X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Fwhat-lock_user.php;h=818716540253fed21f6b6881946311a197af03e7;hb=9d3e47c8ab6ff3ab7efca2a968d66a5ccf76728d;hp=a2dc75028cc1a2feee20e14e5980c12ea35c97b9;hpb=6c763653e88b9d10627e651ca59c7201d4b7d62b;p=mailer.git diff --git a/inc/modules/admin/what-lock_user.php b/inc/modules/admin/what-lock_user.php index a2dc75028c..8187165402 100644 --- a/inc/modules/admin/what-lock_user.php +++ b/inc/modules/admin/what-lock_user.php @@ -10,7 +10,12 @@ * -------------------------------------------------------------------- * * Kurzbeschreibung : Mitglieder sperren * * -------------------------------------------------------------------- * - * * + * $Revision:: $ * + * $Date:: $ * + * $Tag:: 0.2.1-FINAL $ * + * $Author:: $ * + * Needs to be in all Files and every File needs "svn propset * + * svn:keywords Date Revision" (autoprobset!) at least!!!!!! * * -------------------------------------------------------------------- * * Copyright (c) 2003 - 2008 by Roland Haeder * * For more information visit: http://www.mxchange.org * @@ -33,18 +38,18 @@ // Some security stuff... if ((!defined('__SECURITY')) || (!IS_ADMIN())) { - $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php"; + $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), '/inc') + 4) . '/security.php'; require($INC); } // Add description as navigation point -ADD_DESCR("admin", __FILE__); +ADD_DESCR('admin', __FILE__); // Is a userid set? -if (!empty($_GET['u_id'])) { +if (REQUEST_ISSET_GET('uid')) { // Load user's data - $result_user = SQL_QUERY_ESC("SELECT status, gender, surname, family, email FROM `"._MYSQL_PREFIX."_user_data` WHERE userid=%s LIMIT 1", - array(bigintval($_GET['u_id'])), __FILE__, __LINE__); + $result_user = SQL_QUERY_ESC("SELECT status, gender, surname, family, email FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1", + array(bigintval(REQUEST_GET('uid'))), __FILE__, __LINE__); $ACT = false; if (SQL_NUMROWS($result_user) == 1) { // User found @@ -54,67 +59,67 @@ if (!empty($_GET['u_id'])) { SQL_FREERESULT($result_user); // Is a lock reason set? - if ((!empty($_POST['lock'])) && ($status != "LOCKED")) { + if ((REQUEST_ISSET_POST(('lock'))) && ($status != 'LOCKED')) { // Ok, lock the account! - if (GET_EXT_VERSION("user") >= "0.3.5") { + if (GET_EXT_VERSION('user') >= '0.3.5') { // Lock with reason - $result = SQL_QUERY_ESC("UPDATE `"._MYSQL_PREFIX."_user_data` SET status='LOCKED',lock_reason='%s',lock_timestamp=NOW() WHERE userid=%s LIMIT 1", - array($_POST['reason'], bigintval($_GET['u_id'])), __FILE__, __LINE__); + SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `status`='LOCKED',lock_reason='%s',lock_timestamp=NOW() WHERE userid=%s LIMIT 1", + array(REQUEST_POST('reason'), bigintval(REQUEST_GET('uid'))), __FILE__, __LINE__); } else { // Lock with no lock reason saved - $result = SQL_QUERY_ESC("UPDATE `"._MYSQL_PREFIX."