.
require_once("../inc/boinc_db.inc");
require_once("../inc/xml.inc");
require_once("../inc/team.inc");
require_once("../inc/email.inc");
// do a very cursory check that the given text is valid;
// for now, just make sure it has the given start and end tags,
// and at least one \n in the middle.
// Ideally, we'd like to check that it's valid XML
//
function bad_xml($text, $start, $end) {
$text = trim($text);
if (strstr($text, $start) != $text) {
return "No start tag";
}
if (strstr($text, $end) != $end) {
return "No end tag";
}
if (!strstr($text, "\n")) {
return "No CR";
}
return "";
}
function success($x) {
echo "
$x
";
}
xml_header();
$retval = db_init_xml();
if ($retval) xml_error($retval);
$auth = post_str("account_key", true);
if ($auth) {
$name = post_str("name", true);
$country = post_str("country", true);
$postal_code = post_str("postal_code", true);
$global_prefs = post_str("global_prefs", true);
$project_prefs = post_str("project_prefs", true);
$url = post_str("url", true);
$send_email = post_str("send_email", true);
$show_hosts = post_str("show_hosts", true);
$teamid = post_int("teamid", true);
$venue = post_str("venue", true);
$email_addr = post_str("email_addr", true);
$password_hash = post_str("password_hash", true);
} else {
$auth = get_str("account_key");
$name = get_str("name", true);
$country = get_str("country", true);
$postal_code = get_str("postal_code", true);
$global_prefs = get_str("global_prefs", true);
$project_prefs = get_str("project_prefs", true);
$url = get_str("url", true);
$send_email = get_str("send_email", true);
$show_hosts = get_str("show_hosts", true);
$teamid = get_int("teamid", true);
$venue = get_str("venue", true);
$email_addr = get_str("email_addr", true);
$password_hash = get_str("password_hash", true);
}
$user = BoincUser::lookup_auth($auth);
if (!$user) {
xml_error(ERR_DB_NOT_FOUND);
}
$name = BoincDb::escape_string($name);
if ($country && !is_valid_country($country)) {
xml_error(-1, "invalid country");
}
$country = BoincDb::escape_string($country);
$postal_code = BoincDb::escape_string($postal_code);
$global_prefs = BoincDb::escape_string($global_prefs);
$project_prefs = BoincDb::escape_string($project_prefs);
// Do processing on project prefs so that we don't overwrite project-specific
// settings if AMS has no idea about them
if (stripos($project_prefs, "") === false) {
// AMS request does not contain project specific prefs, preserve original
$orig_project_specific = stristr($user->project_prefs, "");
$orig_project_specific = substr($orig_project_specific, 0, stripos($orig_project_specific, "") + 19)."\n";
$project_prefs = str_ireplace("", "\n".$orig_project_specific, $project_prefs);
}
$url = BoincDb::escape_string($url);
$send_email = BoincDb::escape_string($send_email);
$show_hosts = BoincDb::escape_string($show_hosts);
$venue = BoincDb::escape_string($venue);
if ($email_addr) {
if (!is_valid_email_addr($email_addr)) {
xml_error(ERR_BAD_EMAIL_ADDR, "Invalid email address");
}
if (is_banned_email_addr($email_addr)) {
xml_error(ERR_BAD_EMAIL_ADDR, "Invalid email address");
}
$email_addr = strtolower(BoincDb::escape_string($email_addr));
}
$password_hash = BoincDb::escape_string($password_hash);
$query = "";
if ($name) {
$query .= " name='$name', ";
}
if ($country) {
$query .= " country='$country', ";
}
if ($postal_code) {
$query .= " postal_code='$postal_code', ";
}
if ($global_prefs) {
$global_prefs = str_replace("\\r\\n", "\n", $global_prefs);
$x = bad_xml($global_prefs, "", "");
if ($x) {
error("Invalid global preferences: $x");
}
$query .= " global_prefs='$global_prefs', ";
}
if ($project_prefs) {
$project_prefs = str_replace("\\r\\n", "\n", $project_prefs);
$x = bad_xml($project_prefs, "", "");
if ($x) {
xml_error(ERR_XML_PARSE, "Invalid project preferences: $x");
}
$query .= " project_prefs='$project_prefs', ";
}
if ($url) {
$query .= " url='$url', ";
}
if ($send_email != null) {
$query .= " send_email='$send_email', ";
}
if ($show_hosts != null) {
$query .= " show_hosts='$show_hosts', ";
}
if (!is_null($teamid)) {
if ($teamid==0) {
user_quit_team($user);
} else {
$team = BoincTeam::lookup_id_nocache($teamid);
if ($team && $team->joinable) {
user_join_team($team, $user);
}
}
}
if ($venue) {
$query .= " venue='$venue', ";
}
if ($email_addr && $email_addr!=$user->email_addr) {
$old_email_addr = $user->email_addr;
$query .= " email_addr='$email_addr', ";
}
if ($password_hash) {
$query .= " passwd_hash='$password_hash', ";
}
if (strlen($query)) {
// the seti_id=seti_id is to make the query valid,
// since $query ends with a comma at this point
//
$query = "$query seti_id=seti_id";
$result = $user->update($query);
if ($result) {
success("");
} else {
xml_error(-1, "database error: ".BoincDb::error());
}
} else {
success("");
}
?>