www.gusucode.com > 图片存储_淘宝相册_免费网盘源代码 > user.php

    <?php
include "waterfunction.php";
class user
{
	function upload_img($user_dat, $globalvars)
	{
		if(isset ($_POST['upload_guest']))
		{
			switch($_FILES['guestupload']['error'])
			{
				case 1:
					$error_occured = true;
					echo "您试图上传的文件的大小超过系统限制.<br />";
				break;
				
				case 2:
					$error_occured = true;
					echo "您试图上传的文件的大小超过系统限制.<br />";
				break;
			}
				
			$split_ext = explode(',', $globalvars->settings['allowed_ext']);
			$split_img = explode('.', $_FILES['guestupload']['name']);
			$extcount = count($split_ext);

			for($i=0;$i<$extcount;$i++)
			{
				$invalidimg = true;
				$split_values = explode(':', $split_ext[$i]);
				$i_values = $extcount - 1;
			
				if($split_values[0] == strtolower($split_img[1]) && $split_values[1] == "allow")
				{	
					$invalidimg = false;
					$i = $extcount + 1000;
				} elseif($i == $i_values && $split_values[0] != strtolower($split_img[1]))
				{
					// If the image was valid, we would have exited by now.
					$error_occured = true;
				}
			}
			
			if($error_occured != true)
			{
				echo '
<SCRIPT language=javascript type=text/javascript>
    function cloneUrl(url)
    {
	    clipboardData.setData(\'Text\',url);
	    window.alert(\'复制成功!\');
	}
	
	function filesNull(source, args) {
	    args.IsValid = false;
	    var box = document.getElementById("filebox");
	    var list = box.childNodes;
	    for (var i = 0; i < list.length; i++) {
	    
	        var file = list[i].childNodes;

	        for (var j = 0; j < file.length; j++) {
	            if (file[j].type == "file" && file[j].value != "") {
	                args.IsValid = true;
	                break;
	            }
	        }
	    }
	    if (args.IsValid == false) {
	        window.alert("请选择需要上传的图片!");
	    }
	}
</SCRIPT>';
				
				if(move_uploaded_file ($_FILES['guestupload']['tmp_name'], $globalvars->maindir . "public/" . $_FILES['guestupload']['name']))
				{	
					if(strtolower($_SESSION["code"])!=strtolower($_POST["validate"])){
						echo "<div style=\"padding:5px;border:#990000 1px solid;background-color:#FFD2D3;width:500px;\"><b><font color=red>验证码错误!</font></b></div>";
					}else{
					// use the uploader's ip, a random letter, and the original name to create.....unique filename!
					$split_addr = explode('.', $_SERVER['REMOTE_ADDR']);		
				//生成随机数
				$randomnum=NULL;
				for($j=0;$j<=5;$j++)//随机数字的长度,本例随机数长度为6
				{
					srand((double)microtime()*1000000);
					$randomnumber=rand(!$j ? 1: 0,9);//产生随机数,不以0为第一个数,有些特殊的地方0开头被系统省略
					$randomnum.=$randomnumber;
				}
				//为文件改名
				$final_img_name = time().'_'.$randomnum.  "." . strtolower($split_img[1]);
					rename($globalvars->maindir . "public/" . $_FILES['guestupload']['name'], $globalvars->maindir . "public/" . $final_img_name);
					chmod($globalvars->maindir . "public/" . $final_img_name, 0644);
					echo "图片上传成功. ";
					echo "点击 " . '<a href="users/public/' . $final_img_name .'" target="_blank">这里</a>' . " 查看图片.";
					//为临时文件上水印
					//echo "users/public/" . $final_img_name . "." . strtolower($split_img[1]);
					imageWaterMark("users/public/" . $final_img_name,9,$waterImage);
					echo "
					<!-- 结果显示区域开始 -->

