uwuzu version 1.2.19

user/index.php

@@ -47,7 +47,7 @@ try {
 
 if(isset($_SESSION['admin_login']) && $_SESSION['admin_login'] === true) {
 
-	$passQuery = $pdo->prepare("SELECT username,userid,loginid,admin FROM account WHERE userid = :userid");
+	$passQuery = $pdo->prepare("SELECT username,userid,loginid,admin,role FROM account WHERE userid = :userid");
 	$passQuery->bindValue(':userid', $_SESSION['userid']);
 	$passQuery->execute();
 	$res = $passQuery->fetch();
@@ -58,6 +58,8 @@ if(isset($_SESSION['admin_login']) && $_SESSION['admin_login'] === true) {
 	// セッションに値をセット
 	$userid = $_SESSION['userid']; // セッションに格納されている値をそのままセット
 	$username = $_SESSION['username']; // セッションに格納されている値をそのままセット
+	$loginid = $res["loginid"];
+	$role = $res["role"];
 	$_SESSION['admin_login'] = true;
 	$_SESSION['userid'] = $userid;
 	$_SESSION['username'] = $username;
@@ -90,7 +92,7 @@ if(isset($_SESSION['admin_login']) && $_SESSION['admin_login'] === true) {
 		
 } elseif (isset($_COOKIE['admin_login']) && $_COOKIE['admin_login'] == true) {
 
-	$passQuery = $pdo->prepare("SELECT username,userid,loginid,admin FROM account WHERE userid = :userid");
+	$passQuery = $pdo->prepare("SELECT username,userid,loginid,admin,role FROM account WHERE userid = :userid");
 	$passQuery->bindValue(':userid', $_COOKIE['userid']);
 	$passQuery->execute();
 	$res = $passQuery->fetch();
@@ -101,6 +103,8 @@ if(isset($_SESSION['admin_login']) && $_SESSION['admin_login'] === true) {
 	// セッションに値をセット
 	$userid = $_COOKIE['userid']; // クッキーから取得した値をセット
 	$username = $_COOKIE['username']; // クッキーから取得した値をセット
+	$loginid = $res["loginid"];
+	$role = $res["role"];
 	$_SESSION['admin_login'] = true;
 	$_SESSION['userid'] = $userid;
 	$_SESSION['username'] = $username;
@@ -487,21 +491,27 @@ $pdo = null;
 					<p><?php echo $follow_yes;?></p>
 				</div>
 			<?php }?>
+			<div class="follow">
+				<a href="/user/report?q=<?php echo htmlentities($userData['userid'], ENT_QUOTES, 'UTF-8'); ?>" class="report" title="通報"><svg><use xlink:href="../img/sysimage/report_1.svg#report"></use></svg></a>
+			</div>
 			<?php if ($userData['userid'] == $userid) { ?>
 				<div class="follow">
-					<a href="../settings/" class="fbtn_no">設定</a>
+					<a href="../settings/" class="fbtn_no" title="設定" >設定</a>
 				</div>
 			<?php } else { ?>
+				
 				<form method="post">
 					<div class="follow">
 						<?php
-						$followerList = explode(',', $userdata['follower']);
-						if (in_array($userid, $followerList)) {
-							// フォロー済みの場合はフォロー解除ボタンを表示
-							echo '<input type="button" id="openModalButton" class="fbtn_un" name="unfollow" value="フォロー解除">';
-						} else {
-							// 未フォローの場合はフォローボタンを表示
-							echo '<input type="submit" class="fbtn" name="follow" value="フォロー">';
+						if(!($role === "ice")){
+							$followerList = explode(',', $userdata['follower']);
+							if (in_array($userid, $followerList)) {
+								// フォロー済みの場合はフォロー解除ボタンを表示
+								echo '<input type="button" id="openModalButton" class="fbtn_un" name="unfollow" value="フォロー解除">';
+							} else {
+								// 未フォローの場合はフォローボタンを表示
+								echo '<input type="submit" class="fbtn" name="follow" value="フォロー">';
+							}
 						}
 						?>
 					</div>
@@ -510,15 +520,17 @@ $pdo = null;
 			<?php } ?>
 		</div>
 
