X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Fadmin-inc.php;h=078d9027d8fdddb6b14cd1019fbe6bc08d949eb4;hb=80e2def8ef2125fd4d7d1312ee3993ab613f0846;hp=0534befa518cde1010f7375536ab3012f14cb605;hpb=f50cf1e7f174a1547055ef772a3a2b12415bc73b;p=mailer.git diff --git a/inc/modules/admin/admin-inc.php b/inc/modules/admin/admin-inc.php index 0534befa51..078d9027d8 100644 --- a/inc/modules/admin/admin-inc.php +++ b/inc/modules/admin/admin-inc.php @@ -194,7 +194,7 @@ function admin_WriteData ($file, $comment, $prefix, $suffix, $DATA, $seek=0) { $found = false; // Is the file there and read-/write-able? - if ((file_exists($file)) && (is_readable($file)) && (is_writeable($file))) { + if ((FILE_READABLE($file)) && (is_writeable($file))) { $search = "CFG: ".$comment; $tmp = $file.".tmp"; @@ -259,7 +259,7 @@ function admin_WriteData ($file, $comment, $prefix, $suffix, $DATA, $seek=0) { // function ADMIN_DO_ACTION($wht) { - global $menuDesription, $menuTitle, $_CONFIG, $cacheArray, $link, $DATA, $DEPTH; + global $menuDesription, $menuTitle, $_CONFIG, $cacheArray, $DATA, $DEPTH; //* DEBUG: */ echo __LINE__."*".$wht."/".$GLOBALS['module']."/".$GLOBALS['action']."/".$GLOBALS['what']."*
\n"; if (EXT_IS_ACTIVE("cache")) { @@ -309,7 +309,7 @@ LIMIT 1", array($act, $wht, $wht), __FILE__, __LINE__); // Is valid but does the inlcude file exists? $INC = sprintf("%sinc/modules/admin/action-%s.php", PATH, $act); - if ((file_exists($INC)) && (is_readable($INC)) && (VALIDATE_MENU_ACTION("admin", $act, $wht)) && (__ACL_ALLOW == true)) + if ((FILE_READABLE($INC)) && (VALIDATE_MENU_ACTION("admin", $act, $wht)) && (__ACL_ALLOW == true)) { // Ok, we finally load the admin action module include($INC); @@ -338,7 +338,7 @@ LIMIT 1", array($act, $wht, $wht), __FILE__, __LINE__); // function ADD_ADMIN_MENU($act, $wht,$return=false) { - global $menuDesription, $menuTitle, $link; + global $menuDesription, $menuTitle; $SUB = false; // Menu descriptions @@ -416,7 +416,7 @@ function ADD_ADMIN_MENU($act, $wht,$return=false) // ACL is "allow"... hmmm $ACL = true; } - $readable = ((file_exists($INC)) && (is_readable($INC))); + $readable = FILE_READABLE($INC); if ($ACL) { // Insert compiled title and description @@ -489,7 +489,7 @@ function ADD_ADMIN_MENU($act, $wht,$return=false) } } // -function ADD_MEMBER_SELECTION_BOX($add_all = false, $return = false, $none = false, $def = "0") +function ADD_MEMBER_SELECTION_BOX ($def="0", $add_all=false, $return=false, $none=false) { // Output selection form with all confirmed user accounts listed $result = SQL_QUERY("SELECT userid, surname, family FROM "._MYSQL_PREFIX."_user_data ORDER BY userid", __FILE__, __LINE__); @@ -508,15 +508,18 @@ function ADD_MEMBER_SELECTION_BOX($add_all = false, $return = false, $none = fal // Free memory SQL_FREERESULT($result); - // Remeber options in constant - define('_MEMBER_SELECTION', $OUT); - if (!$return) { + // Remeber options in constant + define('_MEMBER_SELECTION', $OUT); + // Display selection box define('__LANG_VALUE', GET_LANGUAGE()); // Load template LOAD_TEMPLATE("admin_member_selection_box", false, $GLOBALS['what']); + } else { + // Return content + return "\n"; } } // @@ -525,26 +528,22 @@ function ADMIN_MENU_SELECTION($MODE, $default="", $defid="") { if ($MODE == "action") $wht = "(what='' OR what IS NULL) AND action !