_user_data` SET status='LOCKED' WHERE userid=%s LIMIT 1", - array(bigintval($_GET['u_id'])), __FILE__, __LINE__); + SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `status`='LOCKED' WHERE userid=%s LIMIT 1", + array(bigintval(REQUEST_GET('uid'))), __FILE__, __LINE__); } // Entry updated? if (SQL_AFFECTEDROWS() == 1) { // Send an email to the user! In later version you can optionally switch this feature off - $msg = LOAD_EMAIL_TEMPLATE("lock-user", array('text' => $_POST['reason']), bigintval($_GET['u_id'])); + $msg = LOAD_EMAIL_TEMPLATE("lock-user", array('text' => REQUEST_POST('reason')), bigintval(REQUEST_GET('uid'))); // Send away... - SEND_EMAIL(bigintval($_GET['u_id']), ADMIN_LOCKED_SUBJ, $msg); + sendEmail(bigintval(REQUEST_GET('uid')), ADMIN_LOCKED_SUBJ, $msg); } // END - if // Prepare message - $MSG = USER_ACCOUNT_LOCKED_1.$_GET['u_id'].USER_ACCOUNT_LOCKED_2; + $message = sprintf(getMessage('USER_ACCOUNT_LOCKED'), REQUEST_GET('uid')); $ACT = true; - } elseif ((!empty($_POST['unlock'])) && ($status == "LOCKED")) { + } elseif ((REQUEST_ISSET_POST(('unlock'))) && ($status == 'LOCKED')) { // Ok, unlock the account! - if (GET_EXT_VERSION("user") >= "0.3.5") { + if (GET_EXT_VERSION('user') >= '0.3.5') { // Reset lock reason as well - $result = SQL_QUERY_ESC("UPDATE `"._MYSQL_PREFIX."_user_data` SET status='CONFIRMED',lock_reason='',lock_timestamp='0000-00-00 00:00' WHERE userid=%s LIMIT 1", - array(bigintval($_GET['u_id'])), __FILE__, __LINE__); + SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `status`='CONFIRMED',lock_reason='',lock_timestamp='0000-00-00 00:00' WHERE userid=%s LIMIT 1", + array(bigintval(REQUEST_GET('uid'))), __FILE__, __LINE__); } else { // No lock reason to reset - $result = SQL_QUERY_ESC("UPDATE `"._MYSQL_PREFIX."_user_data` SET status='CONFIRMED' WHERE userid=%s LIMIT 1", - array(bigintval($_GET['u_id'])), __FILE__, __LINE__); + SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `status`='CONFIRMED' WHERE userid=%s LIMIT 1", + array(bigintval(REQUEST_GET('uid'))), __FILE__, __LINE__); } // Entry updated? if (SQL_AFFECTEDROWS() == 1) { // Send an email to the user! In later version you can optionally switch this feature off - $msg = LOAD_EMAIL_TEMPLATE("unlock-user", array('text' => $_POST['reason']), bigintval($_GET['u_id'])); + $msg = LOAD_EMAIL_TEMPLATE("unlock-user", array('text' => REQUEST_POST('reason')), bigintval(REQUEST_GET('uid'))); // Send away... - SEND_EMAIL(bigintval($_GET['u_id']), ADMIN_UNLOCKED_SUBJ, $msg); - if (EXT_IS_ACTIVE("rallye")) { - RALLYE_AUTOADD_USER($_GET['u_id']); + sendEmail(bigintval(REQUEST_GET('uid')), getMessage('ADMIN_UNLOCKED_SUBJ'), $msg); + if (EXT_IS_ACTIVE('rallye')) { + RALLYE_AUTOADD_USER(REQUEST_GET('uid')); } // END - if } // END - if // Prepare message - $MSG = USER_ACCOUNT_UNLOCKED_1.$_GET['u_id'].USER_ACCOUNT_UNLOCKED_2; + $message = sprintf(getMessage('USER_ACCOUNT_UNLOCKED'), REQUEST_GET('uid')); $ACT = true; - } elseif (isset($_POST['del'])) { + } elseif (REQUEST_ISSET_POST('del')) { // Delete the account $ACT = true; - require_once(PATH."inc/modules/admin/what-del_user.php"); - } elseif (!empty($_POST['no'])) { + loadIncludeOnce("inc/modules/admin/what-del_user.php"); + } elseif (REQUEST_ISSET_POST(('no'))) { // Do not lock him... - $URL = URL."/modules.php?module=admin&what=list_user&u_id=".bigintval($_GET['u_id']); + $URL = ADMIN_CREATE_USERID_LINK(REQUEST_GET('uid')); } else { - $result = SQL_QUERY_ESC("SELECT email, surname, family FROM `"._MYSQL_PREFIX."