				<div id='panel1' style='text-align:center;'>
	
					<DIV style='WIDTH: 590px; HEIGHT: 20px'>
						<DIV style='FLOAT: left; WIDTH: 10px; BORDER-BOTTOM: #d9d9d9 1px solid; HEIGHT: 20px'></DIV>
						<DIV style='BORDER-RIGHT: #d9d9d9 1px solid; BORDER-TOP: #d9d9d9 1px solid; FLOAT: left; BORDER-LEFT: #d9d9d9 1px solid; WIDTH: 130px; COLOR: #adadad; PADDING-TOP: 5px; HEIGHT: 20px; font-size:12px; BACKGROUND-COLOR: #f2f2f2'>您刚才上传的图片地址
						</DIV>
						<DIV style='FLOAT: left; WIDTH: 450px; BORDER-BOTTOM: #d9d9d9 1px solid; HEIGHT: 20px'></DIV>
					</DIV>
					<DIV style='WIDTH: 590px; margin-bottom:15px; HEIGHT: 100px; BACKGROUND-COLOR: #f2f2f2'>
						<DIV style='FLOAT: left; WIDTH: 440px; HEIGHT:100px;* padding-top:6px; '>
							<DIV style='PADDING-RIGHT: 10px; WIDTH: 440px; HEIGHT: 28px; text-align:right' >
							<INPUT id=InputURL style='WIDTH: 300px; FONT-FAMILY: arial; HEIGHT: 20px' type=text 
                            value='http://www.0tie.com/users/public/" . $final_img_name . "' />
                            <INPUT id='urlbtn' style='FONT-SIZE: 12px; WIDTH: 110px; PADDING-TOP: 2px' 
                             type='button' value='复制图片地址' onClick=\"cloneUrl('http://www.0tie.com/users/public/" . $final_img_name . "')\"/>
							</DIV>
							
							<DIV style='PADDING-RIGHT: 10px; WIDTH: 440px; HEIGHT: 28px; text-align:right' >
							<INPUT id=InputUBB style='WIDTH: 300px; FONT-FAMILY: arial; HEIGHT: 20px' type=text 
                             value='[IMG]http://www.0tie.com/users/public/" . $final_img_name . "[/IMG]' />
                             <INPUT id='ubbbtn' style='FONT-SIZE: 12px; WIDTH: 110px; PADDING-TOP: 2px' 
                             type=button value='复制UBB代码' onClick=\"cloneUrl('[IMG]http://www.0tie.com/users/public/" . $final_img_name . "[/IMG]')\"/>
							</DIV>
							
							<DIV style='PADDING-RIGHT: 10px; WIDTH: 440px; HEIGHT: 28px; text-align:right' >
							<INPUT id=InputHTML style='WIDTH: 300px; FONT-FAMILY: arial; HEIGHT: 20px' type=text 
                                value='<A HREF=http://www.0tie.com/users/public/" . $final_img_name . ">" . $final_img_name . "</A>' />
                           <INPUT id='htmlbtn' style='FONT-SIZE: 12px; WIDTH: 110px; PADDING-TOP: 2px' 
                           type=button value=复制HTML代码  onclick=\"cloneUrl('<A HREF=http://www.0tie.com/users/public/" . $final_img_name . ">" . $final_img_name . "</A>')\"/>
							</DIV>
						</DIV>
                    </DIV>  
</div>
<!-- 结果显示区域结束 -->";
					}
				} else {
					echo "<DIV align=center style=\"width: 500px; height:20px; text-align:left; color:#959595\"><b><font color=red>未知错误</b></div>";
				}
			} else {
				if($invalidimg == true)
				{
					echo "您试图上传的图片格式不在允许范围内.";
				}			
			}
		}
		
