root/releases/0.65/profile/profile.class.php

<?php 
/*
Penny note: none of the queries in this file 
that are get_something_sql or
get_something_select can be converted to use 
prepared statements because they all have $where
that has come from some function somewhere...
*/

Class ElggProfile {

    function ElggProfile ($profile_id) {

        global $data;
        global $page_owner;
        global $PAGE;

        // ELGG profile system initialisation
        // ID of profile to view / edit
        
        if (!empty($profile_id)) {
            $this->id = $profile_id;
        } else {
            $this->id = -1;
        }

        $page_owner = $profile_id;

        // Profile initialisation
        // very strange init sequence from the old main() call follows
        $this->editfield_defaults();
        // $this->actions();     // not from here -- 
        // $this->upload_foaf();

    }

    function edit_link () {


        global $page_owner;
        global $data;
        global $CFG;

        $run_result = '';

        if (run("permissions:check", "profile")) {
        
            $editMsg = gettext("Click here to edit this profile.");

            $run_result .= <<<END
                
                <p>
                <a href="{$CFG->wwwroot}profile/edit.php?profile_id=$page_owner">$editMsg</a>
                </p>
END;

            $run_result .= run("profile:edit:link");
            
        }
        return $run_result;
    }

    function display_name () {

        global $name_cache;
        global $data;
    
        if (!isset($name_cache[$this->id]) || (time() - $name_cache[$this->id]->created > 60)) {
        
            $name_cache[$this->id]->created = time();
            $name_cache[$this->id]->data = htmlspecialchars(get_field('users','name','ident',$this->id), ENT_COMPAT, 'utf-8');
        
        }
        $run_result = $name_cache[$this->id]->data;
        return $run_result;
    }

    function display_form () {

        global $page_owner;

        global $data;

        $run_result = '';

        $body = "<p>\n" . gettext("    This screen allows you to edit your profile. Blank fields will not show up on your profile screen in any view; you can change the access level for each piece of information in order to prevent it from falling into the wrong hands. For example, we strongly recommend you keep your address to yourself or a few trusted parties.") . "</p>\n";

        if (run("permissions:check", "profile")) {
    
            $profile_username = run("users:id_to_name",$page_owner);
        


            $body .= "<form action=\"".url . "profile/edit.php?profile_id=".$page_owner."\" method=\"post\" enctype=\"multipart/form-data\">";
            $body .= "<p>" . gettext("You can import some profile data by uploading a FOAF file here:") . "</p>";
            $body .=templates_draw(array(
                                                 'context' => 'databox',
                                                 'name' => gettext("Upload a FOAF file:"),
                                                 'column1' => "<input name=\"foaf_file\" id=\"foaf_file\" type=\"file\" />",
                                                 'column2' => "<input type=\"submit\" value=\"".gettext("Upload") . "\" />"
                                                 )
                         );
            $body .= <<<END
        
                <input type="hidden" name="action" value="profile:foaf:upload" />
                <input type="hidden" name="profile_id" value="$page_owner" />
                </form>
        
END;
            $body .= "<p>" .gettext("Or you can fill in your profile directly below:") . "</p>";
            $body .= "<form action=\"".url . "profile/edit.php?profile_id=".$page_owner."\" method=\"post\">";
    
            // Cycle through all defined profile detail fields and display them
    
            if (!empty($data['profile:details']) && sizeof($data['profile:details']) > 0) {
        
                foreach($data['profile:details'] as $field) {
                    $body .= $this->editfield_display($field);
                }
    
            }
    
            $submitMsg = gettext("Submit details:");
            $saveProfile = gettext("Save your profile");
            $body .= <<< END
    
                <p align="center">
                <label>
                $submitMsg
                <input type="submit" name="submit" value="$saveProfile" />
                </label>
                <input type="hidden" name="action" value="profile:edit" />
                <input type="hidden" name="profile_id" value="$page_owner" />
                </p>

                </form>
END;

            $run_result .= $body;
    
        }
        return $run_result;
    }

    function editfield_defaults () {

        global $data;
        $run_result = '';
        // Initial profile data

        /* Profile info is of the format:
    
        $data['profile:details'][] = array(
                                                Description,
                                                Short / unique internal name,
                                                Type of field,
                                                User instructions for entering data
                                            )
        e.g.
        $data['profile:details'][] = array(gettext("Interests"),"interests","keywords",gettext("Separated with commas."));

        Additions to this data structure will input/output a corresponding FOAF field
        
        $data['foaf:profile'][] = array(
                                            Short / unique internal name,
                                            Corresponding FOAF schema field
                                            "collated" or "individual" -     whether multiple data elements (eg interests)
                                                                            should be in separate tags ("individual") or 
                                                                            in the same tag separated by commas
                                                                            (collated = default)
                                            "resource" or "enclosed" -         whether the data is an rdf:resource="" attribute
                                                                            or enclosed within the tag
                                                                            (resource = default)
                                        )
        e.g.
        $data['foaf:profile'][] = array("interests","foaf:interest");
        
        Also present is $data['vcard:profile:adr'][] for VCard ADR elements within the FOAF file
        e.g.
        $data['vcard:profile:adr'][] = array("streetaddress","vCard:Street","collated");
        */
    
