{

global $db;

// Are both arrays already filled? Yep, return else

// are neither array filled?

if ($user_id_ary && $username_ary)

{

return false;

}

else if (!$user_id_ary && !$username_ary)

{

return 'NO_USERS';

}

$which_ary = ($user_id_ary) ? 'user_id_ary' : 'username_ary';

if (${$which_ary} && !is_array(${$which_ary}))

{

${$which_ary} = array(${$which_ary});

}

$sql_in = ($which_ary == 'user_id_ary') ? array_map('intval', ${$which_ary}) : array_map('utf8_clean_string', ${$which_ary});

unset(${$which_ary});

$user_id_ary = $username_ary = array();

// Grab the user id/username records

$sql_where = ($which_ary == 'user_id_ary') ? 'user_id' : 'username_clean';

$sql = 'SELECT user_id, username

FROM ' . USERS_TABLE . '

WHERE ' . $db->sql_in_set($sql_where, $sql_in);

if ($user_type !== false && !empty($user_type))

{

$sql .= ' AND ' . $db->sql_in_set('user_type', $user_type);

}

$result = $db->sql_query($sql);

if (!($row = $db->sql_fetchrow($result)))

{

$db->sql_freeresult($result);

return 'NO_USERS';

}

do

{

$username_ary[$row['user_id']] = $row['username'];

$user_id_ary[] = $row['user_id'];

}

while ($row = $db->sql_fetchrow($result));

$db->sql_freeresult($result);

return false;

{

global $config, $db;

// Get latest username

$sql = 'SELECT user_id, username, user_colour

FROM ' . USERS_TABLE . '

WHERE user_type IN (' . USER_NORMAL . ', ' . USER_FOUNDER . ')

ORDER BY user_id DESC';

$result = $db->sql_query_limit($sql, 1);

$row = $db->sql_fetchrow($result);

$db->sql_freeresult($result);

if ($row)

{

$config->set('newest_user_id', $row['user_id'], false);

$config->set('newest_username', $row['username'], false);

$config->set('newest_user_colour', $row['user_colour'], false);

}

{

global $config, $db, $cache, $phpbb_dispatcher;

$update_ary = array(

FORUMS_TABLE => array(

'forum_last_poster_id' => 'forum_last_poster_name',

),

MODERATOR_CACHE_TABLE => array(

'user_id' => 'username',

),

POSTS_TABLE => array(

'poster_id' => 'post_username',

),

TOPICS_TABLE => array(

'topic_poster' => 'topic_first_poster_name',

'topic_last_poster_id' => 'topic_last_poster_name',

),

);

foreach ($update_ary as $table => $field_ary)

{

foreach ($field_ary as $id_field => $name_field)

{

$sql = "UPDATE $table

SET $name_field = '" . $db->sql_escape($new_name) . "'

WHERE $name_field = '" . $db->sql_escape($old_name) . "'

AND $id_field <> " . ANONYMOUS;

$db->sql_query($sql);

}

}

if ($config['newest_username'] == $old_name)

{

$config->set('newest_username', $new_name, false);

}

/**

$vars = array('old_name', 'new_name');

extract($phpbb_dispatcher->trigger_event('core.update_username', compact($vars)));

// Because some tables/caches use username-specific data we need to purge this here.

$cache->destroy('sql', MODERATOR_CACHE_TABLE);

{

global $db, $config;

global $phpbb_dispatcher, $phpbb_container;

if (empty($user_row['username']) || !isset($user_row['group_id']) || !isset($user_row['user_email']) || !isset($user_row['user_type']))

{

return false;

}

$username_clean = utf8_clean_string($user_row['username']);

if (empty($username_clean))

{

return false;

}

$sql_ary = array(

'username' => $user_row['username'],

'username_clean' => $username_clean,

'user_password' => (isset($user_row['user_password'])) ? $user_row['user_password'] : '',

'user_email' => strtolower($user_row['user_email']),

'user_email_hash' => phpbb_email_hash($user_row['user_email']),

'group_id' => $user_row['group_id'],

'user_type' => $user_row['user_type'],

);

