Title: User Profile
Comment: View/edit a user's profile.

<h1>User Profile</h1>

Unknown user.

<perl>
	my $action = $query->{action} || 'index';

	if ($action eq 'index') {
		my $user = $query->{user} || '';
		if (not length $user) {
			if ($root->{auth}) {
				$user = $root->{me};
			}
		}

		# Check if the user exists.
		if (&userExists($user)) {
			# It does. Load their profile.
			&readUser($user) unless exists $root->{users}->{$user};
			my $pro = $root->{users}->{$user};
			my $tab = "&nbsp;" x 5;

			# Begin the page.
			$root->{content} = "<h1>User Profile: "
				. ucfirst($user) . "</h1>\n\n";

			# Do they have a picture?
			if (length $pro->{picture} > 0) {
				$root->{content} .= "<div style=\"width: $root->{conf}->{users}->{picmaxwidth}px; "
					. "overflow: hidden; float: right; text-align: right\">\n"
					. "<img src=\"$pro->{picture}\" alt=\"$user\">\n"
					. "</div>\n";
			}

			$root->{content} .= "<strong>Username:</strong><br>\n"
				. $tab . "$user<br>\n"
				. "<strong>Position:</strong><br>\n"
				. $tab
				. "$root->{conf}->{powers}->{$pro->{power}}\n";

			# Fill out the optional fields.
			my $fields = [
				'Basic Information' => '__header__',
				'Real Name:'        => 'name',
				'Age:'              => 'age',
				'Gender:'           => 'sex',
				'Location:'         => 'location',
				'Avatar:'           => 'avatar',

				'Contact Information' => '__header__',
				'AIM ScreenName:'     => 'aim',
				'MSN Passport:'       => 'msn',
				'Yahoo! ID:'          => 'yim',
				'Jabber ID:'          => 'jabber',
				'ICQ UIN:'            => 'icq',
				'Website:'            => 'www',
			];
			for (my $i = 0; $i < scalar(@{$fields}); $i += 2) {
				my $j = $i + 1;
				my $title = $fields->[$i];
				my $var   = $fields->[$j];

				if ($var eq '__header__') {
					$root->{content} .= "<h2>$title</h2>"
						. "\n\n";
				}
				else {
					$root->{content} .= "<strong>$title"
						. "</strong><br>\n";

					if ($var eq 'avatar') {
						if (length $pro->{$var}) {
							$root->{content} .= "$tab<img src=\"$pro->{$var}\" "
								. "width=\"100\" height=\"100\" alt=\"Avatar\"><br>\n";
						}
						else {
							$root->{content} .= $tab
								. "<em>No information.</em><br>\n";
						}

						next;
					}

					if (length $pro->{$var} > 0) {
						if ($pro->{$var} =~ /^(.+?)\@(.+?)$/) {
							$pro->{$var} = "<a href=\"mailto:$pro->{$var}\">"
								. "$pro->{$var}</a>";
						}
						$root->{content} .= $tab
							. "$pro->{$var}<br>\n";
					}
					else {
						$root->{content} .= $tab
							. "<em>No information."
							. "</em><br>\n";
					}
				}
			}

			# Admins can have an "edit" link.
			if ($root->{auth} == 1 && &isAdmin) {
				$root->{content} .= "<div style=\"clear: both\"><br>\n"
					. "[<a href=\"\$link:profile;action=edit;user=$user\">"
					. "edit this profile</a>]\n"
					. "</div>";
			}
		}
	}
	elsif ($action eq 'edit') {
		if (not $root->{auth}) {
			$root->{content} = "<h1>Access Denied</h1>\n\n"
				. "You must be logged in to do that!\n\n"
				. "<include login>";
			return 1;
		}

		my $user = $query->{user} || '';
		if (not length $user) {
			if ($root->{auth}) {
				$user = $root->{me};
			}
		}