_user_data` WHERE userid=%s LIMIT 1", - array(bigintval($_GET['u_id'])), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT email, surname, family FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1", + array(bigintval(REQUEST_GET('uid'))), __FILE__, __LINE__); // Entry found? if (SQL_NUMROWS($result) == 1) { @@ -125,56 +130,57 @@ if (!empty($_GET['u_id'])) { SQL_FREERESULT($result); // Transfer data to constants for the template - define('__EMAIL', CREATE_EMAIL_LINK($email, "user_data")); + // @TODO Rewrite these all constants + define('__EMAIL', generateMemberEmailLink($email, 'user_data')); define('__SNAME', $sname); define('__FNAME', $fname); - define('__UID' , bigintval($_GET['u_id'])); + define('__UID' , bigintval(REQUEST_GET('uid'))); // Realy want to lock? switch ($status) { - case "CONFIRMED": // Yes, lock him down... ;-) - define('__OK_VALUE' , "lock"); - define('__HEADER_VALUE', ADMIN_HEADER_LOCK_ACCOUNT_1.__UID.ADMIN_HEADER_LOCK_ACCOUNT_2); - define('__TEXT_VALUE' , ADMIN_TEXT_LOCK_ACCOUNT_1.__UID.ADMIN_TEXT_LOCK_ACCOUNT_2); - break; - - case "LOCKED": // Unlock the user - define('__OK_VALUE' , "unlock"); - define('__HEADER_VALUE', ADMIN_HEADER_UNLOCK_ACCOUNT_1.__UID.ADMIN_HEADER_UNLOCK_ACCOUNT_2); - define('__TEXT_VALUE' , ADMIN_TEXT_UNLOCK_ACCOUNT_1.__UID.ADMIN_TEXT_UNLOCK_ACCOUNT_2); - break; - - case "UNCONFIRMED": // Unconfirmed accounts cannot be unlocked! - define('__OK_VALUE' , "del"); - define('__HEADER_VALUE', ADMIN_HEADER_DEL_ACCOUNT_1.__UID.ADMIN_HEADER_DEL_ACCOUNT_2); - define('__TEXT_VALUE' , ADMIN_TEXT_DEL_ACCOUNT_1.__UID.ADMIN_TEXT_DEL_ACCOUNT_2); - break; + case 'CONFIRMED': // Yes, lock him down... ;-) + define('__OK_VALUE' , 'lock'); + define('__HEADER_VALUE', sprintf(getMessage('ADMIN_HEADER_LOCK_ACCOUNT'), constant('__UID'))); + define('__TEXT_VALUE' , sprintf(getMessage('ADMIN_TEXT_LOCK_ACCOUNT'), constant('__UID'))); + break; + + case 'LOCKED': // Unlock the user + define('__OK_VALUE' , 'unlock'); + define('__HEADER_VALUE', sprintf(getMessage('ADMIN_HEADER_UNLOCK_ACCOUNT'), constant('__UID'))); + define('__TEXT_VALUE' , sprintf(getMessage('ADMIN_TEXT_UNLOCK_ACCOUNT'), constant('__UID'))); + break; + + case 'UNCONFIRMED': // Unconfirmed accounts cannot be unlocked! + define('__OK_VALUE' , 'del'); + define('__HEADER_VALUE', sprintf(getMessage('ADMIN_HEADER_DEL_ACCOUNT'), constant('__UID'))); + define('__TEXT_VALUE' , sprintf(getMessage('ADMIN_TEXT_DEL_ACCOUNT'), constant('__UID'))); + break; } // Output form - LOAD_TEMPLATE("admin_lock_user"); + LOAD_TEMPLATE('admin_lock_user'); } else { // Account does not exists! - OUTPUT_HTML("".ADMIN_MEMBER_404_1.$_GET['u_id'].ADMIN_MEMBER_404_2.""); + LOAD_TEMPLATE('admin_settings_saved', false, "
".sprintf(getMessage('ADMIN_MEMBER_404'), REQUEST_GET('uid'))."
"); } } // Is an URL set? if (!empty($URL)) { // Reload and die... - LOAD_URL($URL); + redirectToUrl($URL); } elseif ($ACT) { // An action was performed... - if (!empty($MSG)) { - LOAD_TEMPLATE("admin_settings_saved", false, "".$MSG.""); + if (!empty($message)) { + LOAD_TEMPLATE('admin_settings_saved', false, "
".$message."
"); } else { - LOAD_TEMPLATE("admin_settings_saved", false, "".ADMIN_USER_UPDATED.""); + LOAD_TEMPLATE('admin_settings_saved', false, "
".getMessage('ADMIN_USER_UPDATED')."
"); } } } else { // Account does not exists! - OUTPUT_HTML("".ADMIN_MEMBER_404_1.$_GET['u_id'].ADMIN_MEMBER_404_2.""); + LOAD_TEMPLATE('admin_settings_saved', false, "
".sprintf(getMessage('ADMIN_MEMBER_404'), REQUEST_GET('uid'))."
"); } } else { // List all users