* */ /** * Class usergroups: contains all the functions and forms to manage the usergroups * * @author Claire Figueras * @license GPL * @package Maarch LetterBox 2.3 * @version 2.2 */ class usergroups extends dbquery { /** * @access private * @var integer */ private $the_start; /** * Redefinition of the user object constructor : configure the SQL argument order by */ function __construct() { // configure the sql argument order by if(isset($_GET['start'])) { $this->the_start = strip_tags($_GET['start']); } else { $this->the_start = 0; } } /** * Lists the letters of the alphabet to list the groups */ public function groupslistletters() { ?> connect(); $_SESSION['m_admin']['services'] = array(); $this->query("select * from ".$_SESSION['tablename']['services']." WHERE ENABLED = 'Y' order by SERVICE "); while($line = $this->fetch_object()) { array_push($_SESSION['m_admin']['services'], array( "ID" => $line->ID, "COMMENT" => $line->SERVICE)); } $this->query("select count(*) as total from ".$table_name); $nb_total_1 = $this->fetch_object(); $nb_total = $nb_total_1->total; // define the defaults values $nb_pages = ceil($nb_total/$nb_show); $link = "index.php?page=".$page_name."&start=".$this->the_start."&order=".$this->orderby.$what; if($nb_pages > 1) { $next_start = 0; $page_list1 = '

'._GO_TO_PAGE.' '; $lastpage = 0; for($i = 0;$i <> $nb_pages; $i++) { $page_name = $i + 1; $the_line = $i + 1; if($this->the_start == $next_start) { $page_list1 .= ""; $page_list2 .= ""; } else { $page_list1 .= ""; $page_list2 .= ""; } $next_start = $next_start + $nb_show; $lastpage = $next_start; } $lastpage = $lastpage - $nb_show; $previous = ""; $next = ""; if($this->the_start > 0) { $start_prev = $this->the_start - $nb_show; $previous = ''._PREVIOUS.''; } if($this->the_start <> $lastpage) { $start_next = $this->the_start + $nb_show; $next = ''._NEXT.''; } $page_list1 = $page_list1.""; $page_list2 = $page_list2.""; if($previous <> '' || $next <> '') { if(empty($previous)) { $previous = " "; } if(empty($next)) { $next = " "; } $page_list1 .= $previous." ".$next.'

'; $page_list2 .= $previous." ".$next.'

'; } } $this->query("select * from ".$table_name." ".$where." order by GROUP_DESC asc limit ".$this->the_start.",".$nb_show); echo '

'.$title.'

'; $this->groupslistletters(); echo $page_list1; ?> fetch_object()) { if($color == ' class="col"') { $color = ''; } else { $color = ' class="col"'; } ?> >



GROUP_ID; ?>	GROUP_DESC); ?>	ADMINISTRATOR == 'Y') { echo _YES; } else { echo _NO; } ?>	ENABLED == "Y" && $line->GROUP_ID <> "Administrators") { echo ''._MODIFY.''; } ?>	ENABLED == "N") { echo ''._AUTHORIZE.''; } else { if($line->GROUP_ID <> "Administrators") { echo ''._SUSPEND.''; } } ?>	GROUP_ID <> "Administrators") { echo ''._DELETE.''; } ?>

connect(); $this->query("select * from ".$_SESSION['tablename']['usergroups']." where group_id = '".$id."' and enabled = 'y'"); if($this->nb_result() == 0) { $_SESSION['error'] = _NO_GROUP; $state = false; } else { $line = $this->fetch_object(); $_SESSION['m_admin']['groups']['GroupId'] = $line->GROUP_ID; $_SESSION['m_admin']['groups']['desc'] = $line->GROUP_DESC; $_SESSION['m_admin']['groups']['desc'] = str_replace("\\", "", $_SESSION['m_admin']['groups']['desc']); $_SESSION['m_admin']['groups']['admin'] = $line->ADMINISTRATOR; $_SESSION['m_admin']['groups']['view_relance'] = $line->VIEW_RELANCE; $_SESSION['m_admin']['groups']['view_stats'] = $line->VIEW_STATS; $_SESSION['m_admin']['groups']['consult_group'] = $line->CONSULT_GROUP; $_SESSION['m_admin']['groups']['modif_rights'] = $line->MODIF_RIGHTS; $_SESSION['m_admin']['groups']['export'] = $line->EXPORT; $_SESSION['m_admin']['groups']['delete_rights'] = $line->DELETE_RIGHTS; $_SESSION['m_admin']['groups']['print_rights'] = $line->PRINT_RIGHTS; $_SESSION['m_admin']['groups']['param'] = $line->PARAM; } if (! isset($_SESSION['m_admin']['load_security']) || $_SESSION['m_admin']['load_security'] == true) { $sec->load_security_group($id); $_SESSION['m_admin']['load_security'] = false ; } } } elseif($mode == "add") { $_SESSION['m_admin']['mode'] = "add"; if ($_SESSION['m_admin']['init']== true || !isset($_SESSION['m_admin']['init'] )) { $sec->init_session(); } } ?>

