openrat-cms

Unnamed repository; edit this file 'description' to name the repository.
Log | Files | Refs

commit 60efcf7c0b4f22ca4dd348f197ba3ef01e106304
parent 1a50e5dd7db351b45c20c46a1200a78cf1ab0683
Author: dankert <devnull@localhost>
Date:   Sun,  4 Apr 2004 20:11:37 +0200

*** empty log message ***

Diffstat:
action.php | 390-------------------------------------------------------------------------------
group.php | 230-------------------------------------------------------------------------------
themes/default/pages/html/projectmodel_edit.tpl.php | 33---------------------------------
user.php | 415-------------------------------------------------------------------------------
4 files changed, 0 insertions(+), 1068 deletions(-)

diff --git a/action.php b/action.php @@ -1,389 +0,0 @@ -<?php -// --------------------------------------------------------------------------- -// $Id$ -// --------------------------------------------------------------------------- -// DaCMS Content Management System -// Copyright (C) 2002 Jan Dankert, jandankert@jandankert.de -// -// This program is free software; you can redistribute it and/or -// modify it under the terms of the GNU General Public License -// as published by the Free Software Foundation; either version 2 -// of the License, or (at your option) any later version. -// -// This program is distributed in the hope that it will be useful, -// but WITHOUT ANY WARRANTY; without even the implied warranty of -// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -// GNU General Public License for more details. -// -// You should have received a copy of the GNU General Public License -// along with this program; if not, write to the Free Software -// Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. -// --------------------------------------------------------------------------- -// $Log$ -// Revision 1.1 2004-04-03 22:55:00 dankert -// Neuer Controller -// -// --------------------------------------------------------------------------- - -$conf = parse_ini_file( 'config.ini.php',true ); - -require_once( $conf['directories']['incldir']. - '/config.inc.'. - $conf['global']['ext'] ); - -session_start(); - -include( "./DB.php" ); - -include( "$conf_incldir/acl.inc.$conf_php" ); -include( "$conf_incldir/template.inc.$conf_php" ); -include( "$conf_incldir/db.inc.$conf_php" ); -include( "$conf_incldir/object.class.$conf_php" ); -include( "$conf_incldir/upload.class.$conf_php" ); -include( "$conf_incldir/language.inc.$conf_php" ); -include( "$conf_incldir/theme.inc.$conf_php" ); -include( "$conf_incldir/folder.inc.$conf_php" ); -include( "$conf_incldir/link.class.$conf_php" ); -include( "$conf_incldir/file.inc.$conf_php" ); -include( "$conf_incldir/user.inc.$conf_php" ); -include( "$conf_incldir/group.inc.$conf_php" ); -include( "$conf_incldir/project.inc.$conf_php" ); -include( "$conf_incldir/request.inc.$conf_php" ); -include( "$conf_incldir/page.inc.$conf_php" ); -include( "$conf_incldir/text.inc.$conf_php" ); -include( "$conf_incldir/publish.inc.$conf_php" ); -include( "$conf_incldir/language.class.$conf_php" ); -include( "$conf_incldir/model.class.$conf_php" ); -include( "$conf_incldir/element.inc.$conf_php" ); -include( "$conf_incldir/api.inc.