0, 'username' => 'Sakura User', 'username_clean' => 'sakura user', 'password_hash' => '', 'password_salt' => '', 'password_algo' => 'nologin', 'password_iter' => 1000, 'password_chan' => 0, 'password_new' => '', 'email' => 'sakura@localhost', 'rank_main' => 0, 'ranks' => '[0]', 'name_colour' => '', 'register_ip' => '127.0.0.1', 'last_ip' => '127.0.0.1', 'usertitle' => 'Internal fallback account', 'regdate' => 0, 'lastdate' => 0, 'lastunamechange' => 0, 'birthday' => '', 'posts' => 0, 'country' => 'XX', 'userData' => '[]', ]; // Empty rank template public static $emptyRank = [ 'id' => 0, 'rankname' => 'Sakura Rank', 'multi' => 0, 'colour' => '#444', 'description' => 'A hardcoded dummy rank for fallback.', ]; // Check if a user is logged in public static function checkLogin($uid = null, $sid = null, $bypassCookies = false) { // Set $uid and $sid if they're null if ($uid == null) { $uid = Session::$userId; } // ^ if ($sid == null) { $sid = Session::$sessionId; } // Check if cookie bypass is false if (!$bypassCookies) { // Check if the cookies are set if (!isset($_COOKIE[Configuration::getConfig('cookie_prefix') . 'id']) || !isset($_COOKIE[Configuration::getConfig('cookie_prefix') . 'session'])) { return false; } } // Check if the session exists if (!$session = Session::checkSession($uid, $sid)) { return false; } // Check if the user is activated if (Permissions::check('SITE', 'DEACTIVATED', $uid, 1)) { return false; } // Extend the cookie times if the remember flag is set if ($session == 2 && !$bypassCookies) { setcookie(Configuration::getConfig('cookie_prefix') . 'id', $uid, time() + 604800, Configuration::getConfig('cookie_path'), Configuration::getConfig('cookie_domain')); setcookie(Configuration::getConfig('cookie_prefix') . 'session', $sid, time() + 604800, Configuration::getConfig('cookie_path'), Configuration::getConfig('cookie_domain')); } // Update last online Database::update('users', [ [ 'lastdate' => time(), ], [ 'id' => [$uid, '='], ], ]); // Update the premium meta self::updatePremiumMeta($uid); // If everything went through return true return true; } // Log a user in public static function login($username, $password, $remember = false, $cookies = true) { // Check if authentication is disallowed if (Configuration::getConfig('lock_authentication')) { return [0, 'AUTH_LOCKED']; } // Check if the user that's trying to log in actually exists if (!$uid = self::userExists($username, false)) { return [0, 'USER_NOT_EXIST']; } // Get account data $user = self::getUser($uid); // Validate password switch ($user['password_algo']) { // Abyssing case 'nologin': return [0, 'NO_LOGIN']; // Default hashing method default: if (!Hashing::validate_password($password, [ $user['password_algo'], $user['password_iter'], $user['password_salt'], $user['password_hash'], ])) { return [0, 'INCORRECT_PASSWORD', $user['password_chan']]; } } // Check if the user has the required privs to log in if (Permissions::check('SITE', 'DEACTIVATED', $user['id'], 1)) { return [0, 'NOT_ALLOWED']; } // Create a new session $sessionKey = Session::newSession($user['id'], $remember); // Set cookies if ($cookies) { setcookie(Configuration::getConfig('cookie_prefix') . 'id', $user['id'], time() + 604800, Configuration::getConfig('cookie_path'), Configuration::getConfig('cookie_domain')); setcookie(Configuration::getConfig('cookie_prefix') . 'session', $sessionKey, time() + 604800, Configuration::getConfig('cookie_path'), Configuration::getConfig('cookie_domain')); } // Successful login! (also has a thing for the legacy password system) return [1, 'LOGIN_SUCESS']; } // Logout and kill the session public static function logout() { // Check if user is logged in if (!self::checkLogin()) { return false; } // Remove the active session from the database if (!Session::deleteSession(Session::$sessionId, true)) { return false; } // Set cookies setcookie(Configuration::getConfig('cookie_prefix') . 'id', 0, time() - 60, Configuration::getConfig('cookie_path'), Configuration::getConfig('cookie_domain')); setcookie(Configuration::getConfig('cookie_prefix') . 