X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Flibs%2Fadmins_functions.php;h=dde26cc2bf322025e191764978f1f4c67c5ea786;hp=5663a354b1f03089b7aa974b18abd0981f692793;hb=4b42d8249938a7c81d65c5688222e57076e6e1be;hpb=1e2a4228e071a67a2d79e970a843e3e30476cfb8 diff --git a/inc/libs/admins_functions.php b/inc/libs/admins_functions.php index 5663a354b1..dde26cc2bf 100644 --- a/inc/libs/admins_functions.php +++ b/inc/libs/admins_functions.php @@ -17,7 +17,7 @@ * Needs to be in all Files and every File needs "svn propset * * svn:keywords Date Revision" (autoprobset!) at least!!!!!! * * -------------------------------------------------------------------- * - * Copyright (c) 2003 - 2008 by Roland Haeder * + * Copyright (c) 2003 - 2009 by Roland Haeder * * For more information visit: http://www.mxchange.org * * * * This program is free software; you can redistribute it and/or modify * @@ -38,29 +38,28 @@ // Some security stuff... if (!defined('__SECURITY')) { - $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), '/inc') + 4) . '/security.php'; - require($INC); + die(); } // Check ACL for menu combination -function adminsCheckAdminAcl ($act, $wht) { +function adminsCheckAdminAcl ($action, $what) { // If action is login or logout allow allways! - $default = "allow"; - if (($act == "login") || ($act == "logout")) return true; + $default = 'allow'; + if (($action == 'login') || ($action == 'logout')) return true; // Default is deny $ret = false; // Get admin's ID - $aid = getCurrentAdminId(); + $adminId = getCurrentAdminId(); // Get admin's defult access right - $default = getAdminDefaultAcl($aid); + $default = getAdminDefaultAcl($adminId); - if (!empty($wht)) { + if (!empty($what)) { // Check for parent menu: // First get it's action value - $parent_action = getModeAction('admin', $wht); + $parent_action = getModeAction('admin', $what); // Check with this function... $parent = adminsCheckAdminAcl($parent_action, ''); @@ -71,31 +70,32 @@ function adminsCheckAdminAcl ($act, $wht) { // Shall I test for a main or sub menu? (action or what?) $acl_mode = 'failed'; - if ((GET_EXT_VERSION('cache') >= '0.1.2') && (count($GLOBALS['cache_array']['admin_acls']) > 0)) { + if ((isExtensionInstalledAndNewer('cache', '0.1.2')) && (isset($GLOBALS['cache_array']['admin_acls'])) && (count($GLOBALS['cache_array']['admin_acls']) > 0)) { // Lookup in cache - if ((!empty($act)) && (isset($GLOBALS['cache_array']['admin_acls']['action_menu'][$aid])) & ($GLOBALS['cache_array']['admin_acls']['action_menu'][$aid] == $act)) { + if ((!empty($action)) && (isset($GLOBALS['cache_array']['admin_acls']['action_menu'][$adminId])) & ($GLOBALS['cache_array']['admin_acls']['action_menu'][$adminId] == $action)) { // Main menu line found - $acl_mode = $GLOBALS['cache_array']['admin_acls']['access_mode'][$aid]; + $acl_mode = $GLOBALS['cache_array']['admin_acls']['access_mode'][$adminId]; // Count cache hits - incrementConfigEntry('cache_hits'); - } elseif ((!empty($wht)) && (isset($GLOBALS['cache_array']['admin_acls']['what_menu'][$aid])) && ($GLOBALS['cache_array']['admin_acls']['what_menu'][$aid] == $wht)) { + incrementStatsEntry('cache_hits'); + } elseif ((!empty($what)) && (isset($GLOBALS['cache_array']['admin_acls']['what_menu'][$adminId])) && ($GLOBALS['cache_array']['admin_acls']['what_menu'][$adminId] == $what)) { // Check