-		<div id="myModal" class="modal">
-			<div class="modal-content">
-				<p><?php echo htmlentities($userData['username'], ENT_QUOTES, 'UTF-8'); ?>さんをフォロー解除しますか？</p>
-				<form class="btn_area" method="post">
-					<input type="submit" id="openModalButton" class="fbtn_no" name="unfollow" value="フォロー解除">
-					<input type="button" id="closeModal" class="fbtn" value="キャンセル">
-				</form>
+		<?php if(!($role === "ice")){?>
+			<div id="myModal" class="modal">
+				<div class="modal-content">
+					<p><?php echo htmlentities($userData['username'], ENT_QUOTES, 'UTF-8'); ?>さんをフォロー解除しますか？</p>
+					<form class="btn_area" method="post">
+						<input type="submit" id="openModalButton" class="fbtn_no" name="unfollow" value="フォロー解除">
+						<input type="button" id="closeModal" class="fbtn" value="キャンセル">
+					</form>
+				</div>
 			</div>
-		</div>
+		<?php }?>
 		<hr>
 		<div class="select_utl">
 			<button class="btn" id="all_ueuse_btn">ユーズ</button>
@@ -697,6 +709,26 @@ $(document).ready(function() {
 		}
 	});
 
+    // JavaScriptでウィンドウを制御
+    const modal1 = document.getElementById('myModal');
+    const openModalButton = document.getElementById('openModalButton');
+    const closeButton = document.getElementById('closeModal');
+	var modalMain = $('.modal-content');
+
+    openModalButton.addEventListener('click', () => {
+        modal1.style.display = 'block';
+		modalMain.addClass("slideUp");
+    	modalMain.removeClass("slideDown");
+    });
+
+    closeButton.addEventListener('click', () => {
+        modalMain.removeClass("slideUp");
+		modalMain.addClass("slideDown");
+		window.setTimeout(function(){
+			modal1.style.display = 'none';
+		}, 150);
+    });
+
 
 	$(document).on('click', '.favbtn, .favbtn_after', function(event) {
 
@@ -704,6 +736,7 @@ $(document).ready(function() {
 
 		var postUniqid = $(this).data('uniqid');
 		var userid = '<?php echo $userid; ?>';
+		var account_id = '<?php echo $loginid; ?>';
 		var likeCountElement = $(this).find('.like-count'); // いいね数を表示する要素
 
 		var isLiked = $(this).hasClass('favbtn_after'); // 現在のいいねの状態を判定
@@ -713,7 +746,7 @@ $(document).ready(function() {
 		$.ajax({
 			url: '../favorite/favorite.php',
 			method: 'POST',
-			data: { uniqid: postUniqid, userid: userid }, // ここに自分のユーザーIDを指定
+			data: { uniqid: postUniqid, userid: userid, account_id: account_id  }, // ここに自分のユーザーIDを指定
 			dataType: 'json',
 			success: function(response) {
 				if (response.success) {
@@ -737,85 +770,67 @@ $(document).ready(function() {
 				// エラー時の処理
 			}
 		});
-	});
+		});
 
-});
 
-    // JavaScriptでウィンドウを制御
-    const modal1 = document.getElementById('myModal');
-    const openModalButton = document.getElementById('openModalButton');
-    const closeButton = document.getElementById('closeModal');
-	var modalMain = $('.modal-content');
 
-    openModalButton.addEventListener('click', () => {
-        modal1.style.display = 'block';
+
+
+		var modal = document.getElementById('myDelModal');
+		var deleteButton = document.getElementById('deleteButton');
+		var cancelButton = document.getElementById('cancelButton'); // 追加
+		var modalMain = $('.modal-content');
+
+		$(document).on('click', '.delbtn', function (event) {
+		modal.style.display = 'block';
 		modalMain.addClass("slideUp");
-    	modalMain.removeClass("slideDown");
-    });
+		modalMain.removeClass("slideDown");
 
-    closeButton.addEventListener('click', () => {
-        modalMain.removeClass("slideUp");
-		modalMain.addClass("slideDown");
-		window.setTimeout(function(){
-			modal1.style.display = 'none';
-		}, 150);
-    });
-
-
-	var modal = document.getElementById('myDelModal');
-    var deleteButton = document.getElementById('deleteButton');
-    var cancelButton = document.getElementById('cancelButton'); // 追加
-	var modalMain = $('.modal-content');
-
-    $(document).on('click', '.delbtn', function (event) {
-        modal.style.display = 'block';
-		modalMain.addClass("slideUp");
-    	modalMain.removeClass("slideDown");
-
-        var uniqid2 = $(this).attr('data-uniqid2');
+		var uniqid2 = $(this).attr('data-uniqid2');
 		var userid = '<?php echo $userid; ?>';
+		var account_id = '<?php echo $loginid; ?>';
 		var postElement = $(this).closest('.ueuse');
 