"._GROUP.' '._UNKNOWN."

"; } else { ?>

"; } if($mode == "add") { $_SESSION['m_admin']['groups']['GroupId'] = $func->wash($_POST['GroupId'], "nick", _GROUP_ID); } if($mode == "up") { $_SESSION['m_admin']['groups']['GroupId'] = $func->wash($_POST['id'], "nick", _GROUP_ID); } $_SESSION['m_admin']['groups']['desc'] = $func->wash($_POST['desc'], "no", _GROUP_DESC); $_SESSION['m_admin']['groups']['desc'] = stripslashes($_SESSION['m_admin']['groups']['desc']); if (count($_POST['admin']) > 0 ) { $_SESSION['m_admin']['groups']['admin'] = $_POST['admin'][0]; } else { $_SESSION['m_admin']['groups']['admin'] = 'N'; } if (count($_POST['export']) > 0 ) { $_SESSION['m_admin']['groups']['export'] = $_POST['export'][0]; } else { $_SESSION['m_admin']['groups']['export'] = 'N'; } if (count($_POST['stats']) > 0 ) { $_SESSION['m_admin']['groups']['view_stats'] = $_POST['stats'][0]; } else { $_SESSION['m_admin']['groups']['view_stats'] = 'N'; } if (count($_POST['relance']) > 0 ) { $_SESSION['m_admin']['groups']['view_relance'] = $_POST['relance'][0]; } else { $_SESSION['m_admin']['groups']['view_relance'] = 'N'; } if (count($_POST['modif']) > 0 ) { $_SESSION['m_admin']['groups']['modif_rights'] = $_POST['modif'][0]; } else { $_SESSION['m_admin']['groups']['modif_rights'] = 'N'; } if (count($_POST['delete']) > 0 ) { $_SESSION['m_admin']['groups']['delete_rights'] = $_POST['delete'][0]; } else { $_SESSION['m_admin']['groups']['delete_rights'] = 'N'; } if (count($_POST['print']) > 0 ) { $_SESSION['m_admin']['groups']['print_rights'] = $_POST['print'][0]; } else { $_SESSION['m_admin']['groups']['print_rights'] = 'N'; } if (count($_POST['param']) > 0 ) { $_SESSION['m_admin']['groups']['param'] = $_POST['param'][0]; } else { $_SESSION['m_admin']['groups']['param'] = 'N'; } if ( $_SESSION['m_admin']['groups']['consult_group'] == "N" && count($_SESSION['m_admin']['groups']['security']) < 1 ) { $func->add_error(_THE_GROUP.' '._HAS_NO_SECURITY, ""); } } /** * Add ou modify groups in the database * * @param string $mode up or add */ public function addupgroups($mode) { if(file_exists($_SESSION['config']['lang'].'.php')) { include($_SESSION['config']['lang'].'.php'); } else { $_SESSION['error'] = "Language file missing...
"; } // add ou modify users in the database $this->groupsinfo($mode); if(!empty($_SESSION['error'])) { if($mode == "up") { if(!empty($_SESSION['m_admin']['groups']['GroupId'])) { header("location: index.php?page=group_up&id=".$_SESSION['m_admin']['groups']['GroupId']); exit; } else { header("location: index.php?page=groups"); exit; } } elseif($mode == "add") { $_SESSION['m_admin']['load_group'] = false; header("location: index.php?page=group_add"); exit; } } else { $this->connect(); if($mode == "add") { $this->query("select GROUP_ID from ".$_SESSION['tablename']['usergroups']." where GROUP_ID= '".$_SESSION['m_admin']['groups']['GroupId']."'"); if($this->nb_result() > 0) { $_SESSION['error'] = $_SESSION['m_admin']['groups']['GroupId']." "._ALREADY_EXISTS."
