acl_get('a_group'))
{
return;
}
$module['GROUP']['MANAGE'] = basename(__FILE__) . "$SID&mode=manage";
$module['GROUP']['GROUP_PREFS'] = basename(__FILE__) . "$SID&mode=prefs";
return;
}
define('IN_PHPBB', 1);
// Include files
$phpbb_root_path = '../';
$phpEx = substr(strrchr(__FILE__, '.'), 1);
require('pagestart.' . $phpEx);
// Do we have general permissions?
if (!$auth->acl_get('a_group') )
{
trigger_error($user->lang['NO_ADMIN']);
}
// Check and set some common vars
$update = (isset($_POST['update'])) ? true : false;
$mode = (isset($_REQUEST['mode'])) ? htmlspecialchars($_REQUEST['mode']) : '';
$group_id = (isset($_REQUEST['g'])) ? intval($_REQUEST['g']) : '';
if (isset($_POST['addgroup']))
{
$action = 'addgroup';
}
else if (isset($_POST['delete']))
{
$action = 'delete';
}
else if (isset($_POST['addleaders']) || isset($_POST['addusers']))
{
$action = (isset($_POST['addleaders'])) ? 'addleaders' : 'addusers';
}
else
{
$action = (isset($_REQUEST['action'])) ? htmlspecialchars($_REQUEST['action']) : '';
}
$start = (isset($_GET['start']) && $action == 'member') ? intval($_GET['start']) : 0;
$start_mod = (isset($_GET['start']) && $action == 'leader') ? intval($_GET['start']) : 0;
$start_pend = (isset($_GET['start']) && $action == 'pending') ? intval($_GET['start']) : 0;
// Grab basic data for group, if group_id is set since it's used
// in several places below
if ($group_id)
{
$sql = 'SELECT *
FROM ' . GROUPS_TABLE . "
WHERE group_id = $group_id";
$result = $db->sql_query($sql);
if (!extract($db->sql_fetchrow($result)))
{
trigger_error($user->lang['NO_GROUP']);
}
$db->sql_freeresult($result);
}
switch ($mode)
{
case 'manage':
// Page header
adm_page_header($user->lang['MANAGE']);
// Which page?
switch ($action)
{
case 'edit':
case 'addgroup':
// Did we submit?
if ($update)
{
if ($group_type != GROUP_SPECIAL)
{
$group_name = (!empty($_POST['group_name'])) ? htmlspecialchars($_POST['group_name']) : '';
$group_type = (!empty($_POST['group_type'])) ? intval($_POST['group_type']) : '';
}
$group_description = (!empty($_POST['group_description'])) ? htmlspecialchars($_POST['group_description']) : '';
$group_colour = (!empty($_POST['group_colour'])) ? htmlspecialchars($_POST['group_colour']) : '';
$group_rank = (isset($_POST['group_rank'])) ? intval($_POST['group_rank']) : '';
$group_avatar = (!empty($_POST['group_avatar'])) ? htmlspecialchars($_POST['group_avatar']) : '';
// Check data
if ($group_name == '' || strlen($group_name) > 40)
{
$error .= (($error != '') ? '
' : '') . (($group_name == '') ? $user->lang['GROUP_ERR_USERNAME'] : $user->lang['GROUP_ERR_USER_LONG']);
}
if (strlen($group_description) > 255)
{
$error .= (($error != '') ? '
' : '') . $user->lang['GROUP_ERR_DESC_LONG'];
}
if ($group_type < GROUP_OPEN || $group_type > GROUP_FREE)
{
$error .= (($error != '') ? '
' : '') . $user->lang['GROUP_ERR_TYPE'];
}
/*
// Update DB
if (!$error)
{
// Update group preferences
$sql = "UPDATE " . GROUPS_TABLE . "
SET group_name = '$group_name', group_description = '$group_description', group_type = $group_type, group_rank = $group_rank, group_colour = '$group_colour'
WHERE group_id = $group_id";
$db->sql_query($sql);
$user_sql = '';
$user_sql .= (isset($_POST['submit'])) ? ((($user_sql != '') ? ', ' : '') . "user_colour = '$group_colour'") : '';
$user_sql .= (isset($_POST['submit']) && $group_rank != -1) ? ((($user_sql != '') ? ', ' : '') . "user_rank = $group_rank") : '';