// These are the additional vars able to be specified

$additional_vars = array(

'user_permissions' => '',

'user_timezone' => $config['board_timezone'],

'user_dateformat' => $config['default_dateformat'],

'user_lang' => $config['default_lang'],

'user_style' => (int) $config['default_style'],

'user_actkey' => '',

'user_ip' => '',

'user_regdate' => time(),

'user_passchg' => time(),

'user_options' => 230271,

// We do not set the new flag here - registration scripts need to specify it

'user_new' => 0,

'user_inactive_reason' => 0,

'user_inactive_time' => 0,

'user_lastmark' => time(),

'user_lastvisit' => 0,

'user_lastpost_time' => 0,

'user_lastpage' => '',

'user_posts' => 0,

'user_colour' => '',

'user_avatar' => '',

'user_avatar_type' => '',

'user_avatar_width' => 0,

'user_avatar_height' => 0,

'user_new_privmsg' => 0,

'user_unread_privmsg' => 0,

'user_last_privmsg' => 0,

'user_message_rules' => 0,

'user_full_folder' => PRIVMSGS_NO_BOX,

'user_emailtime' => 0,

'user_notify' => 0,

'user_notify_pm' => 1,

'user_notify_type' => NOTIFY_EMAIL,

'user_allow_pm' => 1,

'user_allow_viewonline' => 1,

'user_allow_viewemail' => 1,

'user_allow_massemail' => 1,

'user_sig' => '',

'user_sig_bbcode_uid' => '',

'user_sig_bbcode_bitfield' => '',

'user_form_salt' => unique_id(),

);

// Now fill the sql array with not required variables

foreach ($additional_vars as $key => $default_value)

{

$sql_ary[$key] = (isset($user_row[$key])) ? $user_row[$key] : $default_value;

}

// Any additional variables in $user_row not covered above?

$remaining_vars = array_diff(array_keys($user_row), array_keys($sql_ary));

// Now fill our sql array with the remaining vars

if (count($remaining_vars))

{

foreach ($remaining_vars as $key)

{

$sql_ary[$key] = $user_row[$key];

}

}

/**

$vars = array('user_row', 'cp_data', 'sql_ary', 'notifications_data');

extract($phpbb_dispatcher->trigger_event('core.user_add_modify_data', compact($vars)));

$sql = 'INSERT INTO ' . USERS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary);

$db->sql_query($sql);

$user_id = $db->sql_nextid();

// Insert Custom Profile Fields

if ($cp_data !== false && count($cp_data))

{

$cp_data['user_id'] = (int) $user_id;

/* @var $cp \phpbb\profilefields\manager */

$cp = $phpbb_container->get('profilefields.manager');

$sql = 'INSERT INTO ' . PROFILE_FIELDS_DATA_TABLE . ' ' .

$db->sql_build_array('INSERT', $cp->build_insert_sql_array($cp_data));

$db->sql_query($sql);

}

// Place into appropriate group...

$sql = 'INSERT INTO ' . USER_GROUP_TABLE . ' ' . $db->sql_build_array('INSERT', array(

'user_id' => (int) $user_id,

'group_id' => (int) $user_row['group_id'],

'user_pending' => 0)

);

$db->sql_query($sql);

// Now make it the users default group...

group_set_user_default($user_row['group_id'], array($user_id), false);

// Add to newly registered users group if user_new is 1

if ($config['new_member_post_limit'] && $sql_ary['user_new'])

{

$sql = 'SELECT group_id

FROM ' . GROUPS_TABLE . "

AND group_type = " . GROUP_SPECIAL;

$result = $db->sql_query($sql);

$add_group_id = (int) $db->sql_fetchfield('group_id');

$db->sql_freeresult($result);

if ($add_group_id)

{

global $phpbb_log;

// Because these actions only fill the log unnecessarily, we disable it

$phpbb_log->disable('admin');

// Add user to "newly registered users" group and set to default group if admin specified so.

if ($config['new_member_group_default'])

{

group_user_add($add_group_id, $user_id, false, false, true);

$user_row['group_id'] = $add_group_id;

}

else

{

group_user_add($add_group_id, $user_id);

}

$phpbb_log->enable('admin');

}

}

// set the newest user and adjust the user count if the user is a normal user and no activation mail is sent

if ($user_row['user_type'] == USER_NORMAL || $user_row['user_type'] == USER_FOUNDER)

{

$config->set('newest_user_id', $user_id, false);

$config->set('newest_username', $user_row['username'], false);

$config->increment('num_users', 1, false);

$sql = 'SELECT group_colour

FROM ' . GROUPS_TABLE . '

WHERE group_id = ' . (int) $user_row['group_id'];

$result = $db->sql_query_limit($sql, 1);

$row = $db->sql_fetchrow($result);

$db->sql_freeresult($result);

$config->set('newest_user_colour', $row['group_colour'], false);

