";
if ((strlen($pass) == 32) && ($pass == md5($password))) {
// Generate new hash
$pass = generateHash($password);
// Is the sql_patches not installed, than we cannot have a valid hashed password here!
if (($ret == "pass") && ((GET_EXT_VERSION("sql_patches") < "0.3.6") || (GET_EXT_VERSION("sql_patches") == ""))) $ret = "done";
} elseif ((GET_EXT_VERSION("sql_patches") < "0.3.6") || (GET_EXT_VERSION("sql_patches") == "")) {
// Old hashing way
return $ret;
}
// Generate salt of password
define('__SALT', substr($pass, 0, -40));
$salt = __SALT;
// Check if password is same
//* DEBUG: */ echo "*".$ret.",".$pass.",".$password.",".$salt."*READ: ".$file."WRITE: ".$tmp."CHANGE: 404!");
define('_FATAL', true);
} else {
OUTPUT_HTML("TMP: UNDONE!");
define('_FATAL', true);
}
}
} else {
// File not found, not readable or writeable
OUTPUT_HTML("404: ".$file."
\n";
$result_what = SQL_QUERY_ESC("SELECT what, title, descr FROM "._MYSQL_PREFIX."_admin_menu WHERE action='%s' AND what != '' ORDER BY sort, id DESC",
array($menu), __FILE__, __LINE__);
if ((SQL_NUMROWS($result_what) > 0) && ($act == $menu))
{
$menuDesription = array();
$menuTitle = array(); $SUB = true;
$OUT .= "
\n";
}
$OUT .= "
\n";
}
// Compile and run the code here. This inserts all constants into the
// HTML output. Costs me some time to figure this out... *sigh* Quix0r
$eval = "\$OUT = \"".COMPILE_CODE(addslashes($OUT))."\";";
eval($eval);
// Return or output content?
if ($return) {
return $OUT;
} else {
OUTPUT_HTML($OUT);
}
}
//
function ADD_MEMBER_SELECTION_BOX($add_all = false, $return = false, $none = false, $def = "0")
{
// Output selection form with all confirmed user accounts listed
$result = SQL_QUERY("SELECT userid, surname, family FROM "._MYSQL_PREFIX."_user_data ORDER BY userid", __FILE__, __LINE__);
$OUT = "";
// USe this only for adding points (e.g. adding refs really makes no sence ;-) )
if ($add_all) $OUT = " ".ALL_MEMBERS." \n";
elseif ($none) $OUT = " ".SELECT_NONE." \n";
while (list($id, $sname, $fname) = SQL_FETCHROW($result))
{
$OUT .= " \n";
}
// Free memory
SQL_FREERESULT($result);
// Remeber options in constant
define('_MEMBER_SELECTION', $OUT);
if (!$return) {
// Display selection box
define('__LANG_VALUE', GET_LANGUAGE());
// Load template
LOAD_TEMPLATE("admin_member_selection_box", false, $GLOBALS['what']);
}
}
//
function ADMIN_MENU_SELECTION($MODE, $default="", $defid="") {
$wht = "what != ''";
if ($MODE == "action") $wht = "(what='' OR what IS NULL) AND action !='login'";
$result = SQL_QUERY_ESC("SELECT %s, title FROM "._MYSQL_PREFIX."_admin_menu WHERE ".$wht." ORDER BY sort",
array($MODE), __FILE__, __LINE__);
if (SQL_NUMROWS($result) > 0) {
// Load menu as selection
$OUT = "
".SELECT_NONE." \n";
while (list($menu, $title) = SQL_FETCHROW($result)) {
$OUT .= " \n";
} // END - while
// Free memory
SQL_FREERESULT($result);
$OUT .= " \n";
} else {
// No menus???
$OUT = ADMIN_PROBLEM_NO_MENU;
}
// Return output
return $OUT;
}
//
function ADMIN_SAVE_SETTINGS (&$POST, $tableName="_config", $whereStatement="config=0", $translateComma = array(), $alwaysAdd=false) {
global $_CONFIG, $cacheArray, $cacheInstance;
// Prepare all arrays, variables
$DATA = array();
$skip = false;
$TEST2 = "";
// Now, walk through all entries and prepare them for saving
foreach ($POST as $id => $val) {
// Process only formular field but not submit buttons ;)
if ($id != "ok") {
// Do not save the ok value
$TEST = substr($id, -3);
// Improved way of checking! :-)
if (in_array($TEST, array("_ye", "_mo", "_we", "_da", "_ho", "_mi", "_se"))) {
// Found a multi-selection for timings?