// Update group members preferences
switch (SQL_LAYER)
{
case 'mysql':
case 'mysql4':
// batchwise? 500 at a time or so maybe? try to reduce memory useage
$more = true;
$start = 0;
do
{
$sql = 'SELECT user_id
FROM ' . USER_GROUP_TABLE . "
WHERE group_id = $group_id
LIMIT $start, 500";
$result = $db->sql_query($sql);
if ($row = $db->sql_fetchrow($result))
{
$user_count = 0;
$user_id_sql = '';
do
{
$user_id_sql .= (($user_id_sql != '') ? ', ' : '') . $row['user_id'];
$user_count++;
}
while ($row = $db->sql_fetchrow($result));
$sql = 'UPDATE ' . USERS_TABLE . "
SET $user_sql
WHERE user_id IN ($user_id_sql)";
$db->sql_query($sql);
if ($user_count == 500)
{
$start += 500;
}
else
{
$more = false;
}
}
else
{
$more = false;
}
$db->sql_freeresult($result);
unset($user_id_sql);
}
while ($more);
break;
default:
$sql ='"UPDATE ' . USERS_TABLE . "
SET $user_sql
WHERE user_id IN (
SELECT user_id
FROM " . USER_GROUP_TABLE . "
WHERE group_id = $group_id)";
$db->sql_query($sql);
}
trigger_error($user->lang['GROUP_UPDATED']);
}*/
}
?>
lang['GROUP_EDIT_EXPLAIN']; ?>
sql_query($sql); $rank_options = ''; if ($row = $db->sql_fetchrow($result)) { do { $selected = (!empty($group_rank) && $row['rank_id'] == $group_rank) ? ' selected="selected"' : ''; $rank_options .= ''; } while ($row = $db->sql_fetchrow($result)); } $db->sql_freeresult($result); $type_open = ($group_type == GROUP_OPEN) ? ' checked="checked"' : ''; $type_closed = ($group_type == GROUP_CLOSED) ? ' checked="checked"' : ''; $type_hidden = ($group_type == GROUP_HIDDEN) ? ' checked="checked"' : ''; $type_free = ($group_type == GROUP_FREE) ? ' checked="checked"' : ''; ?> lang['NO_USERS']); } $sql_where = array(); foreach ($username_ary as $username) { if ($username = trim($username)) { $sql_where[] = "'$username'"; } } unset($username_ary); // Grab the user ids $sql = 'SELECT user_id FROM ' . USERS_TABLE . ' WHERE username IN (' . implode(', ', $sql_where) . ')'; $result = $db->sql_query($sql); if (!($row = $db->sql_fetchrow($result))) { trigger_error($user->lang['NO_USERS']); } $id_ary = array(); do { $id_ary[] = $row['user_id']; } while ($row = $db->sql_fetchrow($result)); $db->sql_freeresult($result); // Remove users who are already members of this group $sql = 'SELECT user_id, group_leader FROM ' . USER_GROUP_TABLE . ' WHERE user_id IN (' . implode(', ', $id_ary) . ") AND group_id = $group_id"; $result = $db->sql_query($sql); $add_id_ary = $update_id_ary = array(); if ($row = $db->sql_fetchrow($result)) { do { $add_id_ary[] = $row['user_id']; if ($action == 'addleaders' && !$row['group_leader']) { $update_id_ary[] = $row['user_id']; } } while ($row = $db->sql_fetchrow($result)); } $db->sql_freeresult($result); // Do all the users exist in this group? $add_id_ary = array_diff($id_ary, $add_id_ary); unset($id_ary); // If we have no users if (!sizeof($add_id_ary) && !sizeof($update_id_ary)) { trigger_error($user->lang['GROUP_USERS_EXIST']); } if (sizeof($add_id_ary)) { $group_leader = ($action == 'addleaders') ? 