webmaster@1: <?php
webmaster@1: // $Id: profile.pages.inc,v 1.2 2007/12/08 14:06:22 goba Exp $
webmaster@1: 
webmaster@1: /**
webmaster@1:  * @file
webmaster@1:  * User page callbacks for the profile module.
webmaster@1:  */
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Menu callback; display a list of user information.
webmaster@1:  */
webmaster@1: function profile_browse() {
webmaster@1:   // Ensure that the path is converted to 3 levels always.
webmaster@1:   list(, $name, $value) = array_pad(explode('/', $_GET['q'], 3), 3, '');
webmaster@1: 
webmaster@1:   $field = db_fetch_object(db_query("SELECT DISTINCT(fid), type, title, page, visibility FROM {profile_fields} WHERE name = '%s'", $name));
webmaster@1: 
webmaster@1:   if ($name && $field->fid) {
webmaster@1:     // Only allow browsing of fields that have a page title set.
webmaster@1:     if (empty($field->page)) {
webmaster@1:       drupal_not_found();
webmaster@1:       return;
webmaster@1:     }
webmaster@1:     // Do not allow browsing of private and hidden fields by non-admins.
webmaster@1:     if (!user_access('administer users') && ($field->visibility == PROFILE_PRIVATE || $field->visibility == PROFILE_HIDDEN)) {
webmaster@1:       drupal_access_denied();
webmaster@1:       return;
webmaster@1:     }
webmaster@1: 
webmaster@1:     // Compile a list of fields to show.
webmaster@1:     $fields = array();
webmaster@1:     $result = db_query('SELECT name, title, type, weight, page FROM {profile_fields} WHERE fid != %d AND visibility = %d ORDER BY weight', $field->fid, PROFILE_PUBLIC_LISTINGS);
webmaster@1:     while ($record = db_fetch_object($result)) {
webmaster@1:       $fields[] = $record;
webmaster@1:     }
webmaster@1: 
webmaster@1:     // Determine what query to use:
webmaster@1:     $arguments = array($field->fid);
webmaster@1:     switch ($field->type) {
webmaster@1:       case 'checkbox':
webmaster@1:         $query = 'v.value = 1';
webmaster@1:         break;
webmaster@1:       case 'textfield':
webmaster@1:       case 'selection':
webmaster@1:         $query = "v.value = '%s'";
webmaster@1:         $arguments[] = $value;
webmaster@1:         break;
webmaster@1:       case 'list':
webmaster@1:         $query = "v.value LIKE '%%%s%%'";
webmaster@1:         $arguments[] = $value;
webmaster@1:         break;
webmaster@1:       default:
webmaster@1:         drupal_not_found();
webmaster@1:         return;
webmaster@1:     }
webmaster@1: 
webmaster@1:     // Extract the affected users:
webmaster@1:     $result = pager_query("SELECT u.uid, u.access FROM {users} u INNER JOIN {profile_values} v ON u.uid = v.uid WHERE v.fid = %d AND $query AND u.access != 0 AND u.status != 0 ORDER BY u.access DESC", 20, 0, NULL, $arguments);
webmaster@1: 
webmaster@1:     $content = '';
webmaster@1:     while ($account = db_fetch_object($result)) {
webmaster@1:       $account = user_load(array('uid' => $account->uid));
webmaster@1:       $profile = _profile_update_user_fields($fields, $account);
webmaster@1:       $content .= theme('profile_listing', $account, $profile);
webmaster@1:     }
webmaster@1:     $output = theme('profile_wrapper', $content);
webmaster@1:     $output .= theme('pager', NULL, 20);
webmaster@1: 
webmaster@1:     if ($field->type == 'selection' || $field->type == 'list' || $field->type == 'textfield') {
webmaster@1:       $title = strtr(check_plain($field->page), array('%value' => theme('placeholder', $value)));
webmaster@1:     }
webmaster@1:     else {
webmaster@1:       $title = check_plain($field->page);
webmaster@1:     }
webmaster@1: 
webmaster@1:     drupal_set_title($title);
webmaster@1:     return $output;
webmaster@1:   }
webmaster@1:   else if ($name && !$field->fid) {
webmaster@1:     drupal_not_found();
webmaster@1:   }
webmaster@1:   else {
webmaster@1:     // Compile a list of fields to show.
webmaster@1:     $fields = array();
webmaster@1:     $result = db_query('SELECT name, title, type, weight, page FROM {profile_fields} WHERE visibility = %d ORDER BY category, weight', PROFILE_PUBLIC_LISTINGS);
webmaster@1:     while ($record = db_fetch_object($result)) {
webmaster@1:       $fields[] = $record;
webmaster@1:     }
webmaster@1: 
webmaster@1:     // Extract the affected users:
webmaster@1:     $result = pager_query('SELECT uid, access FROM {users} WHERE uid > 0 AND status != 0 AND access != 0 ORDER BY access DESC', 20, 0, NULL);
webmaster@1: 
webmaster@1:     $content = '';
webmaster@1:     while ($account = db_fetch_object($result)) {
webmaster@1:       $account = user_load(array('uid' => $account->uid));
webmaster@1:       $profile = _profile_update_user_fields($fields, $account);
webmaster@1:       $content .= theme('profile_listing', $account, $profile);
webmaster@1:     }
webmaster@1:     $output = theme('profile_wrapper', $content);
webmaster@1:     $output .= theme('pager', NULL, 20);
webmaster@1: 
webmaster@1:     drupal_set_title(t('User list'));
webmaster@1:     return $output;
webmaster@1:   }
webmaster@1: }
webmaster@1: 
webmaster@1: /**
webmaster@1:  * Callback to allow autocomplete of profile text fields.
webmaster@1:  */
webmaster@1: function profile_autocomplete($field, $string) {
webmaster@1:   $matches = array();
webmaster@1:   if (db_result(db_query("SELECT COUNT(*) FROM {profile_fields} WHERE fid = %d AND autocomplete = 1", $field))) {
webmaster@1:     $result = db_query_range("SELECT value FROM {profile_values} WHERE fid = %d AND LOWER(value) LIKE LOWER('%s%%') GROUP BY value ORDER BY value ASC", $field, $string, 0, 10);
webmaster@1:     while ($data = db_fetch_object($result)) {
webmaster@1:       $matches[$data->value] = check_plain($data->value);
webmaster@1:     }
webmaster@1:   }
webmaster@1: 
webmaster@1:   drupal_json($matches);
webmaster@1: }