        $data['profile:details'][] = array(gettext("Who am I?"),"biography","longtext",gettext("A short introduction for you."));
        $data['foaf:profile'][] = array("biography","bio:olb","collated","enclosed");
        
        $data['profile:details'][] = array(gettext("Brief description"),"minibio","text",gettext("For use in your sidebar profile."));
        
        // $data['profile:details'][] = array(gettext("Postal address"),"postaladdress","mediumtext");
        $data['profile:details'][] = array(gettext("Street address"),"streetaddress","text");
        $data['vcard:profile:adr'][] = array("streetaddress","vCard:Street","collated","enclosed");
        
        $data['profile:details'][] = array(gettext("Town"),"town","keywords");
        $data['vcard:profile:adr'][] = array("town","vCard:Locality","collated","enclosed");
        
        $data['profile:details'][] = array(gettext("State / Region"),"state","keywords");
        $data['vcard:profile:adr'][] = array("state","vCard:Region","collated","enclosed");
        
        $data['profile:details'][] = array(gettext("Postal code"),"postcode","text");
        $data['vcard:profile:adr'][] = array("postcode","vCard:Pcode","collated","enclosed");
        
        $data['profile:details'][] = array(gettext("Country"),"country","keywords");
        $data['vcard:profile:adr'][] = array("country","vCard:Country","collated","enclosed");
        
        $data['profile:details'][] = array(gettext("Email address"),"emailaddress","email");
        
        $data['profile:details'][] = array(gettext("Work telephone"),"workphone","text");
        $data['foaf:profile'][] = array("workphone","foaf:phone","individual","resource");
        
        $data['profile:details'][] = array(gettext("Home telephone"),"homephone","text");
        $data['foaf:profile'][] = array("homephone","foaf:phone","individual","resource");
        
        $data['profile:details'][] = array(gettext("Mobile telephone"),"mobphone","text");
        $data['foaf:profile'][] = array("mobphone","foaf:phone","individual","resource");
        
        $data['profile:details'][] = array(gettext("Official website address"),"workweb","web",gettext("The URL to your official website, if you have one."));
        $data['foaf:profile'][] = array("workweb","foaf:workplaceHomepage","individual","resource");
        
        $data['profile:details'][] = array(gettext("Personal website address"),"personalweb","web",gettext("The URL to your personal website, if you have one."));
        $data['foaf:profile'][] = array("personalweb","foaf:homepage","individual","resource");
        
        $data['profile:details'][] = array(gettext("ICQ number"),"icq","icq");
        $data['foaf:profile'][] = array("icq","foaf:icqChatID","individual","enclosed");
        
        $data['profile:details'][] = array(gettext("MSN chat"),"msn","msn");
        $data['foaf:profile'][] = array("msn","foaf:msnChatID","individual","enclosed");
        
        $data['profile:details'][] = array(gettext("AIM screenname"),"aim","aim");
        $data['foaf:profile'][] = array("aim","foaf:aimChatID","individual","enclosed");
        
        $data['profile:details'][] = array(gettext("Skype username"),"skype","skype");
        
        $data['profile:details'][] = array(gettext("Jabber username"),"jabber","text");
        $data['foaf:profile'][] = array("jabber","foaf:jabberChatID","individual","enclosed");
        
        $data['profile:details'][] = array(gettext("Interests"),"interests","keywords",gettext("Separated with commas."));
        $data['foaf:profile'][] = array("interests","foaf:interest","individual","resource");
        // $data['foaf:profile'][] = array("interests","bio:keywords","collated","enclosed");
        
        $data['profile:details'][] = array(gettext("Likes"),"likes","keywords",gettext("Separated with commas."));
        $data['profile:details'][] = array(gettext("Dislikes"),"dislikes","keywords",gettext("Separated with commas."));
        $data['profile:details'][] = array(gettext("Occupation"),"occupation","text");
        $data['profile:details'][] = array(gettext("Industry"),"industry","keywords");
        
        $data['profile:details'][] = array(gettext("Company / Institution"),"organisation","text");
        $data['foaf:profile'][] = array("organisation","foaf:organization","collated","enclosed");
        
        $data['profile:details'][] = array(gettext("Job Title"),"jobtitle","text");
        $data['profile:details'][] = array(gettext("Job Description"),"jobdescription","text");
        $data['profile:details'][] = array(gettext("I would like to ..."),"goals","keywords",gettext("Separated with commas."));
        $data['profile:details'][] = array(gettext("Career Goals"),"careergoals","longtext",gettext("Freeform: let colleagues and potential employers know what you'd like to get out of your career."));
        $data['profile:details'][] = array(gettext("Level of Education"),"educationlevel","text");
        $data['profile:details'][] = array(gettext("High School"),"highschool","text");
        $data['profile:details'][] = array(gettext("University / College"),"university","text");
        $data['profile:details'][] = array(gettext("Degree"),"universitydegree","text");
        $data['profile:details'][] = array(gettext("Main Skills"),"skills","keywords",gettext("Separated with commas."));
        return $run_result;
    }