$conf_php" ); - -request_into_session('folderid'); -request_into_session('folderaction'); - -// Verbindung zur Datenbank -// -$db = db_connection(); - - -$projectid = $SESS['projectid']; - -if ( !is_numeric($projectid) ) - message('ERROR','ERROR_NO_PROJECT'); - -if ( !is_numeric($SESS['folderid']) ) -{ - $SESS['folderid'] = Folder::getRootFolderId(); -} - -$objectid = $SESS['objectid']; - -$folder = new Folder( $objectid ); -$folder->load(); - -if ( !$folder->isFolder ) - message('ERROR','ERROR_NOT_A_FOLDER'); - -$var = array(); - -// Default: Ordner anzeigen -if ( !isset($SESS['folderaction']) ) - $SESS['folderaction'] = 'show'; - - -switch( $SESS['folderaction'] ) -{ - case 'createnew': - - // Neues Objekt in diesem Ordner anlegen - switch( $REQ['type'] ) - { - case 'folder': - - if ( $REQ['foldername'] != '' ) - { - $f = new Folder(); - $f->name = $REQ['foldername']; - $f->filename = $REQ['foldername']; - $f->parentid = $folder->objectid; - - $f->add(); - } - - break; - - case 'page': - - if ( $REQ['pagename'] != '' ) - { - $page = new Page(); - $page->name = $REQ['pagename']; - $page->templateid = $REQ['templateid']; - $page->parentid = $folder->objectid; - - $page->add(); - } - - break; - - case 'file': - - $file = new File(); - $upload = new Upload(); - - $file->filename = $upload->filename; - $file->name = $upload->filename; - $file->extension = $upload->extension; - $file->size = $upload->size; - $file->parentid = $folder->objectid; - - $file->value = $upload->value; - - $file->add(); // Datei hinzufuegen - break; - - case 'link': - - if ( $REQ['linkname'] != '' ) - { - $link = new Link(); - $link->name = $REQ['linkname']; - $link->parentid = $folder->objectid; - - $link->add(); - } - break; - - default: die(); - } - - $var['tree_refresh'] = true; - $SESS['folderaction'] = 'show'; - - break; - - - - - case 'save': - // Falls Name leer, dann Dateinamen dafür benutzen - if ( $REQ['name'] == '' ) - $REQ['name'] = $REQ['filename']; - - // Wenn Dateiname gefüllt, dann Datenbank-Update - if ( $REQ['filename'] != '' ) - { - $folder->filename = $REQ['filename']; - $folder->name = $REQ['name']; - $folder->desc = $REQ['desc']; - $folder->save(); - } - - $SESS['folderaction'] = 'show'; - $var['tree_refresh'] = true; - - break; - - - // Reihenfolge von Objekten aendern - case 'changesequence': - - $ids = $folder->getObjectIds(); - $seq = 0; - foreach( $ids as $id ) - { - $seq++; // Sequenz um 1 erhoehen - - // Die beiden Ordner vertauschen - if ( $id == $REQ['objectid1'] ) - $id = $REQ['objectid2']; - elseif ( $id == $REQ['objectid2'] ) - $id = $REQ['objectid1']; - - $o = new Object( $id ); - $o->setOrderId( $seq ); - - unset( $o ); // Selfmade Garbage Collection :-) - } - - // Ordner anzeigen - $SESS['folderaction'] = 'show'; - - break; - - - case 'move': - - $subaction = $SESS['folderaction']; - require( 'functions/global_subactions.inc.php' ); - - $folder->load(); - $SESS['folderaction'] = 'show'; - - break; - - - case 'addDefaultACL': - case 'addAccessACL': - case 'delACL': - - $subaction = $SESS['folderaction']; - require( 'functions/global_subactions.inc.php' ); - - // Berechtigungen anzeigen - $SESS['folderaction'] = 'rights'; - - break; -} - - -//session_write_close(); - -switch( $SESS['folderaction'] ) -{ - case 'new': - - if ( $folder->hasRight('create_page') ) - { - $var['templates'] = Template::getAll(); - } - - $var['create_folder'] = $folder->hasRight('create_folder'); - $var['create_file'] = $folder->hasRight('create_file'); - $var['create_link'] = $folder->hasRight('create_link'); - $var['create_page'] = $folder->hasRight('create_page'); - - output('folder_new',$var); - - break; - - - - case 'show': - - if ( ! $folder->isRoot ) - $var['up_url'] = "main.