		$filesize_limit = explode(':', $globalvars->settings['max_upload']);
		$uploadmax_set = new functions();
		
		switch($filesize_limit[1])
		{
			case MB:
				$uploadmax = $uploadmax_set->mb_bytes($filesize_limit[0]);
			break;
			
			case KB:
				$uploadmax = $uploadmax_set->kb_bytes($filesize_limit[0]);
			break;
		}
		
		echo '
		<form action="' . $_SERVER['PHP_SELF'] . '?user=upload" enctype="multipart/form-data" method="post">
			  <input type="hidden" name="MAX_FILE_SIZE" value="' . $uploadmax . '" />
			  验证码:<input type="text" name="validate" value="" size=10 style="vertical-align:bottom;HEIGHT: 20px"> <img id="authcode" src="imgcode.php" align=bottom><a href="#" onClick="authcode.src=\'imgcode.php?\'+Math.random();">看不清,换一张</a><br/><br/>
			  <input type="file" name="guestupload" size=56 style="BORDER-RIGHT: #7c98c5 1px solid; BORDER-TOP: #7c98c5 1px solid; BACKGROUND: #fff; BORDER-LEFT: #7c98c5 1px solid; BORDER-BOTTOM: #7c98c5 1px solid; HEIGHT: 23px"/>
			  <input type="submit" name="upload_guest" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; PADDING-LEFT: 3px; FONT-WEIGHT: bold; BACKGROUND-IMAGE: url(images/btn_bg.bmp); BORDER-LEFT: 0px; WIDTH: 110px; COLOR: #ffffff; PADDING-TOP: 3px; BORDER-BOTTOM: 0px; FONT-FAMILY: Arial, 宋体; HEIGHT: 25px" value="开始上传" />
			  </form>';
	}
	
	function confirm()
	{
		if(file_exists("usrconfirm/" . $_GET['confirm']))
		{
			$checkusr = file("usrconfirm/" . $_GET['confirm']);
			
			if(mysql_query("UPDATE imgup_users SET status='approved' WHERE name='" . $checkusr[0] . "'"))
			{
				echo "您的帐户已经被激活.";
				unlink("usrconfirm/" . $_GET['confirm']);
			}
		} else {
			echo "这不是个有效的帐户.";
		}
	}
	
	function register($user_dat, $globalvars)
	{
		if($globalvars->settings['allow_register'] == "no")
		{
			echo "目前禁止注册.";
			$exitp = new template();
			$exitp->exitp($user_dat, $globalvars);
		}
		
		if(isset ($_POST['register']))
		{
			if(!empty ($_POST['user']) && !empty ($_POST['pass']) && !empty ($_POST['email']))
			{
				$invalidchars = false;
				$userpass_valid = "[^[:punct:][:space:][:blank:]]$";
				
				if(!eregi($userpass_valid, $_POST['user']) || !ereg($userpass_valid, $_POST['pass']))
				{
					echo "<div style=\"padding:5px;border:#990000 1px solid;background-color:#FFD2D3;width:500px;\">您的用户名或密码包含不合法字符.</div>";
					
					$invalidchars = true;
				}
				
				if(!eregi("^.+@.+\..+$", $_POST['email']))
				{
					echo "<div style=\"padding:5px;border:#990000 1px solid;background-color:#FFD2D3;width:500px;\">您的 e-mail 无效.</div>";
					
					$invalidchars = true;
				}
				
				if($_POST['pass'] != $_POST['confpass'])
				{
					echo "<div style=\"padding:5px;border:#990000 1px solid;background-color:#FFD2D3;width:500px;\">两次输入密码不匹配.</div>";
					
					$invalidchars = true;
				}
				if($_POST['pass'] == $_POST['confpass']&&strlen($_POST['pass'])<6)
				{
					echo "<div style=\"padding:5px;border:#990000 1px solid;background-color:#FFD2D3;width:500px;\">密码长度必须大于6.</div>";
					
					$invalidchars = true;
				}
				if(strtolower($_SESSION["code"])!=strtolower($_POST["validate"]))
				{
						echo "<div style=\"padding:5px;border:#990000 1px solid;background-color:#FFD2D3;width:500px;\"><b><font color=red>验证码错误!</font></b></div>";
					$invalidchars = true;
				}
				
				if($invalidchars != true)
				{
					$user_query = mysql_query("SELECT * FROM imgup_users WHERE name='" . $_POST['user'] . "'");
					$user_arr = mysql_fetch_array($user_query);
				
