<?php



// QuickTicket 1.9.0.3 build:20081001



include('bin/qt_lib_txt.php');

include('bin/qt_lib_db.php');

include('bin/qti_fn_common.php');



// Protection against injection (accept only 3 'lang')

$id = strip_tags($_POST['id']);

$lang = strip_tags($_POST['lang']);

if ( !in_array($lang,array('language/english','language/francais','language/nederlands')) ) $lang = 'language/english';



$id = intval(substr($id,1));



include($lang.'/qti_lang_main.inc');

include('bin/config.php');



$oDBAJAX = new cDB($qti_dbsystem,$qti_host,$qti_database,$qti_user,$qti_pwd,$qti_port,$qti_dsn);

if ( !empty($oDBAJAX->error) ) exit;



// query



$oDBAJAX->Query('SELECT * FROM '.$qti_prefix.'qtiuser WHERE id='.$id);

$row = $oDBAJAX->GetRow();



//output the response



echo AsImgBox( AsImg( (!empty($row['avatar']) ? 'avatar/'.$id.'.'.$row['avatar'] : ''),'',htmlentities(trim($row['name']),ENT_QUOTES)),'div_pic_box',null,array($row['name'],$L['Userrole'][$row['role']],$row['location']) );



?>