		# Only an admin can edit somebody else's profile.
		my $denied = 0;
		my $pro = {};
		if ($root->{auth}) {
			if ($user ne $root->{me} && not &isAdmin) {
				$root->{content} = "<h1>Access Denied</h1>\n\n"
					. "You are not allowed to edit another "
					. "user's profile.";
				$denied = 1;
			}
		}
		if (&userExists($user)) {
			&readUser($user) unless exists $root->{users}->{$user};
			$pro = $root->{users}->{$user};
		}
		else {
			$root->{content} = "<h1>User Not Found</h1>\n\n"
				. "That user doesn't exist.";
			$denied = 1;
		}

		if (not $denied) {
			my $ckmale = '';
			my $ckfem  = '';
			if (length $pro->{sex} > 0) {
				if ($pro->{sex} eq 'male') {
					$ckmale = ' checked';
				}
				else {
					$ckfem = ' checked';
				}
			}

			$root->{content} = "<h1>Edit Profile</h1>\n\n"
				. "Editing profile for user: <strong>$user</strong><p>\n\n"
				. "<form name=\"edit\" action=\"\$link\" method=\"post\">\n"
				. "<input type=\"hidden\" name=\"p\" value=\"profile\">\n"
				. "<input type=\"hidden\" name=\"action\" value=\"update\">\n";

			# Admin links.
			if (&isAdmin) {
				$root->{content} .= "<h2>Admin Functions</h2>\n\n"
					. "<ul>\n"
					. "<li><a href=\"\$link:admin;action=edituser;method=power;user=$user\">"
					. "Change User Position</a> [currently $root->{conf}->{powers}->{$pro->{power}} ("
					. "$pro->{power})]</li>\n"
					. "<li><a href=\"\$link:admin;action=edituser;method=passwd;user=$user\">"
					. "Reset Password</a></li>\n"
					. "<li><a href=\"\$link:admin;action=edituser;method=delete;user=$user\">"
					. "Delete User</a></li>\n"
					. "</ul>\n";
			}

			$root->{content} .= "<h2>Account Information</h2>\n\n"
				. "<strong>Username:</strong><br>\n"
				. "<input type=\"hidden\" name=\"user\" value=\"$user\">\n"
				. "$user<p>\n\n"
				. "<strong>Password:</strong><br>\n"
				. "********* [<a href=\"\$link:profile;action=passwd\">change</a>]<p>\n"
				. "<strong>E-Mail Address:</strong><br>\n"
				. "<input type=\"text\" size=\"30\" name=\"email\" value=\"$pro->{email}\"><p>\n\n"
				. "<strong>Time Zone:</strong><br>\n"
				. &listTimezones() . "<p>\n\n"
				. "<strong>Position:</strong><br>\n"
				. "$root->{conf}->{powers}->{$pro->{power}}<p>\n\n"
				. "<strong>Groups:</strong>\n";

			foreach my $grp (split(/\,/, $pro->{group})) {
				$root->{content} .= "<br>" . ucfirst($grp) . "\n";
			}

			my $avatarCode = '';
			if (length $pro->{avatar}) {
				$avatarCode = "<img src=\"$pro->{avatar}\" width=\"100\" height=\"100\" alt=\"Avatar\">";
			}
			else {
				$avatarCode = "<em>No Avatar Selected</em>";
			}

			$root->{content} .= "<h2>Personal Information</h2>\n\n"
				. "<strong>Real Name:</strong><br>\n"
				. "<input type=\"text\" size=\"30\" name=\"name\" value=\"$pro->{name}\"><p>\n"
				. "<strong>Age:</strong><br>\n"
				. "<input type=\"text\" size=\"30\" name=\"age\" value=\"$pro->{age}\"><p>\n"
				. "<strong>Gender:</strong><br>\n"
				. "<input type=\"radio\" name=\"sex\" value=\"male\" id=\"male\"$ckmale> "
				. "<label for=\"male\">male</label>\n"
				. "<input type=\"radio\" name=\"sex\" value=\"female\" id=\"female\"$ckfem> "
				. "<label for=\"female\">female</label><p>\n"
				. "<strong>Location:</strong><br>\n"
				. "<input type=\"text\" size=\"30\" name=\"location\" value=\"$pro->{location}\"><p>\n"
				. "<strong>Profile Picture:</strong><br>\n"
				. "<small>[<a href=\"\$link:profile;action=picture\">Add/Modify Picture</a>]</small><p>\n\n"
				. "<strong>Personal Avatar:</strong><br>\n"
				. "$avatarCode<br>\n"
				. "<small>[<a href=\"\$link:profile;action=avatar\">Add/Modify Avatar</a>]</small>\n\n"

