X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Flibs%2Fadmins_functions.php;h=8bb7c27ad46dba54cc4ca395c0c95365cdbe6559;hb=9709e0653e1a90fd65e6308b97a6fabb586a32a1;hp=8b017261f81a614e696687ec01c20875ac24683b;hpb=43885129ac24cee5545a8a5ad51e90aa182fdf46;p=mailer.git diff --git a/inc/libs/admins_functions.php b/inc/libs/admins_functions.php index 8b017261f8..8bb7c27ad4 100644 --- a/inc/libs/admins_functions.php +++ b/inc/libs/admins_functions.php @@ -32,8 +32,7 @@ ************************************************************************/ // Some security stuff... -if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) -{ +if (!defined('__SECURITY')) { $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php"; require($INC); } @@ -54,13 +53,10 @@ function ADMINS_CHECK_ACL($act, $wht) { $default = $cacheArray['admins']['def_acl'][get_session('admin_login')]; // Count cache hits - $_CONFIG['cache_hits']++; + if (isset($_CONFIG['cache_hits'])) { $_CONFIG['cache_hits']++; } else { $_CONFIG['cache_hits'] = 1; } } elseif (!is_object($cacheInstance)) { // Load from database - $result = SQL_QUERY_ESC("SELECT default_acl FROM "._MYSQL_PREFIX."_admins WHERE login='%s' LIMIT 1", - array(get_session('admin_login')), __FILE__, __LINE__); - list($default) = SQL_FETCHROW($result); - SQL_FREERESULT($result); + $default = GET_ADMIN_DEFAULT_ACL(get_session('admin_login')); } // Get admin's ID @@ -84,7 +80,7 @@ function ADMINS_CHECK_ACL($act, $wht) { // Load only from array when there are lines! if ((isset($cacheArray['admin_acls'])) && (is_array($cacheArray['admin_acls'])) && (count($cacheArray['admin_acls']) > 0)) { // Load ACL from array - foreach ($cacheArray['admin_acls']['admin_id'] as $id=>$aid_acls) { + foreach ($cacheArray['admin_acls']['admin_id'] as $id => $aid_acls) { if ($aid == $aid_acls) { // Okay, one line was found! if ((!empty($act)) && ($cacheArray['admin_acls']['action_menu'][$id] == $act)) { @@ -99,7 +95,7 @@ function ADMINS_CHECK_ACL($act, $wht) { } if ($lines == 1) { // Count cache hits - $_CONFIG['cache_hits']++; + if (isset($_CONFIG['cache_hits'])) { $_CONFIG['cache_hits']++; } else { $_CONFIG['cache_hits'] = 1; } break; } } @@ -178,15 +174,15 @@ function ADMINS_CHANGE_ADMIN_ACCOUNT($POST) { global $cacheInstance; // Begin the update - $cacheInstance_UPDATE = "0"; - foreach ($POST['login'] as $id=>$login) { + $cache_update = 0; + foreach ($POST['login'] as $id => $login) { // Secure ID number $id = bigintval($id); // When both passwords match update admin account if ($POST['pass1'][$id] == $POST['pass2'][$id]) { // Save only when both passwords are the same (also when they are empty) - $ADD = ""; $cacheInstance_UPDATE = "1"; + $ADD = ""; $cache_update = "1"; // Generate hash $hash = generateHash($POST['pass1'][$id]); @@ -213,16 +209,10 @@ function ADMINS_CHANGE_ADMIN_ACCOUNT($POST) { // Update password cookie set_session("admin_md5", $hash); } - - } + } // END - if // Get default ACL from admin to check if we can allow him to change the default ACL - $result = SQL_QUERY_ESC("SELECT default_acl FROM "._MYSQL_PREFIX."_admins WHERE login='%s' LIMIT 1", - array(get_session('admin_login')), __FILE__, __LINE__); - list($default) = SQL_FETCHROW($result); - - // Free result - SQL_FREERESULT($result); + $default = GET_ADMIN_DEFAULT_ACL(get_session('admin_login')); // Update admin account if ($default == "allow") { @@ -255,6 +245,9 @@ WHERE id=%s LIMIT 1", ), __FILE__, __LINE__); } + // Purge cache + CACHE_PURGE_ADMIN_MENU($id); + // Admin account saved $MSG = ADMIN_ACCOUNT_SAVED; } else { @@ -269,7 +262,7 @@ WHERE id=%s LIMIT 1", } // Remove cache file - if ((EXT_IS_ACTIVE("cache")) && ($cacheInstance_UPDATE == "1")) { + if ((EXT_IS_ACTIVE("cache")) && ($cache_update == "1")) { if ($cacheInstance->cache_file("admins", true)) $cacheInstance->cache_destroy(); } } @@ -278,7 +271,7 @@ WHERE id=%s LIMIT 1", function ADMINS_EDIT_ADMIN_ACCOUNTS ($POST) { // Begin the edit loop $SW = 2; $OUT = ""; - foreach ($POST['sel'] as $id=>$sel) { + foreach ($POST['sel'] as $id => $sel) { // Secure ID number $id = bigintval($id); @@ -291,8 +284,8 @@ function ADMINS_EDIT_ADMIN_ACCOUNTS ($POST) { SQL_FREERESULT($result); // Prepare some more data for the template - $content['sw'] = $SW; - $content['id'] = $id; + $content['sw'] = $SW; + $content['id'] = $id; // Shall we allow changing default ACL? if ($content['mode'] == "allow") { @@ -324,7 +317,7 @@ function ADMINS_DELETE_ADMIN_ACCOUNTS ($POST) { if ($accounts > 1) { // Delete accounts $SW = 2; $OUT = ""; - foreach ($POST['sel'] as $id=>$sel) { + foreach ($POST['sel'] as $id => $sel) { // Secure ID number $id = bigintval($id); @@ -362,27 +355,29 @@ function ADMINS_DELETE_ADMIN_ACCOUNTS ($POST) { // Remove the given accounts function ADMINS_REMOVE_ADMIN_ACCOUNTS ($POST) { // Begin removal - $cacheInstance_UPDATE = "0"; - foreach ($POST['sel'] as $id=>$del) { + $cache_update = 0; + foreach ($POST['sel'] as $id => $del) { // Secure ID number $id = bigintval($id); // Delete only when it's not your own account! if (($del == 1) && (GET_ADMIN_ID(get_session('admin_login')) != $id)) { // Rewrite his tasks to all admins - $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_task_system SET assigned_admin='0' WHERE assigned_admin='%s'", + $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_task_system SET assigned_admin=0 WHERE assigned_admin=%s", array($id), __FILE__, __LINE__); // Remove account $result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_admins WHERE id=%s LIMIT 1", array($id), __FILE__, __LINE__); - $cacheInstance_UPDATE = "1"; + // Purge cache + CACHE_PURGE_ADMIN_MENU($id); + $cache_update = "1"; } } // Remove cache if cache system is activated - if ((EXT_IS_ACTIVE("cache")) && ($cacheInstance_UPDATE == "1")) { + if ((EXT_IS_ACTIVE("cache")) && ($cache_update == "1")) { if ($cacheInstance->cache_file("admins", true)) $cacheInstance->cache_destroy(); } }