}

// Use default notifications settings if notifications_data is not set

if ($notifications_data === null)

{

$notifications_data = array(

array(

'item_type' => 'notification.type.post',

'method' => 'notification.method.email',

),

array(

'item_type' => 'notification.type.topic',

'method' => 'notification.method.email',

),

);

}

/**

$vars = array('user_row', 'cp_data', 'sql_ary', 'notifications_data');

extract($phpbb_dispatcher->trigger_event('core.user_add_modify_notifications_data', compact($vars)));

// Subscribe user to notifications if necessary

if (!empty($notifications_data))

{

/* @var $phpbb_notifications \phpbb\notification\manager */

$phpbb_notifications = $phpbb_container->get('notification_manager');

foreach ($notifications_data as $subscription)

{

$phpbb_notifications->add_subscription($subscription['item_type'], 0, $subscription['method'], $user_id);

}

}

/**

$vars = array('user_id', 'user_row', 'cp_data');

extract($phpbb_dispatcher->trigger_event('core.user_add_after', compact($vars)));

return $user_id;

{

global $cache, $config, $db, $user, $phpbb_dispatcher, $phpbb_container;

global $phpbb_root_path, $phpEx;

$db->sql_transaction('begin');

$user_rows = array();

if (!is_array($user_ids))

{

$user_ids = array($user_ids);

}

$user_id_sql = $db->sql_in_set('user_id', $user_ids);

$sql = 'SELECT *

FROM ' . USERS_TABLE . '

WHERE ' . $user_id_sql;

$result = $db->sql_query($sql);

while ($row = $db->sql_fetchrow($result))

{

$user_rows[(int) $row['user_id']] = $row;

}

$db->sql_freeresult($result);

if (empty($user_rows))

{

return false;

}

/**

$vars = array('mode', 'user_ids', 'retain_username');

extract($phpbb_dispatcher->trigger_event('core.delete_user_before', compact($vars)));

// Before we begin, we will remove the reports the user issued.

$sql = 'SELECT r.post_id, p.topic_id

FROM ' . REPORTS_TABLE . ' r, ' . POSTS_TABLE . ' p

WHERE ' . $db->sql_in_set('r.user_id', $user_ids) . '

AND p.post_id = r.post_id';

$result = $db->sql_query($sql);

$report_posts = $report_topics = array();

while ($row = $db->sql_fetchrow($result))

{

$report_posts[] = $row['post_id'];

$report_topics[] = $row['topic_id'];

}

$db->sql_freeresult($result);

if (count($report_posts))

{

$report_posts = array_unique($report_posts);

$report_topics = array_unique($report_topics);

// Get a list of topics that still contain reported posts

$sql = 'SELECT DISTINCT topic_id

FROM ' . POSTS_TABLE . '

WHERE ' . $db->sql_in_set('topic_id', $report_topics) . '

AND ' . $db->sql_in_set('post_id', $report_posts, true);

$result = $db->sql_query($sql);

$keep_report_topics = array();

while ($row = $db->sql_fetchrow($result))

{

$keep_report_topics[] = $row['topic_id'];

}

$db->sql_freeresult($result);

if (count($keep_report_topics))

{

$report_topics = array_diff($report_topics, $keep_report_topics);

}

unset($keep_report_topics);

// Now set the flags back

$sql = 'UPDATE ' . POSTS_TABLE . '

WHERE ' . $db->sql_in_set('post_id', $report_posts);

$db->sql_query($sql);

if (count($report_topics))

{

$sql = 'UPDATE ' . TOPICS_TABLE . '

WHERE ' . $db->sql_in_set('topic_id', $report_topics);

$db->sql_query($sql);

}

}

// Remove reports

$db->sql_query('DELETE FROM ' . REPORTS_TABLE . ' WHERE ' . $user_id_sql);

$num_users_delta = 0;

// Get auth provider collection in case accounts might need to be unlinked

$provider_collection = $phpbb_container->get('auth.provider_collection');

// Some things need to be done in the loop (if the query changes based

// on which user is currently being deleted)

$added_guest_posts = 0;

foreach ($user_rows as $user_id => $user_row)

{

if ($user_row['user_avatar'] && $user_row['user_avatar_type'] == 'avatar.driver.upload')

{

avatar_delete('user', $user_row);

}

// Unlink accounts

foreach ($provider_collection as $provider_name => $auth_provider)

{

$provider_data = $auth_provider->get_auth_link_data($user_id);

if ($provider_data !== null)

