webmaster@1: <?php
webmaster@5: // $Id: profile.module,v 1.236.2.1 2008/04/09 21:11:49 goba Exp $
webmaster@1: 
webmaster@1: /**
webmaster@1:  * @file
webmaster@1:  * Support for configurable user profiles.
webmaster@1:  */
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Private field, content only available to privileged users.
webmaster@1:  */
webmaster@1: define('PROFILE_PRIVATE', 1);
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Public field, content shown on profile page but not used on member list pages.
webmaster@1:  */
webmaster@1: define('PROFILE_PUBLIC', 2);
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Public field, content shown on profile page and on member list pages.
webmaster@1:  */
webmaster@1: define('PROFILE_PUBLIC_LISTINGS', 3);
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Hidden profile field, only accessible by administrators, modules and themes.
webmaster@1:  */
webmaster@1: define('PROFILE_HIDDEN', 4);
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Implementation of hook_help().
webmaster@1:  */
webmaster@1: function profile_help($path, $arg) {
webmaster@1:   switch ($path) {
webmaster@1:     case 'admin/help#profile':
webmaster@1:       $output = '<p>'. t('The profile module allows custom fields (such as country, full name, or age) to be defined and displayed in the <em>My Account</em> section. This permits users of a site to share more information about themselves, and can help community-based sites organize users around specific information.') .'</p>';
webmaster@1:       $output .= '<p>'. t('The following types of fields can be added to a user profile:') .'</p>';
webmaster@1:       $output .= '<ul><li>'. t('single-line textfield') .'</li>';
webmaster@1:       $output .= '<li>'. t('multi-line textfield') .'</li>';
webmaster@1:       $output .= '<li>'. t('checkbox') .'</li>';
webmaster@1:       $output .= '<li>'. t('list selection') .'</li>';
webmaster@1:       $output .= '<li>'. t('freeform list') .'</li>';
webmaster@1:       $output .= '<li>'. t('URL') .'</li>';
webmaster@1:       $output .= '<li>'. t('date') .'</li></ul>';
webmaster@1:       $output .= '<p>'. t('For more information, see the online handbook entry for <a href="@profile">Profile module</a>.', array('@profile' => 'http://drupal.org/handbook/modules/profile/')) .'</p>';
webmaster@1:       return $output;
webmaster@1:     case 'admin/user/profile':
webmaster@1:       return '<p>'. t("This page displays a list of the existing custom profile fields to be displayed on a user's <em>My Account</em> page. To provide structure, similar or related fields may be placed inside a category. To add a new category (or edit an existing one), edit a profile field and provide a new category name. To change the category of a field or the order of fields within a category, grab a drag-and-drop handle under the Title column and drag the field to a new location in the list. (Grab a handle by clicking and holding the mouse while hovering over a handle icon.) Remember that your changes will not be saved until you click the <em>Save configuration</em> button at the bottom of the page.") .'</p>';
webmaster@1:   }
webmaster@1: }
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Implementation of hook_theme()
webmaster@1:  */
webmaster@1: function profile_theme() {
webmaster@1:   return array(
webmaster@1:     'profile_block' => array(
webmaster@1:       'arguments' => array('account' => NULL, 'fields' => array()),
webmaster@1:       'template' => 'profile-block',
webmaster@1:     ),
webmaster@1:     'profile_listing' => array(
webmaster@1:       'arguments' => array('account' => NULL, 'fields' => array()),
webmaster@1:       'template' => 'profile-listing',
webmaster@1:     ),
webmaster@1:     'profile_wrapper' => array(
webmaster@1:       'arguments' => array('content' => NULL),
webmaster@1:       'template' => 'profile-wrapper',
webmaster@1:     ),
webmaster@1:     'profile_admin_overview' => array(
webmaster@1:       'arguments' => array('form' => NULL),
webmaster@1:       'file' => 'profile.admin.inc',
webmaster@1:     )
webmaster@1:   );
webmaster@1: }
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Implementation of hook_menu().