-        deleteButton.addEventListener('click', () => {
-            modalMain.removeClass("slideUp");
+		deleteButton.addEventListener('click', () => {
+			modalMain.removeClass("slideUp");
 			modalMain.addClass("slideDown");
 			window.setTimeout(function(){
 				modal.style.display = 'none';
 			}, 150);
 
-            $.ajax({
-                url: '../delete/delete.php',
-                method: 'POST',
-                data: { uniqid: uniqid2, userid: userid },
-                dataType: 'json',
-                success: function (response) {
-                    if (response.success) {
-                        postElement.remove();
-                    } else {
-                        // 削除失敗時の処理
-                    }
-                },
-                error: function () {
-                    // エラー時の処理
-                }
-            });
-        });
+			$.ajax({
+				url: '../delete/delete.php',
+				method: 'POST',
+				data: { uniqid: uniqid2, userid: userid, account_id: account_id },
+				dataType: 'json',
+				success: function (response) {
+					if (response.success) {
+						postElement.remove();
+					} else {
+						// 削除失敗時の処理
+					}
+				},
+				error: function () {
+					// エラー時の処理
+				}
+			});
+		});
 
-        cancelButton.addEventListener('click', () => { // 追加
-            modalMain.removeClass("slideUp");
+		cancelButton.addEventListener('click', () => { // 追加
+			modalMain.removeClass("slideUp");
 			modalMain.addClass("slideDown");
 			window.setTimeout(function(){
 				modal.style.display = 'none';
 			}, 150);
-        });
-    });
+		});
+		});
 
-	var abimodal = document.getElementById('myAbiModal');
-	var AbiAddButton = document.getElementById('AbiAddButton');
-	var AbiCancelButton = document.getElementById('AbiCancelButton');
-	var modalMain = $('.modal-content');
+		var abimodal = document.getElementById('myAbiModal');
+		var AbiAddButton = document.getElementById('AbiAddButton');
+		var AbiCancelButton = document.getElementById('AbiCancelButton');
+		var modalMain = $('.modal-content');
 
-	$(document).on('click', '.addabi', function (event) {
+		$(document).on('click', '.addabi', function (event) {
 
 		abimodal.style.display = 'block';
 		modalMain.addClass("slideUp");
@@ -839,6 +854,7 @@ $(document).ready(function() {
 			var abitext = document.getElementById("abitexts").value;
 			var usernames = '<?php echo $username; ?>';
 			var userid = '<?php echo $userid; ?>';
+			var account_id = '<?php echo $loginid; ?>';
 
 			if(abitext == ""){
 				modalMain.removeClass("slideUp");
@@ -850,7 +866,7 @@ $(document).ready(function() {
 				$.ajax({
 					url: '../abi/addabi.php',
 					method: 'POST',
-					data: { uniqid: uniqid2, abitext: abitext, username: usernames, userid: userid },
+					data: { uniqid: uniqid2, abitext: abitext, username: usernames, userid: userid, account_id: account_id },
 					dataType: 'json',
 					success: function (response) {
 						console.log(response); // レスポンス内容をコンソールに表示
@@ -872,6 +888,7 @@ $(document).ready(function() {
 			}
 		});
 	});
+});
 </script>
 