sub menu - $acl_mode = $GLOBALS['cache_array']['admin_acls']['access_mode'][$aid]; + $acl_mode = $GLOBALS['cache_array']['admin_acls']['access_mode'][$adminId]; // Count cache hits - incrementConfigEntry('cache_hits'); + incrementStatsEntry('cache_hits'); } - } elseif (!EXT_IS_ACTIVE('cache')) { + } elseif (!isExtensionActive('cache')) { // Old version, so load it from database - if (!empty($act)) { + $result = false; + if (!empty($action)) { // Main menu - $result = SQL_QUERY_ESC("SELECT access_mode FROM `{!_MYSQL_PREFIX!}_admins_acls` WHERE admin_id=%s AND action_menu='%s' LIMIT 1", - array(bigintval($aid), $act), __FUNCTION__, __LINE__); - } elseif (!empty($wht)) { + $result = SQL_QUERY_ESC("SELECT `access_mode` FROM `{?_MYSQL_PREFIX?}_admins_acls` WHERE `admin_id`=%s AND `action_menu`='%s' LIMIT 1", + array(bigintval($adminId), $action), __FUNCTION__, __LINE__); + } elseif (!empty($what)) { // Sub menu - $result = SQL_QUERY_ESC("SELECT access_mode FROM `{!_MYSQL_PREFIX!}_admins_acls` WHERE admin_id=%s AND what_menu='%s' LIMIT 1", - array(bigintval($aid), $wht), __FUNCTION__, __LINE__); + $result = SQL_QUERY_ESC("SELECT `access_mode` FROM `{?_MYSQL_PREFIX?}_admins_acls` WHERE `admin_id`=%s AND `what_menu`='%s' LIMIT 1", + array(bigintval($adminId), $what), __FUNCTION__, __LINE__); } // Is an entry found? @@ -109,40 +109,44 @@ function adminsCheckAdminAcl ($act, $wht) { } // Check ACL and (maybe) allow - if (($default == "allow") || (($default == "deny") && ($acl_mode == "allow")) || ($parent === true)) { + //* DEBUG: */ print 'default='.$default.',acl_mode='.$acl_mode.',parent='.intval($parent).'
'; + if (($default == 'allow') || (($default == 'deny') && ($acl_mode == 'allow')) || ($parent === true) || (($default == '***') && ($acl_mode == 'failed') && ($parent === false))) { // Access is granted $ret = true; } // END - if // Return value - //* DEBUG: */ print __FUNCTION__."[".__LINE__."]:act={$act},wht={$wht},default={$default},acl_mode={$acl_mode}
\n"; + //* DEBUG: */ outputHtml(__FUNCTION__."[".__LINE__."]:act={$action},wht={$whatOR},default={$default},acl_mode={$acl_mode}
"); return $ret; } // Create email link to admins's account -function adminsCreateEmailLink ($email, $mod='admin') { +function generateAdminEmailLink ($email, $mod = 'admin') { // Is it an email? - if (strpos($email, "@") !== false) { + if (strpos($email, '@') !== false) { // Create email link $result = SQL_QUERY_ESC("SELECT `id` -FROM `{!_MYSQL_PREFIX!}_admins` -WHERE `email`='%s' LIMIT 1", +FROM + `{?_MYSQL_PREFIX?}_admins` +WHERE + `email`='%s' +LIMIT 1", array($email), __FUNCTION__, __LINE__); // Is there an entry? if (SQL_NUMROWS($result) == 1) { // Load userid - list($aid) = SQL_FETCHROW($result); + list($adminId) = SQL_FETCHROW($result); // Rewrite email address to contact link - $email = "{!URL!}/modules.php?module=".$mod."&what=admins_contct&admin=".bigintval($aid); + $email = "{?URL?}/modules.php?module=".$mod."&what=admins_contct&admin=".bigintval($adminId); } // END - if // Free memory SQL_FREERESULT($result); } elseif ((is_int($email)) && ($email > 0)) { // Direct ID given - $email = "{!URL!}/modules.php?module=".$mod."&what=admins_contct&admin=".bigintval($email); + $email = "{?URL?}/modules.php?module=".$mod."