webmaster@1:  */
webmaster@1: function profile_menu() {
webmaster@1:   $items['profile'] = array(
webmaster@1:     'title' => 'User list',
webmaster@1:     'page callback' => 'profile_browse',
webmaster@1:     'access arguments' => array('access user profiles'),
webmaster@1:     'type' => MENU_SUGGESTED_ITEM,
webmaster@1:     'file' => 'profile.pages.inc',
webmaster@1:   );
webmaster@1:   $items['admin/user/profile'] = array(
webmaster@1:     'title' => 'Profiles',
webmaster@1:     'description' => 'Create customizable fields for your users.',
webmaster@1:     'page callback' => 'drupal_get_form',
webmaster@1:     'page arguments' => array('profile_admin_overview'),
webmaster@1:     'access arguments' => array('administer users'),
webmaster@1:     'file' => 'profile.admin.inc',
webmaster@1:   );
webmaster@1:   $items['admin/user/profile/add'] = array(
webmaster@1:     'title' => 'Add field',
webmaster@1:     'page callback' => 'drupal_get_form',
webmaster@1:     'page arguments' => array('profile_field_form'),
webmaster@5:     'access arguments' => array('administer users'),
webmaster@1:     'type' => MENU_CALLBACK,
webmaster@1:     'file' => 'profile.admin.inc',
webmaster@1:   );
webmaster@1:   $items['admin/user/profile/autocomplete'] = array(
webmaster@1:     'title' => 'Profile category autocomplete',
webmaster@1:     'page callback' => 'profile_admin_settings_autocomplete',
webmaster@5:     'access arguments' => array('administer users'),
webmaster@1:     'type' => MENU_CALLBACK,
webmaster@1:     'file' => 'profile.admin.inc',
webmaster@1:   );
webmaster@1:   $items['admin/user/profile/edit'] = array(
webmaster@1:     'title' => 'Edit field',
webmaster@1:     'page callback' => 'drupal_get_form',
webmaster@1:     'page arguments' => array('profile_field_form'),
webmaster@5:     'access arguments' => array('administer users'),
webmaster@1:     'type' => MENU_CALLBACK,
webmaster@1:     'file' => 'profile.admin.inc',
webmaster@1:   );
webmaster@1:   $items['admin/user/profile/delete'] = array(
webmaster@1:     'title' => 'Delete field',
webmaster@1:     'page callback' => 'drupal_get_form',
webmaster@1:     'page arguments' => array('profile_field_delete'),
webmaster@5:     'access arguments' => array('administer users'),
webmaster@1:     'type' => MENU_CALLBACK,
webmaster@1:     'file' => 'profile.admin.inc',
webmaster@1:   );
webmaster@1:   $items['profile/autocomplete'] = array(
webmaster@1:     'title' => 'Profile autocomplete',
webmaster@1:     'page callback' => 'profile_autocomplete',
webmaster@1:     'access arguments' => array('access user profiles'),
webmaster@1:     'type' => MENU_CALLBACK,
webmaster@1:     'file' => 'profile.pages.inc',
webmaster@1:   );
webmaster@1:   return $items;
webmaster@1: }
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Implementation of hook_block().
webmaster@1:  */
webmaster@1: function profile_block($op = 'list', $delta = 0, $edit = array()) {
webmaster@1: 
webmaster@1:   if ($op == 'list') {
webmaster@1:     $blocks[0]['info'] = t('Author information');
webmaster@1:     $blocks[0]['cache'] = BLOCK_CACHE_PER_PAGE | BLOCK_CACHE_PER_ROLE;
webmaster@1:     return $blocks;
webmaster@1:   }
webmaster@1:   else if ($op == 'configure' && $delta == 0) {
webmaster@1:     // Compile a list of fields to show
webmaster@1:     $fields = array();
webmaster@1:     $result = db_query('SELECT name, title, weight, visibility FROM {profile_fields} WHERE visibility IN (%d, %d) ORDER BY weight', PROFILE_PUBLIC, PROFILE_PUBLIC_LISTINGS);
webmaster@1:     while ($record = db_fetch_object($result)) {
webmaster@1:       $fields[$record->name] = check_plain($record->title);
webmaster@1:     }
webmaster@1:     $fields['user_profile'] = t('Link to full user profile');
webmaster@1:     $form['profile_block_author_fields'] = array('#type' => 'checkboxes',
webmaster@1:       '#title' => t('Profile fields to display'),
webmaster@1:       '#default_value' => variable_get('profile_block_author_fields', NULL),
webmaster@1:       '#options' => $fields,
webmaster@1:       '#description' => t('Select which profile fields you wish to display in the block. Only fields designated as public in the <a href="@profile-admin">profile field configuration</a> are available.', array('@profile-admin' => url('admin/user/profile'))),
webmaster@1:     );
webmaster@1:     return $form;
webmaster@1:   }
webmaster@1:   else if ($op == 'save' && $delta == 0) {
webmaster@1:     variable_set('profile_block_author_fields', $edit['profile_block_author_fields']);
webmaster@1:   }
webmaster@1:   else if ($op == 'view') {
webmaster@1:     if (user_access('access user profiles')) {
webmaster@1:       $output = '';
webmaster@1:       if ((arg(0) == 'node') && is_numeric(arg(1)) && (arg(2) == NULL)) {
webmaster@1:         $node = node_load(arg(1));
webmaster@1:         $account = user_load(array('uid' => $node->uid));
webmaster@1: 
webmaster@1:         if ($use_fields = variable_get('profile_block_author_fields', array())) {
webmaster@1:           // Compile a list of fields to show.