 </html>

user/report.php

@@ -0,0 +1,456 @@
+<?php
+
+$servernamefile = "../server/servername.txt";
+
+function createUniqId(){
+    list($msec, $sec) = explode(" ", microtime());
+    $hashCreateTime = $sec.floor($msec*1000000);
+    
+    $hashCreateTime = strrev($hashCreateTime);
+
+    return base_convert($hashCreateTime,10,36);
+}
+
+require('../db.php');
+
+// 変数の初期化
+$datetime = array();
+$user_name = null;
+$message = array();
+$message_data = null;
+$error_message = array();
+$pdo = null;
+$stmt = null;
+$res = null;
+$option = null;
+
+session_name('uwuzu_s_id');
+session_start();
+session_regenerate_id(true);
+
+$userid = htmlentities($_SESSION['userid']);
+$username = htmlentities($_SESSION['username']);
+
+try {
+
+    $option = array(
+        PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
+        PDO::MYSQL_ATTR_MULTI_STATEMENTS => false
+    );
+    $pdo = new PDO('mysql:charset=utf8mb4;dbname='.DB_NAME.';host='.DB_HOST , DB_USER, DB_PASS, $option);
+
+} catch(PDOException $e) {
+
+    // 接続エラーのときエラー内容を取得する
+    $error_message[] = $e->getMessage();
+}
+
+if(isset($_SESSION['admin_login']) && $_SESSION['admin_login'] === true) {
+
+	$passQuery = $pdo->prepare("SELECT username,userid,loginid,admin,role FROM account WHERE userid = :userid");
+	$passQuery->bindValue(':userid', $_SESSION['userid']);
+	$passQuery->execute();
+	$res = $passQuery->fetch();
+	if(empty($res["userid"])){
+		header("Location: ../login.php");
+		exit;
+	}elseif($_SESSION['loginid'] === $res["loginid"] && $_SESSION['userid'] === $res["userid"]){
+	// セッションに値をセット
+	$userid = $_SESSION['userid']; // セッションに格納されている値をそのままセット
+	$username = $_SESSION['username']; // セッションに格納されている値をそのままセット
+	$loginid = $res["loginid"];
+	$role = $res["role"];
+	$_SESSION['admin_login'] = true;
+	$_SESSION['userid'] = $userid;
+	$_SESSION['username'] = $username;
+	$_SESSION['loginid'] = $res["loginid"];
+	setcookie('userid', $userid, [
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	setcookie('username', $username,[
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	setcookie('loginid', $res["loginid"],[
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	setcookie('admin_login', true,[
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	}else{
+		header("Location: ../login.php");
+		exit;
+	}
+
+		
+} elseif (isset($_COOKIE['admin_login']) && $_COOKIE['admin_login'] == true) {
+
+	$passQuery = $pdo->prepare("SELECT username,userid,loginid,admin,role FROM account WHERE userid = :userid");
+	$passQuery->bindValue(':userid', $_COOKIE['userid']);
+	$passQuery->execute();
+	$res = $passQuery->fetch();
+	if(empty($res["userid"])){
+		header("Location: ../login.php");
+		exit;
+	}elseif($_COOKIE['loginid'] === $res["loginid"] && $_COOKIE['userid'] === $res["userid"]){
+	// セッションに値をセット
+	$userid = $_COOKIE['userid']; // クッキーから取得した値をセット
+	$username = $_COOKIE['username']; // クッキーから取得した値をセット
+	$loginid = $res["loginid"];
+	$role = $res["role"];
+	$_SESSION['admin_login'] = true;
+	$_SESSION['userid'] = $userid;
+	$_SESSION['username'] = $username;
+	$_SESSION['loginid'] = $res["loginid"];
+	setcookie('userid', $userid,[
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	setcookie('username', $username,[
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	setcookie('loginid', $res["loginid"],[
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	setcookie('admin_login', true,[
