. */ if (!defined('LACONICA')) { exit(1); } require_once(INSTALLDIR.'/lib/settingsaction.php'); class AvatarAction extends SettingsAction { function get_instructions() { return _('Upload a new "avatar" (user image) here. You can\'t edit the picture after you upload it, so make sure it\'s more or less square. It must be under the site license, also. Use a picture that belongs to you and that you want to share.'); } function show_form($msg=NULL, $success=false) { $this->form_header(_('Avatar'), $msg, $success); $user = common_current_user(); $profile = $user->getProfile(); $original = $profile->getOriginalAvatar(); if ($original) { common_element('img', array('src' => $original->url, 'class' => 'avatar original', 'width' => $original->width, 'height' => $original->height, 'alt' => $user->nickname)); } $avatar = $profile->getAvatar(AVATAR_PROFILE_SIZE); if ($avatar) { common_element('img', array('src' => $avatar->url, 'class' => 'avatar profile', 'width' => AVATAR_PROFILE_SIZE, 'height' => AVATAR_PROFILE_SIZE, 'alt' => $user->nickname)); } common_element_start('form', array('enctype' => 'multipart/form-data', 'method' => 'POST', 'id' => 'avatar', 'action' => common_local_url('avatar'))); common_hidden('token', common_session_token()); common_element('input', array('name' => 'MAX_FILE_SIZE', 'type' => 'hidden', 'id' => 'MAX_FILE_SIZE', 'value' => MAX_AVATAR_SIZE)); common_element('input', array('name' => 'avatarfile', 'type' => 'file', 'id' => 'avatarfile')); common_submit('submit', _('Upload')); common_element_end('form'); common_show_footer(); } function handle_post() { # CSRF protection $token = $this->trimmed('token'); if (!$token || $token != common_session_token()) { $this->show_form(_('There was a problem with your session token. Try again, please.')); return; } switch ($_FILES['avatarfile']['error']) { case UPLOAD_ERR_OK: # success, jump out break; case UPLOAD_ERR_INI_SIZE: case UPLOAD_ERR_FORM_SIZE: $this->show_form(_('That file is too big.')); return; case UPLOAD_ERR_PARTIAL: @unlink($_FILES['avatarfile']['tmp_name']); $this->show_form(_('Partial upload.')); return; default: $this->show_form(_('System error uploading file.')); return; } $info = @getimagesize($_FILES['avatarfile']['tmp_name']); if (!$info) { @unlink($_FILES['avatarfile']['tmp_name']); $this->show_form(_('Not an image or corrupt file.')); return; } switch ($info[2]) { case IMAGETYPE_GIF: case IMAGETYPE_JPEG: case IMAGETYPE_PNG: break; default: $this->show_form(_('Unsupported image file format.')); return; } $user = common_current_user(); $profile = $user->getProfile(); if ($profile->setOriginal($_FILES['avatarfile']['tmp_name'])) { $this->show_form(_('Avatar updated.'), true); } else { $this->show_form(_('Failed updating avatar.')); } @unlink($_FILES['avatarfile']['tmp_name']); } }