webmaster@1:           $fields = array();
webmaster@1:           $result = db_query('SELECT name, title, type, visibility, weight FROM {profile_fields} WHERE visibility IN (%d, %d) ORDER BY weight', PROFILE_PUBLIC, PROFILE_PUBLIC_LISTINGS);
webmaster@1:           while ($record = db_fetch_object($result)) {
webmaster@1:             // Ensure that field is displayed only if it is among the defined block fields and, if it is private, the user has appropriate permissions.
webmaster@1:             if (isset($use_fields[$record->name]) && $use_fields[$record->name]) {
webmaster@1:               $fields[] = $record;
webmaster@1:             }
webmaster@1:           }
webmaster@1:         }
webmaster@1: 
webmaster@1:         if (!empty($fields)) {
webmaster@1:           $profile = _profile_update_user_fields($fields, $account);
webmaster@1:           $output .= theme('profile_block', $account, $profile, TRUE);
webmaster@1:         }
webmaster@1: 
webmaster@1:         if (isset($use_fields['user_profile']) && $use_fields['user_profile']) {
webmaster@1:           $output .= '<div>'. l(t('View full user profile'), 'user/'. $account->uid) .'</div>';
webmaster@1:         }
webmaster@1:       }
webmaster@1: 
webmaster@1:       if ($output) {
webmaster@1:         $block['subject'] = t('About %name', array('%name' => $account->name));
webmaster@1:         $block['content'] = $output;
webmaster@1:         return $block;
webmaster@1:       }
webmaster@1:     }
webmaster@1:   }
webmaster@1: }
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Implementation of hook_user().
webmaster@1:  */
webmaster@1: function profile_user($type, &$edit, &$user, $category = NULL) {
webmaster@1:   switch ($type) {
webmaster@1:     case 'load':
webmaster@1:       return profile_load_profile($user);
webmaster@1:     case 'register':
webmaster@1:       return profile_form_profile($edit, $user, $category, TRUE);
webmaster@1:     case 'update':
webmaster@1:     return profile_save_profile($edit, $user, $category);
webmaster@1:     case 'insert':
webmaster@1:       return profile_save_profile($edit, $user, $category, TRUE);
webmaster@1:     case 'view':
webmaster@1:       return profile_view_profile($user);
webmaster@1:     case 'form':
webmaster@1:       return profile_form_profile($edit, $user, $category);
webmaster@1:     case 'validate':
webmaster@1:       return profile_validate_profile($edit, $category);
webmaster@1:     case 'categories':
webmaster@1:       return profile_categories();
webmaster@1:     case 'delete':
webmaster@1:       db_query('DELETE FROM {profile_values} WHERE uid = %d', $user->uid);
webmaster@1:   }
webmaster@1: }
webmaster@1: 
webmaster@1: function profile_load_profile(&$user) {
webmaster@1:   $result = db_query('SELECT f.name, f.type, v.value FROM {profile_fields} f INNER JOIN {profile_values} v ON f.fid = v.fid WHERE uid = %d', $user->uid);
webmaster@1:   while ($field = db_fetch_object($result)) {
webmaster@1:     if (empty($user->{$field->name})) {
webmaster@1:       $user->{$field->name} = _profile_field_serialize($field->type) ? unserialize($field->value) : $field->value;
webmaster@1:     }
webmaster@1:   }
webmaster@1: }
webmaster@1: 
webmaster@1: function profile_save_profile(&$edit, &$user, $category, $register = FALSE) {
webmaster@1:   $result = _profile_get_fields($category, $register);
webmaster@1:   while ($field = db_fetch_object($result)) {
webmaster@1:     if (_profile_field_serialize($field->type)) {
webmaster@1:       $edit[$field->name] = serialize($edit[$field->name]);
webmaster@1:     }
webmaster@1:     db_query("DELETE FROM {profile_values} WHERE fid = %d AND uid = %d", $field->fid, $user->uid);
webmaster@1:     db_query("INSERT INTO {profile_values} (fid, uid, value) VALUES (%d, %d, '%s')", $field->fid, $user->uid, $edit[$field->name]);
webmaster@1:     // Mark field as handled (prevents saving to user->data).
