<?PHP

/* ====================
Seditio - Website engine
Copyright Neocrome & Seditio Team
http://www.neocrome.net
http://www.seditio.org
[BEGIN_SED]
File=admin.users.inc.php
Version=175
Updated=2012-dec-31
Type=Core.admin
Author=Neocrome
Description=Users
[END_SED]
==================== */

if ( !defined('SED_CODE') || !defined('SED_ADMIN') ) { die('Wrong URL.'); }

$g = sed_import('g','G','INT');

list($usr['auth_read'], $usr['auth_write'], $usr['isadmin']) = sed_auth('users', 'a');
sed_block($usr['isadmin']);

$adminpath[] = array(sed_url("admin", "m=users"), $L['Users']);
$adminmain = "<h2><img src=\"system/img/admin/users.png\" alt=\"\" /> ".$L['Users']."</h2>";

$adminmain .= "<ul class=\"arrow_list\">";
$adminmain .= "<li>".sed_linkif(sed_url("admin", "m=config&n=edit&o=core&p=users"), $L['Configuration'], sed_auth('admin', 'a', 'A'))."</li>";
$adminmain .= "<li>".sed_linkif(sed_url("admin", "m=banlist"), $L['Banlist'], sed_auth('users', 'a', 'A'))."</li>";
$adminmain .= "</ul>";

switch($n)
	{
	case 'add':

	$ntitle = sed_import('ntitle','P','TXT');
	$ndesc = sed_import('ndesc','P','TXT');
  $ncolor = sed_import('ncolor','P','TXT');
	$nicon = sed_import('nicon','P','TXT');
	$nalias = sed_import('nalias','P','TXT');
	$nlevel = sed_import('nlevel','P','LVL');
	$nmaxsingle = sed_import('nmaxsingle','P','INT');
	$nmaxtotal = sed_import('nmaxtotal','P','INT');
	$ncopyrightsfrom = sed_import('ncopyrightsfrom','P','INT');
	$ndisabled = sed_import('ndisabled','P','BOL');
	$nhidden = sed_import('nhidden','P','BOL');
	$ntitle = (empty($ntitle)) ? '???' : $ntitle;

	$sql = sed_sql_query("INSERT INTO $db_groups (grp_alias, grp_level, grp_disabled, grp_hidden, grp_title, grp_desc, grp_icon, grp_color, grp_pfs_maxfile, grp_pfs_maxtotal, grp_ownerid) VALUES ('".sed_sql_prep($nalias)."', ".(int)$nlevel.", ".(int)$ndisabled.", ".(int)$nhidden.", '".sed_sql_prep($ntitle)."', '".sed_sql_prep($ndesc)."', '".sed_sql_prep($nicon)."', '".sed_sql_prep($ncolor)."', ".(int)$nmaxsingle.", ".(int)$nmaxtotal.", ".(int)$usr['id'].")");

	$grp_id = sed_sql_insertid();

	$sql = sed_sql_query("SELECT * FROM $db_auth WHERE auth_groupid='".$ncopyrightsfrom."' order by auth_code ASC, auth_option ASC");

	while ($row = sed_sql_fetchassoc($sql))
		{
		$sql1 = sed_sql_query("INSERT into $db_auth (auth_groupid, auth_code, auth_option, auth_rights, auth_rights_lock, auth_setbyuserid) VALUES (".(int)$grp_id.", '".$row['auth_code']."', '".$row['auth_option']."', ".(int)$row['auth_rights'].", 0, ".(int)$usr['id'].")");
		}

	sed_auth_reorder();
	sed_cache_clear('sed_groups');
	sed_redirect(sed_url("admin", "m=users", "", true));
	exit;
	break;

	case 'edit':