'session', '', time() - 60, Configuration::getConfig('cookie_path'), Configuration::getConfig('cookie_domain')); // Return true indicating a successful logout return true; } // Register user public static function register($username, $password, $confirmpass, $email, $tos, $captcha = null, $regkey = null) { // Check if authentication is disallowed if (Configuration::getConfig('lock_authentication')) { return [0, 'AUTH_LOCKED']; } // Check if registration is even enabled if (Configuration::getConfig('disable_registration')) { return [0, 'DISABLED']; } // Check if registration codes are required if (Configuration::getConfig('require_registration_code')) { // Check if the code is valid if (!self::checkRegistrationCode($regkey)) { return [0, 'INVALID_REG_KEY']; } } // Check if the user agreed to the ToS if (!$tos) { return [0, 'TOS']; } // Verify the captcha if it's enabled if (Configuration::getConfig('recaptcha')) { if (!Main::verifyCaptcha($captcha)['success']) { return [0, 'CAPTCHA_FAIL']; } } // Check if the username already exists if (self::userExists($username, false)) { return [0, 'USER_EXISTS']; } // Username too short if (strlen($username) < Configuration::getConfig('username_min_length')) { return [0, 'NAME_TOO_SHORT']; } // Username too long if (strlen($username) > Configuration::getConfig('username_max_length')) { return [0, 'NAME_TOO_LONG']; } // Check if the given email address is formatted properly if (!filter_var($email, FILTER_VALIDATE_EMAIL)) { return [0, 'INVALID_EMAIL']; } // Check the MX record of the email if (!Main::checkMXRecord($email)) { return [0, 'INVALID_MX']; } // Check password entropy if (Main::pwdEntropy($password) < Configuration::getConfig('min_entropy')) { return [0, 'PASS_TOO_SHIT']; } // Passwords do not match if ($password != $confirmpass) { return [0, 'PASS_NOT_MATCH']; } // Set a few variables $usernameClean = Main::cleanString($username, true); $emailClean = Main::cleanString($email, true); $password = Hashing::create_hash($password); $requireActive = Configuration::getConfig('require_activation'); $userRank = $requireActive ? [1] : [2]; $userRankJson = json_encode($userRank); // Insert the user into the database Database::insert('users', [ 'username' => $username, 'username_clean' => $usernameClean, 'password_hash' => $password[3], 'password_salt' => $password[2], 'password_algo' => $password[0], 'password_iter' => $password[1], 'email' => $emailClean, 'rank_main' => $userRank[0], 'ranks' => $userRankJson, 'register_ip' => Main::getRemoteIP(), 'last_ip' => Main::getRemoteIP(), 'regdate' => time(), 'lastdate' => 0, 'lastunamechange' => time(), 'country' => Main::getCountryCode(), 'userData' => '[]', ]); // Get userid of the new user $uid = Database::fetch('users', false, ['username_clean' => [$usernameClean, '=']])['id']; // Check if we require e-mail activation if ($requireActive) { // Send activation e-mail to user self::sendActivationMail($uid); } // Check if registration codes are required if (Configuration::getConfig('require_registration_code')) { // If we do mark the registration code that was used as used self::markRegistrationCodeUsed($regkey, $uid); } // Return true with a specific message if needed return [1, ($requireActive ? 'EMAILSENT' : 'SUCCESS')]; } // Check if a user exists and then send the password forgot email public static function sendPasswordForgot($username, $email) { // Check if authentication is disallowed if (Configuration::getConfig('lock_authentication')) { return [0, 'AUTH_LOCKED']; } // Clean username string $usernameClean = Main::cleanString($username, true); $emailClean = Main::cleanString($email, true); // Do database request $user = Database::fetch('users', false, [ 'username_clean' => [$usernameClean, '='], 'email' => [$emailClean, '='], ]); // Check if user exists if (count($user) < 2) { return [0, 'USER_NOT_EXIST']; } // Check if the user has the required privs to log in if (Permissions::check('SITE', 'DEACTIVATED', $user['id'], 1)) { return [0, 'NOT_ALLOWED']; } // Generate the verification key $verk = Main::newActionCode('LOST_PASS', $user['id'], [ 'meta' => [ 'password_change' => 1, ], ]); // Create new urls object $urls = new Urls(); // Build the e-mail $message = "Hello " . $user['username'] . ",\r\n\r\n"; $message .= "You are receiving this notification because you have (or someone pretending to be you has) requested a password reset link to be sent for your account on \"" . Configuration::getConfig('sitename') . "\". If you did not request this notification then please ignore it, if you keep receiving it please contact the site administrator.