mirror of
https://github.com/phpbb/phpbb.git
synced 2025-08-11 19:24:01 +02:00
New page headers, cleaned up code, etc.
git-svn-id: file:///svn/phpbb/trunk@663 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
Paul S. Owen
@@ -1,9 +1,31 @@
|
||||
<?php
|
||||
/***************************************************************************
|
||||
* admin_userauth.php
|
||||
* -------------------
|
||||
* begin : Saturday, Feb 13, 2001
|
||||
* copyright : (C) 2001 The phpBB Group
|
||||
* email : support@phpbb.com
|
||||
*
|
||||
* $Id$
|
||||
*
|
||||
*
|
||||
***************************************************************************/
|
||||
|
||||
|
||||
/***************************************************************************
|
||||
*
|
||||
* This program is free software; you can redistribute it and/or modify
|
||||
* it under the terms of the GNU General Public License as published by
|
||||
* the Free Software Foundation; either version 2 of the License, or
|
||||
* (at your option) any later version.
|
||||
*
|
||||
*
|
||||
***************************************************************************/
|
||||
|
||||
if($setmodules == 1)
|
||||
{
|
||||
$filename = basename(__FILE__);
|
||||
$module['Auth']['users'] = $filename;
|
||||
$module['Auth']['Users'] = $filename;
|
||||
|
||||
return;
|
||||
}
|
||||
@@ -20,16 +42,37 @@ init_userprefs($userdata);
|
||||
//
|
||||
// End session management
|
||||
//
|
||||
if( !$userdata['session_logged_in'] )
|
||||
{
|
||||
header("Location: ../login.$phpEx?forward_page=/admin");
|
||||
}
|
||||
else if( $userdata['user_level'] != ADMIN )
|
||||
{
|
||||
message_die(GENERAL_MESSAGE, "You are not authorised to administer this board");
|
||||
}
|
||||
|
||||
//
|
||||
// Start program - define vars
|
||||
//
|
||||
$auth_field_match = array(
|
||||
"auth_view" => AUTH_VIEW,
|
||||
"auth_read" => AUTH_READ,
|
||||
"auth_post" => AUTH_POST,
|
||||
"auth_reply" => AUTH_REPLY,
|
||||
"auth_edit" => AUTH_EDIT,
|
||||
"auth_delete" => AUTH_DELETE,
|
||||
"auth_view" => AUTH_VIEW,
|
||||
"auth_read" => AUTH_READ,
|
||||
"auth_post" => AUTH_POST,
|
||||
"auth_reply" => AUTH_REPLY,
|
||||
"auth_edit" => AUTH_EDIT,
|
||||
"auth_delete" => AUTH_DELETE,
|
||||
"auth_sticky" => AUTH_STICKY,
|
||||
"auth_announce" => AUTH_ANNOUNCE);
|
||||
|
||||
$forum_auth_fields = array("auth_view", "auth_read", "auth_post", "auth_reply", "auth_edit", "auth_delete", "auth_sticky", "auth_announce");
|
||||
|
||||
$forum_auth_key_fields = array("auth_view", "auth_read", "auth_post", "auth_reply");
|
||||
|
||||
//
|
||||
// Future stuff
|
||||
//
|
||||
//, "auth_votecreate", "auth_vote", "auth_attachments", "auth_allow_html", "auth_allow_bbcode", "auth_allow_smilies"
|
||||
//
|
||||
/* ,
|
||||
"auth_vote" => AUTH_VOTE,
|
||||
"auth_votecreate" => AUTH_VOTECREATE,
|
||||
@@ -39,9 +82,7 @@ $auth_field_match = array(
|
||||
"auth_allow_bbcode" => AUTH_ALLOW_BBCODE
|
||||
"auth_allow_smilies" => AUTH_ALLOW_SMILIES
|
||||
);*/
|
||||
$forum_auth_fields = array("auth_view", "auth_read", "auth_post", "auth_reply", "auth_edit", "auth_delete", "auth_sticky", "auth_announce");
|
||||
//, "auth_votecreate", "auth_vote", "auth_attachments", "auth_allow_html", "auth_allow_bbcode", "auth_allow_smilies"
|
||||
$forum_auth_key_fields = array("auth_view", "auth_read", "auth_post", "auth_reply");
|
||||
|
||||
|
||||
// ----------
|
||||
// Start Functions
|
||||
@@ -238,22 +279,14 @@ if(isset($HTTP_POST_VARS['submit']) && !empty($HTTP_POST_VARS[POST_USERS_URL]))
|
||||
|
||||
while(list($chg_forum_id, $value) = @each($change_mod_ary))
|
||||
{
|
||||
$a_match = $value;
|
||||
|
||||
$auth_exists = FALSE;
|
||||
|
||||
for($i = 0; $i < count($u_access); $i++)
|