='login'"; $result = SQL_QUERY_ESC("SELECT %s, title FROM "._MYSQL_PREFIX."_admin_menu WHERE ".$wht." ORDER BY sort", array($MODE), __FILE__, __LINE__); - if (SQL_NUMROWS($result) > 0) - { + if (SQL_NUMROWS($result) > 0) { // Load menu as selection $OUT = "\n"; - } - else - { + } else { // No menus??? $OUT = ADMIN_PROBLEM_NO_MENU; } @@ -552,41 +551,20 @@ function ADMIN_MENU_SELECTION($MODE, $default="", $defid="") { // Return output return $OUT; } -// -function ADMIN_SAVE_SETTINGS (&$POST, $tableName="_config", $whereStatement="config=0", $translateComma = array(), $alwaysAdd=false) -{ +// Save settings to the database +function ADMIN_SAVE_SETTINGS (&$POST, $tableName="_config", $whereStatement="config=0", $translateComma=array(), $alwaysAdd=false) { global $_CONFIG, $cacheArray, $cacheInstance; + + // Prepare all arrays, variables $DATA = array(); - $skip = false; $TEST2 = ""; - foreach ($POST as $id=>$val) { + $skip = false; + + // Now, walk through all entries and prepare them for saving + foreach ($POST as $id => $val) { // Process only formular field but not submit buttons ;) if ($id != "ok") { // Do not save the ok value - $TEST = substr($id, -3); - if ((($TEST == "_ye") || ($TEST == "_mo") || ($TEST == "_we") || ($TEST == "_da") || ($TEST == "_ho") || ($TEST == "_mi") || ($TEST == "_se")) && (isset($val))) { - // Found a multi-selection for timings? - $TEST = substr($id, 0, -3); - if ((isset($POST[$TEST."_ye"])) && (isset($POST[$TEST."_mo"])) && (isset($POST[$TEST."_we"])) && (isset($POST[$TEST."_da"])) && (isset($POST[$TEST."_ho"])) && (isset($POST[$TEST."_mi"])) && (isset($POST[$TEST."_se"])) && ($TEST != $TEST2)) { - // Generate timestamp - $POST[$TEST] = CREATE_TIMESTAMP_FROM_SELECTIONS($TEST, $POST); - $DATA[] = "$TEST='".$POST[$TEST]."'"; - - // Remove data from array - unset($POST[$TEST."_ye"]); - unset($POST[$TEST."_mo"]); - unset($POST[$TEST."_we"]); - unset($POST[$TEST."_da"]); - unset($POST[$TEST."_ho"]); - unset($POST[$TEST."_mi"]); - unset($POST[$TEST."_se"]); - - // Skip adding - unset($id); $skip = true; $TEST2 = $TEST; - } - } else { - // Process this entry - $skip = false; $TEST2 = ""; - } + CONVERT_SELECTIONS_TO_TIMESTAMP($POST, $DATA, $id, $skip); // Shall we process this ID? It muss not be empty, of course if ((!$skip) && (!empty($id))) { @@ -597,7 +575,7 @@ function ADMIN_SAVE_SETTINGS (&$POST, $tableName="_config", $whereStatement="con if ((is_array($translateComma)) && (in_array($id, $translateComma))) { // Then do it here... :) $val = str_replace(",", ".", $val); - } + } // END - if // Shall we add numbers or strings? $test = (float)$val; @@ -611,9 +589,9 @@ function ADMIN_SAVE_SETTINGS (&$POST, $tableName="_config", $whereStatement="con // Update current configuration $_CONFIG[$id] = $val; - } - } - } + } // END - if + } // END - if + } // END - foreach // Check if entry does exist $result = false; @@ -623,7 +601,7 @@ function ADMIN_SAVE_SETTINGS (&$POST, $tableName="_config", $whereStatement="con } else { $result = SQL_QUERY("SELECT * FROM "._MYSQL_PREFIX.