\r\n\r\n"; $message .= "To use this password reset key you need to go to a special page. To do this click the link provided below.\r\n\r\n"; $message .= "http://" . Configuration::getConfig('url_main') . $urls->format('SITE_FORGOT_PASSWORD') . "?pw=true&uid=" . $user['id'] . "&key=" . $verk . "\r\n\r\n"; $message .= "If successful you should be able to change your password here.\r\n\r\n"; $message .= "Alternatively if the above method fails for some reason you can go to http://" . Configuration::getConfig('url_main') . $urls->format('SITE_FORGOT_PASSWORD') . "?pw=true&uid=" . $user['id'] . " and use the key listed below:\r\n\r\n"; $message .= "Verification key: " . $verk . "\r\n\r\n"; $message .= "You can of course change this password yourself via the profile page. If you have any difficulties please contact the site administrator.\r\n\r\n"; $message .= "--\r\n\r\nThanks\r\n\r\n" . Configuration::getConfig('mail_signature'); // Send the message Main::sendMail([$user['email'] => $user['username']], Configuration::getConfig('sitename') . ' password restoration', $message); // Return success return [1, 'SUCCESS']; } // Reset password with key public static function resetPassword($verk, $uid, $newpass, $verpass) { // Check if authentication is disallowed if (Configuration::getConfig('lock_authentication')) { return [0, 'AUTH_LOCKED']; } // Check password entropy if (Main::pwdEntropy($newpass) < Configuration::getConfig('min_entropy')) { return [0, 'PASS_TOO_SHIT']; } // Passwords do not match if ($newpass != $verpass) { return [0, 'PASS_NOT_MATCH']; } // Check the verification key $action = Main::useActionCode('LOST_PASS', $verk, $uid); // Check if we got a negative return if (!$action[0]) { return [0, $action[1]]; } // Hash the password $password = Hashing::create_hash($newpass); $time = time(); // Update the user Database::update('users', [ [ 'password_hash' => $password[3], 'password_salt' => $password[2], 'password_algo' => $password[0], 'password_iter' => $password[1], 'password_chan' => $time, ], [ 'id' => [$uid, '='], ], ]); // Return success return [1, 'SUCCESS']; } // Check if a user exists and then resend the activation e-mail public static function resendActivationMail($username, $email) { // Check if authentication is disallowed if (Configuration::getConfig('lock_authentication')) { return [0, 'AUTH_LOCKED']; } // Clean username string $usernameClean = Main::cleanString($username, true); $emailClean = Main::cleanString($email, true); // Do database request $user = Database::fetch('users', false, [ 'username_clean' => [$usernameClean, '='], 'email' => [$emailClean, '='], ]); // Check if user exists if (count($user) < 2) { return [0, 'USER_NOT_EXIST']; } // Check if a user is activated if (!Permissions::check('SITE', 'DEACTIVATED', $user['id'], 1)) { return [0, 'USER_ALREADY_ACTIVE']; } // Send activation e-mail self::sendActivationMail($user['id']); // Return success return [1, 'SUCCESS']; } // Send the activation e-mail and do other required stuff public static function sendActivationMail($uid, $customKey = null) { // Get the user data $user = Database::fetch('users', false, ['id' => [$uid, '=']]); // User is already activated or doesn't even exist if (count($user) < 2 || !Permissions::check('SITE', 'DEACTIVATED', $user['id'], 1)) { return false; } // Generate activation key $activate = ($customKey ? $customKey : Main::newActionCode('ACTIVATE', $uid, [ 'user' => [ 'rank_main' => 2, 'ranks' => json_encode([2]), ], ])); // Create new urls object $urls = new Urls(); // Build the e-mail $message = "Welcome to " . Configuration::getConfig('sitename') . "!\r\n\r\n"; $message .= "Please keep this e-mail for your records. Your account intormation is as follows:\r\n\r\n"; $message .= "----------------------------\r\n\r\n"; $message .= "Username: " . $user['username'] . "\r\n\r\n"; $message .= "Your profile: http://" . Configuration::getConfig('url_main') . $urls->format('USER_PROFILE', [$user['id']]) . "\r\n\r\n"; $message .= "----------------------------\r\n\r\n"; $message .= "Please visit the following link in order to activate your account:\r\n\r\n"; $message .