&what=admins_contct&admin=".bigintval($email); } // Return rewritten (?) email address @@ -150,30 +154,30 @@ WHERE `email`='%s' LIMIT 1", } // Change a lot admin account -function adminsChangeAdminAccount ($POST) { +function adminsChangeAdminAccount ($postData) { // Begin the update $cache_update = 0; - foreach ($POST['login'] as $id => $login) { + foreach ($postData['login'] as $id => $login) { // Secure ID number $id = bigintval($id); // When both passwords match update admin account - if ($POST['pass1'][$id] == $POST['pass2'][$id]) { + if ($postData['pass1'][$id] == $postData['pass2'][$id]) { // Save only when both passwords are the same (also when they are empty) - $add = ''; $cache_update = '1'; + $add = ''; $cache_update = 1; // Generate hash - $hash = generateHash($POST['pass1'][$id]); + $hash = generateHash($postData['pass1'][$id]); // Save password when set - if (!empty($POST['pass1'][$id])) $add = sprintf(", password='%s'", SQL_ESCAPE($hash)); + if (!empty($postData['pass1'][$id])) $add = sprintf(", password='%s'", SQL_ESCAPE($hash)); // Get admin's ID - $aid = getCurrentAdminId(); - $salt = substr(GET_ADMIN_HASH($aid), 0, -40); + $adminId = getCurrentAdminId(); + $salt = substr(getAdminHash($adminId), 0, -40); // Rewrite cookie when it's own account - if ($aid == $id) { + if ($adminId == $id) { // Set timeout cookie setSession('admin_last', time()); @@ -183,7 +187,7 @@ function adminsChangeAdminAccount ($POST) { // Update password cookie as well? if (!empty($add)) setSession('admin_md5', $hash); - } elseif (generateHash($POST['pass1'][$id], $salt) != getSession('admin_md5')) { + } elseif (generateHash($postData['pass1'][$id], $salt) != getSession('admin_md5')) { // Update password cookie setSession('admin_md5', $hash); } @@ -193,70 +197,75 @@ function adminsChangeAdminAccount ($POST) { $default = getAdminDefaultAcl(getCurrentAdminId()); // Update admin account - if ($default == "allow") { + if ($default == 'allow') { // Allow changing default ACL - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_admins` SET -login='%s'".$add.", -email='%s', -default_acl='%s', -la_mode='%s' -WHERE `id`=%s LIMIT 1", + SQL_QUERY_ESC("UPDATE + `{?_MYSQL_PREFIX?}_admins` +SET + `login`='%s'".$add.", + `email`='%s', + `default_acl`='%s', + `la_mode`='%s' +WHERE + `id`=%s +LIMIT 1", array( - $login, - $POST['email'][$id], - $POST['mode'][$id], - $POST['la_mode'][$id], - $id + $login, + $postData['email'][$id], + $postData['mode'][$id], + $postData['la_mode'][$id], + $id ), __FUNCTION__, __LINE__); } else { // Do not allow it here - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_admins` SET -login='%s'".$add.", -email='%s', -la_mode='%s' -WHERE `id`=%s LIMIT 1", + SQL_QUERY_ESC("UPDATE + `{?_MYSQL_PREFIX?}_admins` +SET + `login`='%s'".$add.", + `email`='%s', + `la_mode`='%s' +WHERE + `id`=%s +LIMIT 1", array( - $login, - $POST['email'][$id], - $POST['la_mode'][$id], - $id + $login, + $postData['email'][$id], + $postData['la_mode'][$id], + $id ), __FUNCTION__, __LINE__); } - // Purge cache - cachePurgeAdminMenu($id); - // Admin account saved - $message = ADMIN_ACCOUNT_SAVED; + $message = getMessage('ADMIN_ACCOUNT_SAVED'); } else { // Passwords did not match - $message = ADMINS_ERROR_PASS_MISMATCH; + $message = getMessage('ADMINS_ERROR_PASS_MISMATCH'); } // Display message if (!empty($message)) { - LOAD_TEMPLATE('admin_settings_saved', false, $message); + loadTemplate('admin_settings_saved', false, $message); } } // Remove cache file - runFilterChain('post_admin_edited', REQUEST_POST_ARRAY()); + runFilterChain('post_admin_edited', postRequestArray()); } // Make admin accounts editable -function adminsEditAdminAccount ($POST) { +function adminsEditAdminAccount ($postData) { // "Resolve" current's admin access mode $currMode = getAdminDefaultAcl(getCurrentAdminId()); // Begin the edit loop $OUT = ''; $SW = 2; - foreach ($POST['sel'] as $id => $selected) { + foreach ($postData['sel'] as $id => $selected) { // Secure ID number $id = bigintval($id); // Get the admin's data - $result = SQL_QUERY_ESC("SELECT login, email, default_acl AS mode, la_mode FROM `{!_MYSQL_PREFIX!}_admins` WHERE `id`=%s LIMIT 1", - array($id), __FUNCTION__, __LINE__); + $result = SQL_QUERY_ESC("SELECT `login`, `email`, `default_acl` AS mode, `la_mode` FROM `{?_MYSQL_PREFIX?}_admins` WHERE `id`=%s LIMIT 1", + array($id), __FUNCTION__, __LINE__); if ((SQL_NUMROWS($result) == 1) && ($selected == 1)) { // Entry found $content = SQL_FETCHARRAY($result); @@ -267,133 +276,190 @@ function adminsEditAdminAccount ($POST) { $content['id'] = $id; // Shall we allow changing default ACL? - if ($currMode == "allow") { + if ($currMode == 'allow') { // Allow chaning it - $content['mode'] = generateOptionList('/ARRAY/', array("allow", "deny"), array(constant('ADMINS_ALLOW_MODE'), constant('ADMINS_DENY_MODE')), $content['mode']); + $content['mode'] = generateOptionList('/ARRAY/', array('allow', 'deny'), array(getMessage('ADMINS_ALLOW_MODE'), getMessage('ADMINS_DENY_MODE')), $content['mode']); } else { // Don't allow it - $content['mode'] = " "; + $content['mode'] = ' '; } - $content['la_mode'] = generateOptionList('/ARRAY/', array("global", "OLD", "NEW"), array(ADMINS_GLOBAL_LA_SETTING, ADMINS_OLD_LA_SETTING, ADMINS_NEW_LA_SETTING), $content['la_mode']); + $content['la_mode'] = generateOptionList('/ARRAY/', array('global', 'OLD', 'NEW'), array(getMessage('ADMINS_GLOBAL_LA_SETTING'), getMessage('ADMINS_OLD_LA_SETTING'), getMessage('ADMINS_NEW_LA_SETTING')), $content['la_mode']); // Load row template and switch color - $OUT .= LOAD_TEMPLATE("admin_edit_admins_row", true, $content); + $OUT .= loadTemplate('admin_edit_admins_row', true, $content); $SW = 3 - $SW; } } - define('__ADMINS_ROWS', $OUT); // Load template - LOAD_TEMPLATE("admin_edit_admins"); + loadTemplate('admin_edit_admins', false, $OUT); } // Delete given admin accounts -function adminsDeleteAdminAccount ($POST) { +function adminsDeleteAdminAccount ($postData) { // Check if this account is the last one which cannot be deleted... - $result_main = SQL_QUERY("SELECT `id` FROM `{!_MYSQL_PREFIX!}_admins`", __FUNCTION__, __LINE__); + $result_main = SQL_QUERY("SELECT `id` FROM `{?_MYSQL_PREFIX?}_admins`", __FUNCTION__, __LINE__); $accounts = SQL_NUMROWS($result_main); SQL_FREERESULT($result_main); if ($accounts > 1) { // Delete accounts $OUT = ''; $SW = 2; - foreach ($POST['sel'] as $id => $selected) { + foreach ($postData['sel'] as $id => $selected) { // Secure ID number $id = bigintval($id); // Get the admin's data - $result = SQL_QUERY_ESC("SELECT login, email, default_acl AS mode, la_mode FROM `{!_MYSQL_PREFIX!}_admins` WHERE `id`=%s LIMIT 1", + $result = SQL_QUERY_ESC("SELECT login, email, default_acl AS mode, la_mode FROM `{?