||||
{
|
||||
$forum_id = $u_access[$i]['forum_id'];
|
||||
|
||||
if( $forum_id == $chg_forum_id )
|
||||
if( $u_access[$i]['forum_id'] == $chg_forum_id )
|
||||
{
|
||||
|
||||
if( $u_access[$i]['auth_mod'] == $value && $u_access[$i]['group_single_user'] )
|
||||
{
|
||||
$a_match = -1;
|
||||
}
|
||||
else if( $u_access[$i]['auth_mod'] && !$value && !$u_access[$i]['group_single_user'] )
|
||||
if( $u_access[$i]['auth_mod'] && !$value && !$u_access[$i]['group_single_user'] )
|
||||
{
|
||||
//
|
||||
// User is being removed as a moderator but is a moderator
|
||||
@@ -261,7 +294,8 @@ if(isset($HTTP_POST_VARS['submit']) && !empty($HTTP_POST_VARS[POST_USERS_URL]))
|
||||
//
|
||||
$warning_mod[$chg_forum_id] = TRUE;
|
||||
}
|
||||
else
|
||||
|
||||
if( $u_access[$i]['auth_mod'] != $value && $u_access[$i]['group_single_user'] )
|
||||
{
|
||||
if(!$value)
|
||||
{
|
||||
@@ -272,21 +306,25 @@ if(isset($HTTP_POST_VARS['submit']) && !empty($HTTP_POST_VARS[POST_USERS_URL]))
|
||||
$sql = "UPDATE " . AUTH_ACCESS_TABLE . "
|
||||
SET auth_view = 0, auth_read = 0, auth_post = 0, auth_reply = 0, auth_edit = 0, auth_delete = 0, auth_sticky = 0, auth_announce = 0, auth_mod = " . TRUE;
|
||||
}
|
||||
$valid_auth_mod_sql[$chg_forum_id] = $sql . " WHERE forum_id = $chg_forum_id AND group_id = " . $ug_info['group_id'];
|
||||
$valid_auth_mod[$chg_forum_id] = 1;
|
||||
}
|
||||
|
||||
$auth_exists = TRUE;
|
||||
$valid_auth_mod_sql[$chg_forum_id] = $sql . " WHERE forum_id = $chg_forum_id AND group_id = " . $ug_info['group_id'];
|
||||
|
||||
$valid_auth_mod[$chg_forum_id] = 1;
|
||||
|
||||
$auth_exists = TRUE;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if(!$auth_exists && $value)
|
||||
{
|
||||
$valid_auth_mod_sql[$chg_forum_id] = "INSERT INTO " . AUTH_ACCESS_TABLE . " (forum_id, group_id, auth_mod) VALUES ($chg_forum_id, " . $ug_info['group_id'] . ", 1)";
|
||||
$valid_auth_mod[$chg_forum_id] = 0;
|
||||
|
||||
$valid_auth_mod[$chg_forum_id] = 1;
|
||||
}
|
||||
}
|
||||
|
||||
print_r($valid_auth_mod_sql);
|
||||
|
||||
//
|
||||
// Check against priv access table ...
|
||||
@@ -299,35 +337,22 @@ if(isset($HTTP_POST_VARS['submit']) && !empty($HTTP_POST_VARS[POST_USERS_URL]))
|
||||
|
||||
while(list($chg_forum_id, $value) = @each($change_prv_ary))
|
||||
{
|
||||
$valid_auth_acl_sql[$chg_forum_id] = "";
|
||||
$auth_exists = FALSE;
|
||||
|
||||
echo "ACL : $chg_forum_id : " . $valid_auth_mod[$chg_forum_id] . "<BR>";
|
||||
|
||||
for($i = 0; $i < count($u_access); $i++)
|
||||
{
|
||||
if( $u_access[$i]['forum_id'] == $chg_forum_id )
|
||||
{
|
||||
|
||||
//
|
||||
// If we're updating/inserting a moderator access
|
||||
// control then we don't need to both with anything here,
|
||||
// adding (or updating) a user to mod status automatically
|
||||
// grants access to all forum functions (unless they
|
||||
// are set at admin status!). Removing moderator permissions
|
||||
// automatically removes all priviledges, it does mean the
|
||||
// admin has to re-enable ACL privs but it does prevent
|
||||
// them accidently leaving a user with access to a forum
|
||||
// they should be now denied.
|
||||
//
|
||||
// echo "<BR>" . $chg_forum_id . " : " . $valid_auth_mod[$chg_forum_id] . "<BR>";
|
||||
|
||||
// echo $chg_forum_id . " : " . $valid_auth_mod[$chg_forum_id] . " : " . $u_access[$i]['auth_mod'] . "<BR>";
|
||||
|
||||
if( empty($valid_auth_mod[$chg_forum_id]) && !$u_access[$i]['auth_mod'])
|
||||
if( empty($valid_auth_mod[$chg_forum_id]) && !( $u_access[$i]['auth_mod'] && $u_access[$i]['group_single_user']) )
|
||||
{
|
||||
//
|
||||
// User isn't a moderator so now we have to decide whether the
|
||||
// the access needs creating, updating or deleting ...
