Gazelle/sections/userhistory/email_history.php

<?php
#declare(strict_types=1);

/************************************************************************
||------------|| User email history page ||---------------------------||

This page lists previous email addresses a user has used on the site. It
gets called if $_GET['action'] == 'email'.

It also requires $_GET['userid'] in order to get the data for the correct
user.

************************************************************************/

$UserID = $_GET['userid'];
if (!is_number($UserID)) {
    error(404);
}

$DB->query("
  SELECT ui.JoinDate, p.Level AS Class
  FROM users_main AS um
    JOIN users_info AS ui ON um.ID = ui.UserID
    JOIN permissions AS p ON p.ID = um.PermissionID
  WHERE um.ID = $UserID");
list($Joined, $Class) = $DB->next_record();

if (!check_perms('users_view_email', $Class)) {
    error(403);
}

$UsersOnly = $_GET['usersonly'];

$DB->query("
  SELECT Username
  FROM users_main
  WHERE ID = $UserID");
list($Username)= $DB->next_record();
View::show_header("Email history for $Username");

if ($UsersOnly == 1) {
    $DB->query("
    SELECT
      u.Email,
      NOW() AS Time,
      u.IP,
      c.Code
    FROM users_main AS u
      LEFT JOIN users_main AS u2 ON u2.Email = u.Email AND u2.ID != '$UserID'
    WHERE u.ID = '$UserID'
      AND u2.ID > 0
    UNION
    SELECT
      h.Email,
      h.Time,
      h.IP,
      c.Code
    FROM users_history_emails AS h
      LEFT JOIN users_history_emails AS h2 ON h2.email = h.email and h2.UserID != '$UserID'
    WHERE h.UserID = '$UserID'
      AND h2.UserID > 0
    ORDER BY Time DESC");
} else {
    $DB->query("
    SELECT
      u.Email,
      NOW() AS Time,
      u.IP,
      c.Code
    FROM users_main AS u
    WHERE u.ID = '$UserID'
    UNION
    SELECT
      h.Email,
      h.Time,
      h.IP,
      c.Code
    FROM users_history_emails AS h
    WHERE UserID = '$UserID'
    ORDER BY Time DESC");
}
$History = $DB->to_array();
?>
<div class="header">
  <h2>Email history for <a href="user.php?id=<?=$UserID ?>"><?=$Username ?></a></h2>
</div>
<table width="100%">
  <tr class="colhead">
    <td>Email</td>
    <td>Set</td>
    <td>IP <a
        href="userhistory.php?action=ips&amp;userid=<?=$UserID ?>"
        class="brackets">H</a></td>
    <?php if ($UsersOnly == 1) {
    ?>
    <td>User</td>
    <?php
}
?>
  </tr>
  <?php
foreach ($History as $Key => $Values) {
    if (isset($History[$Key + 1])) {
        $Values['Time'] = $History[$Key + 1]['Time'];
    } else {
        $Values['Time'] = $Joined;
    }

    $ValuesIP = apcu_exists('DBKEY') ? Crypto::decrypt($Values['IP']) : '[Encrypted]'; ?>
  <tr class="row">
    <td><?=display_str($Values['Email'])?>
    </td>
    <td><?=time_diff($Values['Time'])?>
    </td>
    <td><?=display_str($ValuesIP)?> (<?=display_str($Values['Code'])?>) <a
        href="user.php?action=search&amp;ip_history=on&amp;ip=<?=display_str($ValuesIP)?>"
        class="brackets tooltip" title="Search">S</a></td>
    <?php
  if ($UsersOnly == 1) {
      $ueQuery = $DB->query("
          SELECT
            ue.UserID,
            um.Username,
            ue.Time,
            ue.IP
          FROM users_history_emails AS ue, users_main AS um
          WHERE ue.Email = '".db_string($Values['Email'])."'
            AND ue.UserID != $UserID
            AND um.ID = ue.UserID");
      while (list($UserID2, $Time, $IP) = $DB->next_record()) {
          $IP = apcu_exists('DBKEY') ? Crypto::decrypt($IP) : '[Encrypted]'; ?>
  </tr>
  <tr>
    <td></td>
    <td><?=time_diff($Time)?>
    </td>
    <td><?=display_str($IP)?>
    </td>
    <?php
      $UserURL = site_url()."user.php?id=$UserID2";
          $DB->query("
        SELECT Enabled
        FROM users_main
        WHERE ID = $UserID2");
          list($Enabled) = $DB->next_record();
          $DB->set_query_id($ueQuery); ?>
    <td><a href="<?=display_str($UserURL)?>"><?=Users::format_username($UserID2, false, false, true)?></a></td>
  </tr>
  <?php
      }
  }
} ?>
</table>
<?php View::show_footer();