				. "<h2>Contact Information</h2>\n\n"
				. "<strong>AIM ScreenName:</strong><br>\n"
				. "<input type=\"text\" size=\"30\" name=\"aim\" value=\"$pro->{aim}\"><br>\n"
				. "<strong>MSN Passport:</strong><br>\n"
				. "<input type=\"text\" size=\"30\" name=\"msn\" value=\"$pro->{msn}\"><br>\n"
				. "<strong>Yahoo! ID:</strong><br>\n"
				. "<input type=\"text\" size=\"30\" name=\"yim\" value=\"$pro->{yim}\"><br>\n"
				. "<strong>Jabber ID:</strong><br>\n"
				. "<input type=\"text\" size=\"30\" name=\"jabber\" value=\"$pro->{jabber}\"><br>\n"
				. "<strong>ICQ UIN:</strong><br>\n"
				. "<input type=\"text\" size=\"30\" name=\"icq\" value=\"$pro->{icq}\"><br>\n"
				. "<strong>Website URL:</strong><br>\n"
				. "<input type=\"text\" size=\"30\" name=\"www\" value=\"$pro->{www}\"><p>\n\n"

				. "<input type=\"submit\" value=\"Submit Changes\">\n"
				. "</form>\n\n"

				. "<script type=\"text/javascript\">\n"
				. "document.onLoad = document.forms[\"edit\"].timezone.value = \"$pro->{timezone}\";\n"
				. "</script>\n";
		}
	}
	elsif ($action eq 'update') {
		if (not $root->{auth}) {
			$root->{content} = "<h1>Access Denied</h1>\n\n"
				. "You must be logged in to do that!\n\n"
				. "<include login>";
			return 1;
		}

		my $user = $query->{user} || '';
		if (not length $user) {
			if ($root->{auth}) {
				$user = $root->{me};
			}
		}

		# Only an admin can edit somebody else's profile.
		my $denied = 0;
		my $pro = {};
		if ($root->{auth}) {
			if ($user ne $root->{me} && not &isAdmin) {
				$root->{content} = "<h1>Access Denied</h1>\n\n"
					. "You are not allowed to edit another "
					. "user's profile.";
				$denied = 1;
			}
		}
		if (&userExists($user)) {
			&readUser($user) unless exists $root->{users}->{$user};
			$pro = $root->{users}->{$user};
		}
		else {
			$root->{content} = "<h1>User Not Found</h1>\n\n"
				. "That user doesn't exist.";
			$denied = 1;
		}

		if (not $denied) {
			# Update their profile.
			my @fields = qw(email name age sex location aim msn
				yim jabber icq www);
			foreach my $var (@fields) {
				$query->{$var} =~ s~&~&amp;~ig;
				$query->{$var} =~ s~<~&lt;~ig;
				$query->{$var} =~ s~>~&gt;~ig;
				$pro->{$var} = $query->{$var};
			}
			$root->{users}->{$user} = $pro;
			&writeUser($user,%{$pro});

			$root->{content} = "<h1>Profile Updated</h1>\n\n"
				. "Your profile has been updated. "
				. "<a href=\"\$link:profile;user=$user\">"
				. "View your profile</a>.";
		}
	}
	elsif ($action eq 'passwd') {
		if (not $root->{auth}) {
			$root->{content} = "<h1>Access Denied</h1>\n\n"
				. "You must be logged in to do that!\n\n"
				. "<include login>";
			return 1;
		}

		$root->{content} = "<h1>Change Password</h1>\n\n"
			. "<form name=\"passwd\" action=\"\$link\" method=\"post\">\n"
			. "<input type=\"hidden\" name=\"p\" value=\"profile\">\n"
			. "<input type=\"hidden\" name=\"action\" value=\"chpass\">\n"
			. "<strong>Old Password:</strong><br>\n"
			. "<input type=\"password\" size=\"20\" name=\"old\"><p>\n\n"
			. "<strong>New Password:</strong><br>\n"
			. "<input type=\"password\" size=\"20\" name=\"pw1\"><br>\n"
			. "<input type=\"password\" size=\"20\" name=\"pw2\"><p>\n\n"
			. "<input type=\"submit\" value=\"Change Password\">\n"
			. "</form>\n";
	}
	elsif ($action eq 'chpass') {
		if (not $root->{auth}) {
			$root->{content} = "<h1>Access Denied</h1>\n\n"
				. "You must be logged in to do that!\n\n"
				. "<include login>";
			return 1;
		}

