force ssl, change to /gwvp url

[gwvp-mini.git] / gwvpmini / gwvpmini_user.php

diff --git a/gwvpmini/gwvpmini_user.php b/gwvpmini/gwvpmini_user.php
index 462d2a5..f2efe02 100644 (file)
--- a/gwvpmini/gwvpmini_user.php
+++ b/gwvpmini/gwvpmini_user.php
@@ -5,8 +5,9 @@ if($IS_WEB_REQUEST) {
        $reg = gwvpmini_getConfigVal("gravatarenabled");\r
        \r
        $use_gravatar = false;\r
-       if($reg == null) {\r
-               gwvpmini_setConfigVal("gravatarenabled", "1");\r
+       if($reg == null) {
+               // disable grav's by default\r
+               gwvpmini_setConfigVal("gravatarenabled", "0");\r
        } else if($reg == 1) {\r
                $use_gravatar = true;\r
        } else {\r
@@ -14,6 +15,21 @@ if($IS_WEB_REQUEST) {
        }\r
        \r
        global $use_gravatar;
+       
+       $reg = gwvpmini_getConfigVal("forcessl");\r
+\r
+       $force_ssl = false;\r
+       if($reg == null) {\r
+               // dont force ssl by default\r
+               gwvpmini_setConfigVal("forcessl", "0");\r
+       } else if($reg == 1) {\r
+               $force_ssl = true;\r
+       } else {\r
+               $force_ssl = false;\r
+       }\r
+\r
+       global $force_ssl;\r
+       
 }\r
 
 
@@ -57,14 +73,47 @@ function gwvpmini_UserViewPage()
 
 function gwvpmini_UserViewPageBody()
 {
-       global $user_view_call;
+       global $user_view_call, $BASE_URL;
        
        
        $dets = gwvpmini_getUser($user_view_call);
-       error_log("show view of user with $user_view_call: ". print_r($dets, true));\r
+       //error_log("show view of user with $user_view_call: ". print_r($dets, true));\r
 
        echo "<h2>".$dets["fullname"]."</h2><br>";
        echo gwvpmini_HtmlGravatar($dets["email"],80);
+       echo "<br>";
+       
+       $isme = false;
+       if(isset($_SESSION["id"])) {
+               if($_SESSION["id"] == $dets["id"]) {
+                       $isme = true;
+               }
+       }
+       
+       if($isme || gwvpmini_isUserAdmin()) {
+               echo "<form method=\"post\" action=\"$BASE_URL/user/updateuserdesc\">";
+               echo "Your Description<br><textarea name=\"desc\" cols=\"100\" rows=\"4\">".$dets["desc"]."</textarea><br>";
+               echo "<input type=\"submit\" name=\"Update\" value=\"Update\">";
+               echo "</form>";
+               
+               echo "<h3>New Password</h3>";
+               echo "<form method=\"post\" action=\"$BASE_URL/user/updateuserpassword\">";
+               echo "<table>";
+               if($isme) echo "<tr><td>Old Password</td><td><input type=\"password\" name=\"oldpassword\"></td></tr>";
+               echo "<tr><td>New Password</td><td><input type=\"password\" name=\"newpassword1\"></td></tr>";
+               echo "<tr><td>Confirm New Password</td><td><input type=\"password\" name=\"newpassword2\"></td></tr></table>";
+               echo "<input type=\"submit\" name=\"Update\" value=\"Update\">";
+               echo "</form>";
+               
+               echo "<h3>New Email Address</h3>";
+               echo "<form method=\"post\" action=\"$BASE_URL/user/updateuseremail\">";
+               echo "<table><tr><td>New Email Address</td><td><input type=\"password\" name=\"newemail1\"></td></tr>";
+               echo "<tr><td>Confirm New Email Address</td><td><input type=\"password\" name=\"newemail2\"></td></tr></table>";
+               echo "<input type=\"submit\" name=\"Update\" value=\"Update\">";
+               echo "</form>";
+       } else {
+               echo $dets["desc"]."<br>";
+       }
 }
 
 ?>
\ No newline at end of file