{

$link_data = array(

'user_id' => $user_id,

'link_method' => 'user_delete',

);

// BLOCK_VARS might contain hidden fields necessary for unlinking accounts

if (isset($provider_data['BLOCK_VARS']) && is_array($provider_data['BLOCK_VARS']))

{

foreach ($provider_data['BLOCK_VARS'] as $provider_service)

{

if (!array_key_exists('HIDDEN_FIELDS', $provider_service))

{

$provider_service['HIDDEN_FIELDS'] = array();

}

$auth_provider->unlink_account(array_merge($link_data, $provider_service['HIDDEN_FIELDS']));

}

}

else

{

$auth_provider->unlink_account($link_data);

}

}

}

// Decrement number of users if this user is active

if ($user_row['user_type'] != USER_INACTIVE && $user_row['user_type'] != USER_IGNORE)

{

--$num_users_delta;

}

switch ($mode)

{

case 'retain':

if ($retain_username === false)

{

$post_username = $user->lang['GUEST'];

}

else

{

$post_username = $user_row['username'];

}

// If the user is inactive and newly registered

// we assume no posts from the user, and save

// the queries

if ($user_row['user_type'] != USER_INACTIVE || $user_row['user_inactive_reason'] != INACTIVE_REGISTER || $user_row['user_posts'])

{

// When we delete these users and retain the posts, we must assign all the data to the guest user

$sql = 'UPDATE ' . FORUMS_TABLE . '

SET forum_last_poster_id = ' . ANONYMOUS . ", forum_last_poster_name = '" . $db->sql_escape($post_username) . "', forum_last_poster_colour = ''

WHERE forum_last_poster_id = $user_id";

$db->sql_query($sql);

$sql = 'UPDATE ' . POSTS_TABLE . '

SET poster_id = ' . ANONYMOUS . ", post_username = '" . $db->sql_escape($post_username) . "'

WHERE poster_id = $user_id";

$db->sql_query($sql);

$sql = 'UPDATE ' . TOPICS_TABLE . '

SET topic_poster = ' . ANONYMOUS . ", topic_first_poster_name = '" . $db->sql_escape($post_username) . "', topic_first_poster_colour = ''

WHERE topic_poster = $user_id";

$db->sql_query($sql);

$sql = 'UPDATE ' . TOPICS_TABLE . '

SET topic_last_poster_id = ' . ANONYMOUS . ", topic_last_poster_name = '" . $db->sql_escape($post_username) . "', topic_last_poster_colour = ''

WHERE topic_last_poster_id = $user_id";

$db->sql_query($sql);

// Since we change every post by this author, we need to count this amount towards the anonymous user

if ($user_row['user_posts'])

{

$added_guest_posts += $user_row['user_posts'];

}

}

break;

case 'remove':

// there is nothing variant specific to deleting posts

break;

}

}

if ($num_users_delta != 0)

{

$config->increment('num_users', $num_users_delta, false);

}

// Now do the invariant tasks

// all queries performed in one call of this function are in a single transaction

// so this is kosher

if ($mode == 'retain')

{

// Assign more data to the Anonymous user

$sql = 'UPDATE ' . ATTACHMENTS_TABLE . '

SET poster_id = ' . ANONYMOUS . '

WHERE ' . $db->sql_in_set('poster_id', $user_ids);

$db->sql_query($sql);

$sql = 'UPDATE ' . USERS_TABLE . '

SET user_posts = user_posts + ' . $added_guest_posts . '

WHERE user_id = ' . ANONYMOUS;

$db->sql_query($sql);

}

else if ($mode == 'remove')

{

if (!function_exists('delete_posts'))

{

include($phpbb_root_path . 'includes/functions_admin.' . $phpEx);

}

// Delete posts, attachments, etc.

// delete_posts can handle any number of IDs in its second argument

delete_posts('poster_id', $user_ids);

}

$table_ary = array(USERS_TABLE, USER_GROUP_TABLE, TOPICS_WATCH_TABLE, FORUMS_WATCH_TABLE, ACL_USERS_TABLE, TOPICS_TRACK_TABLE, TOPICS_POSTED_TABLE, FORUMS_TRACK_TABLE, PROFILE_FIELDS_DATA_TABLE, MODERATOR_CACHE_TABLE, DRAFTS_TABLE, BOOKMARKS_TABLE, SESSIONS_KEYS_TABLE, PRIVMSGS_FOLDER_TABLE, PRIVMSGS_RULES_TABLE);