					if($user_arr == null)
					{
						umask(0);
						mysql_query("INSERT INTO imgup_users(name, pass, email, user_group, displaytype, status) VALUES ('" . $_POST['user'] . "', '" . $_POST['pass'] . "', '" . $_POST['email'] . "', 'normal', 1, 'approved')");
						
						if(@mkdir($globalvars->maindir . $_POST['user'], 0777))
						{
							mkdir($globalvars->maindir . $_POST['user'] . "/thumbnails", 0777);
							
							switch($globalvars->settings['validateuser'])
							{
								case adminapprove:
									echo "所有的帐户都需要管理员审核. 您可以登陆,  <br />但是在管理员审核通过您的帐户前, 您什么都不能做. 点击 " . '<a href="' . $_SERVER['PHP_SELF'] . '?user=login">这里</a> 登陆.';
								break;
								
								case emailconfirm:
									$explode_ip = explode('.', $_SERVER['REMOTE_ADDR']);
									
									$randnum = rand(60, 5786); 
									$randtwo = rand(96, 6985);
									$replace = array(".", "/", "\\");
									$replace2 = array("xZ", "yX", "xZ");
									
									$encryptstr = crypt($randnum . $explode_ip[0] . $randtwo . $_POST['user'] . $explode[3]);
									$confirmstr = str_replace($replace, $replace2, $encryptstr);
									
									touch("usrconfirm/" . $confirmstr);
									chmod("usrconfirm/" . $confirmstr, 0777);
									
									$writeuser = fopen("usrconfirm/" . $confirmstr, 'a+');
									fwrite($writeuser, $_POST['user']);
									fclose($writeuser);
									
									$body = "想激活您的帐户(" . $_POST['user'] . "), 请点下面的链接:\n\n" . $globalvars->serverurl . "index.php?user=confirm&confirm=" . $confirmstr;
									mail($_POST['email'], "ImgUpload Account(" . $_POST['user'] . ")",  $body, 'From: ' . $globalvars->settings['admin_email']);
									
									echo "一封激活 e-mail 已经被发送到 <i>" . $_POST['email'] . "</i>. 点击 e-mail 中提供的激活链接来激活您的帐户. 然后点击 " . '<a href="' . $_SERVER['PHP_SELF'] . '?user=login">这里</a> 登陆.';
								break;
								
								case auto:
									mysql_query("UPDATE imgup_users SET status='approved' WHERE name='" . $_POST['user'] . "'");
									echo "您已经注册. 点击 " . '<a href="' . $_SERVER['PHP_SELF'] . '?user=login">这里</a> 登陆.';
								break;
							}
						
							$exitp = new template();
							$exitp->exitp($user_dat, $globalvars);
						}
					} else {
						echo "<div style=\"padding:5px;border:#990000 1px solid;background-color:#FFD2D3;width:500px;\">用户名 <b>" . $_POST['user'] . "</b> 已经被注册.<br /></div>";
					}
				}
			} else {
				echo "<div style=\"padding:5px;border:#990000 1px solid;background-color:#FFD2D3;width:500px;\">必须填写完整!</div>";
			}
		}
		echo '<br/>
		<div style="padding:5px;border:#6600FF 1px solid;background-color:#CAE0EA;width:300px;">新用户注册</div>
		<form action="' . $_SERVER['PHP_SELF'] . '?user=register" method="post" />
		<div style="algin:center;width:220px;"><div style="text-align:left;float:left;width:60px;padding-top:2px;">用户名:</div><div style="float:right;width:80px;"><input type="text" name="user" style="height:18px" /></div></div>
		<div style="algin:center;width:220px;"><div style="text-align:left;float:left;width:60px;padding-top:2px;">密&nbsp;&nbsp;码:</div><div style="float:right;width:80px;"><input type="password" name="pass" style="height:18px" /></div></div>
		<div style="algin:center;width:220px;"><div style="text-align:left;float:left;width:60px;padding-top:2px;">确认密码:</div><div style="float:right;width:80px;"><input type="password" name="confpass" style="height:18px" /></div></div>
		<div style="algin:center;width:220px;"><div style="text-align:left;float:left;width:60px;padding-top:2px;">E-mail:</div><div style="float:right;width:80px;"><input type="text" name="email" style="height:18px" /></div></div>
		<div style="algin:center;width:240px;">验证码:<input type="text" name="validate" value="" size=10 style="vertical-align:bottom;HEIGHT: 20px"> <img id="authcode" src="imgcode.php" align=bottom><a href="#" onClick="authcode.src=\'imgcode.php?\'+Math.random();">换一张</a></div><br/>
		<input type="submit" name="register" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; PADDING-LEFT: 3px; FONT-WEIGHT: bold; BACKGROUND-IMAGE: url(images/btn_bg.bmp); BORDER-LEFT: 0px; WIDTH: 110px; COLOR: #ffffff; PADDING-TOP: 3px; BORDER-BOTTOM: 0px; FONT-FAMILY: Arial, 宋体; HEIGHT: 25px" value="开始注册" />
			  </form> ';
	}
	