$TEST = substr($id, 0, -3);
if ((isset($POST[$TEST."_ye"])) && (isset($POST[$TEST."_mo"])) && (isset($POST[$TEST."_we"])) && (isset($POST[$TEST."_da"])) && (isset($POST[$TEST."_ho"])) && (isset($POST[$TEST."_mi"])) && (isset($POST[$TEST."_se"])) && ($TEST != $TEST2)) {
// Generate timestamp
$POST[$TEST] = CREATE_TIMESTAMP_FROM_SELECTIONS($TEST, $POST);
$DATA[] = "$TEST='".$POST[$TEST]."'";
// Remove data from array
foreach (array("ye", "mo", "we", "da", "ho", "mi", "se") as $rem) {
unset($POST[$TEST."_".$rem]);
} // END - foreach
// Skip adding
unset($id); $skip = true; $TEST2 = $TEST;
}
} else {
// Process this entry
$skip = false; $TEST2 = "";
}
// Shall we process this ID? It muss not be empty, of course
if ((!$skip) && (!empty($id))) {
// Save this entry
$val = COMPILE_CODE($val);
// Translate the value? (comma to dot!)
if ((is_array($translateComma)) && (in_array($id, $translateComma))) {
// Then do it here... :)
$val = str_replace(",", ".", $val);
}
// Shall we add numbers or strings?
$test = (float)$val;
if ("".$val."" == "".$test."") {
// Add numbers
$DATA[] = $id."=".$val."";
} else {
// Add strings
$DATA[] = $id."='".trim($val)."'";
}
// Update current configuration
$_CONFIG[$id] = $val;
} // END - if
} // END - if
} // END - foreach
// Check if entry does exist
$result = false;
if (!$alwaysAdd) {
if (!empty($whereStatement)) {
$result = SQL_QUERY("SELECT * FROM "._MYSQL_PREFIX.$tableName." WHERE ".$whereStatement." LIMIT 1", __FILE__, __LINE__);
} else {
$result = SQL_QUERY("SELECT * FROM "._MYSQL_PREFIX.$tableName." LIMIT 1", __FILE__, __LINE__);
}
} // END - if
if (SQL_NUMROWS($result) == 1) {
// "Implode" all data to single string
$DATA_UPDATE = implode(", ", $DATA);
// Generate SQL string
$SQL = "UPDATE "._MYSQL_PREFIX.$tableName." SET ".$DATA_UPDATE." WHERE ".$whereStatement." LIMIT 1";
} else {
// Add Line (does only work with auto_increment!
$KEYs = array(); $VALUEs = array();
foreach ($DATA as $entry) {
// Split up
$line = explode("=", $entry);
$KEYs[] = $line[0]; $VALUEs[] = $line[1];
} // END - foreach
// Add both in one line
$KEYs = implode(", ", $KEYs);
$VALUEs = implode(", ", $VALUEs);
// Generate SQL string
$SQL = "INSERT INTO "._MYSQL_PREFIX.$tableName." (".$KEYs.") VALUES(".$VALUEs.")";
}
// Free memory
SQL_FREERESULT($result);
// Simply run generated SQL string
$result = SQL_QUERY($SQL, __FILE__, __LINE__);
// Is the config table updated and the cache extension installed?
if ((GET_EXT_VERSION("cache") >= "0.1.2") && ($tableName == "_config")) {
// Remove it here...
if ($cacheInstance->cache_file("config", true)) $cacheInstance->cache_destroy();
unset($cacheArray);
} // END - if
// Settings saved
LOAD_TEMPLATE("admin_settings_saved", false, "".SETTINGS_SAVED." ");
}
//
function ADMIN_MAKE_MENU_SELECTION($menu, $type, $name, $default="") {
// Open the requested menu directory
$handle = opendir(sprintf("%sinc/modules/%s/", PATH, $menu)) or mxchange_die("Cannot load menu ".$menu."!");
// Init the selection box
$OUT = "\n ".IS_TOP_MENU." \n";
// Walk through all files
while ($file = readdir($handle)) {
// Is this a PHP script?
if (($file != ".") && ($file != "..") && ($file != "lost+found") && (strpos($file, "".$type."-") > -1) && (strpos($file, ".php") > 0)) {
// Then test if the file is readable
$test = sprintf("%sinc/modules/%s/%s", PATH, $menu, $file);
if ((is_file($test)) && (is_readable($test))) {
// Extract the value for what=xxx
$part = substr($file, (strlen($type) + 1));
$part = substr($part, 0, -4);
// Is that part different from the overview?
