X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Fwhat-list_admins_acls.php;h=a5bbe08847a692f825bd44b2ae6abcd346635bb7;hb=f328172e16c619d30889fac830e873f2eeef857a;hp=e8159b074c4d8f31666889d61138f2ef1b0676a5;hpb=6a0c39a390c28999679d84a7ae5264363b0054dc;p=mailer.git diff --git a/inc/modules/admin/what-list_admins_acls.php b/inc/modules/admin/what-list_admins_acls.php index e8159b074c..a5bbe08847 100644 --- a/inc/modules/admin/what-list_admins_acls.php +++ b/inc/modules/admin/what-list_admins_acls.php @@ -46,9 +46,9 @@ addYouAreHereLink('admin', __FILE__); if ((isFormSent('edit')) && (ifPostContainsSelections())) { // Edit ACLs $OUT = ''; - foreach (postRequestParameter('sel') as $id => $selected) { + foreach (postRequestElement('sel') as $id => $selected) { // Load data for the id - $result = SQL_QUERY_ESC("SELECT `id`, `admin_id`, `action_menu`, `what_menu`, `access_mode` FROM `{?_MYSQL_PREFIX?}_admins_acls` WHERE `id`=%s LIMIT 1", + $result = SQL_QUERY_ESC("SELECT `id`,`admin_id`,`action_menu`,`what_menu`,`access_mode` FROM `{?_MYSQL_PREFIX?}_admins_acls` WHERE `id`=%s LIMIT 1", array(bigintval($id)), __FILE__, __LINE__); $content = SQL_FETCHARRAY($result); @@ -78,9 +78,9 @@ if ((isFormSent('edit')) && (ifPostContainsSelections())) { // Load main template loadTemplate('admin_edit_admins_acls', false, $OUT); -} elseif ((isFormSent('change')) && (ifPostContainsSelections())) { +} elseif ((isFormSent('do_edit')) && (ifPostContainsSelections())) { // Change entries - foreach (postRequestParameter('sel') as $id => $selected) { + foreach (postRequestElement('sel') as $id => $selected) { // Secure id $id = bigintval($id); @@ -96,10 +96,10 @@ WHERE `id`=%s LIMIT 1", array( - postRequestParameter('admin', $id), - postRequestParameter('action_menu', $id), - postRequestParameter('what_menu', $id), - postRequestParameter('mode', $id), + postRequestElement('admin', $id), + postRequestElement('action_menu', $id), + postRequestElement('what_menu', $id), + postRequestElement('mode', $id), $id ),__FILE__, __LINE__); } // END - foreach @@ -115,9 +115,9 @@ LIMIT 1", } elseif ((isFormSent('delete')) && (ifPostContainsSelections())) { // Delete ACLs $OUT = ''; - foreach (postRequestParameter('sel') as $id => $selected) { + foreach (postRequestElement('sel') as $id => $selected) { // Load data for the id - $result = SQL_QUERY_ESC("SELECT `id`, `admin_id`, `action_menu`, `what_menu`, `access_mode` FROM `{?_MYSQL_PREFIX?}_admins_acls` WHERE `id`=%s LIMIT 1", + $result = SQL_QUERY_ESC("SELECT `id`,`admin_id`,`action_menu`,`what_menu`,`access_mode` FROM `{?_MYSQL_PREFIX?}_admins_acls` WHERE `id`=%s LIMIT 1", array(bigintval($id)), __FILE__, __LINE__); $content = SQL_FETCHARRAY($result); SQL_FREERESULT($result); @@ -131,10 +131,10 @@ LIMIT 1", // Load main template loadTemplate('admin_delete_admins_acls', false, $OUT); -} elseif ((isFormSent('remove')) && (ifPostContainsSelections())) { +} elseif ((isFormSent('do_delete')) && (ifPostContainsSelections())) { // Remove entries // @TODO Rewrite this to filter 'run_sqls' - foreach (postRequestParameter('sel') as $id => $selected) { + foreach (postRequestElement('sel') as $id => $selected) { SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{?_MYSQL_PREFIX?