	function login($user_dat, $globalvars)
	{
		if(isset ($_POST['login']))
		{
			$invalidchars = false;
			$userpass_valid = "[^[:punct:][:space:][:blank:]]$";
				
			if(!eregi($userpass_valid, $_POST['user']))
			{
				echo "用户名包含不合法字符.<br />";
				$invalidchars = true;
			}
			if(strtolower($_SESSION["code"])!=strtolower($_POST["validate"]))
				{
					echo "<div style=\"padding:5px;border:#990000 1px solid;background-color:#FFD2D3;width:500px;\"><b><font color=red>验证码错误!</font></b></div>";
					$invalidchars = true;
				}
			
			if($invalidchars != true)
			{	
				$user_query = mysql_query("SELECT * FROM imgup_users WHERE name='" . $_POST['user'] . "'");
				$user_arr = mysql_fetch_array($user_query);
			
				if($user_arr == null)
				{
					echo "<div style=\"padding:5px;border:#990000 1px solid;background-color:#FFD2D3;width:500px;\">用户名不存在.<a href=\"/imgup/index.php?user=register\">现在注册</a></div>";
				} elseif($user_arr['name'] == $_POST['user'] && $user_arr['pass'] == $_POST['pass'])
				{
					$_SESSION['imgup_loggedin'] = $user_arr['id'] . ":" . $_POST['pass'] . ":" . $user_arr['user_group'];
				
					//echo '您已经登陆. 点击 <a href="' . $_SERVER['PHP_SELF'] . '">这里</a> 开始.';
					//Header("Location:".$_SERVER['PHP_SELF']);
					echo '<div style="padding:5px;border:#6600FF 1px solid;background-color:#CAE0EA;width:600px;">您已经成功登录. 将自动跳转回首页。如果没有正常请点击<a href="' . $_SERVER['PHP_SELF'] . '">这里</a> 进入管理.</div><meta http-equiv="refresh" content="2;url='.$_SERVER['PHP_SELF'].'">';
					$exitp = new template();
					$exitp->exitp($user_dat, $globalvars);
				} else {
					echo "<div style=\"padding:5px;border:#990000 1px solid;background-color:#FFD2D3;width:500px;\">密码不正确.</div>";
				}
			}
		}
		
		echo '<form action"' . $_SERVER['PHP_SELF'] . '?user=login" method="post" />
			  <div style="algin:center;width:220px;"><div style="text-align:left;float:left;width:60px;padding-top:2px;">用户名:</div><div style="float:right;width:80px;"><input type="text" name="user" style="height:18px" /></div></div><br/>
		<div style="algin:center;width:220px;"><div style="text-align:left;float:left;width:60px;padding-top:2px;">密&nbsp;&nbsp;码:</div><div style="float:right;width:80px;"><input type="password" name="pass" style="height:18px" /></div></div><br/>
		<div style="algin:center;width:240px;">验证码:<input type="text" name="validate" value="" size=10 style="vertical-align:bottom;HEIGHT: 20px"> <img id="authcode" src="imgcode.php" align=bottom><a href="#" onClick="authcode.src=\'imgcode.php?\'+Math.random();">换一张</a></div><br/>
		<input type="submit" name="login" style="BORDER-RIGHT: 0px; BORDER-TOP: 0px; PADDING-LEFT: 3px; FONT-WEIGHT: bold; BACKGROUND-IMAGE: url(images/btn_bg.bmp); BORDER-LEFT: 0px; WIDTH: 110px; COLOR: #ffffff; PADDING-TOP: 3px; BORDER-BOTTOM: 0px; FONT-FAMILY: Arial, 宋体; HEIGHT: 25px" value="开始登陆" />
			  </form>';
	}
	