		my $old = md5_hex($query->{old});
		my $pw1 = $query->{pw1};
		my $pw2 = $query->{pw2};

		if ($old ne $root->{users}->{$root->{me}}->{password}) {
			$root->{content} = "<h1>Error</h1>\n\n"
				. "Your old password was incorrect.";
			return 1;
		}

		if (length $pw1 < 6) {
			$root->{content} = "<h1>Weak Password</h1>\n\n"
				. "Your new password must be at least 6 characters long.";
			return 1;
		}

		if ($pw1 ne $pw2) {
			$root->{content} = "<h1>Passwords Don't Match</h1>\n\n"
				. "Your new passwords don't match.";
			return 1;
		}

		my $pass = md5_hex($pw1);
		$root->{users}->{$root->{me}}->{password} = $pass;
		&writeUser ($root->{me}, %{$root->{users}->{$root->{me}}});

		# Re-login.
		&doLogin ($root->{me},$pass,'no');

		$root->{content} = "<h1>Password Changed</h1>\n\n"
			. "Your password has been changed.";
	}
	elsif ($action eq 'avatar') {
		if (not $root->{auth}) {
			$root->{content} = "<h1>Access Denied</h1>\n\n"
				. "You must be logged in to do that!\n\n"
				. "<include login>";
			return 1;
		}

		my $current = $root->{users}->{$root->{me}}->{avatar} || '';

		$root->{content} = "<h1>Personal Avatar</h1>\n\n"
			. "<strong>Current Avatar:</strong><br>\n";

		if (length $current) {
			$root->{content} .= "<img src=\"$current\" width=\"100\" height=\"100\" alt=\"Avatar\"><br>\n"
				. "[<a href=\"\$link:profile;action=delavatar\">Remove Avatar</a>]<p>\n\n";
		}
		else {
			$root->{content} .= "<em>No Avatar Selected</em><p>\n\n";
		}

		$root->{content} .= "<h2>Change Avatar</h2>\n\n"
			. "<form name=\"newpic\" action=\"\$link\" method=\"post\" enctype=\"multipart/form-data\">\n"
			. "<input type=\"hidden\" name=\"p\" value=\"profile\">\n"
			. "<input type=\"hidden\" name=\"action\" value=\"newavatar\">\n"
			. "Avatars are tiny 100x100 pixel images you can use to identify yourself "
			. "on the site (such as in blog comments). You must format your picture to "
			. "be 100x100 pixels ahead of time; it will be rejected if it's the wrong size.<p>\n\n"

			. "<fieldset>\n"
			. "<legend>Upload an avatar from my computer</legend>\n"
			. "File path:<br>\n"
			. "<input type=\"file\" size=\"40\" name=\"photo\"><br>\n"
			. "<small>JPEG, PNG, or GIF format only. Must be 100x100 pixels and under 100 KB.</small>\n"
			. "</fieldset><p>\n\n"

			. "<input type=\"submit\" value=\"Upload\">\n"
			. "</form>";
	}
	elsif ($action eq 'newavatar') {
		if (not $root->{auth}) {
			$root->{content} = "<h1>Access Denied</h1>\n\n"
				. "You must be logged in to do that!\n\n"
				. "<include login>";
			return 1;
		}

		my $fname  = $query->{photo};
		my $format = '';

		# Uploading a picture.
		if ($fname =~ /\.(jpg|jpeg|jpe)$/i) {
			$format = 'jpg';
		}
		elsif ($fname =~ /\.gif$/i) {
			$format = 'gif';
		}
		elsif ($fname =~ /\.png$/i) {
			$format = 'png';
		}
		else {
			$root->{content} = "<h1>Unsupported File Type</h1>\n\n"
				. "Your image must be of a JPEG, PNG, or GIF format.";
			return 1;
		}

		# Get the filehandle.
		my $handle = $cgi->upload ("photo");
		my $binary = '';
		while (<$handle>) {
			$binary .= $_;
		}