1 : 0; // Insert the new users switch (SQL_LAYER) { case 'mysql': case 'mysql4': $sql = 'INSERT INTO ' . USER_GROUP_TABLE . " (user_id, group_id, group_leader) VALUES " . implode(', ', preg_replace('#^([0-9]+)$#', "(\\1, $group_id, $group_leader)", $add_id_ary)); $db->sql_query($sql); break; case 'mssql': case 'sqlite': $sql = 'INSERT INTO ' . USER_GROUP_TABLE . " (user_id, group_id, group_leader) " . implode(' UNION ALL ', preg_replace('#^([0-9]+)$#', "(\\1, $group_id, $group_leader)", $add_id_ary)); $db->sql_query($sql); break; default: foreach ($add_id_ary as $user_id) { $sql = 'INSERT INTO ' . USER_GROUP_TABLE . " (user_id, group_id, group_leader) VALUES ($user_id, $group_id, $group_leader)"; $db->sql_query($sql); } break; } $sql = 'UPDATE ' . USERS_TABLE . " SET user_permissions = '' WHERE user_id IN (" . implode(', ', $add_id_ary) . ')'; $db->sql_query($sql); } if (sizeof($update_id_ary)) { $sql = 'UPDATE ' . USER_GROUP_TABLE . ' SET group_leader = 1 WHERE user_id IN (' . implode(', ', $update_id_ary) . ") AND group_id = $group_id"; $db->sql_query($sql); } // Update user settings (color, rank) if applicable if (!empty($_POST['default'])) { $sql = 'UPDATE ' . USERS_TABLE . " SET group_id = $group_id, user_colour = '$group_colour', user_rank = " . intval($group_rank) . " WHERE user_id IN (" . implode(', ', $add_id_ary) . ")"; $db->sql_query($sql); } // add_log(); $message = ($mode == 'addleaders') ? 'GROUP_MODS_ADDED' : 'GROUP_USERS_ADDED'; trigger_error($user->lang[$message]); break; // Show list of leaders, existing and pending members case 'list': ?>lang['GROUP_MEMBERS_EXPLAIN']; ?>
sql_query($sql); $total_leaders = ($row = $db->sql_fetchrow($result)) ? $row['total_leaders'] : 0; $db->sql_freeresult($result); // Total number of group members (non-leaders) $sql = 'SELECT COUNT(user_id) AS total_members FROM ' . USER_GROUP_TABLE . " WHERE group_id = $group_id AND group_leader <> 1"; $result = $db->sql_query($sql); $total_members = ($row = $db->sql_fetchrow($result)) ? $row['total_members'] : 0; $db->sql_freeresult($result); // Grab the members $sql = 'SELECT u.user_id, u.username, u.user_regdate, u.user_posts, u.group_id, ug.group_leader, ug.user_pending FROM ' . USERS_TABLE . ' u, ' . USER_GROUP_TABLE . " ug WHERE ug.group_id = $group_id AND u.user_id = ug.user_id ORDER BY ug.group_leader DESC, ug.user_pending DESC, u.username LIMIT $start, " . $config['topics_per_page']; $result = $db->sql_query($sql); $leader = $member = 0; $group_data = array(); if ($row = $db->sql_fetchrow($result)) { do { $type = ($row['group_leader']) ? 'leader' : 'member'; $group_data[$type][$$type]['user_id'] = $row['user_id']; $group_data[$type][$$type]['group_id'] = $row['group_id']; $group_data[$type][$$type]['username'] = $row['username']; $group_data[$type][$$type]['user_regdate'] = $row['user_regdate']; $group_data[$type][$$type]['user_posts'] = $row['user_posts']; $group_data[$type][$$type]['user_pending'] = $row['user_pending']; $$type++; } while ($row = $db->sql_fetchrow($result)); } $db->sql_freeresult($result); if ($group_type != GROUP_SPECIAL) { ?>lang['GROUP_MODS_EXPLAIN']; ?>
lang['GROUP_LIST_EXPLAIN']; ?>
lang['GROUP_MANAGE_EXPLAIN']; ?>
lang['USER_DEF_GROUPS_EXPLAIN']; ?>
lang['GROUP_PREFS']); adm_page_footer(); break; default: trigger_error($user->lang['NO_MODE']); } exit; /* case 'add': break; case 'delete': // TODO: // Need to offer ability to demote moderators or remove from group break; case 'approve': break; adm_page_footer(); case 'prefs': } else { $user_lang = (!empty($_POST['user_lang'])) ? htmlspecialchars($_POST['user_lang']) : ''; $user_tz = (isset($_POST['user_tz'])) ? doubleval($_POST['user_tz']) : ''; $user_dst = (isset($_POST['user_dst'])) ? intval($_POST['user_dst']) : ''; } ?>lang['GROUP_SETTINGS_EXPLAIN']; ?>