"; header("location: index.php?page=group_add"); exit; } else { $this->query("INSERT INTO `".$_SESSION['tablename']['usergroups']."` ( `GROUP_ID` , `GROUP_DESC` , `ADMINISTRATOR`, `CONSULT_GROUP`, `VIEW_RELANCE`,`VIEW_STATS`, `MODIF_RIGHTS`,`EXPORT`,`ENABLED`, `DELETE_RIGHTS` , `PRINT_RIGHTS`, PARAM ) VALUES ( '".$_SESSION['m_admin']['groups']['GroupId']."', '".addslashes($_SESSION['m_admin']['groups']['desc'])."', '".$_SESSION['m_admin']['groups']['admin']."','".$_SESSION['m_admin']['groups']['consult_group']."', '".$_SESSION['m_admin']['groups']['view_relance']."', '".$_SESSION['m_admin']['groups']['view_stats']."', '".$_SESSION['m_admin']['groups']['modif_rights']."','".$_SESSION['m_admin']['groups']['export']."', 'Y','".$_SESSION['m_admin']['groups']['delete_rights']."','".$_SESSION['m_admin']['groups']['print_rights']."', '".$_SESSION['m_admin']['groups']['param']."')"); if($_SESSION['m_admin']['groups']['consult_group'] == 'N') { require_once("class_security.php"); $sec = new security(); $syntax = true; $syntax = $sec->where_test(); if($syntax <> true) { $_SESSION['error'] .= " : "._SYNTAX_ERROR_WHERE_CLAUSE."." ; header("location: index.php?page=group_up&id=".$_SESSION['m_admin']['groups']['GroupId']); exit; } else { $sec->load_db(); if($_SESSION['history']['usergroupsadd'] == "true") { require("class_history.php"); $users = new history(); $users->add($_SESSION['tablename']['usergroups'], $_SESSION['m_admin']['groups']['GroupId'],"ADD",_GROUP_ADDED." : ".$_SESSION['m_admin']['groups']['GroupId']); } $this->cleargroupinfos(); $_SESSION['error'] = _GROUP_ADDED; header("location: index.php?page=groups"); exit; } } else { require_once("class_letterbox.php"); $LB = new LetterBox(); $LB->load_group_service(); if($_SESSION['history']['usergroupsadd'] == "true") { require("class_history.php"); $users = new history(); $users->add($_SESSION['tablename']['usergroups'], $_SESSION['m_admin']['groups']['GroupId'],"ADD",_GROUP_ADDED." : ".$_SESSION['m_admin']['groups']['GroupId']); } $this->cleargroupinfos(); $_SESSION['error'] = _GROUP_ADDED; header("location: index.php?page=groups"); exit; } } } elseif($mode == "up") { $this->query("UPDATE `".$_SESSION['tablename']['usergroups']."` set `GROUP_DESC` = '".addslashes($_SESSION['m_admin']['groups']['desc'])."' , `ADMINISTRATOR` = '".$_SESSION['m_admin']['groups']['admin']."', `CONSULT_GROUP` = '".$_SESSION['m_admin']['groups']['consult_group']."', `VIEW_RELANCE` = '".$_SESSION['m_admin']['groups']['view_relance']."', `VIEW_STATS` = '".$_SESSION['m_admin']['groups']['view_stats']."' ,`EXPORT` = '".$_SESSION['m_admin']['groups']['export']."',`MODIF_RIGHTS` = '".$_SESSION['m_admin']['groups']['modif_rights']."',`DELETE_RIGHTS` = '".$_SESSION['m_admin']['groups']['delete_rights']."',`PRINT_RIGHTS` = '".$_SESSION['m_admin']['groups']['print_rights']."', PARAM = '".$_SESSION['m_admin']['groups']['param']."' where GROUP_ID = '".$_SESSION['m_admin']['groups']['GroupId']."'"); if($_SESSION['m_admin']['groups']['consult_group'] == 'N') { require_once("class_security.php"); $sec = new security(); if( $sec->where_test() == false) { $_SESSION['error'] .= " : "._SYNTAX_ERROR_WHERE_CLAUSE."." ; header("location: index.php?page=group_up&id=".$_SESSION['m_admin']['groups']['GroupId']); exit; } else { $sec->load_db(); if($_SESSION['history']['usergroupsup'] == "true") { require("class_history.php"); $users = new history(); $users->add($_SESSION['tablename']['usergroups'], $_SESSION['m_admin']['groups']['GroupId'],"UP",_GROUP_UPDATE." : ".