		# Missing file data?
		if (length $binary > 102400) {
			$root->{content} = "<h1>Uploaded File Too Large</h1>\n\n"
				. "Your avatar's file size must be under 100 KB.";
			return 1;
		}
		if (length $binary == 0) {
			$root->{content} = "<h1>No Image Data</h1>\n\n"
				. "The image you uploaded was empty.";
			return 1;
		}

		# Write it to a temporary file.
		open (WRITE, ">$root->{conf}->{site}->{public}/avatars/user_$root->{me}.$format");
		binmode WRITE;
		print WRITE $binary;
		close (WRITE);

		# Load GD to analyze and possible scale down the image.
		use GD;
		my $original = undef;
		if ($format eq 'jpg') {
			$original = GD::Image->newFromJpeg ("$root->{conf}->{site}->{public}/avatars/user_$root->{me}.jpg");
		}
		elsif ($format eq 'gif') {
			$original = GD::Image->newFromGif ("$root->{conf}->{site}->{public}/avatars/user_$root->{me}.gif");
		}
		else {
			$original = GD::Image->newFromPng ("$root->{conf}->{site}->{public}/avatars/user_$root->{me}.png");
		}

		my $width = $original->width;
		my $height = $original->height;

		# The dimensions must be exactly 100x100 pixels.
		if ($width != 100 || $height != 100) {
			# Unlink the image.
			unlink ("$root->{conf}->{site}->{public}/avatars/user_$root->{me}.$format");
			$root->{content} = "<h1>Invalid Avatar Size</h1>\n\n"
				. "Your avatar must be 100x100 pixels in size.";
			return 1;
		}
		else {
			# Good. Save it.
			$root->{users}->{$root->{me}}->{avatar} = "$root->{conf}->{site}->{public}/avatars/user_$root->{me}.$format";

			# Write their profile.
			&writeUser($root->{me}, %{$root->{users}->{$root->{me}}});

			$root->{content} = "<h1>Avatar Uploaded</h1>\n\n"
				. "Your avatar has been uploaded successfully. "
				. "<a href=\"\$link:profile;action=avatar\">"
				. "View your avatar</a>.";
		}
	}
	elsif ($action eq 'delavatar') {
		if (not $root->{auth}) {
			$root->{content} = "<h1>Access Denied</h1>\n\n"
				. "You must be logged in to do that!\n\n"
				. "<include login>";
			return 1;
		}

		my @notes = ();

		# Removing our avatar.
		foreach (qw(jpg jpeg jpe gif png)) {
			if (-f "$root->{conf}->{site}->{public}/avatars/user_$root->{me}.$_") {
				unlink ("$root->{conf}->{site}->{public}/avatars/user_$root->{me}.$_");
				push (@notes,"Deleted $root->{conf}->{site}->{public}/avatars/user_$root->{me}.$_");
			}
		}

		# Unset the picture.
		$root->{users}->{$root->{me}}->{avatar} = '';
		push (@notes,"Unset avatar variable");

		# Write the profile.
		&writeUser($root->{me}, %{$root->{users}->{$root->{me}}});
		push (@notes,"Wrote profile information");

		$root->{content} = "<h1>Unset Avatar</h1>\n\n"
			. "Your personal avatar has been removed. The following actions were "
			. "performed:\n\n"
			. "<ol>\n"
			. "<li>"
			. join("</li>\n<li>",@notes)
			. "</li>\n"
			. "</ol>\n\n"
			. "<a href=\"\$link:profile;action=avatar\">Back to avatar manager</a>";
	}
	elsif ($action eq 'picture') {
		if (not $root->{auth}) {
			$root->{content} = "<h1>Access Denied</h1>\n\n"
				. "You must be logged in to do that!\n\n"
				. "<include login>";
			return 1;
		}

		my $current = $root->{users}->{$root->{me}}->{picture};
		my $maxsize = int($root->{conf}->{users}->{picmaxsize} / 1024);

		$root->{content} = "<h1>Profile Picture</h1>\n\n"
			. "<strong>Current Picture:</strong>\n";

		if (length $current) {
			$root->{content} .= "<div style=\"width: $root->{conf}->{users}->{picmaxwidth}px; "
				. "overflow: hidden; border: 1px dashed #000000; padding: 5px\">\n"
				. "<img src=\"$current\" alt=\"Your Picture\">\n"
				. "</div>\n"
				. "[<a href=\"\$link:profile;action=delpic\">Remove Picture</a>]<p>\n\n";
		}
		else {
			$root->{content} .= "<br><em>No picture uploaded.</em><p>\n\n";
		}