	function logout($user_dat, $globalvars)
	{
		unset($_SESSION);
		session_destroy();
		
		echo '<div style="padding:5px;border:#6600FF 1px solid;background-color:#CAE0EA;width:600px;">您已经成功退出. 将自动跳转回首页。如果没有正常请点击<a href="' . $_SERVER['PHP_SELF'] . '">这里</a> 返回首页.</div><meta http-equiv="refresh" content="2;url='.$_SERVER['PHP_SELF'].'">';
		//Header("location:http://".$_SERVER ['HTTP_HOST']);
		$exitp = new template();
		$exitp->exitp($user_dat, $globalvars);
	}
	
	function editpro($user_dat, $globalvars)
	{
		if($globalvars->settings['allow_edit'] == "no")
		{
			echo "资料修改已经被禁止.";
			$exitp = new template();
			$exitp->exitp($user_dat, $globalvars);
		}
		
		if(isset ($_POST['proedit']))
		{
			$edit_failed = false;
			
			// Yes, by now we hate checking for invalid characters, but we must, "Do what must be done." - Emperor Palpatine, Revenge of the Sith
			$userpass_valid = "[^[:punct:][:space:][:blank:]]$";
				
			if(!eregi($userpass_valid, $_POST['edituser']))
			{
				echo "用户名包含非法字符.<br />";
				$edit_failed = true;
				$invalidchars = true;
			}
			
			if(!eregi("^.+@.+\..+$", $_POST['editemail']))
			{
				echo "e-mail 地址无效.<br />";
			
				$edit_failed = true;
				$invalidchars = true;
			}
			
			if(!empty ($_POST['editpass']))
			{
				if(!eregi($userpass_valid, $_POST['editpass']))
				{
					echo "密码包含非法字符.<br />";
					
					$edit_failed = true;
					$invalidchars = true;
				}
				
				if($invalidchars != true)
				{
					mysql_query("UPDATE imgup_users SET pass='" . $_POST['editpass'] . "' WHERE name='" . $user_dat['name'] . "'");
				
					unset($_SESSION);
					session_destroy();
				
					echo "因为您更改了密码, 请重新登陆.<br />";
				}
			}
			
			if(empty ($_POST['edituser']))
			{
				echo "用户名不得为空.<br />";
				$edit_failed = true;
			}
			
			if(empty ($_POST['editemail']))
			{
				echo "您的 E-Mail 不得为空.<br />";
				$edit_failed = true;
			}
			
			// Can't allow invalid characters access our mysql, now can we?
			if($invalidchars != true)
			{
				$user_query = mysql_query("SELECT * FROM imgup_users WHERE name='" . $_POST['edituser'] . "'");
				$user_arr = mysql_fetch_array($user_query);
			
				if ($user_arr['name'] != $user_dat['name'] && $user_arr['name'] == $_POST['edituser'])
				{
					echo "该用户名已被注册.";
					$edit_failed = true;
				}
			}
			
			if($edit_failed == false)
			{
				rename($user_dat['usrdir'], $globalvars->maindir . $_POST['edituser']);
	
				mysql_query("UPDATE imgup_users SET name='" . $_POST['edituser'] . "' WHERE name='" . $user_dat['name'] . "'");
				mysql_query("UPDATE imgup_users SET email='" . $_POST['editemail'] . "' WHERE name='" . $user_dat['name'] . "'");
				mysql_query("UPDATE imgup_users SET displaytype='" . $_POST['dirdisplay'] . "' WHERE name='" . $user_dat['name'] . "'");
				
				if($_POST['edituser'] != $user_dat['name'])
				{
					unset($_SESSION);
					session_destroy();
					
					echo "<div style=\"padding:5px;border:#6600FF 1px solid;background-color:#CAE0EA;width:600px;\">因为您改变了用户名, 请重新登陆.<br /></div>";
				}
				
				echo "<div style=\"padding:5px;border:#6600FF 1px solid;background-color:#CAE0EA;width:600px;\">您的资料已更新. 点击 " . '<a href="' . $_SERVER['PHP_SELF'] . '">这里</a> 返回.</div>';
				