$tableName." LIMIT 1", __FILE__, __LINE__); } - } + } // END - if if (SQL_NUMROWS($result) == 1) { // "Implode" all data to single string @@ -638,7 +616,7 @@ function ADMIN_SAVE_SETTINGS (&$POST, $tableName="_config", $whereStatement="con // Split up $line = explode("=", $entry); $KEYs[] = $line[0]; $VALUEs[] = $line[1]; - } + } // END - foreach // Add both in one line $KEYs = implode(", ", $KEYs); @@ -659,7 +637,7 @@ function ADMIN_SAVE_SETTINGS (&$POST, $tableName="_config", $whereStatement="con // Remove it here... if ($cacheInstance->cache_file("config", true)) $cacheInstance->cache_destroy(); unset($cacheArray); - } + } // END - if // Settings saved LOAD_TEMPLATE("admin_settings_saved", false, "".SETTINGS_SAVED.""); @@ -671,6 +649,7 @@ function ADMIN_MAKE_MENU_SELECTION($menu, $type, $name, $default="") { // Init the selection box $OUT = "\n"; return $OUT; } // -function ADMIN_USER_PROFILE_LINK($uid, $title="", $wht="list_user") -{ - if (($title == "") && ($title != "0")) { $title = $uid; } - if (($title == "0") && ($wht == "list_refs")) - { +function ADMIN_USER_PROFILE_LINK($uid, $title="", $wht="list_user") { + if (($title == "") && ($title != "0")) { + // Set userid as title + $title = $uid; + } // END - if + + if (($title == "0") && ($wht == "list_refs")) { // Return title again return $title; - } + } // END - if //* DEBUG: */ echo "A:".$title."
"; // Return link return "".$title.""; } // -function ADMIN_CHECK_MENU_MODE() -{ +function ADMIN_CHECK_MENU_MODE() { global $_CONFIG, $cacheArray; // Set the global mode as the mode for all admins $MODE = $_CONFIG['admin_menu']; $ADMIN = $MODE; // Check individual settings of current admin - if (isset($cacheArray['admins']['la_mode'][get_session('admin_login')])) - { + if (isset($cacheArray['admins']['la_mode'][get_session('admin_login')])) { // Load from cache $ADMIN = $cacheArray['admins']['la_mode'][get_session('admin_login')]; $_CONFIG['cache_hits']++; - } - elseif (GET_EXT_VERSION("admins") >= "0.6.7") - { + } elseif (GET_EXT_VERSION("admins") >= "0.6.7") { // Load from database when version of "admins" is enough $result = SQL_QUERY_ESC("SELECT la_mode FROM "._MYSQL_PREFIX."_admins WHERE login='%s' LIMIT 1", array(get_session('admin_login')), __FILE__, __LINE__); - if (SQL_NUMROWS($result) == 1) - { + if (SQL_NUMROWS($result) == 1) { // Load data list($ADMIN) = SQL_FETCHROW($result); } @@ -750,7 +729,7 @@ function ADMIN_CHANGE_ACTIVATION_STATUS ($IDs, $table, $row, $idRow = "id") { $cnt = 0; $newStatus = "Y"; if ((is_array($IDs)) && (count($IDs) > 0)) { // "Walk" all through and count them - foreach ($IDs as $id=>$selected) { + foreach ($IDs as $id => $selected) { // Secure the ID number $id = bigintval($id); @@ -786,115 +765,229 @@ function ADMIN_CHANGE_ACTIVATION_STATUS ($IDs, $table, $row, $idRow = "id") { LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_NOTHING_SELECTED_CHANGE); } } -// Delete rows by given ID numbers -function ADMIN_DELETE_ENTRIES_CONFIRM ($IDs, $table, $row, $columns = array(), $filterFunctions = array(), $deleteNow=false, $idRow="id") { +// Build a special template list +function ADMIN_BUILD_LIST ($listType, $IDs, $table, $columns, $filterFunctions, $extraValues, $idColumn, $userIdColumn) { global $_CONFIG; $OUT = ""; $SW = 2; - if ((is_array($IDs)) && (count($IDs) > 0)) { - // "Walk" through all entries and count them - if ($deleteNow) { - // Delete them - die("DELETE!"); - } else { - // List for confirmation - foreach ($IDs as $id => $selected) { - // Secure ID number - $id = bigintval($id); - - // Will always be 1 ;-) - if ($selected == 1) { - // Get result from a given column array and table name - $result = SQL_RESULT_FROM_ARRAY($table, $columns, $idRow, $id); - - // Is there one entry? - if (SQL_NUMROWS($result) == 1) { - // Load all data - $content = SQL_FETCHARRAY($result); - - // Filter all data - foreach ($content as $key=>$value) { - // Is a filter function set? - $idx = array_search($key, $columns, true); - if (!empty($filterFunctions[$idx])) { - // Then call it! - $content[$key] = call_user_func($filterFunctions[$idx], $value); - } - } - // Add color switching - $content['sw'] = $SW; + // "Walk" through all entries + foreach ($IDs as $id => $selected) { + // Secure ID number + $id = bigintval($id); - // Then list it again... - $OUT .= LOAD_TEMPLATE("admin_del_".$table."_row", true, $content); - $SW = 3 - $SW; - } + // Will always be 1 ;-) + if ($selected == 1) { + // Get result from a given column array and table name + $result = SQL_RESULT_FROM_ARRAY($table, $columns, $idColumn, $id); + + // Is there one entry? + if (SQL_NUMROWS($result) == 1) { + // Load all data + $content = SQL_FETCHARRAY($result); + + // Filter all data + foreach ($content as $key => $value) { + // Search index + $idx = array_search($key, $columns, true); + + // Do we have a userid? + if ($key == "userid") { + // Add it again as raw id + $content['uid'] = bigintval($value); + } // END - if + + // Handle the call in external function + $content[$key] = HANDLE_EXTRA_VALUES($filterFunctions[$idx], $value, $extraValues[$idx]); + } // END - foreach + + // Add color switching + $content['sw'] = $SW; + + // Then list it + $OUT .= LOAD_TEMPLATE("admin_".$listType."_".$table."_row", true, $content); + + // Switch color + $SW = 3 - $SW; + } // END - if + + // Free the result + SQL_FREERESULT($result); + } // END - if + } // END - foreach + + // Load master template + LOAD_TEMPLATE("admin_".$listType."_".$table."", false, $OUT); +} +// Delete rows by given ID numbers +function ADMIN_DELETE_ENTRIES_CONFIRM ($IDs, $table, $columns=array(), $filterFunctions=array(), $extraValues=array(), $deleteNow=false, $idColumn="id", $userIdColumn="userid") { + // All valid entries? (We hope so here!) + if ((is_array($IDs)) && (count($IDs) > 0) && (count($columns) == count($filterFunctions)) && (count($columns) == count($extraValues))) { + // Shall we delete here or list for deletion? + if ($deleteNow) { + // Delete them + $SQL = "DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_%s WHERE %s IN (%s)"; + $idList = ""; + foreach ($IDs as $id => $sel) { + // Is there a userid? + if (isset($_POST['uid'][$id])) { + // Load all data from that id + $result = SQL_QUERY_ESC("SELECT * FROM "._MYSQL_PREFIX."_%s WHERE %s=%s LIMIT 1", + array($table, $idColumn, $id), __FILE__, __LINE__); + + // Fetch the data + $content = SQL_FETCHARRAY($result); // Free the result SQL_FREERESULT($result); - } - } - // Load master template - LOAD_TEMPLATE("admin_del_".$table."", false, $OUT); + // Do we have a *real* userid? + if ($_POST['uid'][$id] > 0) { + // Generate subject + $eval = "\$subject = MEMBER_DEL_".strtoupper($table)."_SUBJECT;"; + eval($eval); + + // Load email template + $mail = LOAD_EMAIL_TEMPLATE("member_del_".$table, $content); + + // Send email out + SEND_EMAIL($_POST['uid'][$id], $subject, $mail); + } // END - if + + // Generate subject + $eval = "\$subject = ADMIN_DEL_".strtoupper($table)."