user_profile.php

<?php
/* 	
    Open Media Collectors Database
    Copyright (C) 2001,2013 by Jason Pell

    This program is free software; you can redistribute it and/or
    modify it under the terms of the GNU General Public License
    as published by the Free Software Foundation; either version 2
    of the License, or (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program; if not, write to the Free Software
    Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
 */

// This must be first - includes config.php
require_once("./include/begin.inc.php");

include_once("./lib/database.php");
include_once("./lib/auth.php");
include_once("./lib/logging.php");
include_once("./lib/borrowed_item.php");
include_once("./lib/email.php");

/**
 * Is current user able to see UID address 
 *
 * @param unknown_type $HTTP_VARS
 * @param unknown_type $address_type_r
 * @return unknown
 */
function is_user_address_visible($HTTP_VARS, $address_type_r) {
	if ($address_type_r['public_address_ind'] == 'Y')
		return TRUE;
	else if (is_user_granted_permission(PERM_ADMIN_USER_PROFILE))
		return TRUE;
	else if ($address_type_r['borrow_address_ind'] == 'Y' && (is_owner_and_borrower(get_opendb_session_var('user_id'), $HTTP_VARS['uid'])) || is_owner_and_borrower($HTTP_VARS['uid'], get_opendb_session_var('user_id'))) {
		return TRUE;
	} else {
		return FALSE;
	}
}

if (is_site_enabled()) {
	if (is_opendb_valid_session()) {
		if (is_user_granted_permission(PERM_VIEW_USER_PROFILE)) {
			$user_r = fetch_user_r($HTTP_VARS['uid']);
			if (is_array($user_r)) {
				$page_title = get_opendb_lang_var('user_profile_for_user_name', array('user_id' => $user_r['user_id'], 'fullname' => $user_r['fullname']));
				echo (_theme_header($page_title));
				echo ('<h2>' . $page_title . '</h2>');

				if ($user_r['active_ind'] != 'Y') {
					echo ("<p class=\"userDeactivatedNotice\">" . get_opendb_lang_var('user_deactivated') . "</p>");
				}

				echo ("<table>");

				echo (format_field(get_opendb_lang_var('userid'), $user_r['user_id']));

				echo (format_field(get_opendb_lang_var('user_role'), $user_r['role_description']));

				echo (format_field(get_opendb_lang_var('fullname'), $user_r['fullname']));

				if ($user_r['user_id'] === get_opendb_session_var('user_id') || is_user_granted_permission(PERM_ADMIN_USER_PROFILE)) {
					echo (format_field(get_opendb_lang_var('email'), $user_r['email_addr']));
				}

				echo ("\n</table>");

				$address_header_displayed = FALSE;
				$addr_results = fetch_user_address_type_rs($user_r['user_id'], TRUE);
				if ($addr_results) {
					while ($address_type_r = db_fetch_assoc($addr_results)) {
						if (is_user_address_visible($HTTP_VARS, $address_type_r)) {
							$attr_results = fetch_address_type_attribute_type_rs($address_type_r['s_address_type'], 'query', TRUE);
							if ($attr_results) {
								echo ('<h3>' . $address_type_r['description'] . '</h3>');
								echo ("<table>");
								while ($addr_attribute_type_r = db_fetch_assoc($attr_results)) {
									$value = NULL;
									if (is_lookup_attribute_type($addr_attribute_type_r['s_attribute_type'])) {
										$value = fetch_user_address_lookup_attribute_val($address_type_r['sequence_number'], $addr_attribute_type_r['s_attribute_type'], $addr_attribute_type_r['order_no']);
									} else {
										$value = fetch_user_address_attribute_val($address_type_r['sequence_number'], $addr_attribute_type_r['s_attribute_type'], $addr_attribute_type_r['order_no']);
									}

									if (strlen($value) > 0) {
										echo (get_item_display_field(NULL, $addr_attribute_type_r, $value));
									}
								}
								db_free_result($attr_results);
								echo ("\n</table>");
							}
						}
					}
					db_free_result($addr_results);
				}

				if (is_valid_opendb_mailer() && strlen($user_r['email_addr']) > 0 && is_user_granted_permission(PERM_SEND_EMAIL) && is_user_permitted_to_receive_email($user_r['user_id'])) {
					$url = 'email.php?' . get_url_string(Array('op' => 'send_to_uid', 'uid' => $user_r['user_id'], 'inc_menu' => 'N', 'subject' => ifempty($HTTP_VARS['subject'], get_opendb_lang_var('no_subject'))));

					$footer_links_r[] = array(url => $url, target => 'popup(640,480)', text => get_opendb_lang_var('send_email'));
				}

				if (is_user_granted_permission(PERM_VIEW_LISTINGS) && $user_r['active_ind'] == 'Y') {
					$footer_links_r[] = array(url => "listings.php?owner_id=" . $user_r['user_id'], text => get_opendb_lang_var('list_user_items'));
				}

				if (is_user_granted_permission(PERM_ADMIN_USER_LISTING) && is_opendb_session_var('user_listing_url_vars')) {
					$footer_links_r[] = array(url => "user_listing.php?" . get_url_string(get_opendb_session_var('user_listing_url_vars')), text => get_opendb_lang_var('back_to_user_listing'));
				}

				echo format_footer_links($footer_links_r);
			} else {
				$message = get_opendb_lang_var('user_not_found', array('user_id' => $user_r['user_id']));

				echo _theme_header($message);
				echo ("<p class=\"error\">" . $message . "</p>");
				echo (_theme_footer());
			}
		} else {
			opendb_not_authorised_page(PERM_VIEW_USER_PROFILE, $HTTP_VARS);
		}
	} else {
		// invalid login, so login instead.
		redirect_login($PHP_SELF, $HTTP_VARS);
	}
} else { //if(is_site_enabled())
	opendb_site_disabled();
}

// Cleanup after begin.inc.php
require_once("./include/end.inc.php");
?>