|
||||
//
|
||||
|
||||
|
||||
|
||||
|
||||
for($j = 0; $j < count($forum_access); $j++)
|
||||
{
|
||||
@@ -344,47 +369,53 @@ if(isset($HTTP_POST_VARS['submit']) && !empty($HTTP_POST_VARS[POST_USERS_URL]))
|
||||
|
||||
if( $u_access[$i][$auth_field] && !$value && !$u_access[$i]['group_single_user'] )
|
||||
{
|
||||
|
||||
//
|
||||
// User is having ACL access removed from this field
|
||||
// but retains access via a group they belong too,
|
||||
// carry out the update but warn the moderator
|
||||
//
|
||||
|
||||
$warning_acl[$chg_forum_id][$auth_field] = TRUE;
|
||||
}
|
||||
else if( $u_access[$i][$auth_field] != $value && $u_access[$i]['group_single_user'] )
|
||||
|
||||
if( $u_access[$i][$auth_field] != $value && $u_access[$i]['group_single_user'])
|
||||
{
|
||||
$update_acl_sql .= ($update_acl_sql != "") ? ", $auth_field = $value" : "$auth_field = $value";
|
||||
|
||||
$auth_exists = TRUE;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
$valid_auth_acl_sql[$chg_forum_id] = "UPDATE " . AUTH_ACCESS_TABLE . " SET " . $update_acl_sql ." WHERE forum_id = $chg_forum_id AND group_id = " . $ug_info['group_id'];
|
||||
if( !empty($update_acl_sql) )
|
||||
{
|
||||
$valid_auth_acl_sql[$chg_forum_id] = "UPDATE " . AUTH_ACCESS_TABLE . " SET " . $update_acl_sql ." WHERE forum_id = $chg_forum_id AND group_id = " . $ug_info['group_id'];
|
||||
}
|
||||
|
||||
} // forum_id = forum_access
|
||||
|
||||
} // for ... forum_access
|
||||
|
||||
} // not_mod
|
||||
|
||||
$auth_exists = TRUE;
|
||||
|
||||
}
|
||||
else
|
||||
{
|
||||
// $auth_exists = TRUE;
|
||||
}// not_mod
|
||||
} // if forum ... chg_forum
|
||||
|
||||
} // for ... u_access
|
||||
|
||||
if($valid_auth_acl_sql[$chg_forum_id] == "" && !$auth_exists)
|
||||
echo "forum = $chg_forum_id : " . $auth_exists . " : " . $value . " <BR>";
|
||||
|
||||
if($valid_auth_acl_sql[$chg_forum_id] == "" && !$auth_exists && $value && empty($valid_auth_mod[$chg_forum_id]))
|
||||
{
|
||||
echo " : HERE ";
|
||||
for($j = 0; $j < count($forum_access); $j++)
|
||||
{
|
||||
if( $chg_forum_id == $forum_access[$j]['forum_id'] && $value)
|
||||
echo " : HERE2 ";
|
||||
if( $chg_forum_id == $forum_access[$j]['forum_id'] )
|
||||
{
|
||||
echo " : HERE3 ";
|
||||
$valid_auth_acl_sql_val = "";
|
||||
$valid_auth_acl_sql_fld = "";
|
||||
|
||||
for($k = 0; $k < count($forum_auth_fields); $k++)
|
||||
{
|
||||
echo " : HERE4 ";
|
||||
$auth_field = $forum_auth_fields[$k];
|
||||
|
||||
if( $forum_access[$j][$auth_field] == AUTH_ACL )
|
||||
@@ -463,294 +494,300 @@ else if(empty($HTTP_GET_VARS[POST_USERS_URL]))
|
||||
}
|
||||
$select_list .= "</select>";
|
||||
|
||||
$template_header = "admin/page_header.tpl";
|
||||
include('page_header_admin.'.$phpEx);
|
||||
|
||||
$template->set_filenames(array(
|
||||
"body" => "admin/ug_auth_select_body.tpl"));
|
||||
"body" => "admin/ug_auth_select_body.tpl")
|
||||
);
|
||||
|
||||
$template->assign_vars(array(
|
||||
"L_USER_OR_GROUP" => "User",
|
||||
|
||||
"S_USERAUTH_ACTION" => append_sid("admin_userauth.$phpEx"),
|
||||
"S_USERS_SELECT" => $select_list,
|
||||
|
||||
"U_FORUMAUTH" => append_sid("admin_forumauth.$phpEx"))
|
||||
"S_USERAUTH_ACTION" => append_sid("admin_userauth.$phpEx"),
|
||||
"S_USERS_SELECT" => $select_list)
|
||||
);
|
||||
|
||||
$template->pparse("body");
|
||||
|
||||
exit;
|
||||
|
||||
}
|
||||
|
||||
|
||||
//
|
||||
// Front end
|
||||
//
|
||||
|
||||