webmaster@1:     $edit[$field->name] = NULL;
webmaster@1:   }
webmaster@1: }
webmaster@1: 
webmaster@1: function profile_view_field($user, $field) {
webmaster@1:   // Only allow browsing of private fields for admins, if browsing is enabled,
webmaster@1:   // and if a user has permission to view profiles. Note that this check is
webmaster@1:   // necessary because a user may always see their own profile.
webmaster@1:   $browse = user_access('access user profiles')
webmaster@1:          && (user_access('administer users') || $field->visibility != PROFILE_PRIVATE)
webmaster@1:          && !empty($field->page);
webmaster@1: 
webmaster@1:   if (isset($user->{$field->name}) && $value = $user->{$field->name}) {
webmaster@1:     switch ($field->type) {
webmaster@1:       case 'textarea':
webmaster@1:         return check_markup($value);
webmaster@1:       case 'textfield':
webmaster@1:       case 'selection':
webmaster@1:         return $browse ? l($value, 'profile/'. $field->name .'/'. $value) : check_plain($value);
webmaster@1:       case 'checkbox':
webmaster@1:         return $browse ? l($field->title, 'profile/'. $field->name) : check_plain($field->title);
webmaster@1:       case 'url':
webmaster@1:         return '<a href="'. check_url($value) .'">'. check_plain($value) .'</a>';
webmaster@1:       case 'date':
webmaster@1:         $format = substr(variable_get('date_format_short', 'm/d/Y - H:i'), 0, 5);
webmaster@1:         // Note: Avoid PHP's date() because it does not handle dates before
webmaster@1:         // 1970 on Windows. This would make the date field useless for e.g.
webmaster@1:         // birthdays.
webmaster@1:         $replace = array(
webmaster@1:           'd' => sprintf('%02d', $value['day']),
webmaster@1:           'j' => $value['day'],
webmaster@1:           'm' => sprintf('%02d', $value['month']),
webmaster@1:           'M' => map_month($value['month']),
webmaster@1:           'Y' => $value['year'],
webmaster@1:           'H:i' => NULL,
webmaster@1:           'g:ia' => NULL,
webmaster@1:         );
webmaster@1:         return strtr($format, $replace);
webmaster@1:       case 'list':
webmaster@1:         $values = split("[,\n\r]", $value);
webmaster@1:         $fields = array();
webmaster@1:         foreach ($values as $value) {
webmaster@1:           if ($value = trim($value)) {
webmaster@1:             $fields[] = $browse ? l($value, 'profile/'. $field->name .'/'. $value) : check_plain($value);
webmaster@1:           }
webmaster@1:         }
webmaster@1:         return implode(', ', $fields);
webmaster@1:     }
webmaster@1:   }
webmaster@1: }
webmaster@1: 
webmaster@1: function profile_view_profile(&$user) {
webmaster@1: 
webmaster@1:   profile_load_profile($user);
webmaster@1: 
webmaster@1:   // Show private fields to administrators and people viewing their own account.
webmaster@1:   if (user_access('administer users') || $GLOBALS['user']->uid == $user->uid) {
webmaster@1:     $result = db_query('SELECT * FROM {profile_fields} WHERE visibility != %d ORDER BY category, weight', PROFILE_HIDDEN);
webmaster@1:   }
webmaster@1:   else {
webmaster@1:     $result = db_query('SELECT * FROM {profile_fields} WHERE visibility != %d AND visibility != %d ORDER BY category, weight', PROFILE_PRIVATE, PROFILE_HIDDEN);
webmaster@1:   }
webmaster@1: 
webmaster@1:   $fields = array();
webmaster@1:   while ($field = db_fetch_object($result)) {
webmaster@1:     if ($value = profile_view_field($user, $field)) {
webmaster@1:       $title = ($field->type != 'checkbox') ? check_plain($field->title) : NULL;
webmaster@1: 
webmaster@1:       // Create a single fieldset for each category.