= "http://" . Configuration::getConfig('url_main') . $urls->format('SITE_ACTIVATE') . "?mode=activate&u=" . $user['id'] . "&k=" . $activate . "\r\n\r\n"; $message .= "Your password has been securely stored in our database and cannot be retrieved. "; $message .= "In the event that it is forgotten, you will be able to reset it using the email address associated with your account.\r\n\r\n"; $message .= "Thank you for registering.\r\n\r\n"; $message .= "--\r\n\r\nThanks\r\n\r\n" . Configuration::getConfig('mail_signature'); // Send the message Main::sendMail([$user['email'] => $user['username']], Configuration::getConfig('sitename') . ' Activation Mail', $message); // Return true indicating that the things have been sent return true; } // Activating a user public static function activateUser($uid, $requireKey = false, $key = null) { // Get the user data $user = Database::fetch('users', false, ['id' => [$uid, '=']]); // Check if user exists if (!count($user) > 1) { return [0, 'USER_NOT_EXIST']; } // Check if user is already activated if (!Permissions::check('SITE', 'DEACTIVATED', $user['id'], 1)) { return [0, 'USER_ALREADY_ACTIVE']; } // Set default values for activation $rank = 2; $ranks = json_encode([2]); // Check if a key is set (there's an option to not set one for user management reasons but you can't really get around this anyway) if ($requireKey) { // Check the action code $action = Main::useActionCode('ACTIVATE', $key, $uid); // Check if we got a negative return if (!$action[0]) { return [0, $action[1]]; } // Assign the special values $instructionData = json_decode($action[2], true); $rank = $instructionData['user']['rank_main']; $ranks = $instructionData['user']['ranks']; } // Activate the account Database::update('users', [ [ 'rank_main' => $rank, 'ranks' => $ranks, ], [ 'id' => [$uid, '='], ], ]); // Return success return [1, 'SUCCESS']; } // Deactivating a user public static function deactivateUser($uid) { // Get the user data $user = Database::fetch('users', false, ['id' => [$uid, '=']]); // Check if user exists if (!count($user) > 1) { return [0, 'USER_NOT_EXIST']; } // Check if user is already deactivated if (Permissions::check('SITE', 'DEACTIVATED', $user['id'], 1)) { return [0, 'USER_ALREADY_DEACTIVE']; } // Deactivate the account Database::update('users', [ [ 'rank_main' => 2, 'ranks' => json_encode([2]), ], [ 'id' => [$uid, '='], ], ]); // Return success return [1, 'SUCCESS']; } // Check if registration code is valid public static function checkRegistrationCode($code) { // Get registration key $keyRow = Database::fetch('regcodes', true, ['code' => [$code, '='], 'key_used' => [0, '=']]); // Check if it exists and return it return count($keyRow) ? $keyRow[0]['id'] : false; } // Mark registration code as used public static function markRegistrationCodeUsed($code, $uid = 0) { // Check if the code exists if (!$id = self::checkRegistrationCode($code)) { return false; } // Mark it as used Database::update('regcodes', [ [ 'used_by' => $uid, 'key_used' => 1, ], [ 'id' => [$id, '='], ], ]); // Return true because yeah return true; } // Create new registration code public static function createRegistrationCode() { // Check if we're logged in if (!self::checkLogin()) { return false; } // Check if the user is not exceeding the maximum registration key amount if (count(Database::fetch('regcodes', true, ['uid' => [Session::$userId, '=']])) >= Configuration::getConfig('max_reg_keys')) { return false; } // Generate a code by MD5'ing some random bullshit $code = md5('SAKURA' . rand(0, 99999999) . Session::$userId . 'NOOKLSISGOD'); // Insert the key into the database Database::insert('regcodes', [ 'code' => $code, 'created_by' => Session::$userId, 'used_by' => 0, 'key_used' => 0, ]); // Return the code return $code; } // Set the default rank of a user public static function setDefaultRank($uid, $rid, $userIdIsUserData = false) { // Get the specified user $user = $userIdIsUserData ? $uid : self::getUser($uid); // Decode the json $ranks = json_decode($user['ranks'], true); // Check if the rank we're trying to set is actually there if (!in_array($rid, $ranks)) { return false; } // Update the row Database::update('users', [ [ 'rank_main' => $rid, ], [ 'id' => [$uid, '='], ], ]); // Return true if everything was successful return true; } // Add