Anonymous

<?php

define("IN_MYBB", 1);
define ("csvfield_num",9);
$csvfield_format = array ('Firstname','Lastname','Sex','Nation','Room','Extension','Course','Institution','Years');

require_once "./global.php";

$lang->load("nx_addusers");



// Loading CSV
if($mybb->input['action'] == "")
{	
	cpheader();
	starttable();
	tableheader("<a href='nx_addusers.php?".SID."'>".$lang->main."</a>", "", 2);
	tablesubheader($lang->file_setm,"",2);
	echo "<tr>\n";
		echo "<td align=\"center\" class=\"{$bgcolor}\">\n";
		echo "<form action='nx_addusers.php?action=getcsv&".SID."' method='post'>\n";
		echo "{$lang->file_name}&nbsp;&nbsp;<input type='text' name='file_name'>\n";
		echo "&nbsp;&nbsp;<input type='submit' value='{$lang->create_button}'>\n";
		echo "</form>\n";
		echo "</td>\n";
	echo "</tr>\n";
	endtable();
	cpfooter();
}

// Comfirm create/update
if( $mybb->input['action'] == "getcsv")
{	
	cpheader();
	$csvname=$mybb->input['file_name'];
	
	if( is_readable($csvname) ){
		
		$csvfile = fopen("$csvname","r");
		starttable();
		tableheader("<a href='nx_addusers.php?".SID."'>".$lang->main."</a>", "", csvfield_num);
		tablesubheader($lang->file_set,"",csvfield_num);
		echo "<tr>\n";
		foreach ( $csvfield_format as $fieldvalue ){
			print "<td class=\"$bgcolor\" align=\"center\" valign=\"top\"><h4><b><u>{$fieldvalue}</u></b></h4></td>\n";
		}
		echo "</tr>\n";
		while(! feof($csvfile))
  		{	echo "<tr>\n";
			$nx_user_data = fgetcsv($csvfile);
			
			if ($nx_user_data == NULL){
				continue;
			}else{
				
				foreach( $nx_user_data as $value )
				{
				print "<td class=\"$bgcolor\" align=\"center\" valign=\"top\">{$value}</td>\n";
				}
			
			}
			echo "</tr>\n";	
  		}
			endtable();
		echo "<center><tr aign=\"center\"><form action='nx_addusers.php?action=comfirm_add&".SID."' method='post'>\n";
		echo "<input type='hidden' name='file_name' value='{$csvname}'>\n";
		echo "<td align=\"center\"><input type='submit' name='comfirm' value='{$lang->comfirm_button}'></td>\n";
		echo "<td align=\"center\"><input type='submit' name='cancel' value='{$lang->cancel_button}'></td>\n";
		echo "</form></tr></center>\n";
		
		
		fclose($csvfile);
		
	}else{
		starttable();
		tableheader("<a href='nx_addusers.php?".SID."'>".$lang->main."</a>", "", csvfield_num);
		tablesubheader($lang->file_error,"",1);
		echo "<td class=\"$bgcolor\" align=\"center\" valign=\"top\">Error : Unreadable file or file doesn't exist.";
		endtable();
	}
	cpfooter();
}

if( $mybb->input['action'] == "comfirm_add")
{	
	cpheader();
	if (isset($mybb->input['comfirm'])){
	
		require_once MYBB_ROOT."inc/datahandlers/user.php";
		require_once( 'nx_pswgenerate.php' );
		
		$generator = new generatepswd();
		$csvname = $mybb->input['file_name'];
		
		function generate_pf_array($pf_data){
		
			$user_pf_array = array();
		
			for ($i=0; $i<=(csvfield_num-1); $i++) {
				$value = $csvfield_format[$i];
				$rel_fid = $db->query("SELECT 'fid' FROM ".TABLE_PREFIX."profilefields' WHERE name={$value}");
				$user_pf_array[$rel_fid]= $pf_data[$i];
			}
			return $user_pf_array;
		}
		
		$csvfile = fopen("$csvname","r");
		$nx_user_data = fgetcsv($csvfile);
		$user_pf_data = generate_pf_array($nx_user_data);
		print_r($user_pf_data);
			/*
			if( is_readable($csvname) ){
		
				$csvfile = fopen("$csvname","r");
					while(! feof($csvfile))
					{
						$nx_user_data = fgetcsv($csvfile);
						$user_pf_data = generate_pf_array($nx_user_data);
						$user = array (
							"profile_fields" => $user_pf_data,
							"profile_fields_editable" => true,
							);
						print_r($user);
					}
				}
			*/
			cpfooter();
				
	}else{
	
		cpredirect("nx_addusers.php?".SID);
	}
}
?>