webmaster@1:       if (!isset($user->content[$field->category])) {
webmaster@1:         $user->content[$field->category] = array(
webmaster@1:           '#type' => 'user_profile_category',
webmaster@1:           '#title' => $field->category,
webmaster@1:         );
webmaster@1:       }
webmaster@1: 
webmaster@1:       $user->content[$field->category][$field->name] = array(
webmaster@1:         '#type' => 'user_profile_item',
webmaster@1:         '#title' => $title,
webmaster@1:         '#value' => $value,
webmaster@1:         '#weight' => $field->weight,
webmaster@1:         '#attributes' => array('class' => 'profile-'. $field->name),
webmaster@1:       );
webmaster@1:     }
webmaster@1:   }
webmaster@1: }
webmaster@1: 
webmaster@1: function _profile_form_explanation($field) {
webmaster@1:   $output = $field->explanation;
webmaster@1: 
webmaster@1:   if ($field->type == 'list') {
webmaster@1:     $output .= ' '. t('Put each item on a separate line or separate them by commas. No HTML allowed.');
webmaster@1:   }
webmaster@1: 
webmaster@1:   if ($field->visibility == PROFILE_PRIVATE) {
webmaster@1:     $output .= ' '. t('The content of this field is kept private and will not be shown publicly.');
webmaster@1:   }
webmaster@1: 
webmaster@1:   return $output;
webmaster@1: }
webmaster@1: 
webmaster@1: function profile_form_profile($edit, $user, $category, $register = FALSE) {
webmaster@1:   $result = _profile_get_fields($category, $register);
webmaster@1:   $weight = 1;
webmaster@1:   $fields = array();
webmaster@1:   while ($field = db_fetch_object($result)) {
webmaster@1:     $category = $field->category;
webmaster@1:     if (!isset($fields[$category])) {
webmaster@1:       $fields[$category] = array('#type' => 'fieldset', '#title' => check_plain($category), '#weight' => $weight++);
webmaster@1:     }
webmaster@1:     switch ($field->type) {
webmaster@1:       case 'textfield':
webmaster@1:       case 'url':
webmaster@1:         $fields[$category][$field->name] = array('#type' => 'textfield',
webmaster@1:           '#title' => check_plain($field->title),
webmaster@1:           '#default_value' => isset($edit[$field->name]) ? $edit[$field->name] : '',
webmaster@1:           '#maxlength' => 255,
webmaster@1:           '#description' => _profile_form_explanation($field),
webmaster@1:           '#required' => $field->required,
webmaster@1:         );
webmaster@1:         if ($field->autocomplete) {
webmaster@1:           $fields[$category][$field->name]['#autocomplete_path'] = "profile/autocomplete/". $field->fid;
webmaster@1:         }
webmaster@1:         break;
webmaster@1:       case 'textarea':
webmaster@1:         $fields[$category][$field->name] = array('#type' => 'textarea',
webmaster@1:           '#title' => check_plain($field->title),
webmaster@1:           '#default_value' => isset($edit[$field->name]) ? $edit[$field->name] : '',
webmaster@1:           '#description' => _profile_form_explanation($field),
webmaster@1:           '#required' => $field->required,
webmaster@1:         );
webmaster@1:         break;
webmaster@1:       case 'list':
webmaster@1:         $fields[$category][$field->name] = array('#type' => 'textarea',
webmaster@1:           '#title' => check_plain($field->title),
webmaster@1:           '#default_value' => isset($edit[$field->name]) ? $edit[$field->name] : '',
webmaster@1:           '#description' => _profile_form_explanation($field),
webmaster@1:           '#required' => $field->required,
webmaster@1:         );
webmaster@1:         break;
webmaster@1:       case 'checkbox':
webmaster@1:         $fields[$category][$field->name] = array('#type' => 'checkbox',
webmaster@1:           '#title' => check_plain($field->title),
webmaster@1:           '#default_value' => isset($edit[$field->name]) ? $edit[$field->name] : '',
webmaster@1:           '#description' => _profile_form_explanation($field),
webmaster@1:           '#required' => $field->required,
webmaster@1:         );
webmaster@1:         break;
webmaster@1:       case 'selection':
webmaster@1:         $options = $field->required ? array() : array('--');
webmaster@1:         $lines = split("[,\n\r]", $field->options);
webmaster@1:         foreach ($lines as $line) {
