<?php
/************************************************************************
 * MXChange v0.2.1                                    Start: 06/30/2003 *
 * ===============                              Last change: 11/27/2004 *
 *                                                                      *
 * -------------------------------------------------------------------- *
 * File              : admins_functions.php                             *
 * -------------------------------------------------------------------- *
 * Short description : Functions for the admins extension               *
 * -------------------------------------------------------------------- *
 * Kurzbeschreibung  : Funktionen fuer die admins-Erweiterung           *
 * -------------------------------------------------------------------- *
 *                                                                      *
 * -------------------------------------------------------------------- *
 * Copyright (c) 2003 - 2008 by Roland Haeder                           *
 * For more information visit: http://www.mxchange.org                  *
 *                                                                      *
 * This program is free software; you can redistribute it and/or modify *
 * it under the terms of the GNU General Public License as published by *
 * the Free Software Foundation; either version 2 of the License, or    *
 * (at your option) any later version.                                  *
 *                                                                      *
 * This program is distributed in the hope that it will be useful,      *
 * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
 * GNU General Public License for more details.                         *
 *                                                                      *
 * You should have received a copy of the GNU General Public License    *
 * along with this program; if not, write to the Free Software          *
 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
 * MA  02110-1301  USA                                                  *
 ************************************************************************/

// Some security stuff...
if (ereg(basename(__FILE__), $_SERVER['PHP_SELF']))
{
	$INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
	require($INC);
}
//
function ADMINS_CHECK_ACL($act, $wht)
{
	global $ADMINS, $ADMINS_ACLS, $CONFIG, $CACHE;
	// If action is login or logout allow allways!
	$default = "allow";
	if (($act == "login") || ($act == "logout")) return true;

	// Default is deny
	$ret = false;

	// Get admin's defult access right
	if (!empty($ADMINS['def_acl'][$_COOKIE['admin_login']])) {
		// Load from cache
		$default = $ADMINS['def_acl'][$_COOKIE['admin_login']];

		// Count cache hits
		$CONFIG['cache_hits']++;
	} elseif (!is_object($CACHE)) {
		// Load from database
		$result = SQL_QUERY_ESC("SELECT default_acl FROM "._MYSQL_PREFIX."_admins WHERE login='%s' LIMIT 1",
		 array($_COOKIE['admin_login']), __FILE__, __LINE__);
		list($default) = SQL_FETCHROW($result);
		SQL_FREERESULT($result);
	}

	// Get admin's ID
	$aid = GET_ADMIN_ID($_COOKIE['admin_login']);

	if (!empty($wht))
	{
		// Check for parent menu:
		// First get it's action value
		$parent_action = GET_ACTION("admin", $wht);

		// Check with this function...
		$parent = ADMINS_CHECK_ACL($parent_action, "");
	}
	 else
	{
		// Anything else is true!
		$parent = false;
	}

	// Shall I test for a main or sub menu? (action or what?)
	$lines = 0; $acl_mode = "failed";
	if (GET_EXT_VERSION("cache") >= "0.1.2")
	{
		// Load only from array when there are lines!
		if (count($ADMINS_ACLS) > 0)
		{
			// Load ACL from array
			foreach ($ADMINS_ACLS['admin_id'] as $id=>$aid_acls)
			{
				if ($aid == $aid_acls)
				{
					// Okay, one line was found!
					if ((!empty($act)) && ($ADMINS_ACLS['action_menu'][$id] == $act))
					{
						// Main menu line found
						$acl_mode = $ADMINS_ACLS['access_mode'][$id];
						$lines = 1;
					}
					 elseif ((!empty($wht)) && ($ADMINS_ACLS['what_menu'][$id] == $wht))
					{
						// Check sub menu
						$acl_mode = $ADMINS_ACLS['access_mode'][$id];
						$lines = 1;
					}
					if ($lines == 1)
					{
						// Count cache hits
						$CONFIG['cache_hits']++;
						break;
					}
				}
			}

			// No ACL found?
			if ($acl_mode == "failed")
			{
				$acl_mode = "";
				$lines = 0;
			}
		}
		 else
		{
			// No lines here
			$lines = 0;
		}
	}
	 else
	{
		// Old version, so load it from database
		if (!empty($act))
		{
			// Main menu
			$result = SQL_QUERY_ESC("SELECT access_mode FROM "._MYSQL_PREFIX."_admins_acls WHERE admin_id=%d AND action_menu='%s' LIMIT 1",
			 array(bigintval($aid), $act), __FILE__, __LINE__);
		}
		 elseif (!empty($wht))
		{
			// Sub menu
			$result = SQL_QUERY_ESC("SELECT access_mode FROM "._MYSQL_PREFIX."_admins_acls WHERE admin_id=%d AND what_menu='%s' LIMIT 1",
			 array(bigintval($aid), $wht), __FILE__, __LINE__);
		}

		// Get number of lines
		$lines = SQL_NUMROWS($result);

		// Load ACL
		list($acl_mode) = SQL_FETCHROW($result);
		SQL_FREERESULT($result);
	}

	// Check ACL and (maybe) allow
	if ((($default == "allow") && ($lines == 0)) || (($default == "deny") && ($lines == "1") && ($acl_mode == "allow")) || (($lines == 0) && ($parent))) $ret = true;

	// Return value
	return $ret;
}
// Create email link to admins's account
function ADMINS_CREATE_EMAIL_LINK($email, $mod="admin")
{
	$locked = " AND status='CONFIRMED'";
	if (IS_ADMIN()) $locked = "";
	if (strpos("@", $email) > 0)
	{
		// Create email link
		$result = SQL_QUERY_ESC("SELECT id
FROM "._MYSQL_PREFIX."_admins
WHERE email='%s'".$locked." LIMIT 1",
 array($email), __FILE__, __LINE__);
		if (SQL_NUMROWS($result) == 1)
		{
			// Load userid
			list($uid) = SQL_FETCHROW($result);

			// Rewrite email address to contact link
			$email = URL."/modules.php?module=".$mod."&amp;what=user_contct&amp;u_id=".bigintval($uid);
		}

		// Free memory
		SQL_FREERESULT($result);
	}
	 elseif (bigintval($email) > 0)
	{
		// Direct ID given
		$email = URL."/modules.php?module=".$mod."&amp;what=admins_contct&amp;admin=".bigintval($email);
	}

	// Return rewritten (?) email address
	return $email;
}
//
?>