}_admins_acls` WHERE `id`=%s LIMIT 1", array(bigintval($id)),__FILE__, __LINE__); } // END - foreach @@ -148,37 +148,37 @@ LIMIT 1", displayMessage('{--ADMIN_ADMINS_ENTRIES_DELETED--}'); } elseif (isFormSent('add')) { // Check if everything is fine... - $mode = getAdminDefaultAcl(bigintval(postRequestParameter('admin_id'))); + $mode = getAdminDefaultAcl(bigintval(postRequestElement('admin_id'))); // Default ACL is false $ACL = false; - if (isPostRequestParameterSet('what_menu')) { + if (isPostRequestElementSet('what_menu')) { // Check parent ACL - $ACL = adminsCheckAdminAcl(getActionFromModuleWhat('admin', postRequestParameter('what_menu')), ''); + $ACL = isAdminsAllowedByAcl(getActionFromModuleWhat('admin', postRequestElement('what_menu')), ''); } // END - if - if (($mode != postRequestParameter('mode')) || (($ACL === true) && (postRequestParameter('mode') == 'deny'))) { + if (($mode != postRequestElement('mode')) || (($ACL === true) && (postRequestElement('mode') == 'deny'))) { // Mode is fine - $BOTH = ((isPostRequestParameterSet('action_menu')) && (isPostRequestParameterSet('what_menu')) && (postRequestParameter('action_menu') != '') && (postRequestParameter('what_menu') != '')); + $BOTH = ((isPostRequestElementSet('action_menu')) && (isPostRequestElementSet('what_menu')) && (postRequestElement('action_menu') != '') && (postRequestElement('what_menu') != '')); // Check if one has been selected - if ((((isPostRequestParameterSet('action_menu')) && (postRequestParameter('action_menu') != '')) || ((isPostRequestParameterSet('what_menu')) && (postRequestParameter('what_menu') != ''))) && ($BOTH === false)) { + if ((((isPostRequestElementSet('action_menu')) && (postRequestElement('action_menu') != '')) || ((isPostRequestElementSet('what_menu')) && (postRequestElement('what_menu') != ''))) && ($BOTH === false)) { // Main or sub menu selected $result = SQL_QUERY_ESC("SELECT `id` FROM `{?_MYSQL_PREFIX?}_admins_acls` WHERE `admin_id`=%s AND `action_menu`='%s' AND `what_menu`='%s' LIMIT 1", array( - bigintval(postRequestParameter('admin_id')), - postRequestParameter('action_menu'), - postRequestParameter('what_menu') + bigintval(postRequestElement('admin_id')), + postRequestElement('action_menu'), + postRequestElement('what_menu') ), __FILE__, __LINE__); if (SQL_HASZERONUMS($result)) { // Finally add the new ACL - SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_admins_acls` (`admin_id`, `action_menu`, `what_menu`, `access_mode`) -VALUES ('%s','%s','%s','%s')", + SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_admins_acls` (`admin_id`,`action_menu`,`what_menu`,`access_mode`) +VALUES (%s,'%s','%s','%s')", array( - bigintval(postRequestParameter('admin_id')), - postRequestParameter('action_menu'), - postRequestParameter('what_menu'), - postRequestParameter('mode') + bigintval(postRequestElement('admin_id')), + postRequestElement('action_menu'), + postRequestElement('what_menu'), + postRequestElement('mode') ), __FILE__, __LINE__); $content = '{--ADMIN_ADMINS_ACL_SAVED--}'; @@ -206,7 +206,7 @@ VALUES ('%s','%s','%s','%s')", displayMessage($content); } else { // List all ACLs - $result = SQL_QUERY('SELECT `id`, `admin_id`, `action_menu`, `what_menu`, `access_mode` FROM `{?_MYSQL_PREFIX?}_admins_acls` ORDER BY `admin_id` ASC, `id` ASC', __FILE__, __LINE__); + $result = SQL_QUERY('SELECT `id`,`admin_id`,`action_menu`,`what_menu`,`access_mode` FROM `{?_MYSQL_PREFIX?}_admins_acls` ORDER BY `admin_id` ASC, `id` ASC', __FILE__, __LINE__); // Entries found? if (!SQL_HASZERONUMS($result)) {