";
if ((strlen($pass) == 32) && ($pass == md5($password)))
{
// Generate new hash
$pass = generateHash($password);
if (($ret == "pass") && (GET_EXT_VERSION("sql_patches") < "0.3.6")) $ret = "done";
}
elseif ((GET_EXT_VERSION("sql_patches") < "0.3.6") || (GET_EXT_VERSION("sql_patches") == ""))
{
// Old hashing way
return $ret;
}
// Generate salt of password
define('__SALT', substr($pass, 0, -40));
$salt = __SALT;
// Check if password is same
if (($ret == "pass") && ($pass == generateHash($password, $salt)) && (!empty($salt)))
{
// Update password
$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_admins SET password='%s' WHERE login='%s' LIMIT 1",
array($pass, $admin_login), __FILE__, __LINE__);
// Shall I remove the cache file?
if ((EXT_IS_ACTIVE("cache")) && ($CACHE != false))
{
if ($CACHE->cache_file("admins", true)) $CACHE->cache_destroy();
}
// Password matches!
$ret = "done";
}
elseif ((empty($salt)) && ($ret == "pass"))
{
// Something bad went wrong
$ret = "failed";
}
return $ret;
}
// Only be executed on cookie checking
function CHECK_ADMIN_COOKIES ($admin_login, $password)
{
global $ADMINS, $CONFIG;
$ret = "404"; $pass = "";
if (!empty($ADMINS['aid'][$admin_login]))
{
// Get password from cache
$pass = $ADMINS['password'][$admin_login];
$ret = "pass";
$CONFIG['cache_hits']++;
}
else
{
// Get password from DB
$result = SQL_QUERY_ESC("SELECT password FROM "._MYSQL_PREFIX."_admins WHERE login='%s' LIMIT 1",
array($admin_login), __FILE__, __LINE__);
if (SQL_NUMROWS($result) == 1)
{
$ret = "pass";
list($pass) = SQL_FETCHROW($result);
SQL_FREERESULT($result);
}
}
//* DEBUG: */ echo "*".$pass."/".$password."READ: ".$FILE."WRITE: ".$TMP."CHANGE: 404!");
define ('_FATAL', true);
}
else
{
OUTPUT_HTML ("TMP: UNDONE!");
define ('_FATAL', true);
}
}
}
else
{
OUTPUT_HTML ("404: ".$FILE."
\n";
$result_what = SQL_QUERY_ESC("SELECT what, title, descr FROM "._MYSQL_PREFIX."_admin_menu WHERE action='%s' AND what != '' ORDER BY sort, id DESC",
array($menu), __FILE__, __LINE__);
if ((SQL_NUMROWS($result_what) > 0) && ($act == $menu))
{
$menuDesription = array();
$MTITLE = array(); $SUB = true;
$OUT .= "
\n";
}
$OUT .= "
\n";
}
// Compile and run the code here. This inserts all constants into the
// HTML output. Costs me some time to figure this out... *sigh* Quix0r
$eval = "\$OUT = \"".COMPILE_CODE(addslashes($OUT))."\";";
eval($eval);
// Return or output content?
if ($return) {
return $OUT;
} else {
OUTPUT_HTML ($OUT);
}
}
//
function ADD_MEMBER_SELECTION_BOX($add_all = false, $return = false, $none = false, $def = "0")
{
global $_GET;
// Output selection form with all confirmed user accounts listed
$result = SQL_QUERY("SELECT userid, surname, family FROM "._MYSQL_PREFIX."_user_data ORDER BY userid", __FILE__, __LINE__);
$OUT = "";
// USe this only for adding points (e.g. adding refs really makes no sence ;-) )
if ($add_all) $OUT = " ".ALL_MEMBERS." \n";
elseif ($none) $OUT = " ".SELECT_NONE." \n";
while (list($id, $sname, $fname) = SQL_FETCHROW($result))
{
$OUT .= " \n";
}
// Free memory
SQL_FREERESULT($result);
// Remeber options in constant
define('_MEMBER_SELECTION', $OUT);
if (!$return)
{
// Display selection box
define('__LANG_VALUE', GET_LANGUAGE());
// Load template
LOAD_TEMPLATE("admin_member_selection_box", false, $GLOBALS['what']);
}
}
//
function ADMIN_MENU_SELECTION($MODE, $default="", $defid="")
{
$wht = "what != ''";
if ($MODE == "action") $wht = "what='' AND action !='login'";
$result = SQL_QUERY_ESC("SELECT %s, title FROM "._MYSQL_PREFIX."_admin_menu WHERE ".$wht." ORDER BY sort",
array($MODE), __FILE__, __LINE__);
if (SQL_NUMROWS($result) > 0)
{
// Load menu as selection
$OUT = "
".SELECT_NONE." \n";
while (list($menu, $title) = SQL_FETCHROW($result))
{
$OUT .= " \n";
}
// Free memory
SQL_FREERESULT($result);
$OUT .= " \n";
}
else
{
// No menus???