$conf_php?action=folder&objectid=".$folder->parentid; - - $var['object'] = array(); - $last_objectid = 0; - - // Schleife ueber alle Objekte in diesem Ordner - foreach( $folder->getObjectIds() as $id ) - { - $o = new Object( $id ); - - if ( $o->hasRight('read') ) - { - $o->objectLoad(); - $var['object'][$id]['name'] = Text::maxLaenge( 30,$o->name ); - $var['object'][$id]['filename'] = Text::maxLaenge( 20,$o->filename ); - $var['object'][$id]['desc'] = Text::maxLaenge( 30,$o->desc ); - - $var['object'][$id]['type'] = $o->getType(); - $var['object'][$id]['url' ] = "main.$conf_php?action=".$o->getType()."&objectid=".$id; - $var['object'][$id]['date'] = date( lang('DATE_FORMAT'),$o->lastchange_date ); - $var['object'][$id]['user'] = User::getUserName( $o->lastchange_userid ); - - if ( $last_objectid != 0 ) - { - $var['object'][$id ]['upurl' ] = "folder.$conf_php?folderaction=changesequence&objectid1=".$id."&objectid2=".$last_objectid; - $var['object'][$last_objectid]['downurl'] = "folder.$conf_php?folderaction=changesequence&objectid1=".$id."&objectid2=".$last_objectid; - } - - $last_objectid = $id; - } - } - - - output('folder_show',$var); - - break; - - - case 'prop': - - $var['name' ] = $folder->name; - $var['filename' ] = $folder->filename; - $var['desc' ] = $folder->desc; - - // Alle Ordner ermitteln - $var['act_objectid'] = $folder->objectid; - - $var['folder'] = array(); - - $allsubfolders = $folder->getAllSubFolderIds(); - - foreach( $folder->getOtherFolders() as $id ) - { - $f = new Folder( $id ); - if ( ! in_array($id,$allsubfolders ) ) - $var['folder'][$id] = implode( ' &raquo; ',$f->parentObjectNames(true,true) ); - } - asort( $var['folder'] ); - - output('folder_prop',$var); - break; - - - case 'rights': - if ($SESS['user']['is_admin'] != '1') die('nice try'); - - $acl = new Acl(); - $acl->objectid = $folder->objectid; - - $var['access_acls'] = array(); - $var['default_acls'] = array(); - - foreach( $acl->getAccessACLsFromObject() as $id ) - { - $acl = new Acl( $id ); - $acl->load(); - $var['access_acls'][$id] = $acl->getProperties(); - $var['access_acls'][$id]['delete_url'] = 'folder.'.$conf_php.'?folderaction=delACL&aclid='.$id; - } - - foreach( $acl->getDefaultACLsFromObject() as $id ) - { - $acl = new Acl( $id ); - $acl->load(); - $var['default_acls'][$id] = $acl->getProperties(); - $var['default_acls'][$id]['delete_url'] = 'folder.'.$conf_php.'?folderaction=delACL&aclid='.$id; - } - - $var['users'] = User::listAll(); - $var['groups'] = Group::getAll(); - $var['languages'] = Language::getAll(); - - output('folder_rights',$var); - - break; - - - case 'pub': - if ( $REQ['go'] == '1' ) - { - if ( $REQ['subdirs'] == '1' ) - $subdirs = true; - else $subdirs = false; - - $publish = new Publish(); - - $folder->publish = &$publish; - $folder->publish( $subdirs ); - - $var['filenames'] = array(); - - foreach( $publish->publishedObjects as $o ) - { - $var['filenames'][] = $o['filename']; - } - - output('all_publish',$var); - } - else - { - output('folder_pub',$var); - } - break; -} - -?