// Delete the miscellaneous (non-post) data for the user

foreach ($table_ary as $table)

{

$sql = "DELETE FROM $table

WHERE " . $user_id_sql;

$db->sql_query($sql);

}

$cache->destroy('sql', MODERATOR_CACHE_TABLE);

// Change user_id to anonymous for posts edited by this user

$sql = 'UPDATE ' . POSTS_TABLE . '

SET post_edit_user = ' . ANONYMOUS . '

WHERE ' . $db->sql_in_set('post_edit_user', $user_ids);

$db->sql_query($sql);

// Change user_id to anonymous for pms edited by this user

$sql = 'UPDATE ' . PRIVMSGS_TABLE . '

SET message_edit_user = ' . ANONYMOUS . '

WHERE ' . $db->sql_in_set('message_edit_user', $user_ids);

$db->sql_query($sql);

// Change user_id to anonymous for posts deleted by this user

$sql = 'UPDATE ' . POSTS_TABLE . '

SET post_delete_user = ' . ANONYMOUS . '

WHERE ' . $db->sql_in_set('post_delete_user', $user_ids);

$db->sql_query($sql);

// Change user_id to anonymous for topics deleted by this user

$sql = 'UPDATE ' . TOPICS_TABLE . '

SET topic_delete_user = ' . ANONYMOUS . '

WHERE ' . $db->sql_in_set('topic_delete_user', $user_ids);

$db->sql_query($sql);

// Delete user log entries about this user

$sql = 'DELETE FROM ' . LOG_TABLE . '

WHERE ' . $db->sql_in_set('reportee_id', $user_ids);

$db->sql_query($sql);

// Change user_id to anonymous for this users triggered events

$sql = 'UPDATE ' . LOG_TABLE . '

SET user_id = ' . ANONYMOUS . '

WHERE ' . $user_id_sql;

$db->sql_query($sql);

// Delete the user_id from the zebra table

$sql = 'DELETE FROM ' . ZEBRA_TABLE . '

WHERE ' . $user_id_sql . '

OR ' . $db->sql_in_set('zebra_id', $user_ids);

$db->sql_query($sql);

// Delete the user_id from the banlist

$sql = 'DELETE FROM ' . BANLIST_TABLE . '

WHERE ' . $db->sql_in_set('ban_userid', $user_ids);

$db->sql_query($sql);

// Delete the user_id from the session table

$sql = 'DELETE FROM ' . SESSIONS_TABLE . '

WHERE ' . $db->sql_in_set('session_user_id', $user_ids);

$db->sql_query($sql);

// Clean the private messages tables from the user

if (!function_exists('phpbb_delete_user_pms'))

{

include($phpbb_root_path . 'includes/functions_privmsgs.' . $phpEx);

}

phpbb_delete_users_pms($user_ids);

$phpbb_notifications = $phpbb_container->get('notification_manager');

$phpbb_notifications->delete_notifications('notification.type.admin_activate_user', $user_ids);

$db->sql_transaction('commit');

/**

$vars = array('mode', 'user_ids', 'retain_username', 'user_rows');

extract($phpbb_dispatcher->trigger_event('core.delete_user_after', compact($vars)));

// Reset newest user info if appropriate

if (in_array($config['newest_user_id'], $user_ids))

{

update_last_username();

}

return false;

{

global $config, $db, $user, $auth, $phpbb_dispatcher;

$deactivated = $activated = 0;

$sql_statements = array();

if (!is_array($user_id_ary))

{

$user_id_ary = array($user_id_ary);

}

if (!count($user_id_ary))

{

return;

}

$sql = 'SELECT user_id, group_id, user_type, user_inactive_reason

FROM ' . USERS_TABLE . '

WHERE ' . $db->sql_in_set('user_id', $user_id_ary);

$result = $db->sql_query($sql);

while ($row = $db->sql_fetchrow($result))

{

$sql_ary = array();

if ($row['user_type'] == USER_IGNORE || $row['user_type'] == USER_FOUNDER ||

($mode == 'activate' && $row['user_type'] != USER_INACTIVE) ||

($mode == 'deactivate' && $row['user_type'] == USER_INACTIVE))

{

continue;

}

if ($row['user_type'] == USER_INACTIVE)

{

$activated++;

}

else

{

$deactivated++;

// Remove the users session key...

