Referal levels for surfbar added (unfinished)

[mailer.git] / inc / modules / admin / admin-inc.php

diff --git a/inc/modules/admin/admin-inc.php b/inc/modules/admin/admin-inc.php
index f147c1a77bec298c86f5187375f26abf10fa8033..0a5b93e134e771de3ff7a5fef891bdc4b539b293 100644 (file)
--- a/inc/modules/admin/admin-inc.php
+++ b/inc/modules/admin/admin-inc.php
@@ -308,7 +308,7 @@ LIMIT 1", array($act, $wht, $wht), __FILE__, __LINE__);
                SQL_FREERESULT($result);
 
                // Is valid but does the inlcude file exists?
-               $INC = sprintf(PATH."inc/modules/admin/action-%s.php", $act);
+               $INC = sprintf("%sinc/modules/admin/action-%s.php", PATH, $act);
                if ((file_exists($INC)) && (is_readable($INC)) && (VALIDATE_MENU_ACTION("admin", $act, $wht)) && (__ACL_ALLOW == true))
                {
                        // Ok, we finally load the admin action module
@@ -380,7 +380,7 @@ function ADD_ADMIN_MENU($act, $wht,$return=false)
                                }
                                 else
                                {
-                                       $OUT .= "[&nbsp;<A href=\"".URL."/modules.php?module=admin&amp;action=".$menu."\">";
+                                       $OUT .= "[<A href=\"".URL."/modules.php?module=admin&amp;action=".$menu."\">";
                                }
                                $OUT .= $title;
                                        if (($menu == $act) && (empty($wht)))
@@ -389,7 +389,7 @@ function ADD_ADMIN_MENU($act, $wht,$return=false)
                                }
                                 else
                                {
-                                       $OUT .= "</A>&nbsp;]";
+                                       $OUT .= "</A>]";
                                }
                                $OUT .= "</NOBR></TD>
 </TR>\n";
@@ -406,7 +406,7 @@ function ADD_ADMIN_MENU($act, $wht,$return=false)
                                                while (list($wht_sub, $title_what, $desc_what) = SQL_FETCHROW($result_what))
                                        {
                                                // Filename
-                                               $INC = sprintf(PATH."inc/modules/admin/what-%s.php", $wht_sub);
+                                               $INC = sprintf("%sinc/modules/admin/what-%s.php", PATH, $wht_sub);
                                                if ((EXT_IS_ACTIVE("admins")) && (GET_EXT_VERSION("admins") > "0.2"))
                                                {
                                                        $ACL = ADMINS_CHECK_ACL("", $wht_sub);
@@ -433,7 +433,7 @@ function ADD_ADMIN_MENU($act, $wht,$return=false)
                                                                }
                                                                 else
                                                                {
-                                                                       $OUT .= "[&nbsp;<A href=\"".URL."/modules.php?module=admin&amp;what=".$wht_sub."\">";
+                                                                       $OUT .= "[<A href=\"".URL."/modules.php?module=admin&amp;what=".$wht_sub."\">";
                                                                }
                                                        }
                                                         else
@@ -449,7 +449,7 @@ function ADD_ADMIN_MENU($act, $wht,$return=false)
                                                                }
                                                                 else
                                                                {
-                                                                       $OUT .= "</A>&nbsp;]";
+                                                                       $OUT .= "</A>]";
                                                                }
                                                        }
                                                         else
@@ -746,7 +746,7 @@ function ADMIN_CHECK_MENU_MODE()
 // Change activation status
 function ADMIN_CHANGE_ACTIVATION_STATUS ($IDs, $table, $row, $idRow = "id") {
        global $_CONFIG;
-       $cnt = 0; $newStatus = 'Y';
+       $cnt = 0; $newStatus = "Y";
        if ((is_array($IDs)) && (count($IDs) > 0)) {
                // "Walk" all through and count them
                foreach ($IDs as $id=>$selected) {
@@ -763,7 +763,7 @@ function ADMIN_CHANGE_ACTIVATION_STATUS ($IDs, $table, $row, $idRow = "id") {
                                if (SQL_NUMROWS($result) == 1) {
                                        // Load the status
                                        list($currStatus) = SQL_FETCHROW($result);
-                                       if ($currStatus == 'Y') $newStatus='N'; else $newStatus = 'Y';
+                                       if ($currStatus == "Y") $newStatus='N'; else $newStatus = "Y";
 