$OUT = ADMIN_PROBLEM_NO_MENU;
}
// Return output
return $OUT;
}
//
function ADMIN_SAVE_SETTINGS (&$POST, $TABLE, $WHERE="config='1'", $translateComma = array(), $alwaysAdd=false)
{
global $CONFIG, $CFG_CACHE, $CACHE;
$DATA = array();
$skip = false; $TEST2 = "";
foreach ($POST as $id=>$val) {
// Process only formular field but not submit buttons ;)
if ($id != "ok") {
// Do not save the ok value
$TEST = substr($id, -3);
if ((($TEST == "_ye") || ($TEST == "_mo") || ($TEST == "_we") || ($TEST == "_da") || ($TEST == "_ho") || ($TEST == "_mi") || ($TEST == "_se")) && (isset($val))) {
// Found a multi-selection for timings?
$TEST = substr($id, 0, -3);
if ((isset($POST[$TEST."_ye"])) && (isset($POST[$TEST."_mo"])) && (isset($POST[$TEST."_we"])) && (isset($POST[$TEST."_da"])) && (isset($POST[$TEST."_ho"])) && (isset($POST[$TEST."_mi"])) && (isset($POST[$TEST."_se"])) && ($TEST != $TEST2)) {
// Generate timestamp
$POST[$TEST] = CREATE_TIMESTAMP_FROM_SELECTIONS($TEST, $POST);
$DATA[] = "$TEST='".$POST[$TEST]."'";
// Remove data from array
unset($POST[$TEST."_ye"]);
unset($POST[$TEST."_mo"]);
unset($POST[$TEST."_we"]);
unset($POST[$TEST."_da"]);
unset($POST[$TEST."_ho"]);
unset($POST[$TEST."_mi"]);
unset($POST[$TEST."_se"]);
// Skip adding
unset($id); $skip = true; $TEST2 = $TEST;
}
} else {
// Process this entry
$skip = false; $TEST2 = "";
}
// Shall we process this ID? It muss not be empty, of course
if ((!$skip) && (!empty($id))) {
// Save this entry
$val = COMPILE_CODE($val);
// Translate the value? (comma to dot!)
if ((is_array($translateComma)) && (in_array($id, $translateComma))) {
// Then do it here... :)
$val = str_replace(",", ".", $val);
}
// Shall we add numbers or strings?
$test = (float)$val;
if ("".$val."" == "".$test."") {
// Add numbers
$DATA[] = $id."=".$val."";
} else {
// Add strings
$DATA[] = $id."='".trim($val)."'";
}
// Update current configuration
$CONFIG[$id] = $val;
}
}
}
// Check if entry does exist
$result = false;
if (!$alwaysAdd) {
if (!empty($WHERE)) {
$result = SQL_QUERY("SELECT * FROM "._MYSQL_PREFIX.$TABLE." WHERE ".$WHERE." LIMIT 1", __FILE__, __LINE__);
} else {
$result = SQL_QUERY("SELECT * FROM "._MYSQL_PREFIX.$TABLE." LIMIT 1", __FILE__, __LINE__);
}
}
if (SQL_NUMROWS($result) == 1) {
// "Implode" all data to single string
$DATA_UPDATE = implode(", ", $DATA);
// Generate SQL string
$SQL = "UPDATE "._MYSQL_PREFIX.$TABLE." SET ".$DATA_UPDATE." WHERE ".$WHERE." LIMIT 1";
} else {
// Add Line (does only work with auto_increment!
$KEYs = array(); $VALUEs = array();
foreach ($DATA as $entry) {
// Split up
$line = explode("=", $entry);
$KEYs[] = $line[0]; $VALUEs[] = $line[1];
}
// Add both in one line
$KEYs = implode(", ", $KEYs);
$VALUEs = implode(", ", $VALUEs);
// Generate SQL string
$SQL = "INSERT INTO "._MYSQL_PREFIX.$TABLE." (".$KEYs.") VALUES(".$VALUEs.")";
}
// Free memory
SQL_FREERESULT($result);
// Simply run generated SQL string
$result = SQL_QUERY($SQL, __FILE__, __LINE__);
// Is the config table updated and the cache extension installed?
if ((GET_EXT_VERSION("cache") >= "0.1.2") && ($TABLE == "_config")) {
// Remove it here...
if ($CACHE->cache_file("config", true)) $CACHE->cache_destroy();
unset($CFG_CACHE);
}
// Settings saved
LOAD_TEMPLATE("admin_settings_saved", false, "".SETTINGS_SAVED." ");
}
//
function ADMIN_MAKE_MENU_SELECTION($menu, $type, $name, $default="") {
// Init the selection box
$OUT = "\n ".IS_TOP_MENU." \n";
// Open the requested menu directory
$handle = opendir(PATH."inc/modules/".$menu."/") or mxchange_die("Cannot load menu ".$menu."!");
while ($file = readdir($handle)) {
// Is this a PHP script?