    // the field parameter seems to be an array of unknown structure... 
    function editfield_display ($field) {

        // copy array element with default to ''
        $flabel = !empty($field[0]) ? $field[0] : '';
        $fname  = !empty($field[1]) ? $field[1] : '';
        $ftype  = !empty($field[2]) ? $field[2] : '';
        $fblurb = !empty($field[3]) ? $field[3] : '';

        global $page_owner;
        global $data;
        global $CFG;

        $run_result = '';

        if (empty($flabel) && empty($fname)) {
            return '';
        }
            
        if (!isset($data['profile:preload'][$flabel])) {
            if (!$value = get_record('profile_data','name',$fname,'owner',$page_owner)) {
                $value = "";
                $value->value = "";
                $value->access = $CFG->default_access;
            }
        } else {
            $value = "";
            $value->value = $data['profile:preload'][$fname];
            $value->access = $CFG->default_access;
            
        }
        
        $name = "<label for=\"$fname\"><b>{$flabel}</b>";
        if (!empty($fblurb)) {
            $name .= "<br /><i>" . $fblurb . "</i>";
        }
        $name .= '</label>';
        
        if (empty($ftype)) {
            $ftype = "text";
        }

        $column1 = display_input_field(array("profiledetails[" . $fname . "]",$value->value,$ftype,$fname,@$value->ident,$page_owner));
        $column2 = "<label>". gettext("Access Restriction:") ."<br />";
        $column2 .= run("display:access_level_select",array("profileaccess[".$fname . "]",$value->access)) . "</label>";
        
        $run_result .=templates_draw(array(
                                           'context' => 'databox',
                                           'name'    => $name,
                                           'column1' => $column1,
                                           'column2' => $column2
                                           )
                                     );
        
        return $run_result;

    }

    function field_display ($field, $allvalues) {

        global $data;

        $run_result = '';

        if (sizeof($field) >= 2) {
    
            // $value = get_record('profile_data','name',$field[1],'owner',$this->id);
        
            foreach($allvalues as $curvalue) {
                if ($curvalue->name == stripslashes($field[1])) {
                    $value = $curvalue;
                    break; // found it, done!
                }
            }

            if (!isset($value)) {
                return '';
            }

            if ((($value->value != "" && $value->value != "blank")) 
                && run("users:access_level_check", $value->access)) {
                $name = $field[0];
                $column1 = display_output_field(array($value->value,$field[2],$field[1],$field[0],$value->ident));
                $run_result .=templates_draw(array(
                                                           'context' => 'databox1',
                                                           'name' => $name,
                                                           'column1' => $column1
                                                           )
                                   );
            }
        }
        return $run_result;
    }

    function search ($tagtype, $tagvalue) {

        global $data, $CFG, $db;
    
        $handle = 0;
        $run_result = '';

        foreach($data['profile:details'] as $profiletype) {
            if ($profiletype[1] == $tagtype && $profiletype[2] == "keywords") {
                $handle = 1;
            }
        }
    
        if ($handle) {
            
            $searchline = "tagtype = " . $db->qstr($tagtype) . " AND tag = " . $db->qstr($tagvalue) . "";
            $searchline = "(" . run("users:access_level_sql_where",$_SESSION['userid']) . ") AND " . $searchline;
            $searchline = str_replace("owner","t.owner",$searchline);
            $tagvalue = stripslashes($tagvalue);
            if ($result = get_record_sql('SELECT DISTINCT u.* FROM '.$CFG->prefix.'tags t 
                                          LEFT JOIN '.$CFG->prefix.'users u ON u.ident = t.owner
                                          WHERE '.$searchline)) {
                $profilesMsg = gettext("Profiles where");
                $body = <<< END
            
                    <h2>
                    $profilesMsg
END;
                $body .= "'".gettext($tagtype)."' = '".$tagvalue."':";
                $body .= <<< END
                    </h2>
END;
                $body .= <<< END
                    <table class="userlist">
                    <tr>
END;
                $i = 1;
                foreach($result as $key => $info) {
                    $width = 50;
                    if (sizeof($tagvalue) > 4) {
                        $width = 25;
                    }
                    $friends_username = $info->username;
                    $friends_name = htmlspecialchars(stripslashes($info->name), ENT_COMPAT, 'utf-8');
                    $friends_menu = run("users:infobox:menu",array($info->ident));
                    $body .= <<< END
                        <td align="center">
                        <p>
                        <a href="{$CFG->wwwroot}{$friends_username}/">
                        <img src="{$CFG->wwwroot}{$friends_username}/icons/{$info->icon}/w/{$width}" alt="{$friends_name}" border="0" /></a><br />
                        <span class="userdetails">
                        {$friends_name}
                    {$friends_menu}
                    </span>
                          </p>
                          </td>
END;
                    if ($i % 5 == 0) {
                        $body .= "</tr><tr>";
                    }
                    $i++;
                }
                $body .= <<< END
                    </tr>
                    </table>
END;
                $run_result .= $body;
            }
        }
        return $run_result;
    }

    function search_all_tagtypes () {

        global $data;

        foreach($data['profile:details'] as $profiletype) {
            if ($profiletype[2] == "keywords") {