_MYSQL_PREFIX?}_admins` WHERE `id`=%s LIMIT 1", array($id), __FUNCTION__, __LINE__); if (SQL_NUMROWS($result) == 1) { // Entry found $content = SQL_FETCHARRAY($result); SQL_FREERESULT($result); - $content['mode'] = constant('ADMINS_'.strtoupper($content['mode']).'_MODE'); - $content['la_mode'] = constant('ADMINS_'.strtoupper($content['la_mode']).'_LA_SETTING'); + $content['mode'] = getMessage('ADMINS_'.strtoupper($content['mode']).'_MODE'); + $content['la_mode'] = getMessage('ADMINS_'.strtoupper($content['la_mode']).'_LA_SETTING'); // Prepare some more data $content['sw'] = $SW; $content['id'] = $id; // Load row template and switch color - $OUT .= LOAD_TEMPLATE("admin_del_admins_row", true, $content); + $OUT .= loadTemplate('admin_del_admins_row', true, $content); $SW = 3 - $SW; } } - define('__ADMINS_ROWS', $OUT); // Load template - LOAD_TEMPLATE("admin_del_admins"); + loadTemplate('admin_del_admins', false, $OUT); } else { // Cannot delete last account! - LOAD_TEMPLATE('admin_settings_saved', false, getMessage('ADMIN_ADMINS_CANNOT_DELETE_LAST')); + loadTemplate('admin_settings_saved', false, getMessage('ADMIN_ADMINS_CANNOT_DELETE_LAST')); } } // Remove the given accounts -function adminsRemoveAdminAccount ($POST) { +function adminsRemoveAdminAccount ($postData) { // Begin removal $cache_update = 0; - foreach ($POST['sel'] as $id => $del) { + foreach ($postData['sel'] as $id => $del) { // Secure ID number $id = bigintval($id); // Delete only when it's not your own account! if (($del == 1) && (getCurrentAdminId() != $id)) { // Rewrite his tasks to all admins - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_task_system` SET `assigned_admin`=0 WHERE `assigned_admin`=%s", - array($id), __FUNCTION__, __LINE__); + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_task_system` SET `assigned_admin`=0 WHERE `assigned_admin`=%s", + array($id), __FUNCTION__, __LINE__); // Remove account - SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{!_MYSQL_PREFIX!}_admins` WHERE `id`=%s LIMIT 1", - array($id), __FUNCTION__, __LINE__); - - // Purge cache - cachePurgeAdminMenu($id); - $cache_update = '1'; + SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{?_MYSQL_PREFIX?}_admins` WHERE `id`=%s LIMIT 1", + array($id), __FUNCTION__, __LINE__); } } // Remove cache if cache system is activated - runFilterChain('post_admin_deleted', REQUEST_POST_ARRAY()); + runFilterChain('post_admin_deleted', postRequestArray()); } // List all admin accounts function adminsListAdminAccounts() { // Select all admin accounts - $result = SQL_QUERY("SELECT id, login, email, default_acl AS mode, la_mode FROM `{!_MYSQL_PREFIX!}_admins` ORDER BY login ASC", __FUNCTION__, __LINE__); + $result = SQL_QUERY("SELECT `id`, `login`, `email`, `default_acl` AS mode, `la_mode` FROM `{?_MYSQL_PREFIX?}_admins` ORDER BY `login` ASC", __FUNCTION__, __LINE__); $OUT = ''; $SW = 2; while ($content = SQL_FETCHARRAY($result)) { // Compile some variables - $content['mode'] = constant('ADMINS_'.strtoupper($content['mode']).'_MODE'); - $content['la_mode'] = constant('ADMINS_'.strtoupper($content['la_mode']).'_LA_SETTING'); + $content['mode'] = getMessage('ADMINS_'.strtoupper($content['mode']).'_MODE'); + $content['la_mode'] = getMessage('ADMINS_'.strtoupper($content['la_mode']).'