Ladder
= 4 && substr($user['email'] ?? '', -1) === '@') echo '[2FA]';
if ($user['group'] && $user['group'] != 2 && $authLevel >= 3) {
$csrfOk = (!!$users->csrfCheck() && $authLevel >= 4);
if ($csrfOk && isset($_POST['group'])) {
$group = intval($_POST['group']);
if ($group != 3 && $group != 4 && $group != 5 && $group != 6) $group = 1;
$psdb->query("UPDATE ntbb_users SET `group` = ".intval($group)." WHERE userid = '".$psdb->escape($user['userid'])."' LIMIT 1");
$user['group'] = $group;
$modlogentry = "Group changed to $group ({$ntbb_groups[$group]['name']})";
$psdb->query(
"INSERT INTO `{$psdb->prefix}usermodlog` (`userid`,`actorid`,`date`,`ip`,`entry`) VALUES (?, ?, ?, ?, ?)",
[$user['userid'], $curuser['userid'], time(), $users->getIp(), $modlogentry]
);
?>
query(
"UPDATE {$psdb->prefix}users SET banstate = ? WHERE userid = ? LIMIT 1",
[$newStanding, $user['userid']]
);
if ($newStanding === 30 || $newStanding === 100) {
$psdb->query(
"UPDATE ntbb_ladder SET elo = -abs(elo) WHERE userid = ?;",
[$user['userid']]
);
} else {
$psdb->query(
"UPDATE ntbb_ladder SET elo = abs(elo) WHERE userid = ?;",
[$user['userid']]
);
}
$modlogentry = "Standing changed to $newStanding ({$STANDINGS[$newStanding]}): {$_POST['reason']}";
$psdb->query(
"INSERT INTO `{$psdb->prefix}usermodlog` (`userid`,`actorid`,`date`,`ip`,`entry`) VALUES (?, ?, ?, ?, ?)",
[$user['userid'], $curuser['userid'], time(), $users->getIp(), $modlogentry]
);
$user['banstate'] = @$_POST['standing'];
$count = $psdb->query("SELECT COUNT(*) FROM ntbb_users WHERE ip = '".$psdb->escape($user['ip'])."' LIMIT 1");
$count = $psdb->fetch_assoc($count);
$count = $count['COUNT(*)'];
?>
userid($newName);
if (!$newUserid || $newUserid === $user['userid']) die("invalid username");
$psdb->query(
"UPDATE {$psdb->prefix}ladder SET userid = ? WHERE userid = ?",
['_'.$user['userid'], $newUserid]
);
$psdb->query(
"UPDATE {$psdb->prefix}ladder SET userid = ?, username = ?, elo = abs(elo) WHERE userid = ?",
[$newUserid, $newName, $user['userid']]
);
$psdb->query(
"UPDATE {$psdb->prefix}ladder SET userid = ?, username = ?, elo = abs(elo) WHERE userid = ?",
[$user['userid'], $user['username'], '_'.$user['userid']]
);
$modlogentry = "Ladder swapped with " . $user['userid'];
$psdb->query(
"INSERT INTO `{$psdb->prefix}usermodlog` (`userid`,`actorid`,`date`,`ip`,`entry`) VALUES (?, ?, ?, ?, ?)",
[$newUserid, $curuser['userid'], time(), $users->getIp(), $modlogentry]
);
$modlogentry = "Ladder swapped with " . $newUserid;
$psdb->query(
"INSERT INTO `{$psdb->prefix}usermodlog` (`userid`,`actorid`,`date`,`ip`,`entry`) VALUES (?, ?, ?, ?, ?)",
[$user['userid'], $curuser['userid'], time(), $users->getIp(), $modlogentry]
);
?>
query(
"UPDATE {$psdb->prefix}users SET email = ? WHERE userid = ?",
[$remove ? '' : $email . '@', $user['userid']]
);
$modlogentry = $remove ? "Login method set to password" : "Login method set to Google " . $email;