	if ($a=='update')
		{
		$rtitle = sed_import('rtitle','P','TXT');
		$rdesc = sed_import('rdesc','P','TXT');
		$ricon = sed_import('ricon','P','TXT');
    $rcolor = sed_import('rcolor','P','TXT');
		$ralias = sed_import('ralias','P','TXT');
		$rlevel = sed_import('rlevel','P','LVL');
		$rmaxfile = sed_import('rmaxfile','P','INT');
		$rmaxtotal = sed_import('rmaxtotal','P','INT');
		$rdisabled = ($g<6) ? 0 : sed_import('rdisabled','P','BOL');
		$rhidden = ($g==4) ? 0 : sed_import('rhidden','P','BOL');
		$rtitle = sed_sql_prep($rtitle);
	  $rdesc = sed_sql_prep($rdesc);
	  $ricon = sed_sql_prep($ricon);
	  $ralias = sed_sql_prep($ralias);

		$sql = sed_sql_query("UPDATE $db_groups SET grp_title='$rtitle', grp_desc='$rdesc', grp_icon='$ricon', grp_color='$rcolor', grp_alias='$ralias', grp_level='$rlevel', grp_pfs_maxfile='$rmaxfile', grp_pfs_maxtotal='$rmaxtotal', grp_disabled='$rdisabled', grp_hidden='$rhidden' WHERE grp_id='$g'");

		sed_cache_clear('sed_groups');
		sed_redirect(sed_url("admin", "m=users", "", true));
		exit;
		}
	elseif ($a=='delete' && $g>5)
		{
		$sql = sed_sql_query("DELETE FROM $db_groups WHERE grp_id='$g'");
		$sql = sed_sql_query("DELETE FROM $db_auth WHERE auth_groupid='$g'");
		$sql = sed_sql_query("DELETE FROM $db_groups_users WHERE gru_groupid='$g'");
		sed_auth_clear('all');
		sed_cache_clear('sed_groups');
		sed_redirect(sed_url("admin", "m=users", "", true));
		exit;
		}

  $sql = sed_sql_query("SELECT * FROM $db_groups WHERE grp_id='$g'");
	sed_die(sed_sql_numrows($sql)==0);
	$row = sed_sql_fetchassoc($sql);

	$sql1 = sed_sql_query("SELECT COUNT(*) FROM $db_groups_users WHERE gru_groupid='$g'");
	$row['grp_memberscount'] = sed_sql_result($sql1, 0, "COUNT(*)");

	$row['grp_title'] = sed_cc($row['grp_title']);
	$row['grp_desc'] = sed_cc($row['grp_desc']);
	$row['grp_icon'] = sed_cc($row['grp_icon']);
	$row['grp_alias'] = sed_cc($row['grp_alias']);

	$adminpath[] = array(sed_url("admin", "m=users&n=edit&g=".$g), $row['grp_title']);

	$adminmain .= "<form id=\"editlevel\" action=\"".sed_url("admin", "m=users&n=edit&a=update&g=".$g)."\" method=\"post\">";
	$adminmain .= "<table class=\"cells striped\">";
	$adminmain .= "<tr><td>".$L['Group']." :</td>";
	$adminmain .= "<td><input type=\"text\" class=\"text\" name=\"rtitle\" value=\"".$row['grp_title']."\" size=\"40\" maxlength=\"64\" /> ".$L['adm_required']."</td></tr>";
	$adminmain .= "<tr><td>".$L['Description']." :</td>";
	$adminmain .= "<td><input type=\"text\" class=\"text\" name=\"rdesc\" value=\"".$row['grp_desc']."\" size=\"40\" maxlength=\"64\" /></td></tr>";
	$adminmain .= "<tr><td>".$L['Icon']." :</td>";
	$adminmain .= "<td><input type=\"text\" class=\"text\" name=\"ricon\" value=\"".$row['grp_icon']."\" size=\"40\" maxlength=\"128\" /></td></tr>";
	$adminmain .= "<tr><td>".$L['Alias']." :</td>";
	$adminmain .= "<td><input type=\"text\" class=\"text\" name=\"ralias\" value=\"".$row['grp_alias']."\" size=\"16\" maxlength=\"24\" /></td></tr>";

