2) && $uid != USERUID && $action == "editbio") $output .= write_error(_NOTAUTHORIZED); if(isMEMBER) $output .= "
"._EDITPERSONAL."
"; else $output .= "
"._NEWACCOUNT."
"; if(!empty($_POST['submit'])) { /* The section adds fields from the authorfields table to the authorinfo table allowing dynamic additions to the bio/registration page */ $fields = dbquery("SELECT * FROM ".TABLEPREFIX."fanfiction_authorfields WHERE field_on = '1'"); while($field = dbassoc($fields)) { $uid = isset($_POST['uid']) && isNumber($_POST['uid']) ? $_POST['uid'] : false; if(!$uid) continue; $oldfield = dbquery("SELECT * FROM ".TABLEPREFIX."fanfiction_authorinfo WHERE field='".$field['field_id']."' AND uid = '".$uid."'"); if(dbnumrows($oldfield) > 0) { $newinfo = isset($_POST["af_".$field['field_name']]) ? escapestring(descript($_POST["af_".$field['field_name']])) : false; if(!empty($newinfo)) dbquery("UPDATE ".TABLEPREFIX."fanfiction_authorinfo SET info='".$newinfo."' WHERE uid = '$uid' AND field = '".descript($field['field_id'])."'"); else dbquery("DELETE FROM ".TABLEPREFIX."fanfiction_authorinfo WHERE uid = '$uid' AND field = '".$field['field_id']."'"); } else if(!empty($_POST["af_".$field['field_name']])) dbquery("INSERT INTO ".TABLEPREFIX."fanfiction_authorinfo(`uid`, `info`, `field`) VALUES('$uid', '".escapestring($_POST["af_".$field['field_name']])."', '".$field['field_id']."');"); } /* End dynamic fields */ $output .= write_message(_ACTIONSUCCESSFUL." ".(isset($_GET['uid']) ? _BACK2ADMIN : _BACK2ACCT)); } else { if($action != "register") { $result = dbquery("SELECT * FROM "._AUTHORTABLE." WHERE "._UIDFIELD." = '$uid' LIMIT 1"); $user = dbassoc($result); $result2 = dbquery("SELECT * FROM ".TABLEPREFIX."fanfiction_authorinfo WHERE uid = '$uid'"); while($field = dbassoc($result2)) { $user["af_".$field['field']] = $field['info']; } } $output .= "
"; $output .= " ".$user['user_name']; $output .= "
"; $output .= " ".$user['user_realm']; $output .= "
"; $output .= "
"; $output .= " ".$user['user_email']; $output .= "
"; $output .= "
"; $output .= " ".$user['user_email']; $output .= "
"; /* The section adds fields to the form from the authorfields table to the authorinfo table allowing dynamic additions to the bio/registration page */ $authorfields = dbquery("SELECT * FROM ".TABLEPREFIX."fanfiction_authorfields WHERE field_on = '1'"); while($field = dbassoc($authorfields)) { if($field['field_type'] == 1 || $field['field_type'] == 4 || $field['field_type'] == 6) $output .= "
\n\n
\n"; if($field['field_type'] == 2) { $output .= "
\n \n
\n"; } if($field['field_type'] == 5) eval(stripslashes($field['field_code_in'])); if($field['field_type'] == 3) { $output .= "
".$field['field_title'].":\n"; $output .= " \n
\n"; } } /* End dynamic fields */ $output .= "
"; if(!isADMIN && $action != "register") { $output .= " ["._DELETE."]"; } $output .= "
".write_message("* "._REQUIREDFIELDS); } ?>