$template->set_filenames(array(
|
||||
"body" => "admin/ug_auth_body.tpl")
|
||||
);
|
||||
|
||||
$user_id = $HTTP_GET_VARS[POST_USERS_URL];
|
||||
|
||||
$sql = "SELECT f.forum_id, f.forum_name, f.auth_view, f.auth_read, f.auth_post, f.auth_reply, f.auth_edit, f.auth_delete, f.auth_announce, f.auth_sticky
|
||||
FROM " . FORUMS_TABLE . " f, " . CATEGORIES_TABLE . " c
|
||||
WHERE c.cat_id = f.cat_id
|
||||
ORDER BY c.cat_order ASC, f.forum_order ASC";
|
||||
$fa_result = $db->sql_query($sql);
|
||||
|
||||
$forum_access = $db->sql_fetchrowset($fa_result);
|
||||
|
||||
if($adv == -1)
|
||||
else
|
||||
{
|
||||
for($i = 0; $i < count($forum_access); $i++)
|
||||
{
|
||||
while(list($forum_id, $forum_row) = each($forum_access))
|
||||
{
|
||||
for($j = 0; $j < count($forum_auth_key_fields); $j++)
|
||||
{
|
||||
$basic_auth_level[$forum_row['forum_id']] = "public";
|
||||
//
|
||||
// Front end
|
||||
//
|
||||
$template_header = "admin/page_header.tpl";
|
||||
include('page_header_admin.'.$phpEx);
|
||||
|
||||
if($forum_row[$forum_auth_key_fields[$j]] == AUTH_REG)
|
||||
{
|
||||
$basic_auth_level[$forum_row['forum_id']] = "registered";
|
||||
$basic_auth_level_fields[$forum_row['forum_id']][] = $forum_auth_fields[$j];
|
||||
}
|
||||
else if($forum_row[$forum_auth_key_fields[$j]] == AUTH_ACL)
|
||||
{
|
||||
$basic_auth_level[$forum_row['forum_id']] = "private";
|
||||
$basic_auth_level_fields[$forum_row['forum_id']][] = $forum_auth_fields[$j];
|
||||
}
|
||||
else if($forum_row[$forum_auth_key_fields[$j]] == AUTH_MOD)
|
||||
{
|
||||
$basic_auth_level[$forum_row['forum_id']] = "moderator";
|
||||
$basic_auth_level_fields[$forum_row['forum_id']][] = $forum_auth_fields[$j];
|
||||
}
|
||||
else if($forum_row[$forum_auth_key_fields[$j]] == AUTH_ADMIN)
|
||||
{
|
||||
$basic_auth_level[$forum_row['forum_id']] = "admin";
|
||||
$basic_auth_level_fields[$forum_row['forum_id']][] = $forum_auth_fields[$j];
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
$template->set_filenames(array(
|
||||
"body" => "admin/ug_auth_body.tpl")
|
||||
);
|
||||
|
||||
$sql = "SELECT u.user_id, u.username, u.user_level, g.group_id, g.group_name, g.group_single_user
|
||||
FROM " . USERS_TABLE . " u, " . GROUPS_TABLE . " g, " . USER_GROUP_TABLE . " ug
|
||||
WHERE u.user_id = $user_id
|
||||
AND ug.user_id = u.user_id
|
||||
AND g.group_id = ug.group_id";
|
||||
$u_result = $db->sql_query($sql);
|
||||
$userinf = $db->sql_fetchrowset($u_result);
|
||||
//
|
||||
//
|
||||
//
|
||||
$user_id = $HTTP_GET_VARS[POST_USERS_URL];
|
||||
|
||||
$sql = "SELECT aa.forum_id, aa.auth_view, aa.auth_read, aa.auth_post, aa.auth_reply, aa.auth_edit, aa.auth_delete, aa.auth_mod
|
||||
FROM " . AUTH_ACCESS_TABLE . " aa, " . USER_GROUP_TABLE . " ug, " . GROUPS_TABLE. " g
|
||||
WHERE ug.user_id = $user_id
|
||||
AND g.group_id = ug.group_id
|
||||
AND aa.group_id = ug.group_id
|
||||
AND g.group_single_user = " . TRUE;
|
||||
$au_result = $db->sql_query($sql);
|
||||
$sql = "SELECT f.forum_id, f.forum_name, f.auth_view, f.auth_read, f.auth_post, f.auth_reply, f.auth_edit, f.auth_delete, f.auth_announce, f.auth_sticky
|
||||
FROM " . FORUMS_TABLE . " f, " . CATEGORIES_TABLE . " c
|
||||
WHERE c.cat_id = f.cat_id
|
||||
ORDER BY c.cat_order ASC, f.forum_order ASC";
|
||||
$fa_result = $db->sql_query($sql);
|
||||
|
||||
$num_u_access = $db->sql_numrows($au_result);
|
||||
if($num_u_access)
|
||||
{
|
||||