		$root->{content} .= "<h2>Change Picture</h2>\n\n"
			. "<form name=\"newpic\" action=\"\$link\" method=\"post\" enctype=\"multipart/form-data\">\n"
			. "<input type=\"hidden\" name=\"p\" value=\"profile\">\n"
			. "<input type=\"hidden\" name=\"action\" value=\"newpic\">\n"
			. "To set a new profile picture, use one of the following methods. Note that "
			. "if you upload a picture from your computer, it will be scaled down if it's "
			. "bigger than $root->{conf}->{users}->{picmaxwidth} pixels in width. If you "
			. "use an off-site image, your picture will be constrained to "
			. "$root->{conf}->{users}->{picmaxwidth} pixels in width; if your picture "
			. "is bigger than that, it'll be cut off.<p>\n\n"

			. "<fieldset>\n"
			. "<legend>"
			. "<input type=\"radio\" name=\"source\" value=\"upload\" id=\"upload\" checked> "
			. "<label for=\"upload\">Upload a picture from my computer</label>"
			. "</legend>\n"
			. "File path:<br>\n"
			. "<input type=\"file\" size=\"40\" name=\"photo\"><br>\n"
			. "<small>JPEG, PNG, or GIF format only. Max size $maxsize KB.</small>\n"
			. "</fieldset><br>\n"

			. "<fieldset>\n"
			. "<legend>"
			. "<input type=\"radio\" name=\"source\" value=\"http\" id=\"http\"> "
			. "<label for=\"http\">Use a picture hosted on another website</label>"
			. "</legend>\n"
			. "URL to your image:<br>\n"
			. "<input type=\"text\" size=\"40\" name=\"http\" value=\"http://\">\n"
			. "</fieldset><p>\n\n"
			. "<input type=\"submit\" value=\"Set Picture\">\n"
			. "</form>";
	}
	elsif ($action eq 'newpic') {
		if (not $root->{auth}) {
			$root->{content} = "<h1>Access Denied</h1>\n\n"
				. "You must be logged in to do that!\n\n"
				. "<include login>";
			return 1;
		}

		my $source = $query->{source};
		my $http   = $query->{http};
		my $fname  = $query->{photo};

		if ($source !~ /^(http|upload)$/) {
			$root->{content} = "<h1>Unknown Image Source</h1>\n\n"
				. "Your image source can be either HTTP or file upload.";
			return 1;
		}

		if ($source eq 'http') {
			# This one's simple--just set their profile picture to this URL.
			if ($http =~ /^(http|https|ftp):\/\//i) {
				$root->{users}->{$root->{me}}->{picture} = $http;
				&writeUser($root->{me}, %{$root->{users}->{$root->{me}}});

				$root->{content} = "<h1>Picture Set</h1>\n\n"
					. "Your off-site picture has been defined. "
					. "<a href=\"\$link:profile;action=picture\">"
					. "See your profile picture</a>.";
				return 1;
			}
			else {
				$root->{content} = "<h1>Unsupported Protocol</h1>\n\n"
					. "Your off-site picture URL must begin with a proper "
					. "http:// prefix (most standard web protocols are "
					. "supported).";
			}
		}
		else {
			# Get the max size in kilobytes.
			my $maxsize = int($root->{conf}->{users}->{picmaxsize} / 1024);
			my $format = '';

			# Uploading a picture.
			if ($fname =~ /\.(jpg|jpeg|jpe)$/i) {
				$format = 'jpg';
			}
			elsif ($fname =~ /\.gif$/i) {
				$format = 'gif';
			}
			elsif ($fname =~ /\.png$/i) {
				$format = 'png';
			}
			else {
				$root->{content} = "<h1>Unsupported File Type</h1>\n\n"
					. "Your image must be of a JPEG, PNG, or GIF format.";
				return 1;
			}

			# Get the filehandle.
			my $handle = $cgi->upload ("photo");
			my $binary = '';
			while (<$handle>) {
				$binary .= $_;
			}