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	}else{
+		header("Location: ../login.php");
+		exit;
+	}
+
+
+} else {
+	// ログインが許可されていない場合、ログインページにリダイレクト
+	header("Location: ../login.php");
+	exit;
+}
+if(empty($userid)){
+	header("Location: ../login.php");
+	exit;
+} 
+if(empty($username)){
+	header("Location: ../login.php");
+	exit;
+} 
+$notiQuery = $pdo->prepare("SELECT COUNT(*) as notification_count FROM notification WHERE touserid = :userid AND userchk = 'none'");
+$notiQuery->bindValue(':userid', $userid);
+$notiQuery->execute();
+$notiData = $notiQuery->fetch(PDO::FETCH_ASSOC);
+
+$notificationcount = $notiData['notification_count'];
+
+function customStripTags($html, $allowedTags) {
+    $allowedTagsString = '<' . implode('><', $allowedTags) . '>';
+    return strip_tags($html, $allowedTagsString);
+}
+
+$allowedTags = array('h1', 'h2', 'h3', 'center', 'font');
+
+if( !empty($pdo) ) {
+	
+	// データベース接続の設定
+	$dbh = new PDO('mysql:charset=utf8mb4;dbname='.DB_NAME.';host='.DB_HOST, DB_USER, DB_PASS, array(
+		PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
+		PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
+		PDO::MYSQL_ATTR_USE_BUFFERED_QUERY => true,
+	));
+
+	if(isset($_GET['q'])){ 
+		$uwuzuid = htmlentities($_GET['q']);
+	}else{
+		$uwuzuid = "";
+	}
+	
+	// ユーズ内の絵文字を画像に置き換える
+	function replaceEmojisWithImages($postText) {
+		// ユーズ内で絵文字名（:emoji:）を検出して画像に置き換える
+		$emojiPattern = '/:(\w+):/';
+		$postTextWithImages = preg_replace_callback($emojiPattern, function($matches) {
+			$emojiName = $matches[1];
+			return "<img src='../emoji/emojiimage.php?emoji=" . urlencode($emojiName) . "' alt=':$emojiName:' title=':$emojiName:'>";
+		}, $postText);
+		
+		// @username を検出してリンクに置き換える
+		$usernamePattern = '/@(\w+)/';
+		$postTextWithImagesAndUsernames = preg_replace_callback($usernamePattern, function($matches) {
+			$username = $matches[1];
+
+			$dbh = new PDO('mysql:charset=utf8mb4;dbname='.DB_NAME.';host='.DB_HOST, DB_USER, DB_PASS, array(
+				PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
+				PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
+				PDO::MYSQL_ATTR_USE_BUFFERED_QUERY => true,
+			));
+		
+			$mentionsuserQuery = $dbh->prepare("SELECT username, userid FROM account WHERE userid = :userid");
+			$mentionsuserQuery->bindValue(':userid', $username);
+			$mentionsuserQuery->execute();
+			$mentionsuserData = $mentionsuserQuery->fetch();   
+			
+			if(empty($mentionsuserData)){
+				return "@$username";
+			}else{
+				return "<a class = 'mta' href='/@".$mentionsuserData["userid"]."'>@".$mentionsuserData["username"]."</a>";
+			}
+		}, $postTextWithImages);
+
+		$hashtagsPattern = '/#([\p{Han}\p{Hiragana}\p{Katakana}A-Za-z0-9_]+)/u';
+		$postTextWithHashtags = preg_replace_callback($hashtagsPattern, function($matches) {
+			$hashtags = $matches[1];
+				return "<a class = 'hashtags' href='/search?q=".urlencode('#').$hashtags."'>".'#'.$hashtags."</a>";
+		}, $postTextWithImagesAndUsernames);
+
+		return $postTextWithHashtags;
+	}
+
+	function replaceURLsWithLinks($postText) {
+		// URLを正規表現を使って検出
+		$pattern = '/(https?:\/\/[^\s]+)/';
+		preg_match_all($pattern, $postText, $matches);
+	
+		// 検出したURLごとに処理を行う
+		foreach ($matches[0] as $url) {
+			// ドメイン部分を抽出
+			$parsedUrl = parse_url($url);
+			$domain = isset($parsedUrl['host']) ? $parsedUrl['host'] : '';