while($u_row = $db->sql_fetchrow($au_result))
|
||||
{
|
||||
$u_access[$u_row['forum_id']][] = $u_row;
|
||||
$num_forum_access[$u_row['forum_id']]++;
|
||||
}
|
||||
}
|
||||
$forum_access = $db->sql_fetchrowset($fa_result);
|
||||
|
||||
$is_admin = ($userinf[0]['user_level'] == ADMIN && $userinf[0]['user_id'] != ANONYMOUS) ? 1 : 0;
|
||||
|
||||
for($i = 0; $i < count($forum_access); $i++)
|
||||
{
|
||||
$f_forum_id = $forum_access[$i]['forum_id'];
|
||||
$is_forum_restricted[$f_forum_id] = 0;
|
||||
|
||||
for($j = 0; $j < count($forum_auth_fields); $j++)
|
||||
{
|
||||
$key = $forum_auth_fields[$j];
|
||||
$value = $forum_access[$i][$key];
|
||||
|
||||
switch($value)
|
||||
{
|
||||
case AUTH_ALL:
|
||||
$auth_user[$f_forum_id][$key] = 1;
|
||||
break;
|
||||
|
||||
case AUTH_REG:
|
||||
$auth_user[$f_forum_id][$key] = ($user_id != ANONYMOUS) ? 1 : 0;
|
||||
break;
|
||||
|
||||
case AUTH_ACL:
|
||||
if($user_id != ANONYMOUS && $num_forum_access[$f_forum_id])
|
||||
{
|
||||
$result = a_auth_check_user(AUTH_ACL, $key, $u_access[$f_forum_id], $is_admin);
|
||||
$auth_user[$f_forum_id][$key] = $result['auth'];
|
||||
}
|
||||
else
|
||||
{
|
||||
$auth_user[$f_forum_id][$key] = 0;
|
||||
}
|
||||
break;
|
||||
|
||||
case AUTH_MOD:
|
||||
if($user_id != ANONYMOUS && $num_forum_access[$f_forum_id])
|
||||
{
|
||||
$result = a_auth_check_user(AUTH_MOD, $key, $u_access[$f_forum_id], $is_admin);
|
||||
$auth_user[$f_forum_id][$key] = $result['auth'];
|
||||
}
|
||||
else
|
||||
{
|
||||
$auth_user[$f_forum_id][$key] = 0;
|
||||
}
|
||||
break;
|
||||
|
||||
case AUTH_ADMIN:
|
||||
$auth_user[$f_forum_id][$key] = $is_admin;
|
||||
break;
|
||||
|
||||
default:
|
||||
$auth_user[$f_forum_id][$key] = 0;
|
||||
break;
|
||||
}
|
||||
}
|
||||
//
|
||||
// Is user a moderator?
|
||||
//
|
||||
if($user_id != ANONYMOUS && $num_forum_access[$f_forum_id])
|
||||
{
|
||||
$result = a_auth_check_user(AUTH_MOD, 'auth_mod', $u_access[$f_forum_id], 0);
|
||||
$auth_user[$f_forum_id]['auth_mod'] = $result['auth'];
|
||||
}
|
||||
else
|
||||
{
|
||||
$auth_user[$f_forum_id][$key] = 0;
|
||||
}
|
||||
}
|
||||
|
||||
while(list($forumkey, $user_ary) = each($auth_user))
|
||||
{
|
||||
$simple_auth[$forumkey] = 1;
|
||||
while(list($fieldkey, $value) = each($user_ary))
|
||||
{
|
||||
$simple_auth[$forumkey] = $simple_auth[$forumkey] && $value;
|
||||
}
|
||||
}
|
||||
reset($auth_user);
|
||||
|
||||
$i = 0;
|
||||
if($adv == -1)
|
||||
{
|
||||
while(list($forumkey, $user_ary) = each($auth_user))
|
||||
for($i = 0; $i < count($forum_access); $i++)
|
||||
{
|
||||
if($basic_auth_level[$forumkey] == "private")
|
||||
while(list($forum_id, $forum_row) = each($forum_access))
|
||||
{
|
||||
$allowed = 1;
|
||||
for($j = 0; $j < count($basic_auth_level_fields[$forumkey]); $j++)
|
||||
for($j = 0; $j < count($forum_auth_key_fields); $j++)
|
||||
{
|
||||
if(!$auth_user[$forumkey][$basic_auth_level_fields[$forumkey][$j]])
|
||||
$basic_auth_level[$forum_row['forum_id']] = "public";
|
||||
|
||||
if($forum_row[$forum_auth_key_fields[$j]] == AUTH_REG)
|
||||
{
|
||||
$allowed = 0;
|
||||
$basic_auth_level[$forum_row['forum_id']] = "registered";
|
||||
$basic_auth_level_fields[$forum_row['forum_id']][] = $forum_auth_fields[$j];
|
||||
}
|
||||
else if($forum_row[$forum_auth_key_fields[$j]] == AUTH_ACL)
|
||||
{
|
||||
$basic_auth_level[$forum_row['forum_id']] = "private";
|
||||