$_SESSION['m_admin']['groups']['GroupId']); } if($this->in_group($_SESSION['user']['UserId'], $_SESSION['m_admin']['groups']['GroupId']) ) { require_once("class_users.php"); $_SESSION['user']['groups'] = array(); $_SESSION['user']['security'] = array(); $user = new users(); $tmp = $user->load_groups($_SESSION['user']['UserId']); $_SESSION['user']['primarygroup']= $tmp[0]; $_SESSION['user']['groups'] = $tmp[1]; $arr_sec = $user->load_security($_SESSION['user']['UserId']); $_SESSION['user']['tables'] = $arr_sec['tables']; $_SESSION['user']['security'] = $arr_sec['security']; $_SESSION['user']['can_index'] = $arr_sec['can_index']; $_SESSION['user']['can_postindex'] = $arr_sec['can_postindex']; } $this->cleargroupinfos(); $_SESSION['error'] = _GROUP_UPDATED; header("location: index.php?page=groups"); exit; } } else { require_once("class_letterbox.php"); $LB = new LetterBox(); $LB->load_group_service(); if($_SESSION['history']['usergroupsup'] == "true") { require("class_history.php"); $users = new history(); $users->add($_SESSION['tablename']['usergroups'], $_SESSION['m_admin']['groups']['GroupId'],"UP",_GROUP_UPDATE." : ".$_SESSION['m_admin']['groups']['GroupId']); } if($this->in_group($_SESSION['user']['UserId'], $_SESSION['m_admin']['groups']['GroupId']) ) { require_once("class_users.php"); $_SESSION['user']['groups'] = array(); $_SESSION['user']['security'] = array(); $user = new users(); $tmp = $user->load_groups($_SESSION['user']['UserId']); $_SESSION['user']['primarygroup']= $tmp[0]; $_SESSION['user']['groups'] = $tmp[1]; $arr_sec = $user->load_security($_SESSION['user']['UserId']); $_SESSION['user']['tables'] = $arr_sec['tables']; $_SESSION['user']['security'] = $arr_sec['security']; $_SESSION['user']['can_index'] = $arr_sec['can_index']; $_SESSION['user']['can_postindex'] = $arr_sec['can_postindex']; } $this->cleargroupinfos(); $_SESSION['error'] = _GROUP_UPDATED; header("location: index.php?page=groups"); exit; } } } } /** * Tests if the user belong to the group * * @param string $user user identifier * @param string $group group identifier */ private function in_group($user, $group) { $this->connect(); $this->query("select count(*) from ".$_SESSION['tablename']['usergroup_content']." where USER_ID ='".$user."' and GROUP_ID = '".$group."'"); if($this->nb_result() > 0) { return true; } else { return false; } } /** * Clear the $_SESSION['m_admin']['groups'] variable * */ private function cleargroupinfos() { // clear the users add or modification vars $_SESSION['m_admin']['groups'] = array(); $_SESSION['m_admin']['groups']['GroupId'] = ""; $_SESSION['m_admin']['groups']['desc'] = ""; $_SESSION['m_admin']['groups']['admin'] = ""; $_SESSION['m_admin']['groups']['view_relance'] = ""; $_SESSION['m_admin']['groups']['view_stats'] = ""; $_SESSION['m_admin']['groups']['modif_rights'] = ""; $_SESSION['m_admin']['groups']['security'] = array(); $_SESSION['m_admin']['groups']['consult_group'] = ""; $_SESSION['m_admin']['groups']['export'] = ""; $_SESSION['m_admin']['groups']['delete_rights'] = ""; $_SESSION['m_admin']['groups']['print_rights'] = ""; $_SESSION['m_admin']['groups']['param'] = ''; $_SESSION['services_choisis'] = array(); } /** * Add ou modify groups in the database * * @param string $id group identifier * @param string $mode up or add */ public function admingroup($id,$mode) { if(!empty($_SESSION['error'])) { header("location: index.php?page=groups"); exit; } else { $this->connect(); $this->query("select GROUP_ID from ".