			# File too big?
			if (length $binary > $root->{conf}->{users}->{picmaxsize}) {
				$root->{content} = "<h1>File Too Big</h1>\n\n"
					. "Your profile picture must be less than $maxsize KB.";
				return 1;
			}
			if (length $binary == 0) {
				$root->{content} = "<h1>No Image Data</h1>\n\n"
					. "The image you uploaded was empty.";
				return 1;
			}

			# Write it to a temporary file.
			open (WRITE, ">$root->{conf}->{site}->{public}/pictures/$root->{me}.$format");
			binmode WRITE;
			print WRITE $binary;
			close (WRITE);

			# Load GD to analyze and possible scale down the image.
			use GD;
			my $original = undef;
			if ($format eq 'jpg') {
				$original = GD::Image->newFromJpeg ("$root->{conf}->{site}->{public}/pictures/$root->{me}.jpg");
			}
			elsif ($format eq 'gif') {
				$original = GD::Image->newFromGif ("$root->{conf}->{site}->{public}/pictures/$root->{me}.gif");
			}
			else {
				$original = GD::Image->newFromPng ("$root->{conf}->{site}->{public}/pictures/$root->{me}.png");
			}

			my $width = $original->width;
			my $height = $original->height;

			# Too wide?
			if ($width > $root->{conf}->{users}->{picmaxwidth}) {
				# Yes. We need to scale it down.
				my $ratio = $root->{conf}->{users}->{picmaxwidth} / $width;
				my $newHeight = int($height * $ratio);
				my $newWidth  = $root->{conf}->{users}->{picmaxwidth};

				# Scale.
				my $newpic = GD::Image->new ($newWidth,$newHeight,1);
				$newpic->copyResized (
					$original,
					0, 0,
					0, 0,
					$newWidth,
					$newHeight,
					$width,
					$height,
				);

				# Rewrite the file.
				if ($format ne 'jpg') {
					# If the original wasn't a JPG, delete it.
					unlink ("$root->{conf}->{site}->{public}/pictures/$root->{me}.$format");
				}
				open (WRITE, ">$root->{conf}->{site}->{public}/pictures/$root->{me}.jpg");
				binmode WRITE;
				print WRITE $newpic->jpeg(100);
				close (WRITE);

				# Point to the jpg file.
				$root->{users}->{$root->{me}}->{picture} = "$root->{conf}->{site}->{public}/pictures/$root->{me}.jpg";
			}
			else {
				# It's small enough as it is. Don't need to mess with it.
				$root->{users}->{$root->{me}}->{picture} = "$root->{conf}->{site}->{public}/pictures/$root->{me}.$format";
			}

			# Write their profile.
			&writeUser($root->{me}, %{$root->{users}->{$root->{me}}});

			$root->{content} = "<h1>Picture Uploaded</h1>\n\n"
				. "Your picture has been uploaded successfully. "
				. "<a href=\"\$link:profile;action=picture\">"
				. "View your picture</a>.";
		}
	}
	elsif ($action eq 'delpic') {
		if (not $root->{auth}) {
			$root->{content} = "<h1>Access Denied</h1>\n\n"
				. "You must be logged in to do that!\n\n"
				. "<include login>";
			return 1;
		}

		my @notes = ();

		# Removing our picture.
		foreach (qw(jpg jpeg jpe gif png)) {
			if (-f "$root->{conf}->{site}->{public}/pictures/$root->{me}.$_") {
				unlink ("$root->{conf}->{site}->{public}/pictures/$root->{me}.$_");
				push (@notes,"Deleted $root->{conf}->{site}->{public}/pictures/$root->{me}.$_");
			}
		}

		# Unset the picture.
		$root->{users}->{$root->{me}}->{picture} = '';
		push (@notes,"Unset profile picture");

		# Write the profile.
		&writeUser($root->{me}, %{$root->{users}->{$root->{me}}});
		push (@notes,"Wrote profile information");

		$root->{content} = "<h1>Unset Picture</h1>\n\n"
			. "Your profile picture has been removed. The following actions were "
			. "performed:\n\n"
			. "<ol>\n"
			. "<li>"
			. join("</li>\n<li>",@notes)
			. "</li>\n"
			. "</ol>\n\n"
			. "<a href=\"\$link:profile;action=picture\">Back to picture manager</a>";
	}
</perl>