$basic_auth_level_fields[$forum_row['forum_id']][] = $forum_auth_fields[$j];
|
||||
}
|
||||
else if($forum_row[$forum_auth_key_fields[$j]] == AUTH_MOD)
|
||||
{
|
||||
$basic_auth_level[$forum_row['forum_id']] = "moderator";
|
||||
$basic_auth_level_fields[$forum_row['forum_id']][] = $forum_auth_fields[$j];
|
||||
}
|
||||
else if($forum_row[$forum_auth_key_fields[$j]] == AUTH_ADMIN)
|
||||
{
|
||||
$basic_auth_level[$forum_row['forum_id']] = "admin";
|
||||
$basic_auth_level_fields[$forum_row['forum_id']][] = $forum_auth_fields[$j];
|
||||
}
|
||||
}
|
||||
$optionlist_acl = "<select name=\"private[$forumkey]\">";
|
||||
if($is_admin || $user_ary['auth_mod'])
|
||||
}
|
||||
}
|
||||
|
||||
$sql = "SELECT u.user_id, u.username, u.user_level, g.group_id, g.group_name, g.group_single_user
|
||||
FROM " . USERS_TABLE . " u, " . GROUPS_TABLE . " g, " . USER_GROUP_TABLE . " ug
|
||||
WHERE u.user_id = $user_id
|
||||
AND ug.user_id = u.user_id
|
||||
AND g.group_id = ug.group_id";
|
||||
$u_result = $db->sql_query($sql);
|
||||
$userinf = $db->sql_fetchrowset($u_result);
|
||||
|
||||
$sql = "SELECT aa.forum_id, aa.auth_view, aa.auth_read, aa.auth_post, aa.auth_reply, aa.auth_edit, aa.auth_delete, aa.auth_mod
|
||||
FROM " . AUTH_ACCESS_TABLE . " aa, " . USER_GROUP_TABLE . " ug, " . GROUPS_TABLE. " g
|
||||
WHERE ug.user_id = $user_id
|
||||
AND g.group_id = ug.group_id
|
||||
AND aa.group_id = ug.group_id
|
||||
AND g.group_single_user = " . TRUE;
|
||||
$au_result = $db->sql_query($sql);
|
||||
|
||||
$num_u_access = $db->sql_numrows($au_result);
|
||||
|
||||
if($num_u_access)
|
||||
{
|
||||
while($u_row = $db->sql_fetchrow($au_result))
|
||||
{
|
||||
$u_access[$u_row['forum_id']][] = $u_row;
|
||||
$num_forum_access[$u_row['forum_id']]++;
|
||||
}
|
||||
}
|
||||
|
||||
$is_admin = ($userinf[0]['user_level'] == ADMIN && $userinf[0]['user_id'] != ANONYMOUS) ? 1 : 0;
|
||||
|
||||
for($i = 0; $i < count($forum_access); $i++)
|
||||
{
|
||||
$f_forum_id = $forum_access[$i]['forum_id'];
|
||||
$is_forum_restricted[$f_forum_id] = 0;
|
||||
|
||||
for($j = 0; $j < count($forum_auth_fields); $j++)
|
||||
{
|
||||
$key = $forum_auth_fields[$j];
|
||||
$value = $forum_access[$i][$key];
|
||||
|
||||
switch($value)
|
||||
{
|
||||
$optionlist_acl .= "<option value=\"1\">Allowed Access</option>";
|
||||
case AUTH_ALL:
|
||||
$auth_user[$f_forum_id][$key] = 1;
|
||||
break;
|
||||
|
||||
case AUTH_REG:
|
||||
$auth_user[$f_forum_id][$key] = ($user_id != ANONYMOUS) ? 1 : 0;
|
||||
break;
|
||||
|
||||
case AUTH_ACL:
|
||||
if($user_id != ANONYMOUS && $num_forum_access[$f_forum_id])
|
||||
{
|
||||
$result = a_auth_check_user(AUTH_ACL, $key, $u_access[$f_forum_id], $is_admin);
|
||||
$auth_user[$f_forum_id][$key] = $result['auth'];
|
||||
}
|
||||
else
|
||||
{
|
||||
$auth_user[$f_forum_id][$key] = 0;
|
||||
}
|
||||
break;
|
||||
|
||||
case AUTH_MOD:
|
||||
if($user_id != ANONYMOUS && $num_forum_access[$f_forum_id])
|
||||
{
|
||||
$result = a_auth_check_user(AUTH_MOD, $key, $u_access[$f_forum_id], $is_admin);
|
||||
$auth_user[$f_forum_id][$key] = $result['auth'];
|
||||
}
|
||||
else
|
||||
{
|
||||
$auth_user[$f_forum_id][$key] = 0;
|
||||
}
|
||||
break;
|
||||
|
||||
case AUTH_ADMIN:
|
||||
$auth_user[$f_forum_id][$key] = $is_admin;
|
||||
break;
|
||||
|
||||
default:
|
||||
$auth_user[$f_forum_id][$key] = 0;
|
||||
break;
|
||||
}
|
||||
else if($allowed)
|
||||
}
|
||||
//
|
||||
// Is user a moderator?