+	
+			// ドメインのみを表示するaタグを生成
+			$link = "<a href='$url'>$domain</a>";
+	
+			// URLをドメインのみを表示するaタグで置き換え
+			$postText = str_replace($url, $link, $postText);
+		}
+	
+		return $postText;
+	}
+
+	$userQuery = $dbh->prepare("SELECT username, userid, profile, role, follower FROM account WHERE userid = :userid");
+	$userQuery->bindValue(':userid', $uwuzuid);
+	$userQuery->execute();
+	$userData = $userQuery->fetch();
+
+
+	if(!empty($userData["userid"])){
+
+	
+		$roles = explode(',', $userData["role"]); // カンマで区切られたロールを配列に分割
+
+		$rerole = $dbh->prepare("SELECT  follow, follower, username, userid, password, mailadds, profile, iconname, headname, role, datetime FROM account WHERE userid = :userid");
+
+		$rerole->bindValue(':userid', $uwuzuid);
+		// SQL実行
+		$rerole->execute();
+
+		$userdata = $rerole->fetch(); // ここでデータベースから取得した値を $role に代入する
+		
+		$roleDataArray = array();
+		
+		foreach ($roles as $roleId) {
+			$rerole = $dbh->prepare("SELECT rolename, roleauth, rolecolor FROM role WHERE roleidname = :role");
+			$rerole->bindValue(':role', $roleId);
+			$rerole->execute();
+			$roleDataArray[$roleId] = $rerole->fetch();
+		}
+		
+
+		//-------フォロー数---------
+		$follow = $userdata['follow']; // コンマで区切られたユーザーIDを含む変数
+
+		// コンマで区切って配列に分割し、要素数を数える
+		$followIds = explode(',', $follow);
+		$followCount = count($followIds)-1;
+		
+		$follow_on_me = strpos($follow, $userid);
+		if ($follow_on_me !== false) {
+			$follow_yes = "フォローされています"; // worldを含む:6
+		}else{
+			$follow_yes = ""; // worldを含む:6
+		}
+
+		//-------フォロワー数---------
+		$follower = $userdata['follower']; // コンマで区切られたユーザーIDを含む変数
+
+		// コンマで区切って配列に分割し、要素数を数える
+		$followerIds = explode(',', $follower);
+		$followerCount = count($followerIds)-1;
+
+		$profileText = htmlentities($userData['profile'], ENT_QUOTES, 'UTF-8');
+
+	}else{
+		$userData["userid"] = "none";
+		$userData['username'] = "ゆーざーなし";
+	}
+}
+
+if (!empty($_POST['report'])) {
+	$msg = htmlentities($_POST['send_text']);
+	
+	// 書き込み日時を取得
+	$datetime = date("Y-m-d H:i:s");
+	$uniqid = createUniqId();
+	$admin_chk = "none";
+	$touserid = $userData['userid'];
+
+	// トランザクション開始
+	$pdo->beginTransaction();
+
+	try {
+
+		// SQL作成
+		$stmt = $pdo->prepare("INSERT INTO report (uniqid, userid, report_userid, msg, datetime, admin_chk) VALUES (:uniqid, :userid, :report_userid, :msg, :datetime, :admin_chk)");
+
+		$stmt->bindParam(':uniqid', $uniqid, PDO::PARAM_STR);
+		$stmt->bindParam(':userid', $touserid, PDO::PARAM_STR);
+		$stmt->bindParam(':report_userid', $userid, PDO::PARAM_STR);
+		$stmt->bindParam(':msg', $msg, PDO::PARAM_STR);
+		$stmt->bindParam(':datetime', $datetime, PDO::PARAM_STR);
+
+		$stmt->bindParam(':admin_chk', $admin_chk, PDO::PARAM_STR);
+
+		// SQLクエリの実行
+		$res = $stmt->execute();
+
+		// コミット
+		$res = $pdo->commit();
+
+	} catch(Exception $e) {
+
+		// エラーが発生した時はロールバック
+		$pdo->rollBack();
+	}
+
+	if( $res ) {
+		header("Location:success");
+        exit;
+	} else {
+		$error_message[] = $e->getMessage();
+	}
+
+	// プリペアドステートメントを削除
+	$stmt = null;
+}
+
+require('../logout/logout.php');
+
+
+
+// データベースの接続を閉じる
+$pdo = null;
+
+?>
+<!DOCTYPE html>
+<html lang="ja">
+<head>
+<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.7.0/jquery.min.js"></script>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<link rel="stylesheet" href="../css/home.css">