if (($file != ".") && ($file != "..") && ($file != "lost+found") && (strpos($file, "".$type."-") > -1) && (strpos($file, ".php") > 0)) {
// Then test if the file is readable
$test = PATH."inc/modules/".$menu."/".$file;
if (is_readable($test)) {
// Extract the value for what=xxx
$part = substr($file, (strlen($type) + 1)); $part = substr($part, 0, strpos($part, ".php"));
// Is that part different from the overview?
if ($part != "overview") {
$OUT .= " \n";
}
}
}
}
closedir($handle);
$OUT .= " \n";
return $OUT;
}
//
function ADMIN_USER_PROFILE_LINK($uid, $title="", $wht="list_user")
{
if (($title == "") && ($title != "0")) { $title = $uid; }
if (($title == "0") && ($wht == "list_refs"))
{
// Return title again
return $title;
}
//* DEBUG: */ echo "A:".$title."".$title." ";
}
//
function ADMIN_CHECK_MENU_MODE()
{
global $CONFIG, $ADMINS, $_COOKIE;
// Set the global mode as the mode for all admins
$MODE = $CONFIG['admin_menu']; $ADMIN = $MODE;
// Check individual settings of current admin
if (isset($ADMINS['la_mode'][$_COOKIE['admin_login']]))
{
// Load from cache
$ADMIN = $ADMINS['la_mode'][$_COOKIE['admin_login']];
$CONFIG['cache_hits']++;
}
elseif (GET_EXT_VERSION("admins") >= "0.6.7")
{
// Load from database when version of "admins" is enough
$result = SQL_QUERY_ESC("SELECT la_mode FROM "._MYSQL_PREFIX."_admins WHERE login='%s' LIMIT 1",
array($_COOKIE['admin_login']), __FILE__, __LINE__);
if (SQL_NUMROWS($result) == 1)
{
// Load data
list($ADMIN) = SQL_FETCHROW($result);
}
// Free memory
SQL_FREERESULT($result);
}
// Check what the admin wants and set it when it's not the global mode
if ($ADMIN != "global") $MODE = $ADMIN;
// Return admin-menu's mode
return $MODE;
}
// Change activation status
function ADMIN_CHANGE_ACTIVATION_STATUS (array $IDs, $table, $row, $idRow = "id") {
global $CONFIG;
$cnt = 0; $newStatus = "Y";
if (count($IDs) > 0) {
// "Walk" all through and count them
foreach ($IDs as $id=>$selected) {
// Secure the ID number
$id = bigintval($id);
// Should always be 1 ;-)
if ($selected == 1) {
// Determine new status
$result = SQL_QUERY_ESC("SELECT %s FROM "._MYSQL_PREFIX."_%s WHERE %s=%d LIMIT 1",
array($row, $table, $idRow, $id), __FILE__, __LINE__);
// Row found?
if (SQL_NUMROWS($result) == 1) {
// Load the status
list($currStatus) = SQL_FETCHROW($result);
if ($currStatus == "Y") $newStatus="N"; else $newStatus = "Y";
// Change this status
SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_%s SET %s='%s' WHERE %s=%d LIMIT 1",
array($table, $row, $newStatus, $idRow, $id), __FILE__, __LINE__);
// Count up affected rows
$cnt += SQL_AFFECTEDROWS();
}
// Free the result
SQL_FREERESULT($result);
}
}
// Output status
LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_STATUS_CHANGED_1.$cnt.ADMIN_STATUS_CHANGED_2.count($IDs).ADMIN_STATUS_CHANGED_3);
} else {
// Nothing selected!
LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_NOTHING_SELECTED_CHANGE);
}
}
// Delete rows by given ID numbers
function ADMIN_DELETE_ENTRIES_CONFIRM (array $IDs, $table, $row, array $columns = array(), array $filterFunctions = array(), $deleteNow=false, $idRow="id") {
global $CONFIG;
$OUT = ""; $SW = 2;
if (count($IDs) > 0) {
// "Walk" through all entries and count them
if ($deleteNow) {
// Delete them
} else {
// List for confirmation
foreach ($IDs as $id=>$selected) {
// Secure ID number
$id = bigintval($id);
// Will always be 1 ;-)
if ($selected == 1) {
// Get result from a given column array and table name
$result = SQL_RESULT_FROM_ARRAY($table, $columns, $idRow, $id);
// Is there one entry?
if (SQL_NUMROWS($result) == 1) {
// Load all data
$content = SQL_FETCHARRAY($result);
// Filter all data
foreach ($content as $key=>$value) {
// Is a filter function set?
$idx = array_search($key, $columns, true);
if (!empty($filterFunctions[$idx])) {
// Then call it!
$content[$key] = call_user_func($filterFunctions[$idx], $value);
}
}
// Add color switching
$content['sw'] = $SW;
// Then list it again...
$OUT .= LOAD_TEMPLATE("admin_del_".$table."_row", true, $content);
$SW = 3 - $SW;
}
// Free the result
SQL_FREERESULT($result);
}
}
// Load master template
LOAD_TEMPLATE("admin_del_".$table."", false, $OUT);
}
}
}
//
?>