_SUBJECT;"; + eval($eval); + + // Send admin notification out + SEND_ADMIN_NOTIFICATION($subject, "admin_del_".$table, $content, $_POST['uid'][$id]); + } // END - if + + // Add id number + $idList .= $id.","; + } // END - if + + // Run the query + SQL_QUERY($SQL, array($table, $idColumn, substr($idList, 0, -1)), __FILE__, __LINE__); + + // Was this fine? + if (SQL_AFFECTEDROWS() == count($IDs)) { + // All deleted + LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_ALL_ENTRIES_REMOVED); + } else { + // Some are still there :( + LOAD_TEMPLATE("admin_settings_saved", false, sprintf(ADMIN_SOME_ENTRIES_NOT_DELETED, SQL_AFFECTEDROWS(), count($IDs))); + } + } else { + // List for deletion confirmation + ADMIN_BUILD_LIST("del", $IDs, $table, $columns, $filterFunctions, $extraValues, $idColumn, $userIdColumn); } - } + } // END - if } // Edit rows by given ID numbers -function ADMIN_EDIT_ENTRIES_CONFIRM ($IDs, $table, $row, $columns = array(), $filterFunctions = array(), $editNow=false, $idRow="id") { - global $_CONFIG; - $OUT = ""; $SW = 2; - if ((is_array($IDs)) && (count($IDs) > 0)) { - // "Walk" through all entries and count them +function ADMIN_EDIT_ENTRIES_CONFIRM ($IDs, $table, $columns=array(), $filterFunctions=array(), $extraValues=array(), $editNow=false, $idColumn="id", $userIdColumn="userid") { + // All valid entries? (We hope so here!) + if ((is_array($IDs)) && (count($IDs) > 0) && (count($columns) == count($filterFunctions)) && (count($columns) == count($extraValues))) { + // Shall we change here or list for editing? if ($editNow) { - // Delete them - die("EDIT!"); - } else { - // List for confirmation - foreach ($IDs as $id => $selected) { - // Secure ID number - $id = bigintval($id); - - // Will always be 1 ;-) - if ($selected == 1) { - // Get result from a given column array and table name - $result = SQL_RESULT_FROM_ARRAY($table, $columns, $idRow, $id); - - // Is there one entry? - if (SQL_NUMROWS($result) == 1) { - // Load all data - $content = SQL_FETCHARRAY($result); - - // Filter all data - foreach ($content as $key=>$value) { - // Is a filter function set? - $idx = array_search($key, $columns, true); - if (!empty($filterFunctions[$idx])) { - // Then call it! - $content[$key] = call_user_func($filterFunctions[$idx], $value); - } - } - - // Add color switching - $content['sw'] = $SW; - - // Then list it again... - $OUT .= LOAD_TEMPLATE("admin_edit_".$table."_row", true, $content); - $SW = 3 - $SW; + // Change them all + $affected = 0; + foreach ($IDs as $id => $sel) { + // Prepare content array (new values) + $content = array(); + + // Prepare SQL for this row + $SQL = "UPDATE "._MYSQL_PREFIX."_".$table." SET"; + foreach ($_POST as $key => $entries) { + // Skip raw userid which is always invalid + if ($key == "uid_raw") { + // Continue with next field + continue; + } // END - if + + // Is entries an array? + if (($key != $idColumn) && (is_array($entries)) && (isset($entries[$id]))) { + // Add this entry to content + $content[$key] = $entries[$id]; + + // Send data through the filter function if found + if ((isset($filterFunctions[$key])) && (isset($extraValues[$key]))) { + // Filter function set! + $entries[$id] = HANDLE_EXTRA_VALUES($filterFunctions[$key], $entries[$id], $extraValues[$key]); + } // END - if + + // Then add this value + $SQL .