$_SESSION['tablename']['usergroups']." where GROUP_ID = '".$id."'"); if($this->nb_result() == 0) { $_SESSION['error'] = _GROUP.' '._UNKNWON; header("location: index.php?page=groups"); exit; } else { $info = $this->fetch_object(); $theuser = $info->LastName." ".$info->FirstName." (".$id.")"; if($mode == "allow") { $this->query("Update ".$_SESSION['tablename']['usergroups']." set enabled = 'Y' where group_id = '".$id."'"); if($_SESSION['history']['usergroupsval'] == "true") { require("class_history.php"); $users = new history(); $users->add($_SESSION['tablename']['usergroups'], $id,"VAL",_GROUP_AUTORIZATION." : ".$id); } $_SESSION['error'] = _AUTORIZED_GROUP; if($this->in_group($_SESSION['user']['UserId'], $id)) { require_once("class_users.php"); $user = new users(); $tmp = $user->load_groups($_SESSION['user']['UserId']); $_SESSION['user']['primarygroup']= $tmp[0]; $_SESSION['user']['groups'] = $tmp[1]; $arr_sec = $user->load_security($_SESSION['user']['UserId']); $_SESSION['user']['tables'] = $arr_sec['tables']; $_SESSION['user']['security'] = $arr_sec['security']; $_SESSION['user']['can_index'] = $arr_sec['can_index']; $_SESSION['user']['can_postindex'] = $arr_sec['can_postindex']; } } elseif($mode == "ban") { $this->query("Update ".$_SESSION['tablename']['usergroups']." set enabled = 'N' where group_id = '".$id."'"); if($_SESSION['history']['usergroupsban'] == "true") { require("class_history.php"); $users = new history(); $users->add($_SESSION['tablename']['usergroups'], $id,"BAN",_GROUP_SUSPENSION." : ".$id); } $_SESSION['error'] = _SUSPENDED_GROUP; if($this->in_group($_SESSION['user']['UserId'], $id)) { require_once("class_users.php"); $user = new users(); $tmp = $user->load_groups($_SESSION['user']['UserId']); $_SESSION['user']['primarygroup']= $tmp[0]; $_SESSION['user']['groups'] = $tmp[1]; $arr_sec = $user->load_security($_SESSION['user']['UserId']); $_SESSION['user']['tables'] = $arr_sec['tables']; $_SESSION['user']['security'] = $arr_sec['security']; $_SESSION['user']['can_index'] = $arr_sec['can_index']; $_SESSION['user']['can_postindex'] = $arr_sec['can_postindex']; } } elseif($mode == "del" ) { $this->query("delete from ".$_SESSION['tablename']['usergroups']." where group_id = '".$id."'"); $this->query("delete from ".$_SESSION['tablename']['usergroup_content']." where group_id = '".$id."'"); $this->query("delete from ".$_SESSION['tablename']['security']." where group_id = '".$id."'"); if($_SESSION['history']['usergroupsdel'] == "true") { require("class_history.php"); $users = new history(); $users->add($_SESSION['tablename']['usergroups'], $id,"DEL",_GROUP_DELETION." : ".$id); } $_SESSION['error'] = _DELETED_GROUP; if($this->in_group($_SESSION['user']['UserId'], $id)) { require_once("class_users.php"); $user = new users(); $tmp = $user->load_groups($_SESSION['user']['UserId']); $_SESSION['user']['primarygroup']= $tmp[0]; $_SESSION['user']['groups'] = $tmp[1]; $arr_sec = $user->load_security($_SESSION['user']['UserId']); $_SESSION['user']['tables'] = $arr_sec['tables']; $_SESSION['user']['security'] = $arr_sec['security']; $_SESSION['user']['can_index'] = $arr_sec['can_index']; $_SESSION['user']['can_postindex'] = $arr_sec['can_postindex']; } } header("location: index.php?page=groups"); exit; } } } } ?>