$psdb->query(
"INSERT INTO `{$psdb->prefix}usermodlog` (`userid`,`actorid`,`date`,`ip`,`entry`) VALUES (?, ?, ?, ?, ?)",
[$user['userid'], $curuser['userid'], time(), $users->getIp(), $modlogentry]
);
?>
= 5 && @$_POST['passreset']) {
$token = $users->createPasswordResetToken($user['userid']);
?>
Use this link:
https:///resetpassword/
(Alts | GeoIP)
✓ Abandoned account';
?>
= 4) {
?>
= 5) {
?>
csrfCheck()) {
$csrfOk = true;
}
if ($csrfOk && $_POST['standing'] ?? null) {
$ctime = time();
$newStanding = $_POST['standing'];
$psdb->query(
"INSERT INTO ntbb_users (`userid`,`username`,`passwordhash`,`email`,`registertime`,`ip`,`banstate`) VALUES (?,?,'','',?,'',?)",
[$user['userid'], $user['userid'], $ctime, $newStanding]
);
$modlogentry = "Created dummy user with standing $newStanding ({$STANDINGS[$newStanding]})";
$psdb->query(
"INSERT INTO `{$psdb->prefix}usermodlog` (`userid`,`actorid`,`date`,`ip`,`entry`) VALUES (?, ?, ?, ?, ?)",
[$user['userid'], $curuser['userid'], time(), $users->getIp(), $modlogentry]
);
$user['banstate'] = $_POST['standing'];
?>
Dummy user created; Standing updated
(Account disabled)= 2) echo ' (Usermodlog)';
?>
(Banned indefinitely)
Joined: = 2) echo ' (Usermodlog)';
?>
getGroupName($user);
$groupSymbol = $users->getGroupSymbol($user);
if ($groupSymbol === '~' || $groupSymbol === '&') {
?>
Joined: = 2) echo ' (Usermodlog)';
?>
(Unregistered)
;_;7';
}
// Ladder
if ($user['userid'] === $curuser['userid']) {
if ($users->csrfCheck() && @$_POST['resetLadder']) {
$formatLadder = new NTBBLadder(@$_POST['resetLadder']);
if (substr($formatLadder->formatid, -7) !== 'current' && substr($formatLadder->formatid, -11) !== 'suspecttest') {
$formatLadder->clearWL($curuser);
}
}
}
if ((@$user['banstate'] != 100 && @$user['banstate'] != 30) || $authLevel >= 4) {
$ladder = new NTBBLadder('');
$ladder->getAllRatings($user);
}
$bufs = ['official' => '', 'unofficial' => ''];
if (@$user['ratings']) foreach (@$user['ratings'] as $row) {
if ($row['w'] + $row['l'] + $row['t'] == 0 && $row['elo'] < 1050) continue;
$buftype = isset($formats[$row['formatid']])?'official':'unofficial';
$bufs[$buftype] .= '
| '.htmlspecialchars($row['formatid']).' | '.round($row['elo']).' | ';
if ($row['rprd'] < 100) {
$bufs[$buftype] .= ''.number_format($row['gxe'],1).'% | '.''.round($row['rpr']).' ± '.round($row['rprd']).'';
} else {
$bufs[$buftype] .= ' | (more games needed)';
}
if ($user['userid'] === $curuser['userid']) {
$bufs[$buftype] .= ' | ' . $row['w'] . ' | ' . $row['l'] . ' | ';
if (substr($row['formatid'], -7) !== 'current' && substr($row['formatid'], -11) !== 'suspecttest') {
$bufs[$buftype] .= ' | ';
}
}
$bufs[$buftype] .= '
';
}
if ($bufs['official'] || $bufs['unofficial']) {
?>
Ratings
| Official ladder |
Elo |
GXE |
Glicko-1 |
W |
L |
| Unofficial ladder |
Elo |
GXE |
Glicko-1 |
W |
L |
|
|