+<link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
+<link rel="apple-touch-icon" type="image/png" href="../favicon/apple-touch-icon-180x180.png">
+<link rel="icon" type="image/png" href="../favicon/icon-192x192.png">
+<title><?php echo htmlentities($userData['username'], ENT_QUOTES, 'UTF-8'); ?> さんを通報 - <?php echo file_get_contents($servernamefile);?></title>
+
+</head>
+
+<body>
+	<?php require('../require/leftbox.php');?>
+	<main class="outer">
+
+		<?php if( !empty($error_message) ): ?>
+			<ul class="errmsg">
+				<?php foreach( $error_message as $value ): ?>
+					<p>・ <?php echo $value; ?></p>
+				<?php endforeach; ?>
+			</ul>
+		<?php endif; ?>
+
+		<form class="formarea" enctype="multipart/form-data" method="post">
+				<h1>通報</h1>
+				<div class="p2">通報先アカウント名</div>
+				<p><?php echo htmlentities($userData['username'], ENT_QUOTES, 'UTF-8'); ?></p>
+				<div class="p2">通報先id</div>
+				<p><?php echo htmlentities($userData['userid'], ENT_QUOTES, 'UTF-8'); ?></p>
+				<div class="p2">プロフィール</div>
+				<p><?php echo nl2br(htmlentities($userData['profile'], ENT_QUOTES, 'UTF-8')); ?></p>
+				<hr>
+				<p><?php echo htmlentities($userData['username'], ENT_QUOTES, 'UTF-8'); ?>さんを通報しますか？<br>通報すると管理者宛に通知が届き、管理者の判断により<?php echo htmlentities($userData['username'], ENT_QUOTES, 'UTF-8'); ?>さんのアカウントに対処が行われます。<br>なお、虚偽の通報や理にかなわない通報などによっては管理者の判断によりあなたのアカウントが凍結やBAN(削除)される可能性があります。</p>
+				<p>管理者は通報者のid(@<?php echo htmlentities($userid, ENT_QUOTES, 'UTF-8'); ?>)を確認できます。</p>
+				<p>もし通報理由などありましたら下の入力欄に記載してください。</p>
+			<?php if($userid === $userData['userid']){; ?>
+				<ul class="errmsg">
+				<p>通報しようとしているアカウントはご自身のアカウントのようですが本当に通報してもよろしいのですか？<br>もしアカウントの削除をしたいのであれば左側メニューよりその他からアカウント削除が可能です。</p>
+				</ul>
+			<?php }?>
+			<textarea id="send_text" placeholder="通報理由" name="send_text" class="inbox"></textarea>
+			<div class="p2">※誤通報防止の為通報ボタンを小さくしております。</div>
+			<div class="delbox">
+				<button type="button" id="delbtn" class="delbtn">通報</button>
+			</div>
+				<div id="myDelModal" class="modal">
+					<div class="modal-content">
+						<h1>最終確認</h1>
+						<p>本当に通報しますか？<br>通報は取り消しできません。</p>
+						<div class="btn_area">
+							<input type="submit" id="deleteButton" class="fbtn_no" name="report" value="通報">
+							<input type="button" id="cancelButton" class="fbtn" value="キャンセル">
+						</div>
+					</div>
+				</div>
+		</form>
+	</main>
+
+
+
+	<?php require('../require/rightbox.php');?>
+	<?php require('../require/botbox.php');?>
+
+</body>
+
+<script>
+$(document).ready(function() {
+
+	var modal = document.getElementById('myDelModal');
+	var deleteButton = document.getElementById('deleteButton');
+	var cancelButton = document.getElementById('cancelButton'); // 追加
+	var modalMain = $('.modal-content');
+
+	$(document).on('click', '.delbtn', function (event) {
+		modal.style.display = 'block';
+		modalMain.addClass("slideUp");
+		modalMain.removeClass("slideDown");
+
+		deleteButton.addEventListener('click', () => {
+			modalMain.removeClass("slideUp");
+			modalMain.addClass("slideDown");
+			window.setTimeout(function(){
+				modal.style.display = 'none';
+			}, 150);
+		});
+
+		cancelButton.addEventListener('click', () => { // 追加
+			modalMain.removeClass("slideUp");
+			modalMain.addClass("slideDown");
+			window.setTimeout(function(){
+				modal.style.display = 'none';
+			}, 150);
+		});
+	});
+});
+</script>
+
+</html>