	$adminmain .= "<tr><td>".$L['adm_color']." :</td>";

	$adminmain .= "<td><select name=\"rcolor\" size=\"1\" style=\"color:#202020; background-color:".$row['grp_color'].";\">";
  foreach ($cfg['group_colors'] as $color)
  {
			$selected = ($color == $row['grp_color']) ? "selected=\"selected\"" : '';
			$adminmain .= "<option value=\"".$color."\" ".$selected." style=\"color:#202020; background-color:".$color.";\">".$color."</option>";    
  }
  $adminmain .= "</select></td></tr>";

	$adminmain .= "<tr><td>".$L['adm_maxsizesingle']." :</td>";
	$adminmain .= "<td><input type=\"text\" class=\"text\" name=\"rmaxfile\" value=\"".$row['grp_pfs_maxfile']."\" size=\"16\" maxlength=\"16\" /></td></tr>";
	$adminmain .= "<tr><td>".$L['adm_maxsizeallpfs']." :</td>";
	$adminmain .= "<td><input type=\"text\" class=\"text\" name=\"rmaxtotal\" value=\"".$row['grp_pfs_maxtotal']."\" size=\"16\" maxlength=\"16\" /></td></tr>";


	$adminmain .= "<tr><td>".$L['Enabled']." :</td><td>";

	if ($g>5)
		{
		$adminmain .= (!$row['grp_disabled']) ? "<input type=\"radio\" class=\"radio\" name=\"rdisabled\" value=\"0\" checked=\"checked\" />".$L['Yes']." <input type=\"radio\" class=\"radio\" name=\"rdisabled\" value=\"1\" />".$L['No'] : "<input type=\"radio\" class=\"radio\" name=\"rdisabled\" value=\"0\" />".$L['Yes']." <input type=\"radio\" class=\"radio\" name=\"rdisabled\" value=\"1\" checked=\"checked\" />".$L['No'];
		}
	else
		{ $adminmain .= $L['Yes']; }
	$adminmain .= "</td></tr>";

	$adminmain .= "<tr><td>".$L['Hidden']." :</td><td>";

	if ($g!=4)
		{
		$adminmain .= ($row['grp_hidden']) ? "<input type=\"radio\" class=\"radio\" name=\"rhidden\" value=\"1\" checked=\"checked\" />".$L['Yes']." <input type=\"radio\" class=\"radio\" name=\"rhidden\" value=\"0\" />".$L['No'] : "<input type=\"radio\" class=\"radio\" name=\"rhidden\" value=\"1\" />".$L['Yes']." <input type=\"radio\" class=\"radio\" name=\"rhidden\" value=\"0\" checked=\"checked\" />".$L['No'];
		}
	else
		{ $adminmain .= $L['No']; }

	$adminmain .= "</td></tr>";

	$adminmain .= "<tr><td>".$L['Level']." :</td>";
	$adminmain .= "<td><select name=\"rlevel\" size=\"1\">";
		for ($i = 1; $i < 100; $i++)
			{
			$selected = ($i == $row['grp_level']) ? "selected=\"selected\"" : '';
			$adminmain .= "<option value=\"$i\" $selected>".$i."</option>";
			}
		$adminmain .= "</select></td></tr>";

	$adminmain .= "<tr><td>".$L['Rights']." :</td>";
	$adminmain .= "<td><a href=\"".sed_url("admin", "m=rights&g=".$g)."\"><img src=\"system/img/admin/rights1.png\" alt=\"\" /></a></tr>";

	$adminmain .= ($g>5 && $row['grp_memberscount']==0) ? "<tr><td>".$L['Delete']." :</td><td><a href=\"".sed_url("admin", "m=users&n=edit&a=delete&g=".$g."&".sed_xg())."\">".$out['img_delete']."</a></td></tr>" : '';
	$adminmain .= "<tr><td colspan=\"2\"><input type=\"submit\" class=\"submit btn\" value=\"".$L['Update']."\" /></td></tr></table></form>";

	break;

	default:

	$sql = sed_sql_query("SELECT DISTINCT(gru_groupid), COUNT(*) FROM $db_groups_users WHERE 1 GROUP BY gru_groupid");
	while ($row = sed_sql_fetchassoc($sql))
		{ $members[$row['gru_groupid']] = $row['COUNT(*)']; }

	$sql = sed_sql_query("SELECT DISTINCT(user_maingrp), COUNT(*) FROM $db_users WHERE 1 GROUP BY user_maingrp");
	while ($row = sed_sql_fetchassoc($sql))
		{ $members_main[$row['user_maingrp']] = $row['COUNT(*)']; }

	$sql = sed_sql_query("SELECT grp_id, grp_title, grp_disabled, grp_hidden FROM $db_groups WHERE 1 order by grp_level DESC, grp_id DESC");

	$adminmain .= "<div class=\"sedtabs\">	
		<ul class=\"tabs\">
      <li><a href=\"".$sys['request_uri']."#tab1\" class=\"selected\">".$L['Users']."</a></li>
      <li><a href=\"".$sys['request_uri']."#tab2\">".$L['addnewentry']."</a></li>
    </ul>    
    <div class=\"tab-box\">";

	$adminmain .= "<div id=\"tab1\" class=\"tabs\">";

	$adminmain .= "<table class=\"cells striped\">";
	$adminmain .= "<tr>";
	$adminmain .= "<td  class=\"coltop\">#ID</td>";
	$adminmain .= "<td  class=\"coltop\">".$L['Groups']."</td>";
	$adminmain .= "<td class=\"coltop\" style=\"width:15%;\">".$L['Members']."</td>";
	$adminmain .= "<td class=\"coltop\" style=\"width:15%;\">".$L['Main']."</td>";  
	$adminmain .= "<td class=\"coltop\" style=\"width:12%;\">".$L['Enabled']."</td>";
	$adminmain .= "<td class=\"coltop\" style=\"width:12%;\">".$L['Hidden']."</td>";
	$adminmain .= "<td class=\"coltop\" style=\"width:12%;\">".$L['Rights']."</td>";
	$adminmain .= "</tr>";

	if (sed_sql_numrows($sql)>0)
		{
		while ($row = sed_sql_fetchassoc($sql))
			{
			$row['grp_hidden'] = ($row['grp_hidden']) ? '1' : '0';
			$members[$row['grp_id']] = (empty($members[$row['grp_id']])) ? '0' : $members[$row['grp_id']];
			$adminmain .= "<tr>";
			$adminmain .= "<td style=\"text-align:center;\">".$row['grp_id']."</td>";
			$adminmain .= "<td><img src=\"system/img/admin/groups.png\" alt=\"\" /> ";
			$adminmain .= "<a href=\"".sed_url("admin", "m=users&n=edit&g=".$row['grp_id'])."\">".sed_cc($row['grp_title'])."</a></td>";
			$adminmain .= "<td style=\"text-align:center;\"><a href=\"".sed_url("users", "gm=".$row['grp_id'])."\">".$members[$row['grp_id']]."</a></td>";
			$adminmain .= "<td style=\"text-align:center;\"><a href=\"".sed_url("users", "g=".$row['grp_id'])."\">".$members_main[$row['grp_id']]."</a></td>";
			$adminmain .= "<td style=\"text-align:center;\">".$sed_yesno[!$row['grp_disabled']]."</td>";
			$adminmain .= "<td style=\"text-align:center;\">".$sed_yesno[$row['grp_hidden']]."</td>";
			$adminmain .= "<td style=\"text-align:center;\"><a href=\"".sed_url("admin", "m=rights&g=".$row['grp_id'])."\"><img src=\"system/img/admin/rights1.png\" alt=\"\" /></a></td>";
			$adminmain .= "</tr>";
			}
		}
	$adminmain .= "</table>";
	
	$adminmain .= "</div>";
	$adminmain .= "<div id=\"tab2\" class=\"tabs\">";