|
||||
//
|
||||
if($user_id != ANONYMOUS && $num_forum_access[$f_forum_id])
|
||||
{
|
||||
$result = a_auth_check_user(AUTH_MOD, 'auth_mod', $u_access[$f_forum_id], 0);
|
||||
$auth_user[$f_forum_id]['auth_mod'] = $result['auth'];
|
||||
}
|
||||
else
|
||||
{
|
||||
$auth_user[$f_forum_id][$key] = 0;
|
||||
}
|
||||
}
|
||||
|
||||
while(list($forumkey, $user_ary) = each($auth_user))
|
||||
{
|
||||
$simple_auth[$forumkey] = 1;
|
||||
while(list($fieldkey, $value) = each($user_ary))
|
||||
{
|
||||
$simple_auth[$forumkey] = $simple_auth[$forumkey] && $value;
|
||||
}
|
||||
}
|
||||
reset($auth_user);
|
||||
|
||||
$i = 0;
|
||||
if($adv == -1)
|
||||
{
|
||||
while(list($forumkey, $user_ary) = each($auth_user))
|
||||
{
|
||||
if($basic_auth_level[$forumkey] == "private")
|
||||
{
|
||||
$optionlist_acl .= "<option value=\"1\" selected>Allowed Access</option><option value=\"0\">Disallowed Access</option>";
|
||||
$allowed = 1;
|
||||
for($j = 0; $j < count($basic_auth_level_fields[$forumkey]); $j++)
|
||||
{
|
||||
if(!$auth_user[$forumkey][$basic_auth_level_fields[$forumkey][$j]])
|
||||
{
|
||||
$allowed = 0;
|
||||
}
|
||||
}
|
||||
$optionlist_acl = "<select name=\"private[$forumkey]\">";
|
||||
if($is_admin || $user_ary['auth_mod'])
|
||||
{
|
||||
$optionlist_acl .= "<option value=\"1\">Allowed Access</option>";
|
||||
}
|
||||
else if($allowed)
|
||||
{
|
||||
$optionlist_acl .= "<option value=\"1\" selected>Allowed Access</option><option value=\"0\">Disallowed Access</option>";
|
||||
}
|
||||
else
|
||||
{
|
||||
$optionlist_acl .= "<option value=\"1\">Allowed Access</option><option value=\"0\" selected>Disallowed Access</option>";
|
||||
}
|
||||
$optionlist_acl .= "</select>";
|
||||
}
|
||||
else
|
||||
{
|
||||
$optionlist_acl .= "<option value=\"1\">Allowed Access</option><option value=\"0\" selected>Disallowed Access</option>";
|
||||
$optionlist_acl = " ";
|
||||
}
|
||||
$optionlist_acl .= "</select>";
|
||||
}
|
||||
else
|
||||
{
|
||||
$optionlist_acl = " ";
|
||||
}
|
||||
|
||||
$optionlist_mod = "<select name=\"moderator[$forumkey]\">";
|
||||
if($user_ary['auth_mod'])
|
||||
{
|
||||
$optionlist_mod .= "<option value=\"1\" selected>Is a Moderator</option><option value=\"0\">Is not a Moderator</option>";
|
||||
}
|
||||
else
|
||||
{
|
||||
$optionlist_mod .= "<option value=\"1\">Is a Moderator</option><option value=\"0\" selected>Is not a Moderator</option>";
|
||||
}
|
||||
$optionlist_mod .= "</select>";
|
||||
$optionlist_mod = "<select name=\"moderator[$forumkey]\">";
|
||||
if($user_ary['auth_mod'])
|
||||
{
|
||||
$optionlist_mod .= "<option value=\"1\" selected>Is a Moderator</option><option value=\"0\">Is not a Moderator</option>";
|
||||
}
|
||||
else
|
||||
{
|
||||
$optionlist_mod .= "<option value=\"1\">Is a Moderator</option><option value=\"0\" selected>Is not a Moderator</option>";
|
||||
}
|
||||
$optionlist_mod .= "</select>";
|
||||
|
||||
$row_class = ($i%2) ? "row2" : "row1";
|
||||
$row_class = ($i%2) ? "row2" : "row1";
|
||||
|
||||
$template->assign_block_vars("forums", array(
|
||||
"ROW_CLASS" => $row_class,
|
||||
"FORUM_NAME" => $forum_access[$i]['forum_name'],
|
||||
$template->assign_block_vars("forums", array(
|
||||
"ROW_CLASS" => $row_class,
|
||||
"FORUM_NAME" => $forum_access[$i]['forum_name'],
|
||||
|
||||
"U_FORUM_AUTH" => append_sid("admin_forumauth.$phpEx?f=" . $forum_access[$i]['forum_id']),
|
||||
"U_FORUM_AUTH" => append_sid("admin_forumauth.$phpEx?f=" . $forum_access[$i]['forum_id']),
|
||||
|
||||
"S_ACL_SELECT" => $optionlist_acl,
|
||||
"S_MOD_SELECT" => $optionlist_mod)
|
||||
);
|
||||
$i++;
|
||||
"S_ACL_SELECT" => $optionlist_acl,
|
||||
"S_MOD_SELECT" => $optionlist_mod)
|
||||
);
|
||||
$i++;
|
||||