user/success.php

@@ -0,0 +1,193 @@
+<?php 
+$servernamefile = "../server/servername.txt";
+
+
+require('../db.php');
+
+
+$onlyuserfile = "../server/onlyuser.txt";
+$onlyuser = file_get_contents($onlyuserfile);
+
+session_name('uwuzu_s_id');
+session_start();
+session_regenerate_id(true);
+
+// 変数の初期化
+$current_date = null;
+$message_array = array();
+$error_message = array();
+$authcode = array();
+$pdo = null;
+$stmt = null;
+$res = null;
+$option = null;
+
+try {
+
+    $option = array(
+        PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
+        PDO::MYSQL_ATTR_MULTI_STATEMENTS => false
+    );
+    $pdo = new PDO('mysql:charset=utf8mb4;dbname='.DB_NAME.';host='.DB_HOST , DB_USER, DB_PASS, $option);
+
+} catch(PDOException $e) {
+
+    // 接続エラーのときエラー内容を取得する
+    $error_message[] = $e->getMessage();
+}
+
+if(isset($_SESSION['admin_login']) && $_SESSION['admin_login'] === true) {
+
+	$passQuery = $pdo->prepare("SELECT username,userid,loginid,admin FROM account WHERE userid = :userid");
+	$passQuery->bindValue(':userid', $_SESSION['userid']);
+	$passQuery->execute();
+	$res = $passQuery->fetch();
+	if(empty($res["userid"])){
+		header("Location: ../login.php");
+		exit;
+	}elseif($_SESSION['loginid'] === $res["loginid"] && $_SESSION['userid'] === $res["userid"]){
+	// セッションに値をセット
+	$userid = $_SESSION['userid']; // セッションに格納されている値をそのままセット
+	$username = $_SESSION['username']; // セッションに格納されている値をそのままセット
+	$loginid = $res["loginid"];
+	$_SESSION['admin_login'] = true;
+	$_SESSION['userid'] = $userid;
+	$_SESSION['username'] = $username;
+	$_SESSION['loginid'] = $res["loginid"];
+	setcookie('userid', $userid, [
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	setcookie('username', $username,[
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	setcookie('loginid', $res["loginid"],[
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	setcookie('admin_login', true,[
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	}else{
+		header("Location: ../login.php");
+		exit;
+	}
+
+		
+} elseif (isset($_COOKIE['admin_login']) && $_COOKIE['admin_login'] == true) {
+
+	$passQuery = $pdo->prepare("SELECT username,userid,loginid,admin FROM account WHERE userid = :userid");
+	$passQuery->bindValue(':userid', $_COOKIE['userid']);
+	$passQuery->execute();
+	$res = $passQuery->fetch();
+	if(empty($res["userid"])){
+		header("Location: ../login.php");
+		exit;
+	}elseif($_COOKIE['loginid'] === $res["loginid"] && $_COOKIE['userid'] === $res["userid"]){
+	// セッションに値をセット
+	$userid = $_COOKIE['userid']; // クッキーから取得した値をセット
+	$username = $_COOKIE['username']; // クッキーから取得した値をセット
+	$loginid = $res["loginid"];
+	$_SESSION['admin_login'] = true;
+	$_SESSION['userid'] = $userid;
+	$_SESSION['username'] = $username;
+	$_SESSION['loginid'] = $res["loginid"];
+	setcookie('userid', $userid,[
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	setcookie('username', $username,[
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	setcookie('loginid', $res["loginid"],[
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	setcookie('admin_login', true,[
+		'expires' => time() + 60 * 60 * 24 * 14,
+		'path' => '/',
+		'samesite' => 'lax',
+	]);
+	}else{
+		header("Location: ../login.php");
+		exit;
+	}
+
+
+} else {
+	// ログインが許可されていない場合、ログインページにリダイレクト
+	header("Location: ../login.php");
+	exit;
+}
+if(empty($userid)){
+	header("Location: ../login.php");
+	exit;
+} 
+if(empty($username)){
+	header("Location: ../login.php");
+	exit;
+} 
+$notiQuery = $pdo->prepare("SELECT COUNT(*) as notification_count FROM notification WHERE touserid = :userid AND userchk = 'none'");
+$notiQuery->bindValue(':userid', $userid);
+$notiQuery->execute();
+$notiData = $notiQuery->fetch(PDO::FETCH_ASSOC);
+
+$notificationcount = $notiData['notification_count'];
+
+require('../logout/logout.php');
+?>
+
+
+<!DOCTYPE html>
+<html lang="ja">
+<head>
+<meta charset="utf-8">
+<link rel="stylesheet" href="../css/home.css">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<link rel="apple-touch-icon" type="image/png" href="../favicon/apple-touch-icon-180x180.png">
+<link rel="icon" type="image/png" href="../favicon/icon-192x192.png">
+<title>設定 - <?php echo file_get_contents($servernamefile);?></title>
+
+</head>
+
+<body>
+<?php require('../require/leftbox.php');?>
+	<main>
+
+	<?php if( !empty($error_message) ): ?>
+		<ul class="errmsg">
+			<?php foreach( $error_message as $value ): ?>
+				<p>・ <?php echo $value; ?></p>
+			<?php endforeach; ?>
+		</ul>
+	<?php endif; ?>
+
+    <div class="formarea">
+    <h1>通報完了</h1>
+            <?php if( !empty($error_message) ): ?>
+                <ul class="errmsg">
+                    <?php foreach( $error_message as $value ): ?>
+                        <p>・ <?php echo $value; ?></p>
+                    <?php endforeach; ?>
+                </ul>
+            <?php endif; ?>
+		<p>通報しました！</p>
+        <a href="/home/" class="irobutton">戻る</a>
+    </div>
+    </main>
+
+<?php require('../require/rightbox.php');?>
+<?php require('../require/botbox.php');?>
+</body>
+
+</html>