_LA_SETTING'); // Prepare some more data $content['sw'] = $SW; - $content['email_link'] = generateMemberEmailLink($content['id']); + $content['email_link'] = generateEmailLink($content['id'], 'admins'); // Load row template and switch color - $OUT .= LOAD_TEMPLATE("admin_list_admins_row", true, $content); + $OUT .= loadTemplate('admin_list_admins_row', true, $content); $SW = 3 - $SW; } // Free memory SQL_FREERESULT($result); - define('__ADMINS_ROWS', $OUT); // Load template - LOAD_TEMPLATE("admin_list_admins"); + loadTemplate('admin_list_admins', false, $OUT); } // Filter for adding extra data to the query function FILTER_ADD_EXTRA_SQL_DATA ($add = '') { // Is the admins extension updated? (should be!) - if (GET_EXT_VERSION('admins') >= '0.3.0') $add .= ", default_acl AS def_acl"; - if (GET_EXT_VERSION('admins') >= '0.6.7') $add .= ", la_mode"; - if (GET_EXT_VERSION('admins') >= '0.7.2') $add .= ", login_failures, UNIX_TIMESTAMP(last_failure) AS last_failure"; + if (getExtensionVersion('admins') >= '0.3.0') $add .= ', `default_acl` AS def_acl'; + if (getExtensionVersion('admins') >= '0.6.7') $add .= ', `la_mode`'; + if (getExtensionVersion('admins') >= '0.7.2') $add .= ', `login_failures`, UNIX_TIMESTAMP(`last_failure`) AS last_failure'; // Return it return $add; } -// +// Sends out mail to all administrators +// IMPORTANT: Please use SEND_ADMIN_NOTIFCATION() for now! +function sendAdminsEmails ($subj, $template, $content, $UID) { + // Trim template name + $template = trim($template); + + // Load email template + $message = loadEmailTemplate($template, $content, $UID); + + // Check which admin shall receive this mail + $result = SQL_QUERY_ESC("SELECT `admin_id` FROM `{?_MYSQL_PREFIX?}_admins_mails` WHERE `mail_template`='%s' ORDER BY `admin_id` ASC", + array($template), __FUNCTION__, __LINE__); + if (SQL_NUMROWS($result) == 0) { + // Create new entry (to all admins) + SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_admins_mails` (`admin_id`, `mail_template`) VALUES (0, '%s')", + array($template), __FUNCTION__, __LINE__); + } else { + // Load admin IDs... + // @TODO This can be, somehow, rewritten + $adminIds = array(); + while ($content = SQL_FETCHARRAY($result)) { + $adminIds[] = $content['admin_id']; + } // END - while + + // Free memory + SQL_FREERESULT($result); + + // Init result + $result = false; + + // "implode" IDs and query string + $adminId = implode(',', $adminIds); + if ($adminId == '-1') { + if (isExtensionActive('events')) { + // Add line to user events + EVENTS_ADD_LINE($subj, $message, $UID); + } else { + // Log error for debug + logDebugMessage(__FUNCTION__, __LINE__, sprintf("Extension 'events' missing: tpl=%s,subj=%s,UID=%s", + $template, + $subj, + $UID + )); + } + } elseif ($adminId == 0) { + // Select all email adresses + $result = SQL_QUERY("SELECT `email` FROM `{?_MYSQL_PREFIX?}_admins` ORDER BY `id` ASC", + __FUNCTION__, __LINE__); + } else { + // If Admin-ID is not "to-all" select + $result = SQL_QUERY_ESC("SELECT `email` FROM `{?_MYSQL_PREFIX?}_admins` WHERE `id` IN (%s) ORDER BY `id` ASC", + array($adminId), __FUNCTION__, __LINE__); + } + } + + // Load email addresses and send away + while ($content = SQL_FETCHARRAY($result)) { + sendEmail($content['email'], $subj, $message); + } // END - while + + // Free memory + SQL_FREERESULT($result); +} + +// [EOF] ?>