if ($part != "overview") {
$OUT .= " \n";
} // END - if
} // END - if
} // END - if
} // END - while
// Close dir and selection box
closedir($handle);
$OUT .= " \n";
return $OUT;
}
//
function ADMIN_USER_PROFILE_LINK($uid, $title="", $wht="list_user") {
if (($title == "") && ($title != "0")) {
// Set userid as title
$title = $uid;
} // END - if
if (($title == "0") && ($wht == "list_refs")) {
// Return title again
return $title;
} // END - if
//* DEBUG: */ echo "A:".$title."".$title." ";
}
//
function ADMIN_CHECK_MENU_MODE() {
global $_CONFIG, $cacheArray;
// Set the global mode as the mode for all admins
$MODE = $_CONFIG['admin_menu']; $ADMIN = $MODE;
// Check individual settings of current admin
if (isset($cacheArray['admins']['la_mode'][get_session('admin_login')])) {
// Load from cache
$ADMIN = $cacheArray['admins']['la_mode'][get_session('admin_login')];
$_CONFIG['cache_hits']++;
} elseif (GET_EXT_VERSION("admins") >= "0.6.7") {
// Load from database when version of "admins" is enough
$result = SQL_QUERY_ESC("SELECT la_mode FROM "._MYSQL_PREFIX."_admins WHERE login='%s' LIMIT 1",
array(get_session('admin_login')), __FILE__, __LINE__);
if (SQL_NUMROWS($result) == 1) {
// Load data
list($ADMIN) = SQL_FETCHROW($result);
}
// Free memory
SQL_FREERESULT($result);
}
// Check what the admin wants and set it when it's not the global mode
if ($ADMIN != "global") $MODE = $ADMIN;
// Return admin-menu's mode
return $MODE;
}
// Change activation status
function ADMIN_CHANGE_ACTIVATION_STATUS ($IDs, $table, $row, $idRow = "id") {
global $_CONFIG;
$cnt = 0; $newStatus = "Y";
if ((is_array($IDs)) && (count($IDs) > 0)) {
// "Walk" all through and count them
foreach ($IDs as $id=>$selected) {
// Secure the ID number
$id = bigintval($id);
// Should always be 1 ;-)
if ($selected == 1) {
// Determine new status
$result = SQL_QUERY_ESC("SELECT %s FROM "._MYSQL_PREFIX."_%s WHERE %s=%s LIMIT 1",
array($row, $table, $idRow, $id), __FILE__, __LINE__);
// Row found?
if (SQL_NUMROWS($result) == 1) {
// Load the status
list($currStatus) = SQL_FETCHROW($result);
if ($currStatus == "Y") $newStatus='N'; else $newStatus = "Y";
// Change this status
SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_%s SET %s='%s' WHERE %s=%s LIMIT 1",
array($table, $row, $newStatus, $idRow, $id), __FILE__, __LINE__);
// Count up affected rows
$cnt += SQL_AFFECTEDROWS();
}
// Free the result
SQL_FREERESULT($result);
}
}
// Output status
LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_STATUS_CHANGED_1.$cnt.ADMIN_STATUS_CHANGED_2.count($IDs).ADMIN_STATUS_CHANGED_3);
} else {
// Nothing selected!
LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_NOTHING_SELECTED_CHANGE);
}
}
// Build a special template list
function ADMIN_BUILD_LIST ($listType, $IDs, $table, $columns, $filterFunctions, $extraValues, $idColumn, $userIdColumn) {
global $_CONFIG;
$OUT = ""; $SW = 2;
// "Walk" through all entries
foreach ($IDs as $id => $selected) {
// Secure ID number
$id = bigintval($id);
// Will always be 1 ;-)
if ($selected == 1) {
// Get result from a given column array and table name
$result = SQL_RESULT_FROM_ARRAY($table, $columns, $idColumn, $id);
// Is there one entry?
if (SQL_NUMROWS($result) == 1) {
// Load all data
$content = SQL_FETCHARRAY($result);
// Filter all data
foreach ($content as $key=>$value) {
// Search index
$idx = array_search($key, $columns, true);
// Handle the call in external function
$content[$key] = HANDLE_EXTRA_VALUES($filterFunctions[$idx], $value, $extraValues[$idx]);
} // END - foreach
// Add color switching
$content['sw'] = $SW;
// Then list it again...
$OUT .= LOAD_TEMPLATE("admin_".$listType."_".$table."_row", true, $content);
$SW = 3 - $SW;
}
// Free the result
SQL_FREERESULT($result);
}
}
// Load master template
LOAD_TEMPLATE("admin_".$listType."_".$table."", false, $OUT);
}
// Delete rows by given ID numbers
function ADMIN_DELETE_ENTRIES_CONFIRM ($IDs, $table, $columns=array(), $filterFunctions=array(), $extraValues=array(), $deleteNow=false, $idColumn="id", $userIdColumn="userid") {
// All valid entries? (We hope so here!)
if ((is_array($IDs)) && (count($IDs) > 0) && (count($columns) == count($filterFunctions)) && (count($columns) == count($extraValues))) {
// Shall we delete here or list for deletion?