a rank to a user public static function addRanksToUser($ranks, $uid, $userIdIsUserData = false) { // Get the specified user $user = $userIdIsUserData ? $uid : self::getUser($uid); // Decode the array $current = json_decode($user['ranks'], true); // Go over all the new ranks foreach ($ranks as $rank) { // Check if the user already has this rank and set it if not if (!in_array($rank, $current)) { $current[] = (int) $rank; } } // Encode the array $current = json_encode($current); // Update the row Database::update('users', [ [ 'ranks' => $current, ], [ 'id' => [$uid, '='], ], ]); // Return true because return true; } // Removing ranks from a user public static function removeRanksFromUser($ranks, $uid, $userIdIsUserData = false) { // Get the specified user $user = $userIdIsUserData ? $uid : self::getUser($uid); // Get the ranks $current = json_decode($user['ranks'], true); // Check the current ranks for ranks in the set array foreach ($current as $key => $rank) { // Unset the rank if (in_array($rank, $ranks)) { unset($current[$key]); } } // Encode the array $current = json_encode($current); // Update the row Database::update('users', [ [ 'ranks' => $current, ], [ 'id' => [$uid, '='], ], ]); // Return true return true; } // Check if a user has these ranks public static function checkIfUserHasRanks($ranks, $userid, $userIdIsUserData = false) { // Get the specified user $user = $userIdIsUserData ? $userid : self::getUser($userid); // Check if the main rank is the specified rank if (in_array($user['rank_main'], $ranks)) { return true; } // Decode the json for the user's ranks $uRanks = json_decode($user['ranks'], true); // If not go over all ranks and check if the user has them foreach ($ranks as $rank) { // We check if $rank is in $user['ranks'] and if yes return true if (in_array($rank, $uRanks)) { return true; } } // If all fails return false return false; } // Check if a user exists public static function userExists($user, $id = true) { // Clean string $user = Main::cleanString($user, true); // Do database request $user = Database::fetch('users', true, [($id ? 'id' : 'username_clean') => [$user, '=']]); // Return count (which would return 0, aka false, if nothing was found) return count($user) ? $user[0]['id'] : false; } // Get the available profile fields public static function getProfileFields() { // Get profile fields $profileFields = Database::fetch('profilefields'); // If there's nothing just return null if (!count($profileFields)) { return null; } // Create output array $fields = []; // Iterate over the fields and clean them up foreach ($profileFields as $field) { $fields[$field['id']] = $field; $fields[$field['id']]['ident'] = Main::cleanString($field['name'], true, true); $fields[$field['id']]['addit'] = json_decode($field['additional'], true); } // Return the yeahs return $fields; } // Get the available option fields public static function getOptionFields() { // Get option fields $optionFields = Database::fetch('optionfields'); // If there's nothing just return null if (!count($optionFields)) { return null; } // Create output array $fields = []; // Iterate over the fields and clean them up foreach ($optionFields as $field) { if (!Permissions::check('SITE', $field['require_perm'], Session::$userId, 1)) { continue; } $fields[$field['id']] = $field; } // Return the yeahs return $fields; } // Get user's profile fields public static function getUserProfileFields($id, $inputIsData = false) { // Get profile fields $profileFields = Database::fetch('profilefields'); // If there's nothing just return null if (!count($profileFields)) { return null; } // Assign the profileData variable $profileData = ($inputIsData ? $id : self::getUser($id)['userData']); // Once again if nothing was returned just return null if (count($profileData) < 1 || $profileData == null || empty($profileData['profileFields'])) { return null; } // Redeclare profileData $profileData = $profileData['profileFields']; // Create output array $profile = []; // Check if profile fields aren't fake foreach ($profileFields as $field) { // Completely strip all special characters from the field name $fieldName = Main::cleanString($field['name'], true, true); // Check if the user has the current field set otherwise continue if (!array_key_exists($fieldName, $profileData)) { continue; } // Assign field to output with value $profile[$fieldName] = array(); $profile[$fieldName]['name'] = $field['name']; $profile[$fieldName]['value'] = $profileData[$fieldName]; $profile[$fieldName]['islink'] = $field['islink']; // If the field is set to be a link add a value for that as well if ($field['islink']) { $profile[$fieldName]['link'] = str_replace('{{ VAL }}', $profileData[$fieldName], $field['linkformat']); } // Check if we have additional options as well if ($field['additional'] != null) { // Decode the json of the additional stuff $additional = json_decode($field['additional'], true); // Go over all additional forms foreach ($additional as $subName => $subField) { // Check if the user has the current field set otherwise continue if (!array_key_exists($subName, $profileData)) { continue; } // Assign field to output with value $profile[$fieldName][$subName] = $profileData[$subName]; } } } // Return appropiate profile data return $profile; } // Updating the profile data of a user public static function updateUserDataField($id, $data) { // We retrieve the current content from the database $current = self::getUser($id)['userData']; // Merge the arrays $data = array_merge($current, $data); // Encode the json $data = json_encode($data); // Store it in the database Database::update('users', [ [ 'userData' => $data, ], [ 'id' => [$id, '='], ], ]); } // Check if a user is online public static function checkUserOnline($id) { // Get user $user = self::getUser($id); // Return false if the user doesn't exist because a user that doesn't exist can't be online if (empty($user)) { return false; } // Return true if the user was online in the last 5 minutes return ($user['lastdate'] > (time() - 500)); } // Get all online users public static function checkAllOnline() { // Assign time - 500 to a variable $time = time() - 500; // Get all online users in the past 5 minutes $getAll = Database::fetch('users', true, ['lastdate' => [$time, '>']]); // Return all the online users return $getAll; } // Add premium to a user public static function addUserPremium($id, $seconds) { // Check if there's already a record of premium for this user in the database $getUser = Database::fetch('premium', false, [ 'uid' => [$id, '='], ]); // Calculate the (new) start and expiration timestamp $start = isset($getUser['startdate']) ? $getUser['startdate'] : time(); $expire = isset($getUser['expiredate']) ? $getUser['expiredate'] + $seconds : time() + $seconds; // If the user already exists do an update call, otherwise an insert call if (empty($getUser)) { Database::insert('premium', [ 'uid' => $id, 'startdate' => $start, 'expiredate' => $expire, ]); } else { Database::update('premium', [ [ 'expiredate' => $expire, ], [ 'uid' => [$id, '='], ], ]); } // Return the expiration timestamp return $expire; } // Remove the premium status of a user public static function removeUserPremium($id) { Database::delete('premium', [ 'uid' => [$id, '='], ]); } // Check if user has Premium public static function checkUserPremium($id) { // Check if the user has static premium if (Permissions::check('SITE', 'STATIC_PREMIUM', $id, 1)) { return [2, 0, time() + 1]; } // Attempt to retrieve the premium record from the database $getRecord = Database::fetch('premium', false, [ 'uid' => [$id, '='], ]); // If nothing was returned just return false if (empty($getRecord)) { return [0]; } // Check if the Tenshi hasn't expired if ($getRecord['expiredate'] < time()) { self::removeUserPremium($id); self::updatePremiumMeta($id); return [0, $getRecord['startdate'], $getRecord['expiredate']]; } // Else return the start and expiration date return [1, $getRecord['startdate'], $getRecord['expiredate']]; } // Update the premium data public static function updatePremiumMeta($id) { // Get the ID for the premium user rank from the database $premiumRank = Configuration::getConfig('premium_rank_id'); // Run the check $check = self::checkUserPremium($id); // Check if the user has premium if ($check[0] == 1) { // If so add the rank to them self::addRanksToUser([$premiumRank], $id); // Check if the user's default rank is standard user and update it to premium if (self::getUser($id)['rank_main'] == 2) { self::setDefaultRank($id, $premiumRank); } } elseif ($check[0] == 0 && count($check) > 1) { // Else remove the rank from them self::removeRanksFromUser([$premiumRank], $id); } } // Get user data by id public static function getUser($id) { // If user was found return user data return (new User($id))->data; } // Get rank data by id public static function getRank($id) { // Execute query $rank = Database::fetch('ranks', false, ['id' => [$id, '=']]); // Return false if no rank was found if (empty($rank)) { return self::$emptyRank; } // If rank was found return rank data return $rank; } // Get user(s) by IP public static function getUsersByIP($ip) { // Get users by registration IP $registeredFrom = Database::fetch('users', true, ['register_ip' => [$ip, '=']]); // Get users by last IP $lastFrom = Database::fetch('users', true, ['last_ip' => [$ip, '='], 'register_ip' => [$ip, '!=']]); // Merge the arrays $users = array_merge($registeredFrom, $lastFrom); // Return the array with users return $users; } // Get users in rank public static function getUsersInRank($rankId, $users = null, $excludeAbyss = true) { // Get all users (or use the supplied user list to keep server load down) if (!$users) { $users = self::getAllUsers(); } // Make output array $rank = array(); // Go over all users and check if they have the rank id foreach ($users as $user) { // If so store the user's row in the array if (self::checkIfUserHasRanks([$rankId], $user, true) && ($excludeAbyss ? $user['password_algo'] != 'nologin' : true)) { $rank[] = $user; } } // Then return the array with the user rows return $rank; } // Get all users public static function getAllUsers($includeInactive = true, $includeAbyss = false) { // Execute query $getUsers = Database::fetch('users', true); // Define variable $users = []; // Reorder shit foreach ($getUsers as $user) { // Skip abyss if (!$includeAbyss && $user['password_algo'] == 'nologin') { continue; } // Skip if inactive and not include deactivated users if (!$includeInactive && Permissions::check('SITE', 'DEACTIVATED', $user['id'], 1)) { continue; } $users[$user['id']] = $user; } // and return an array with the users return $users; } // Get all ranks public static function getAllRanks() { // Execute query $getRanks = Database::fetch('ranks', true); // Define variable $ranks = []; // Reorder shit foreach ($getRanks as $rank) { $ranks[$rank['id']] = $rank; } // and return an array with the ranks return $ranks; } // Get all warnings issued to a user (or all warnings a user issued) public static function getWarnings($uid = 0, $iid = false) { // Do the database query $warnings = Database::fetch('warnings', true, ($uid ? [ ($iid ? 'iid' : 'uid') => [$uid, '='], ] : null)); // Return all the warnings return $warnings; } // Get a user's notifications public static function getNotifications($uid = null, $timediff = 0, $excludeRead = true, $markRead = false) { // Prepare conditions $conditions = array(); $conditions['uid'] = [($uid ? $uid : Session::$userId), '=']; if ($timediff) { $conditions['timestamp'] = [time() - $timediff, '>']; } if ($excludeRead) { $conditions['notif_read'] = [0, '=']; } // Get notifications for the database $notifications = Database::fetch('notifications', true, $conditions); // Mark the notifications as read if ($markRead) { // Iterate over all entries foreach ($notifications as $notification) { // If the notifcation is already read skip if ($notification['notif_read']) { continue; } // Mark them as read self::markNotificationRead($notification['id']); } } // Return the notifications return $notifications; } // Marking notifications as read public static function markNotificationRead($id, $mode = true) { // Execute an update statement Database::update('notifications', [ [ 'notif_read' => ($mode ? 1 : 0), ], [ 'id' => [$id, '='], ], ]); } // Adding a new notification public static function createNotification($user, $title, $text, $timeout = 60000, $img = 'FONT:fa-info-circle', $link = '', $sound = 0) { // Get current timestamp $time = time(); // Insert it into the database Database::insert('notifications', [ 'uid' => $user, 'timestamp' => $time, 'notif_read' => 0, 'notif_sound' => ($sound ? 1 : 0), 'notif_title' => $title, 'notif_text' => $text, 'notif_link' => $link, 'notif_img' => $img, 'notif_timeout' => $timeout, ]); } // Getting a user's PMs public static function getPrivateMessages($from = false) { // Get all messages from the database $messages = Database::fetch('messages', true, [ ($from ? 