                                        // Change this status
                                        SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_%s SET %s='%s' WHERE %s=%d LIMIT 1",
@@ -909,5 +909,97 @@ function ADMIN_TEST_PROXY_SETTINGS ($settingsArray) {
        // Return result
        return $valid;
 }
+// Sends out a link to the given email adress so the admin can reset his/her password
+function ADMIN_SEND_PASSWORD_RESET_LINK ($email) {
+       global $_CONFIG;
+       // Init output
+       $OUT = "";
+
+       // Compile out security characters (must be for looking up!)
+       $email = COMPILE_CODE($email);
+
+       // Look up administator login
+       $result = SQL_QUERY_ESC("SELECT id, login, password FROM "._MYSQL_PREFIX."_admins WHERE email='%s' LIMIT 1",
+               array($email), __FILE__, __LINE__);
+
+       // Is there an account?
+       if (SQL_NUMROWS($result) == 0) {
+               // No account found!
+               return ADMIN_NO_LOGIN_WITH_EMAIL;
+       } // END - if
+
+       // Load all data
+       $content = SQL_FETCHARRAY($result);
+
+       // Free result
+       SQL_FREERESULT($result);
+
+       // Generate hash for reset link
+       $content['hash'] = generateHash(URL.":".$content['id'].":".$content['login'].":".$content['password'], substr($content['password'], 10));
+
+       // Remove some data
+       unset($content['id']);
+       unset($content['password']);
+
+       // Prepare email
+       $mailText = LOAD_EMAIL_TEMPLATE("admin_reset_password", $content);
+
+       // Send it out
+       SEND_EMAIL($email, ADMIN_RESET_PASS_LINK_SUBJ, $mailText);
+
+       // Prepare output
+       return ADMIN_RESET_LINK_SENT;
+}
+// Validate hash and login for password reset
+function ADMIN_VALIDATE_RESET_LINK_HASH_LOGIN ($hash, $login) {
+       // By default nothing validates... ;)
+       $valid = false;
+
+       // Compile the login for lookup
+       $login = COMPILE_CODE($login);
+
+       // Then try to find that user
+       $result = SQL_QUERY_ESC("SELECT id, password, email FROM "._MYSQL_PREFIX."_admins WHERE login='%s' LIMIT 1",
+               array($login), __FILE__, __LINE__);
+
+       // Is an account here?
+       if (SQL_NUMROWS($result) == 1) {
+               // Load all data
+               $content = SQL_FETCHARRAY($result);
+
+               // Generate hash again
+               $hashFromData = generateHash(URL.":".$content['id'].":".$login.":".$content['password'], substr($content['password'], 10));
+
+               // Does both match?
+               $valid = ($hash == $hashFromData);
+       } // END - if
+
+       // Free result
+       SQL_FREERESULT($result);
+
+       // Return result
+       return $valid;
+}
+// Reset the password for the login. Do NOT call this function without calling above function first!
+function ADMIN_RESET_PASSWORD ($login, $password) {
+       // Init hash
+       $passHash = "";
+
+       // Now check if we have sql_patches installed
+       if (GET_EXT_VERSION("sql_patches") >= "0.3.6") {
+               // Use new way of hashing
+               $passHash = generateHash($password);
+       } else {
+               // Old MD5 method
+               $passHash = md5($password);
+       }
+
+       // Update database
+       SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_admins SET password='%s' WHERE login='%s' LIMIT 1",
+               array($passHash, $login), __FILE__, __LINE__);
+
+       // Return output
+       return ADMIN_PASSWORD_RESET_DONE;
+}
 //
 ?>