if ($deleteNow) {
// Delete them
die("DELETE!");
} else {
// List for deletion confirmation
ADMIN_BUILD_LIST("del", $IDs, $table, $columns, $filterFunctions, $extraValues, $idColumn, $userIdColumn);
}
} // END - if
}
// Edit rows by given ID numbers
function ADMIN_EDIT_ENTRIES_CONFIRM ($IDs, $table, $columns=array(), $filterFunctions=array(), $extraValues=array(), $editNow=false, $idColumn="id", $userIdColumn="userid") {
// All valid entries? (We hope so here!)
if ((is_array($IDs)) && (count($IDs) > 0) && (count($columns) == count($filterFunctions)) && (count($columns) == count($extraValues))) {
// Shall we change here or list for editing?
if ($editNow) {
// Change them
die("EDIT!");
} else {
// List for editing
ADMIN_BUILD_LIST("edit", $IDs, $table, $columns, $filterFunctions, $extraValues, $idColumn, $userIdColumn);
}
} // END - if
}
// Checks proxy settins by fetching check-updates3.php from www.mxchange.org
function ADMIN_TEST_PROXY_SETTINGS ($settingsArray) {
global $_CONFIG;
// By default they are invalid
$valid = false;
// Set temporary the new settings
$_CONFIG = array_merge($_CONFIG, $settingsArray);
// Now get the test URL
$content = GET_URL("check-updates3.php");
// Is the first line with "200 OK"?
$valid = eregi("200 OK", $content[0]);
// Return result
return $valid;
}
// Sends out a link to the given email adress so the admin can reset his/her password
function ADMIN_SEND_PASSWORD_RESET_LINK ($email) {
global $_CONFIG;
// Init output
$OUT = "";
// Compile out security characters (must be for looking up!)
$email = COMPILE_CODE($email);
// Look up administator login
$result = SQL_QUERY_ESC("SELECT id, login, password FROM "._MYSQL_PREFIX."_admins WHERE email='%s' LIMIT 1",
array($email), __FILE__, __LINE__);
// Is there an account?
if (SQL_NUMROWS($result) == 0) {
// No account found!
return ADMIN_NO_LOGIN_WITH_EMAIL;
} // END - if
// Load all data
$content = SQL_FETCHARRAY($result);
// Free result
SQL_FREERESULT($result);
// Generate hash for reset link
$content['hash'] = generateHash(URL.":".$content['id'].":".$content['login'].":".$content['password'], substr($content['password'], 10));
// Remove some data
unset($content['id']);
unset($content['password']);
// Prepare email
$mailText = LOAD_EMAIL_TEMPLATE("admin_reset_password", $content);
// Send it out
SEND_EMAIL($email, ADMIN_RESET_PASS_LINK_SUBJ, $mailText);
// Prepare output
return ADMIN_RESET_LINK_SENT;
}
// Validate hash and login for password reset
function ADMIN_VALIDATE_RESET_LINK_HASH_LOGIN ($hash, $login) {
// By default nothing validates... ;)
$valid = false;
// Compile the login for lookup
$login = COMPILE_CODE($login);
// Then try to find that user
$result = SQL_QUERY_ESC("SELECT id, password, email FROM "._MYSQL_PREFIX."_admins WHERE login='%s' LIMIT 1",
array($login), __FILE__, __LINE__);
// Is an account here?
if (SQL_NUMROWS($result) == 1) {
// Load all data
$content = SQL_FETCHARRAY($result);
// Generate hash again
$hashFromData = generateHash(URL.":".$content['id'].":".$login.":".$content['password'], substr($content['password'], 10));
// Does both match?
$valid = ($hash == $hashFromData);
} // END - if
// Free result
SQL_FREERESULT($result);
// Return result
return $valid;
}
// Reset the password for the login. Do NOT call this function without calling above function first!
function ADMIN_RESET_PASSWORD ($login, $password) {
// Init hash
$passHash = "";
// Now check if we have sql_patches installed
if (GET_EXT_VERSION("sql_patches") >= "0.3.6") {
// Use new way of hashing
$passHash = generateHash($password);
} else {
// Old MD5 method
$passHash = md5($password);
}
// Update database
SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_admins SET password='%s' WHERE login='%s' LIMIT 1",
array($passHash, $login), __FILE__, __LINE__);
// Return output
return ADMIN_PASSWORD_RESET_DONE;
}
// Solves a task by given id number
function ADMIN_SOLVE_TASK ($id) {
// Update the task data
ADMIN_UPDATE_TASK_DATA($id, "status", "SOLVED");
}
// Marks a given task as deleted
function ADMIN_DELETE_TASK ($id) {
// Update the task data
ADMIN_UPDATE_TASK_DATA($id, "status", "DELETED");
}
// Function to update task data
function ADMIN_UPDATE_TASK_DATA ($id, $row, $data) {
// Update the task
SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_task_system SET %s='%s' WHERE id=%s LIMIT 1",
array($row, $data, bigintval($id)), __FILE__, __LINE__);
}
//
?>