= sprintf(" %s='%s',", + SQL_ESCAPE($key), + SQL_ESCAPE($entries[$id]) + ); + } elseif (($key != $idColumn) && (!is_array($entries))) { + // Add normal entries as well! + $content[$key] = $entries; } - // Free the result - SQL_FREERESULT($result); + // Do we have an URL? + if ($key == "url") { + // Then add a framekiller test as well + $content['frametester'] = FRAMETESTER($content[$key]); + } // END - if } - } + $SQL = substr($SQL, 0, -1) . " WHERE ".$idColumn."=".$id." LIMIT 1"; + + // Run this query + SQL_QUERY($SQL, __FILE__, __LINE__); + + // Add affected rows + $affected += SQL_AFFECTEDROWS(); + + // Load all data from that id + $result = SQL_QUERY_ESC("SELECT * FROM "._MYSQL_PREFIX."_%s WHERE %s=%s LIMIT 1", + array($table, $idColumn, $id), __FILE__, __LINE__); + + // Fetch the data + global $DATA; + $DATA = SQL_FETCHARRAY($result); + + // Free the result + SQL_FREERESULT($result); - // Load master template - LOAD_TEMPLATE("admin_edit_".$table."", false, $OUT); + // Is a raw user id set? + if ((isset($_POST['uid_raw'][$id])) && ($_POST['uid_raw'][$id] > 0)) { + // Generate subject + $eval = "\$subject = MEMBER_EDIT_".strtoupper($table)."_SUBJECT;"; + eval($eval); + + // Load email template + $mail = LOAD_EMAIL_TEMPLATE("member_edit_".$table, $content); + + // Send email out + SEND_EMAIL($_POST['uid_raw'][$id], $subject, $mail); + } // END - if + + // Generate subject + $eval = "\$subject = ADMIN_EDIT_".strtoupper($table)."_SUBJECT;"; + eval($eval); + + // Send admin notification out + SEND_ADMIN_NOTIFICATION($subject, "admin_edit_".$table, $content, $_POST['uid_raw'][$id]); + } // END - foreach + + // Was this fine? + if ($affected == count($IDs)) { + // All deleted + LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_ALL_ENTRIES_EDITED); + } else { + // Some are still there :( + LOAD_TEMPLATE("admin_settings_saved", false, sprintf(ADMIN_SOME_ENTRIES_NOT_EDITED, $affected, count($IDs))); + } + } else { + // List for editing + ADMIN_BUILD_LIST("edit", $IDs, $table, $columns, $filterFunctions, $extraValues, $idColumn, $userIdColumn); } - } + } // END - if } -// Checks proxy settins by fetching check-updates2.php from www.mxchange.org +// Checks proxy settins by fetching check-updates3.php from www.mxchange.org function ADMIN_TEST_PROXY_SETTINGS ($settingsArray) { global $_CONFIG; + // By default they are invalid $valid = false; @@ -902,7 +995,7 @@ function ADMIN_TEST_PROXY_SETTINGS ($settingsArray) { $_CONFIG = array_merge($_CONFIG, $settingsArray); // Now get the test URL - $content = GET_URL("check-updates2.php"); + $content = GET_URL("check-updates3.php"); // Is the first line with "200 OK"? $valid = eregi("200 OK", $content[0]); @@ -1002,5 +1095,21 @@ function ADMIN_RESET_PASSWORD ($login, $password) { // Return output return ADMIN_PASSWORD_RESET_DONE; } +// Solves a task by given id number +function ADMIN_SOLVE_TASK ($id) { + // Update the task data + ADMIN_UPDATE_TASK_DATA($id, "status", "SOLVED"); +} +// Marks a given task as deleted +function ADMIN_DELETE_TASK ($id) { + // Update the task data + ADMIN_UPDATE_TASK_DATA($id, "status", "DELETED"); +} +// Function to update task data +function ADMIN_UPDATE_TASK_DATA ($id, $row, $data) { + // Update the task + SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_task_system SET %s='%s' WHERE id=%s LIMIT 1", + array($row, $data, bigintval($id)), __FILE__, __LINE__); +} // ?>