'from_user' : 'to_user') => [Session::$userId, '='], ]); // Prepare a storage array $store = array(); // Go over each message and check if they are for the current user foreach ($messages as $message) { // Store the message $store[$message['id']] = $message; // Store user data as well $store[$message['id']]['data']['from']['user'] = ($_MSG_USR = self::getUser($message['from_user'])); $store[$message['id']]['data']['from']['rank'] = self::getRank($_MSG_USR['rank_main']); $store[$message['id']]['data']['to']['user'] = ($_MSG_USR = self::getUser($message['to_user'])); $store[$message['id']]['data']['to']['rank'] = self::getRank($_MSG_USR['rank_main']); } // Return store array return $store; } // Get friends public static function getFriends($uid = null, $timestamps = false, $getData = false, $checkOnline = false) { // Assign $uid if (!$uid) { $uid = Session::$userId; } // Get all friends $getFriends = Database::fetch('friends', true, [ 'uid' => [$uid, '='], ]); // Create the friends array $friends = []; // Iterate over the raw database return foreach ($getFriends as $key => $friend) { // Add friend to array $friends[($timestamps ? $friend['fid'] : $key)] = $getData ? ([ 'user' => ($_UDATA = self::getUser($friend['fid'])), 'rank' => self::getRank($_UDATA['rank_main']), ]) : $friend[($timestamps ? 'timestamp' : 'fid')]; } // Check who is online and who isn't if ($checkOnline) { // Check each user foreach ($friends as $key => $friend) { $friends[self::checkUserOnline($getData ? $friend['user']['id'] : $friend) ? 'online' : 'offline'][] = $friend; } } // Return formatted array return $friends; } // Get non-mutual friends public static function getPendingFriends($uid = null, $getData = false) { // Assign $of automatically if it's not set if (!$uid) { $uid = Session::$userId; } // Get all friend entries from other people involved the current user $friends = Database::fetch('friends', true, [ 'fid' => [$uid, '='], ]); // Create pending array $pending = []; // Check if the friends are mutual foreach ($friends as $friend) { // Check if the friend is mutual if (!self::checkFriend($friend['uid'], $uid)) { $pending[] = $getData ? ([ 'user' => ($_UDATA = self::getUser($friend['uid'])), 'rank' => self::getRank($_UDATA['rank_main']), ]) : $friend; } } // Return the pending friends return $pending; } // Check if a friend is mutual public static function checkFriend($fid, $uid = null) { // Assign $uid if (!$uid) { $uid = Session::$userId; } // Get the user's friends $self = self::getFriends($uid); // Check if the friend is actually in the user's array if (!in_array($fid, $self)) { return 0; } // Get the friend's friends $friend = self::getFriends($fid); // Check if the friend is actually in the user's array if (in_array($uid, $friend)) { return 2; } // Return true if all went through return 1; } // Adding a friend public static function addFriend($uid) { // Validate that the user exists if (!self::getUser($uid)) { return [0, 'USER_NOT_EXIST']; } // Check if the user already has this user a friend if (Database::fetch('friends', false, ['fid' => [$uid, '='], 'uid' => [Session::$userId, '=']])) { return [0, 'ALREADY_FRIENDS']; } // Add friend Database::insert('friends', [ 'uid' => Session::$userId, 'fid' => $uid, 'timestamp' => time(), ]); // Return true because yay return [1, Users::checkFriend($uid) == 2 ? 'FRIENDS' : 'NOT_MUTUAL']; } // Removing a friend public static function removeFriend($uid, $deleteRequest = false) { // Check if the user has this user a friend if (!Database::fetch('friends', false, ['fid' => [$uid, '='], 'uid' => [Session::$userId, '=']])) { return [0, 'ALREADY_REMOVED']; } // Remove friend Database::delete('friends', [ 'uid' => [Session::$userId, '='], 'fid' => [$uid, '='], ]); // Attempt to remove the request if ($deleteRequest) { Database::delete('friends', [ 'fid' => [Session::$userId, '='], 'uid' => [$uid, '='], ]); } // Return true because yay return [1, 'REMOVED']; } // Get the ID of the newest user public static function getNewestUserId() { return Database::fetch('users', false, ['password_algo' => ['nologin', '!=']], ['id', true], ['1'])['id']; } }