webmaster@1:           if ($line = trim($line)) {
webmaster@1:             $options[$line] = $line;
webmaster@1:           }
webmaster@1:         }
webmaster@1:         $fields[$category][$field->name] = array('#type' => 'select',
webmaster@1:           '#title' => check_plain($field->title),
webmaster@1:           '#default_value' => isset($edit[$field->name]) ? $edit[$field->name] : '',
webmaster@1:           '#options' => $options,
webmaster@1:           '#description' => _profile_form_explanation($field),
webmaster@1:           '#required' => $field->required,
webmaster@1:         );
webmaster@1:         break;
webmaster@1:       case 'date':
webmaster@1:         $fields[$category][$field->name] = array('#type' => 'date',
webmaster@1:           '#title' => check_plain($field->title),
webmaster@1:           '#default_value' => isset($edit[$field->name]) ? $edit[$field->name] : '',
webmaster@1:           '#description' => _profile_form_explanation($field),
webmaster@1:           '#required' => $field->required,
webmaster@1:         );
webmaster@1:         break;
webmaster@1:     }
webmaster@1:   }
webmaster@1:   return $fields;
webmaster@1: }
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Helper function: update an array of user fields by calling profile_view_field
webmaster@1:  */
webmaster@1: function _profile_update_user_fields($fields, $account) {
webmaster@1:   foreach ($fields as $key => $field) {
webmaster@1:     $fields[$key]->value = profile_view_field($account, $field);
webmaster@1:   }
webmaster@1:   return $fields;
webmaster@1: }
webmaster@1: 
webmaster@1: function profile_validate_profile($edit, $category) {
webmaster@1:   $result = _profile_get_fields($category);
webmaster@1:   while ($field = db_fetch_object($result)) {
webmaster@1:     if ($edit[$field->name]) {
webmaster@1:       if ($field->type == 'url') {
webmaster@1:         if (!valid_url($edit[$field->name], TRUE)) {
webmaster@1:           form_set_error($field->name, t('The value provided for %field is not a valid URL.', array('%field' => $field->title)));
webmaster@1:         }
webmaster@1:       }
webmaster@1:     }
webmaster@1:     else if ($field->required && !user_access('administer users')) {
webmaster@1:       form_set_error($field->name, t('The field %field is required.', array('%field' => $field->title)));
webmaster@1:     }
webmaster@1:   }
webmaster@1: 
webmaster@1:   return $edit;
webmaster@1: }
webmaster@1: 
webmaster@1: function profile_categories() {
webmaster@1:   $result = db_query("SELECT DISTINCT(category) FROM {profile_fields}");
webmaster@1:   $data = array();
webmaster@1:   while ($category = db_fetch_object($result)) {
webmaster@1:     $data[] = array(
webmaster@1:       'name' => $category->category,
webmaster@1:       'title' => $category->category,
webmaster@1:       'weight' => 3,
webmaster@1:       'access callback' => 'profile_category_access',
webmaster@5:       'access arguments' => array(1, $category->category)
webmaster@1:     );
webmaster@1:   }
webmaster@1:   return $data;
webmaster@1: }
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Menu item access callback - check if a user has access to a profile category.
webmaster@1:  */
webmaster@5: function profile_category_access($account, $category) {
webmaster@5:   if (user_access('administer users') && $account->uid > 0) {
webmaster@1:     return TRUE;
webmaster@1:   }
webmaster@1:   else {
webmaster@5:     return user_edit_access($account) && db_result(db_query("SELECT COUNT(*) FROM {profile_fields} WHERE category = '%s' AND visibility <> %d", $category, PROFILE_HIDDEN));
webmaster@1:   }
webmaster@1: }
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Process variables for profile-block.tpl.php.
webmaster@1:  *
webmaster@1:  * The $variables array contains the following arguments:
webmaster@1:  * - $account
webmaster@1:  * - $fields
webmaster@1:  *
webmaster@1:  * @see profile-block.tpl.php
webmaster@1:  */
webmaster@1: function template_preprocess_profile_block(&$variables) {
webmaster@1: 
webmaster@1:   $variables['picture'] = theme('user_picture', $variables['account']);
webmaster@1:   $variables['profile'] = array();
webmaster@1:   // Supply filtered version of $fields that have values.