$user->reset_login_keys($row['user_id']);

}

$sql_ary += array(

'user_type' => ($row['user_type'] == USER_NORMAL) ? USER_INACTIVE : USER_NORMAL,

'user_inactive_time' => ($row['user_type'] == USER_NORMAL) ? time() : 0,

'user_inactive_reason' => ($row['user_type'] == USER_NORMAL) ? $reason : 0,

);

$sql_statements[$row['user_id']] = $sql_ary;

}

$db->sql_freeresult($result);

/**

$vars = array('mode', 'reason', 'activated', 'deactivated', 'user_id_ary', 'sql_statements');

extract($phpbb_dispatcher->trigger_event('core.user_active_flip_before', compact($vars)));

if (count($sql_statements))

{

foreach ($sql_statements as $user_id => $sql_ary)

{

$sql = 'UPDATE ' . USERS_TABLE . '

SET ' . $db->sql_build_array('UPDATE', $sql_ary) . '

WHERE user_id = ' . $user_id;

$db->sql_query($sql);

}

$auth->acl_clear_prefetch(array_keys($sql_statements));

}

/**

$vars = array('mode', 'reason', 'activated', 'deactivated', 'user_id_ary', 'sql_statements');

extract($phpbb_dispatcher->trigger_event('core.user_active_flip_after', compact($vars)));

if ($deactivated)

{

$config->increment('num_users', $deactivated * (-1), false);

}

if ($activated)

{

$config->increment('num_users', $activated, false);

}

// Update latest username

update_last_username();

{

global $db, $user, $cache, $phpbb_log;

// Delete stale bans

$sql = 'DELETE FROM ' . BANLIST_TABLE . '

WHERE ban_end < ' . time() . '

AND ban_end <> 0';

$db->sql_query($sql);

$ban_list = (!is_array($ban)) ? array_unique(explode("\n", $ban)) : $ban;

$ban_list_log = implode(', ', $ban_list);

$current_time = time();

// Set $ban_end to the unix time when the ban should end. 0 is a permanent ban.

if ($ban_len)

{

if ($ban_len != -1 || !$ban_len_other)

{

$ban_end = max($current_time, $current_time + ($ban_len) * 60);

}

else

{

$ban_other = explode('-', $ban_len_other);

if (count($ban_other) == 3 && ((int) $ban_other[0] < 9999) &&

(strlen($ban_other[0]) == 4) && (strlen($ban_other[1]) == 2) && (strlen($ban_other[2]) == 2))

{

$ban_end = max($current_time, $user->create_datetime()

->setDate((int) $ban_other[0], (int) $ban_other[1], (int) $ban_other[2])

->setTime(0, 0, 0)

->getTimestamp() + $user->timezone->getOffset(new DateTime('UTC')));

}

else

{

trigger_error('LENGTH_BAN_INVALID', E_USER_WARNING);

}

}

}

else

{

$ban_end = 0;

}

$founder = $founder_names = array();

if (!$ban_exclude)

{

// Create a list of founder...

$sql = 'SELECT user_id, user_email, username_clean

FROM ' . USERS_TABLE . '

WHERE user_type = ' . USER_FOUNDER;

$result = $db->sql_query($sql);

while ($row = $db->sql_fetchrow($result))

{

$founder[$row['user_id']] = $row['user_email'];

$founder_names[$row['user_id']] = $row['username_clean'];

}

$db->sql_freeresult($result);

}

$banlist_ary = array();

switch ($mode)

{

case 'user':

$type = 'ban_userid';

// At the moment we do not support wildcard username banning

// Select the relevant user_ids.

$sql_usernames = array();

foreach ($ban_list as $username)

{

$username = trim($username);

if ($username != '')

{

$clean_name = utf8_clean_string($username);

if ($clean_name == $user->data['username_clean'])

{

trigger_error('CANNOT_BAN_YOURSELF', E_USER_WARNING);

}

if (in_array($clean_name, $founder_names))

{

trigger_error('CANNOT_BAN_FOUNDER', E_USER_WARNING);

}

$sql_usernames[] = $clean_name;

}

}

// Make sure we have been given someone to ban

if (!count($sql_usernames))

{

trigger_error('NO_USER_SPECIFIED', E_USER_WARNING);

}

$sql = 'SELECT user_id

FROM ' . USERS_TABLE . '

WHERE ' . $db->sql_in_set('username_clean', $sql_usernames);

// Do not allow banning yourself, the guest account, or founders.

$non_bannable = array($user->data['user_id'], ANONYMOUS);

if (count($founder))

{

$sql .= ' AND ' . $db->sql_in_set('user_id', array_merge(array_keys($founder), $non_bannable), true);