				$exitp = new template();
				$exitp->exitp($user_dat, $globalvars);
			}
		}
		
		$profile_info = mysql_query("SELECT * FROM imgup_users WHERE name='" . $user_dat['name'] . "'");
		$profile = mysql_fetch_array($profile_info);
		
		echo '<p><form action="' . $_SERVER['PHP_SELF'] . '?user=profile" method="post">
			  用户名: <input type="text" name="edituser" value="' . $profile['name'] . '" /><br />
			  E-Mail: <input type="text" name="editemail" value="' . $profile['email'] . '" /><br /><br />
			  如想使用初始密码, 请把下面留空.<br />
			  新密码: <input type="text" name="editpass" /><br /><br />
			  图片显示方式: <select name="dirdisplay">';
			  
			  
		switch($user_dat['imgdisplay'])
		{
			case '1':
				echo '<option value="1">预览方式</option>';
				echo '<option value="0">文字方式</option>';
			break;
			
			case '0':
			default:
				echo '<option value="0">文字方式</option>';
				echo '<option value="1">预览方式</option>';
			break;
		}
		
		echo'</select><br /><br /><input type="submit" name="proedit" value="更新" />
			  </form></p>';
	}
	
	function process_user($globalvars)
	{
		$user_dat = array(
		'loggedin' => 0, 
		'name' => 'guest',
		'rank' => 'guest',
		'usrdir' => null,
		'usedspace' => 0,
		'displaytype' => 1);
		
		if(!empty ($_SESSION['imgup_loggedin']))
		{
			$split_session = explode(':', $_SESSION['imgup_loggedin']);
			$id_pattern = '[0-9]';
			
			if(!eregi($id_pattern, $split_session[0]))
			{
				unset($_SESSION);
				session_destroy();
				
				echo "您的会话包含非法字符. 您的会话已被终止.";
				
				$exitp = new template();
				$exitp->exitp($user_dat, $globalvars);
			}
			
			$user_query= mysql_query("SELECT * FROM imgup_users WHERE id='" . $split_session[0] . "'");
			$user_arr = mysql_fetch_array($user_query);
			//将用户信息写入全局变量中
			if($user_arr['id'] == $split_session[0] && $user_arr['pass'] == $split_session[1])
			{
				$user_dat['loggedin'] = 1;
				$user_dat['id'] = $user_arr['id'];
				$user_dat['name'] = $user_arr['name'];
				$user_dat['rank'] = $user_arr['user_group'];
				$user_dat['usrdir'] = $globalvars->maindir . $user_dat['name'];
				$user_dat['imgdisplay'] = $user_arr[displaytype];
				$user_dat['status'] = $user_arr['status'];
				$user_dat['maxspace'] = $user_arr['maxspace'];
				$openusrdir = opendir($user_dat['usrdir']);
				$used_space = 0;
				$space_query = mysql_query("select * from imgup_imgs where userid = ".$user_dat['id']);
				//echo "select * from imgup_imgs where user_id = ".$user_dat['id'];
				while($space_arr = mysql_fetch_array($space_query))
				{
						$used_space = $used_space + $space_arr['filesize'];
				}
				$user_dat['usedspace'] = $used_space;

			} else {
				unset($_SESSION);
				session_destroy();
				
				echo "您的会话信息与数据不匹配, 已经被终止.";
				
				$exitp = new template();
				$exitp->exitp($user_dat, $globalvars);
			}
		}
		
		return $user_dat;
	}
}

$user = new user();
?>