>- \ No newline at end of file diff --git a/group.php b/group.php @@ -1,229 +0,0 @@ -<?php -# -# DaCMS Content Management System -# Copyright (C) 2002 Jan Dankert, jandankert@jandankert.de -# -# This program is free software; you can redistribute it and/or -# modify it under the terms of the GNU General Public License -# as published by the Free Software Foundation; either version 2 -# of the License, or (at your option) any later version. -# -# This program is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -# GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with this program; if not, write to the Free Software -# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. -# - -$conf = parse_ini_file( 'config.ini.php',true ); - -require_once( $conf['directories']['incldir']. - '/config.inc.'. - $conf['global']['ext'] ); - -session_start(); - - -include( "DB.php" ); - -include( "$conf_incldir/language.inc.$conf_php" ); -include( "$conf_incldir/db.inc.$conf_php" ); -include( "$conf_incldir/theme.inc.$conf_php" ); -include( "$conf_incldir/request.inc.$conf_php" ); - -request_into_session('groupaction'); -request_into_session('groupid'); - -$db = db_connection(); - -// Zugriff nur für Administratoren gestattet -if ( $SESS['user']['is_admin'] != '1' ) - die('access denied'); - -$var = array(); - -if ( !isset($SESS['groupaction'])) - $SESS['groupaction'] = 'show'; - -if ( $SESS['groupaction'] == 'save' ) -{ - if ( $REQ['delete'] == '1' ) - { - // Alle Gruppenzugehörigkeiten zu dieser Gruppe löschen - $sql = new Sql( 'DELETE FROM {t_usergroup} '. - 'WHERE groupid={groupid}' ); - $sql->setInt ('groupid',$SESS['groupid'] ); - $res = $db->query($sql->query); - - // Gruppe löschen - $sql = new Sql( 'DELETE FROM {t_group} '. - 'WHERE id={groupid}' ); - $sql->setInt ('groupid',$SESS['groupid'] ); - $res = $db->query($sql->query); - - unset( $SESS['groupid'] ); - $SESS['groupaction'] = 'list'; - - $var['tree_refresh'] = true; - } - else - { - // Gruppe speichern - $sql = new Sql( 'UPDATE {t_group} '. - 'SET name = {name} '. - 'WHERE id={groupid}' ); - $sql->setString('name' ,$REQ['name'] ); - $sql->setInt ('groupid',$SESS['groupid'] ); - $res = $db->query($sql->query); - - $SESS['groupaction'] = 'edit'; - } - -} - -if ( $SESS['groupaction'] == 'add' ) -{ - // Gruppe hinzufügen - $sql = new Sql( 'INSERT INTO {t_group} '. - '(name) VALUES( {name} )'); - $sql->setString('name' ,$REQ['name'] ); - $res = $db->query($sql->query); - - $var['tree_refresh'] = true; - - $SESS['groupaction'] = 'list'; -} - -if ( $SESS['groupaction'] == 'adduser' ) -{ - // Benutzer der Gruppe hinzufügen - $t_usergroup = $conf_db_prefix.'usergroup'; - $sql = "INSERT INTO $t_usergroup ". - "(userid,groupid) VALUES(". - "'".$REQ['userid']."',". - "'".$SESS['groupid']."'". - ")"; - echo "$sql"; - $res = $db->query($sql); - - $SESS['groupaction'] = 'users'; -} - -if ( $SESS['groupaction'] == 'deluser' ) -{ - // Benutzer aus Gruppe entfernen - $t_usergroup = $conf_db_prefix.'usergroup'; - $sql = "DELETE FROM $t_usergroup ". - "WHERE id=".