}
|
||||
}
|
||||
}
|
||||
reset($auth_user);
|
||||
reset($auth_user);
|
||||
|
||||
$t_username .= $userinf[0]['username'];
|
||||
$s_user_type = ($is_admin) ? '<select name="userlevel"><option value="admin" selected>Administrator</option><option value="user">User</option></select>' : '<select name="userlevel"><option value="admin">Administrator</option><option value="user" selected>User</option></select>';
|
||||
$t_username .= $userinf[0]['username'];
|
||||
$s_user_type = ($is_admin) ? '<select name="userlevel"><option value="admin" selected>Administrator</option><option value="user">User</option></select>' : '<select name="userlevel"><option value="admin">Administrator</option><option value="user" selected>User</option></select>';
|
||||
|
||||
for($i = 0; $i < count($userinf); $i++)
|
||||
{
|
||||
if(!$userinf[$i]['group_single_user'])
|
||||
{
|
||||
$group_name[] = $userinf[$i]['group_name'];
|
||||
$group_id[] = $userinf[$i]['group_id'];
|
||||
}
|
||||
}
|
||||
|
||||
if(count($group_name))
|
||||
{
|
||||
$t_usergroup_list = "";
|
||||
for($i = 0; $i < count($userinf); $i++)
|
||||
{
|
||||
$t_usergroup_list .= "<a href=\"admin_groupauth.$phpEx?" . POST_GROUPS_URL . "=" . $group_id[$i] . "\">" . $group_name[$i] . "</a>";
|
||||
if($i < count($group_name) - 1)
|
||||
if(!$userinf[$i]['group_single_user'])
|
||||
{
|
||||
$t_usergroup_list .= ", ";
|
||||
$group_name[] = $userinf[$i]['group_name'];
|
||||
$group_id[] = $userinf[$i]['group_id'];
|
||||
}
|
||||
}
|
||||
}
|
||||
else
|
||||
{
|
||||
$t_usergroup_list = "None";
|
||||
}
|
||||
|
||||
if(count($group_name))
|
||||
{
|
||||
$t_usergroup_list = "";
|
||||
for($i = 0; $i < count($userinf); $i++)
|
||||
{
|
||||
$t_usergroup_list .= "<a href=\"admin_groupauth.$phpEx?" . POST_GROUPS_URL . "=" . $group_id[$i] . "\">" . $group_name[$i] . "</a>";
|
||||
if($i < count($group_name) - 1)
|
||||
{
|
||||
$t_usergroup_list .= ", ";
|
||||
}
|
||||
}
|
||||
}
|
||||
else
|
||||
{
|
||||
$t_usergroup_list = "None";
|
||||
}
|
||||
|
||||
$s_hidden_fields = "<input type=\"hidden\" name=\"" . POST_USERS_URL . "\" value=\"$user_id\">";
|
||||
$s_hidden_fields .= "<input type=\"hidden\" name=\"curadmin\" value=\"" . $is_admin ."\">";
|
||||
$s_hidden_fields = "<input type=\"hidden\" name=\"" . POST_USERS_URL . "\" value=\"$user_id\">";
|
||||
$s_hidden_fields .= "<input type=\"hidden\" name=\"curadmin\" value=\"" . $is_admin ."\">";
|
||||
|
||||
$template->assign_vars(array(
|
||||
"USERNAME" => $t_username,
|
||||
"USER_GROUP_MEMBERSHIPS" => "This user is a $s_user_type and belongs to the following groups: $t_usergroup_list",
|
||||
$template->assign_vars(array(
|
||||
"USERNAME" => $t_username,
|
||||
"USER_GROUP_MEMBERSHIPS" => "This user is a $s_user_type and belongs to the following groups: $t_usergroup_list",
|
||||
|
||||
"L_USER_OR_GROUPNAME" => "Username",
|
||||
"L_USER_OR_GROUP" => "User",
|
||||
"L_USER_OR_GROUPNAME" => "Username",
|
||||
"L_USER_OR_GROUP" => "User",
|
||||
|
||||
"U_USER_OR_GROUP" => append_sid("admin_userauth.$phpEx"),
|
||||
"U_FORUMAUTH" => append_sid("admin_forumauth.$phpEx"),
|
||||
"U_USER_OR_GROUP" => append_sid("admin_userauth.$phpEx"),
|
||||
"U_FORUMAUTH" => append_sid("admin_forumauth.$phpEx"),
|
||||
|
||||
"S_USER_AUTH_ACTION" => append_sid("admin_userauth.$phpEx"),
|
||||
"S_HIDDEN_FIELDS" => $s_hidden_fields)
|
||||
);
|
||||
"S_USER_AUTH_ACTION" => append_sid("admin_userauth.$phpEx"),
|
||||
"S_HIDDEN_FIELDS" => $s_hidden_fields)
|
||||
);
|
||||
|
||||
} // if adv == -1
|
||||
} // if adv == -1
|
||||
|
||||
}
|
||||
|
||||
$template->pparse("body");
|
||||
|
||||
exit;
|
||||
include('page_footer_admin.'.$phpEx);
|
||||
|
||||
?>
|
||||
Reference in New Issue
Block a user