP_POST_VARS['newuser_lastname']));
|
||||
$newuser_nickname=addslashes(stripslashes($HTTP_POST_VARS['newuser_nickname']));
|
||||
$newuser_icq=addslashes(stripslashes($HTTP_POST_VARS['newuser_icq']));
|
||||
$newuser_aim=addslashes(stripslashes($HTTP_POST_VARS['newuser_aim']));
|
||||
$newuser_msn=addslashes(stripslashes($HTTP_POST_VARS['newuser_msn']));
|
||||
$newuser_yim=addslashes(stripslashes($HTTP_POST_VARS['newuser_yim']));
|
||||
$newuser_email=addslashes(stripslashes($HTTP_POST_VARS['newuser_email']));
|
||||
$newuser_url=addslashes(stripslashes($HTTP_POST_VARS['newuser_url']));
|
||||
$newuser_idmode=addslashes(stripslashes($HTTP_POST_VARS['newuser_idmode']));
|
||||
$user_description = addslashes(stripslashes($HTTP_POST_VARS['user_description']));
|
||||
$newuser_firstname=addslashes(stripslashes($_POST['newuser_firstname']));
|
||||
$newuser_lastname=addslashes(stripslashes($_POST['newuser_lastname']));
|
||||
$newuser_nickname=addslashes(stripslashes($_POST['newuser_nickname']));
|
||||
$newuser_icq=addslashes(stripslashes($_POST['newuser_icq']));
|
||||
$newuser_aim=addslashes(stripslashes($_POST['newuser_aim']));
|
||||
$newuser_msn=addslashes(stripslashes($_POST['newuser_msn']));
|
||||
$newuser_yim=addslashes(stripslashes($_POST['newuser_yim']));
|
||||
$newuser_email=addslashes(stripslashes($_POST['newuser_email']));
|
||||
$newuser_url=addslashes(stripslashes($_POST['newuser_url']));
|
||||
$newuser_idmode=addslashes(stripslashes($_POST['newuser_idmode']));
|
||||
$user_description = addslashes(stripslashes($_POST['user_description']));
|
||||
|
||||
$query = "UPDATE $tableusers SET user_firstname='$newuser_firstname', $updatepassword user_lastname='$newuser_lastname', user_nickname='$newuser_nickname', user_icq='$newuser_icq', user_email='$newuser_email', user_url='$newuser_url', user_aim='$newuser_aim', user_msn='$newuser_msn', user_yim='$newuser_yim', user_idmode='$newuser_idmode', user_description = '$user_description' WHERE ID = $user_ID";
|
||||
$result = $wpdb->query($query);
|
||||
@@ -103,7 +103,7 @@ case 'viewprofile':
|
||||
|
||||
|
||||
$profiledata = get_userdata($user);
|
||||
if ($HTTP_COOKIE_VARS['wordpressuser_'.$cookiehash] == $profiledata->user_login)
|
||||
if ($_COOKIE['wordpressuser_'.$cookiehash] == $profiledata->user_login)
|
||||
header ('Location: profile.php');
|
||||
|
||||
include_once('admin-header.php');
|
||||
|
||||
Reference in New Issue
Block a user