$REQ['usergroupid']; - $res = $db->query($sql); - - $SESS['groupaction'] = 'users'; -} - - - - - -if ( $SESS['groupaction'] == 'list' ) -{ - $t_group = $conf_db_prefix.'group'; - $sql = 'SELECT * FROM `'.$t_group.'` ORDER BY name'; - $res = $db->query($sql); - - $var['action'] = 'group.'.$conf_php; - $var['el'] = array(); - - while( $row = $res->fetchRow(DB_FETCHMODE_ASSOC) ) - { - $id = $row['id' ]; - $var['el'][$id] = array(); - $var['el'][$id]['url' ] = 'group.'.$conf_php.'?groupaction=edit&groupid='.$id; - $var['el'][$id]['name'] = $row['name']; - } - $res->free(); - - output('group_list',$var); -} - - -if ( $SESS['groupaction'] == 'edit' ) -{ - $t_group = $conf_db_prefix.'group'; - $sql = "SELECT * FROM `$t_group` WHERE id=".$SESS['groupid']; - $res = $db->query($sql); - //echo $sql; - $row = $res->fetchRow(DB_FETCHMODE_ASSOC); - - $id = $row['id' ]; - $var['id'] = $row['id']; - $var['name'] = $row['name']; - - $res->free(); - - output('group_edit',$var); -} - -if ( $SESS['groupaction'] == 'acls' ) -{ - $t_group = $conf_db_prefix.'group'; - $sql = "SELECT * FROM `$t_group` WHERE id=".$SESS['groupid']; - $res = $db->query($sql); - //echo $sql; - $row = $res->fetchRow(DB_FETCHMODE_ASSOC); - - $id = $row['id' ]; - $var['id'] = $row['id']; - $var['name'] = $row['name']; - - $res->free(); - - output('group_acls',$var); -} - -if ( $SESS['groupaction'] == 'users' ) -{ - // Alle Benutzer ermitteln - // - $var['users'] = array(); - $t_user = $conf_db_prefix.'user'; - $sql = "SELECT * FROM `$t_user`"; - $res = $db->query($sql); - while( $row = $res->fetchRow(DB_FETCHMODE_ASSOC) ) - { - $var['users'][$row['id']] = $row['name']; - } - - // Mitgliedschaften ermitteln - // - $var['memberships'] = array(); - $t_usergroup = $conf_db_prefix.'usergroup'; - $sql = "SELECT * FROM $t_usergroup ". - "WHERE groupid=".$SESS['groupid']; - $res = $db->query($sql); - while( $row = $res->fetchRow(DB_FETCHMODE_ASSOC) ) - { - $var['memberships'][$row['id']] = $var['users'][$row['userid']]; - } - - output('group_users',$var); -} - -if ( $SESS['groupaction'] == 'show' ) -{ - $t_group = $conf_db_prefix.'group'; - $sql = "SELECT * FROM `$t_group` WHERE id=".$SESS['groupid']; - $res = $db->query($sql); - //echo $sql; - $row = $res->fetchRow(DB_FETCHMODE_ASSOC); - - $id = $row['id' ]; - $var['id'] = $row['id']; - $var['name'] = $row['name']; - - $res->free(); - - output('group_show',$var); -}- \ No newline at end of file diff --git a/themes/default/pages/html/projectmodel_edit.tpl.php b/themes/default/pages/html/projectmodel_edit.tpl.php @@ -1,32 +0,0 @@ -<?php include( $tpl_dir.'header.tpl.php') ?> - -<!-- $Id$ --> -<center> - -<form action="<?php echo $form_action ?>" method="post" target="_self"> - -<table class="main" width="90%" cellspacing="0" cellpadding="4"> - -<tr> - <th colspan="2"><?php echo lang('VARIANT') ?></a></th> -</tr> - -<tr> -<td width="50%" class="f1"><?php echo lang('NAME') ?></a></td> -<td width="50%" class="f1"><?php echo $name ?></td> -</tr> -<tr> -<td width="50%" class="f2"><?php echo lang('DELETE') ?></a></td> -<td width="50%" class="f2"><input type="checkbox" value="1"></td> -</tr> -<tr> -<td colspan="2" class="act"><input type="submit" class="submit" value="<?php echo lang('SAVE') ?