14)
return false;
return true;
}
/**
* Returns true if the given user has opted out of emails, false otherwise
*/
function isOptedOutOfEmails($userID) {
$userID = mysql_escape_string($userID);
$sql = "SELECT `isOptedOutOfEmails` FROM `users`
WHERE `ID` = '$userID' AND `isOptedOutOfEmails` = 1
LIMIT 1";
$result = mysql_query($sql) or die(mysql_error());
return (mysql_num_rows($result) >= 1);
}
function setOptedOutOfEmails($userID, $setting) {
$userID = mysql_escape_string($userID);
if ($setting) $setting == '1'; else $setting == '0';
$sql = "UPDATE `users`
SET `isOptedOutOfEmails` = '$setting'
WHERE `ID` = '$userID'
LIMIT 1";
$result = mysql_query($sql) or die(mysql_error());
}
if (isset($_POST['updateSettings']) AND $_POST['updateSettings'] == 'true') {
$userID = $_SESSION['userID'];
if (isset($_POST['displayName'])) {
$inputname = sql_clean($_POST['displayName']);
$inputname = chatFilter($inputname);
if (validatename($inputname)) {
$sql = "UPDATE `users`
SET `displayName` = '$inputname'
WHERE `ID` = '$userID'
";
mysql_query($sql);
$_SESSION['displayName'] = $inputname;
$r .= "
Name change success!";
} else {
$r .= "
Invalid name";
}
}
if ($_POST['emailOptOut'] == 'true') {
setOptedOutOfEmails($userID, true);
$r .= "
You are opted out of emails";
} else {
setOptedOutOfEmails($userID, false);
$r .= "
You are accepting emails";
}
DoRedirect("Settings updated! Thank you!");
exit;
}
$checked = '';
if (isOptedOutOfEmails($userID)) {
$checked = 'checked="yes"';
}
$displayName = htmlspecialchars($_SESSION['displayName'], ENT_COMPAT | ENT_HTML5);
?>
Control Panel