	$adminmain .= "<h4>".$L['addnewentry']." :</h4>";
	$adminmain .= "<form id=\"addlevel\" action=\"".sed_url("admin", "m=users&n=add")."\" method=\"post\">";
	$adminmain .= "<table class=\"cells striped\">";
	$adminmain .= "<tr><td>".$L['Group']." :</td>";
	$adminmain .= "<td><input type=\"text\" class=\"text\" name=\"ntitle\" value=\"\" size=\"40\" maxlength=\"64\" /> ".$L['adm_required']."</td></tr>";
	$adminmain .= "<tr><td>".$L['Description']." :</td>";
	$adminmain .= "<td><input type=\"text\" class=\"text\" name=\"ndesc\" value=\"\" size=\"40\" maxlength=\"64\" /></td></tr>";
	$adminmain .= "<tr><td>".$L['Icon']." :</td>";
	$adminmain .= "<td><input type=\"text\" class=\"text\" name=\"nicon\" value=\"\" size=\"40\" maxlength=\"128\" /></td></tr>";
	$adminmain .= "<tr><td>".$L['Alias']." :</td>";
	$adminmain .= "<td><input type=\"text\" class=\"text\" name=\"nalias\" value=\"\" size=\"16\" maxlength=\"24\" /></td></tr>";

	$adminmain .= "<tr><td>".$L['adm_color']." :</td>";

	$adminmain .= "<td><select name=\"ncolor\" size=\"1\">";
  foreach ($cfg['group_colors'] as $color)
  {
			$adminmain .= "<option value=\"".$color."\" style=\"color:#202020; background-color:".$color.";\">".$color."</option>";    
  }
  $adminmain .= "</select></td></tr>";

	$adminmain .= "<tr><td>".$L['adm_maxsizesingle']." :</td>";
	$adminmain .= "<td><input type=\"text\" class=\"text\" name=\"nmaxsingle\" value=\"0\" size=\"16\" maxlength=\"16\" /></td></tr>";
	$adminmain .= "<tr><td>".$L['adm_maxsizeallpfs']." :</td>";
	$adminmain .= "<td><input type=\"text\" class=\"text\" name=\"nmaxtotal\" value=\"0\" size=\"16\" maxlength=\"16\" /></td></tr>";

	$adminmain .= "<tr><td>".$L['adm_copyrightsfrom']." :</td>";
	$adminmain .= "<td>".sed_selectbox_groups(4, 'ncopyrightsfrom', array('5'))." ".$L['adm_required']."</td></tr>";

	$adminmain .= "<tr><td>".$L['Level']." :</td>";
	$adminmain .= "<td><select name=\"nlevel\" size=\"1\">";
		for ($i = 1; $i < 100; $i++)
			{ $adminmain .= "<option value=\"$i\" $selected>".$i."</option>"; }
		$adminmain .= "</select></td></tr>";

	$adminmain .= "<tr><td>".$L['Enabled']." :</td><td>";
	$adminmain .= "<input type=\"radio\" class=\"radio\" name=\"ndisabled\" value=\"0\" checked=\"checked\" /> ".$L['Yes'];
	$adminmain .= "<input type=\"radio\" class=\"radio\" name=\"ndisabled\" value=\"1\" /> ".$L['No'];
	$adminmain .= "</td></tr>";

	$adminmain .= "<tr><td>".$L['Hidden']." :</td><td>";
	$adminmain .= "<input type=\"radio\" class=\"radio\" name=\"nhidden\" value=\"1\" /> ".$L['Yes'];
	$adminmain .= "<input type=\"radio\" class=\"radio\" name=\"nhidden\" value=\"0\" checked=\"checked\" /> ".$L['No'];
	$adminmain .= "</td></tr>";

	$adminmain .= "<tr><td colspan=\"2\"><input type=\"submit\" class=\"submit btn\" value=\"".$L['Add']."\" /></td></tr></table></form>";
	$adminmain .= "</div></div></div>";
	break;
	}

?>