>"></a></td> -</tr> - -</table> - -</form> - -</center> - -<?php include( $tpl_dir.'footer.tpl.php') ?>- \ No newline at end of file diff --git a/user.php b/user.php @@ -1,414 +0,0 @@ -<?php -// --------------------------------------------------------------------------- -// $Id$ -// --------------------------------------------------------------------------- -// DaCMS Content Management System -// Copyright (C) 2002 Jan Dankert, jandankert@jandankert.de -// -// This program is free software; you can redistribute it and/or -// modify it under the terms of the GNU General Public License -// as published by the Free Software Foundation; either version 2 -// of the License, or (at your option) any later version. -// -// This program is distributed in the hope that it will be useful, -// but WITHOUT ANY WARRANTY; without even the implied warranty of -// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -// GNU General Public License for more details. -// -// You should have received a copy of the GNU General Public License -// along with this program; if not, write to the Free Software -// Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. -// --------------------------------------------------------------------------- -// $Log$ -// Revision 1.2 2003-10-02 20:56:17 dankert -// Benutzer entfernen -// -// Revision 1.1 2003/09/29 18:18:21 dankert -// erste Version -// -// --------------------------------------------------------------------------- - - -$conf = parse_ini_file( 'config.ini.php',true ); - -require_once( $conf['directories']['incldir']. - '/config.inc.'. - $conf['global']['ext'] ); - -session_start(); - - -include( "DB.php" ); - -include( "$conf_incldir/db.inc.$conf_php" ); -include( "$conf_incldir/language.inc.$conf_php" ); -include( "$conf_incldir/theme.inc.$conf_php" ); -include( "$conf_incldir/request.inc.$conf_php" ); - -request_into_session('useraction'); -request_into_session('userid'); - -// Zugriff nur für Administratoren gestattet -if ( $SESS['user']['is_admin'] != '1' ) - die('access denied'); - - -$db = db_connection(); - -$var = array(); - -if ( !isset($SESS['useraction'])) - $SESS['useraction'] = 'show'; - - -if ( $SESS['useraction'] == 'save' ) -{ - if ( $REQ['is_admin']!=1 ) - $REQ['is_admin'] = 0; - - if ( $REQ['delete'] == '1' ) - { - // Alle Archivdaten in Dateien mit diesem Benutzer entfernen - $sql = new Sql( 'UPDATE {t_file} '. - 'SET create_userid=null '. - 'WHERE create_userid={userid}' ); - $sql->setInt ('userid',$SESS['userid'] ); - $res = $db->query($sql->query); - - $sql = new Sql( 'UPDATE {t_file} '. - 'SET lastchange_userid=null '. - 'WHERE lastchange_userid={userid}' ); - $sql->setInt ('userid',$SESS['userid'] ); - $res = $db->query($sql->query); - - // Alle Berechtigungen dieses Benutzers löschen - $sql = new Sql( 'DELETE FROM {t_acl} '. - 'WHERE userid={userid}' ); - $sql->setInt ('userid',$SESS['userid'] ); - $res = $db->query($sql->query); - - // Alle Gruppenzugehörigkeiten dieses Benutzers löschen - $sql = new Sql( 'DELETE FROM {t_usergroup} '. - 'WHERE userid={userid}' ); - $sql->setInt('userid',$SESS['userid'] ); - $res = $db->query($sql->query); - - // Benutzer löschen - $sql = new Sql( 'DELETE FROM {t_user} '. - 'WHERE id={userid}' ); - $sql->setInt ('userid',$SESS['userid'] ); - $res = $db->query($sql->query); - - unset( $SESS['userid'] ); - $SESS['useraction'] = 'list'; - - $var['tree_refresh'] = true; - } - else - { - // Benutzer speichern - $sql = new Sql( 'UPDATE {t_user} '. - 'SET name={name}, '. - 'fullname = {fullname}, '. - 'is_admin = {is_admin}, '. - 'ldap = {ldap}, '. - 'mail = {mail}, '. - 'lang = {lang}, '. - 'style = {style} '. - 'WHERE id= {userid}' ); - $sql->setString('name' ,$REQ['name'] ); - $sql->setString('fullname',$REQ['fullname']); - $sql->setInt ('is_admin',$REQ['is_admin']); - $sql->setString('ldap' ,$REQ['ldap'] ); - $sql->setString('mail' ,$REQ['mail'] ); - $sql->setString('lang' ,$REQ['lang'] ); - $sql->setString('style' ,$REQ['style'] ); - $sql->setInt ('userid' ,$SESS['userid'] ); - $res = $db->query($sql->query); - - $SESS['useraction'] = 'edit'; - } - -} - -if ( $SESS['useraction'] == 'add' ) -{ - $t_user = $conf_db_prefix.'user'; - $sql = "INSERT INTO $t_user ". - "(name) VALUES(". - "'".$REQ['name']."'". - ")"; - echo "$sql"; - $res = $db->query($sql); - - $SESS['useraction'] = 'list'; -} - -if ( $SESS['useraction'] == 'addgroup' ) -{ - $t_usergroup = $conf_db_prefix.'usergroup'; - $sql = "INSERT INTO $t_usergroup ". - "(userid,groupid) VALUES(". - "'".$SESS['userid']."',". - "'".$REQ['groupid']."'". - ")"; - echo "$sql"; - $res = $db->query($sql); - - $SESS['useraction'] = 'groups'; -} - -if ( $SESS['useraction'] == 'delgroup' ) -{ - $t_usergroup = $conf_db_prefix.'usergroup'; - $sql = "DELETE FROM $t_usergroup ". - "WHERE id=".$REQ['usergroupid']; - $res = $db->query($sql); - - $SESS['useraction'] = 'groups'; -} - - -if ( $SESS['useraction'] == 'pwchange' ) -{ - if ($REQ['password1'] != '' && $REQ['password1'] == $REQ['password2']) - { - $t_user = $conf_db_prefix.'user'; - $sql = "UPDATE $t_user ". - "SET password='".md5($REQ['password1'])."' ". - "WHERE id=".$SESS['userid']; - echo "$sql"; - $res = $db->query($sql); - } - else - { - die("both passwords not equal or blank"); - } - $SESS['useraction'] = 'show'; -} - - - - - - - -if ( $SESS['useraction'] == 'list' ) -{ - $t_user = $conf_db_prefix.'user'; - $sql = "SELECT * FROM $t_user ORDER BY name"; - $res = $db->query($sql); - - $var['action'] = 'user.'.$conf_php; - $var['el'] = array(); - - while( $row = $res->fetchRow(DB_FETCHMODE_ASSOC) ) - { - $id = $row['id' ]; - $var['el'][$id] = array(); - $var['el'][$id]['url' ] = 'user.'.$conf_php.'?useraction=edit&userid='.$id; - $var['el'][$id]['name'] = $row['name']; - } - $res->free(); - - output('user_list',$var); -} - - -if ( $SESS['useraction'] == 'edit' ) -{ - // Benutzerdaten lesen - // - $t_user = $conf_db_prefix.'user'; - $sql = "SELECT * FROM $t_user WHERE id=".$SESS['userid']; - $res = $db->query($sql); - $row = $res->fetchRow(DB_FETCHMODE_ASSOC); - - $id = $row['id' ]; - $var = $row; - - $res->free(); - - // Styles lesen - // - $var['allstyles'] = array(); - $handle=opendir( $conf_themedir.'/css' ); - while ($file = readdir ($handle)) - { - if ( eregi('\.css$',$file) ) - { - $var['allstyles'][$file] = $file; - } - } - closedir($handle); - - // Sprachen lesen - // - $var['alllanguages'][''] = array(); - $var['alllanguages'][''] = lang('AUTOMATIC'); - - $ini_isolang = parse_ini_file( $conf_languagedir.'/lang.ini.'.$conf_php ); - - foreach($ini_isolang as $l2=>$text) - { - if (is_file($conf_languagedir.'/'.strtolower($l2).'.ini.'.$conf_php)) - $var['alllanguages'][ $l2 ] = $text; - } - - output('user_edit',$var); -} - - -if ( $SESS['useraction'] == 'groups' ) -{ - // Alle Gruppen ermitteln - // - $var['groups'] = array(); - $t_group = $conf_db_prefix.'group'; - $sql = "SELECT * FROM `$t_group`"; - $res = $db->query($sql); - while( $row = $res->fetchRow(DB_FETCHMODE_ASSOC) ) - { - $var['groups'][$row['id']] = $row['name']; - } - - - // Mitgliedschaften ermitteln - // - $var['memberships'] = array(); - - $sql = "SELECT * FROM $t_usergroup ". - "WHERE userid=".$SESS['userid']; - $res = $db->query($sql); - while( $row = $res->fetchRow(DB_FETCHMODE_ASSOC) ) - { - $var['memberships'][$row['id']] = $var['groups'][$row['groupid']]; - } - - output('user_groups',$var); -} - - -if ( $SESS['useraction'] == 'pw' ) -{ - output('user_pw',$var); -} - - -if ( $SESS['useraction'] == 'show' ) -{ - // Benutzerdaten lesen - // - $t_user = $conf_db_prefix.'user'; - $sql = "SELECT * FROM $t_user WHERE id=".$SESS['userid']; - $res = $db->query($sql); - $row = $res->fetchRow(DB_FETCHMODE_ASSOC); - - $id = $row['id' ]; - $var = $row; - - $res->free(); - - // Alle Gruppen ermitteln - // - $var['groups'] = array(); - $t_group = $conf_db_prefix.'group'; - $sql = "SELECT * FROM `$t_group`"; - $res = $db->query($sql); - while( $row = $res->fetchRow(DB_FETCHMODE_ASSOC) ) - { - $var['groups'][$row['id']] = $row['name']; - } - - // Mitgliedschaften ermitteln - // - $var['memberships'] = array(); - $t_usergroup = $conf_db_prefix.'usergroup'; - $sql = "SELECT * FROM $t_usergroup ". - "WHERE userid=".$SESS['userid']; - $res = $db->query($sql); - while( $row = $res->fetchRow(DB_FETCHMODE_ASSOC) ) - { - $var['memberships'][$row['id']] = $var['groups'][$row['groupid']]; - } - - output('user_show',$var); -} - - - - - - - - - - - - - - - - - - - -exit; - - -include( "./config.inc" ); -include( "./functions$phpext" ); - -head(); -?> -<body style="margin:0pt;"> -<br> -<?php - -$dateiname = $datadir.'/'.$userfile; - -$file = file( $dateiname ); - -# Sortieren, damit die Benutzer alphabetisch -# angezeigt werden -# -natcasesort( $file ); - -$nr = 0; - -# Einlesen der Benutzer -# -echo "<center><table cellpadding=\"5\" cellspacing=\"0\" width=\"200\">\n"; - -# Der aktuelle Buchstabe -$buchstabe = ""; - -echo '<tr><td class="ben" colspan="2"><a href="useredit'.$phpext.'?session='.$session.'&useraction=new" title=" '.lang('user_new_description').' ">'.lang('user_new_description').'</a></td></tr>'."\n"; - -foreach( $file as $zeile ) -{ - if ( ! is_integer(strpos( $zeile,'<user ' )) ) - continue; - - $nr ++; - $flag = xmlzeile( $zeile ); - $buchstabe_neu = substr(strtoupper($flag['name']),0,1); - if ( $buchstabe != $buchstabe_neu ) - { - $buchstabe = $buchstabe_neu; - echo '<tr><td colspan="2" class="buchstabe"><br>'.$buchstabe.'</td></tr>'."\n"; - } - echo '<tr><td class="ben"><a href="useredit'.$phpext.'?session='.$session.'&useraction=edit&user_name='.$flag['name'].'" title=" '.lang('user_edit').' ">'.$flag['name'].'</a></td>'."\n"; - echo '<td class="ben">'.$flag['description'].'</td>'."\n"; - echo "</tr>\n"; - -} - -echo "</table><center><br><br>\n"; - - -?> - -<?php fusszeile(); ?> -</body> -</html>- \ No newline at end of file