webmaster@1:   foreach ($variables['fields'] as $field) {
webmaster@1:     if ($field->value) {
webmaster@1:       $variables['profile'][$field->name]->title = check_plain($field->title);
webmaster@1:       $variables['profile'][$field->name]->value = $field->value;
webmaster@1:       $variables['profile'][$field->name]->type = $field->type;
webmaster@1:     }
webmaster@1:   }
webmaster@1: 
webmaster@1: }
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Process variables for profile-listing.tpl.php.
webmaster@1:  *
webmaster@1:  * The $variables array contains the following arguments:
webmaster@1:  * - $account
webmaster@1:  * - $fields
webmaster@1:  *
webmaster@1:  * @see profile-listing.tpl.php
webmaster@1:  */
webmaster@1: function template_preprocess_profile_listing(&$variables) {
webmaster@1: 
webmaster@1:   $variables['picture'] = theme('user_picture', $variables['account']);
webmaster@1:   $variables['name'] = theme('username', $variables['account']);
webmaster@1:   $variables['profile'] = array();
webmaster@1:   // Supply filtered version of $fields that have values.
webmaster@1:   foreach ($variables['fields'] as $field) {
webmaster@1:     if ($field->value) {
webmaster@1:       $variables['profile'][$field->name]->title = $field->title;
webmaster@1:       $variables['profile'][$field->name]->value = $field->value;
webmaster@1:       $variables['profile'][$field->name]->type = $field->type;
webmaster@1:     }
webmaster@1:   }
webmaster@1: 
webmaster@1: }
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Process variables for profile-wrapper.tpl.php.
webmaster@1:  *
webmaster@1:  * The $variables array contains the following arguments:
webmaster@1:  * - $content
webmaster@1:  *
webmaster@1:  * @see profile-wrapper.tpl.php
webmaster@1:  */
webmaster@1: function template_preprocess_profile_wrapper(&$variables) {
webmaster@1:   $variables['current_field'] = '';
webmaster@1:   if ($field = arg(1)) {
webmaster@1:     $variables['current_field'] = $field;
webmaster@1:     // Supply an alternate template suggestion based on the browsable field.
webmaster@1:     $variables['template_files'][] = 'profile-wrapper-'. $field;
webmaster@1:   }
webmaster@1: }
webmaster@1: 
webmaster@1: function _profile_field_types($type = NULL) {
webmaster@1:   $types = array('textfield' => t('single-line textfield'),
webmaster@1:                  'textarea' => t('multi-line textfield'),
webmaster@1:                  'checkbox' => t('checkbox'),
webmaster@1:                  'selection' => t('list selection'),
webmaster@1:                  'list' => t('freeform list'),
webmaster@1:                  'url' => t('URL'),
webmaster@1:                  'date' => t('date'));
webmaster@1:   return isset($type) ? $types[$type] : $types;
webmaster@1: }
webmaster@1: 
webmaster@1: function _profile_field_serialize($type = NULL) {
webmaster@1:   return $type == 'date';
webmaster@1: }
webmaster@1: 
webmaster@1: function _profile_get_fields($category, $register = FALSE) {
webmaster@1:   $args = array();
webmaster@1:   $sql = 'SELECT * FROM {profile_fields} WHERE ';
webmaster@1:   $filters = array();
webmaster@1:   if ($register) {
webmaster@1:     $filters[] = 'register = 1';
webmaster@1:   }
webmaster@1:   else {
webmaster@1:     // Use LOWER('%s') instead of PHP's strtolower() to avoid UTF-8 conversion issues.
webmaster@1:     $filters[] = "LOWER(category) = LOWER('%s')";
webmaster@1:     $args[] = $category;
webmaster@1:   }
webmaster@1:   if (!user_access('administer users')) {
webmaster@1:     $filters[] = 'visibility != %d';
webmaster@1:     $args[] = PROFILE_HIDDEN;
webmaster@1:   }
webmaster@1:   $sql .= implode(' AND ', $filters);
webmaster@1:   $sql .= ' ORDER BY category, weight';
webmaster@1:   return db_query($sql, $args);
webmaster@1: }
webmaster@1: