<?PHP
/* ====================
Seditio - Website engine
Copyright Neocrome & Seditio Team
https://seditio.org
[BEGIN_SED]
File=admin.users.inc.php
Version=179
Updated=2022-jul-15
Type=Core.admin
Author=Seditio Team
Description=Users
[END_SED]
==================== */
if ( !defined('SED_CODE') || !defined('SED_ADMIN') ) { die('Wrong URL.'); }
$g = sed_import('g','G','INT');
list($usr['auth_read'], $usr['auth_write'], $usr['isadmin']) = sed_auth('users', 'a');
sed_block($usr['isadmin']);
// ---------- Breadcrumbs
$urlpaths = array();
$urlpaths[sed_url("admin", "m=users")] = $L['Users'];
$admintitle = $L['Users'];
$t = new XTemplate(sed_skinfile('admin.users', false, true));
if (sed_auth('admin', 'a', 'A'))
{
$t->assign("BUTTON_USERS_CONFIG_URL", sed_url("admin", "m=config&n=edit&o=core&p=users"));
$t -> parse("ADMIN_USERS.USERS_BUTTONS.USERS_BUTTONS_CONFIG");
}
if (sed_auth('users', 'a', 'A'))
{
$t->assign("BUTTON_USERS_BANLIST_URL", sed_url("admin", "m=banlist"));
$t->parse("ADMIN_USERS.USERS_BUTTONS.USERS_BUTTONS_BANLIST");
}
$t -> parse("ADMIN_USERS.USERS_BUTTONS");
switch($n)
{
case 'add':
$ntitle = sed_import('ntitle','P','TXT');
$ndesc = sed_import('ndesc','P','TXT');
$ncolor = sed_import('ncolor','P','TXT');
$nicon = sed_import('nicon','P','TXT');
$nalias = sed_import('nalias','P','TXT');
$nlevel = sed_import('nlevel','P','LVL');
$nmaxsingle = sed_import('nmaxsingle','P','INT');
$nmaxtotal = sed_import('nmaxtotal','P','INT');
$ncopyrightsfrom = sed_import('ncopyrightsfrom','P','INT');
$ndisabled = sed_import('ndisabled','P','BOL');
$nhidden = sed_import('nhidden','P','BOL');
$ntitle = (empty($ntitle)) ? '???' : $ntitle;
$sql = sed_sql_query("INSERT INTO $db_groups (grp_alias, grp_level, grp_disabled, grp_hidden, grp_title, grp_desc, grp_icon, grp_color, grp_pfs_maxfile, grp_pfs_maxtotal, grp_ownerid) VALUES ('".sed_sql_prep($nalias)."', ".(int)$nlevel.", ".(int)$ndisabled.", ".(int)$nhidden.", '".sed_sql_prep($ntitle)."', '".sed_sql_prep($ndesc)."', '".sed_sql_prep($nicon)."', '".sed_sql_prep($ncolor)."', ".(int)$nmaxsingle.", ".(int)$nmaxtotal.", ".(int)$usr['id'].")");
$grp_id = sed_sql_insertid();
$sql = sed_sql_query("SELECT * FROM $db_auth WHERE auth_groupid='".$ncopyrightsfrom."' order by auth_code ASC, auth_option ASC");
while ($row = sed_sql_fetchassoc($sql))
{
$sql1 = sed_sql_query("INSERT into $db_auth (auth_groupid, auth_code, auth_option, auth_rights, auth_rights_lock, auth_setbyuserid) VALUES (".(int)$grp_id.", '".$row['auth_code']."', '".$row['auth_option']."', ".(int)$row['auth_rights'].", 0, ".(int)$usr['id'].")");
}
sed_auth_reorder();
sed_cache_clear('sed_groups');
sed_redirect(sed_url("admin", "m=users", "", true));
exit;
break;
case 'edit':
if ($a=='update')
{
$rtitle = sed_import('rtitle','P','TXT');
$rdesc = sed_import('rdesc','P','TXT');
$ricon = sed_import('ricon','P','TXT');
$rcolor = sed_import('rcolor','P','TXT');
$ralias = sed_import('ralias','P','TXT');
$rlevel = sed_import('rlevel','P','LVL');
$rmaxfile = sed_import('rmaxfile','P','INT');
$rmaxtotal = sed_import('rmaxtotal','P','INT');
$rdisabled = ($g<6) ? 0 : sed_import('rdisabled','P','BOL');
$rhidden = ($g==4) ? 0 : sed_import('rhidden','P','BOL');
$rtitle = sed_sql_prep($rtitle);
$rdesc = sed_sql_prep($rdesc);
$ricon = sed_sql_prep($ricon);
$ralias = sed_sql_prep($ralias);
$sql = sed_sql_query("UPDATE $db_groups SET grp_title='$rtitle', grp_desc='$rdesc', grp_icon='$ricon', grp_color='$rcolor', grp_alias='$ralias', grp_level='$rlevel', grp_pfs_maxfile='$rmaxfile', grp_pfs_maxtotal='$rmaxtotal', grp_disabled='$rdisabled', grp_hidden='$rhidden' WHERE grp_id='$g'");
sed_cache_clear('sed_groups');
sed_redirect(sed_url("admin", "m=users", "", true));
exit;
}
elseif ($a=='delete' && $g>5)
{
$sql = sed_sql_query("DELETE FROM $db_groups WHERE grp_id='$g'");
$sql = sed_sql_query("DELETE FROM $db_auth WHERE auth_groupid='$g'");
$sql = sed_sql_query("DELETE FROM $db_groups_users WHERE gru_groupid='$g'");
sed_auth_clear('all');
sed_cache_clear('sed_groups');
sed_redirect(sed_url("admin", "m=users", "", true));
exit;
}
$sql = sed_sql_query("SELECT * FROM $db_groups WHERE grp_id='$g'");
sed_die(sed_sql_numrows($sql)==0);
$row = sed_sql_fetchassoc($sql);
$sql1 = sed_sql_query("SELECT COUNT(*) FROM $db_groups_users WHERE gru_groupid='$g'");
$row['grp_memberscount'] = sed_sql_result($sql1, 0, "COUNT(*)");
$row['grp_title'] = sed_cc($row['grp_title']);
$row['grp_desc'] = sed_cc($row['grp_desc']);
$row['grp_icon'] = sed_cc($row['grp_icon']);
$row['grp_alias'] = sed_cc($row['grp_alias']);
$urlpaths[sed_url("admin", "m=users&n=edit&g=".$g)] = $row['grp_title'];
$admintitle = $row['grp_title'];
if ($g>5 && $row['grp_memberscount']==0)
{
$t->assign(array(
"USERS_EDIT_DELETE_URL" => sed_url("admin", "m=users&n=edit&a=delete&g=".$g."&".sed_xg())
));
$t -> parse("ADMIN_USERS.USERS_EDIT.USERS_EDIT_ADMIN");
}
$grpcolor = "<select name=\"rcolor\" size=\"1\" style=\"color:#202020; background-color:".$row['grp_color'].";\">";
foreach ($cfg['group_colors'] as $color)
{
$selected = ($color == $row['grp_color']) ? "selected=\"selected\"" : '';
$grpcolor .= "<option value=\"".$color."\" ".$selected." style=\"color:#202020; background-color:".$color.";\">".$color."</option>";
}
$grpcolor .= "</select>";
if ($g > 5) {
$grpdisable = sed_radiobox("rdisabled", $yesno_revers_arr, $row['grp_disabled']);
}
else { $grpdisable = $L['Yes']; }
if ($g != 4) {
$grphidden = sed_radiobox("rhidden", $yesno_arr, $row['grp_hidden']);
}
else
{ $grphidden = $L['No']; }
$grplevel = "<select name=\"rlevel\" size=\"1\">";
for ($i = 1; $i < 100; $i++)
{
$selected = ($i == $row['grp_level']) ? "selected=\"selected\"" : '';
$grplevel .= "<option value=\"$i\" $selected>".$i."</option>";
}
$grplevel .= "</select>";
$t->assign(array(
"USERS_EDIT_SEND" => sed_url("admin", "m=users&n=edit&a=update&g=".$g),
"USERS_EDIT_TITLE" => sed_textbox('rtitle', $row['grp_title'], 40, 64),
"USERS_EDIT_DESC" => sed_textbox('rdesc', $row['grp_desc'], 40, 64),
"USERS_EDIT_ICON" => sed_textbox('ricon', $row['grp_icon'], 40, 128),
"USERS_EDIT_ALIAS" => sed_textbox('ralias', $row['grp_alias'], 16, 24),
"USERS_EDIT_COLOR" => $grpcolor,
"USERS_EDIT_MAXFILESIZE" => sed_textbox('rmaxfile', $row['grp_pfs_maxfile'], 16, 24),
"USERS_EDIT_MAXTOTALSIZE" => sed_textbox('rmaxtotal', $row['grp_pfs_maxtotal'], 16, 24),
"USERS_EDIT_GRPDISABLE" => $grpdisable,
"USERS_EDIT_GRPHIDDEN" => $grphidden,
"USERS_EDIT_GRPLEVEL" => $grplevel,
"USERS_EDIT_RIGHT_URL" => sed_url("admin", "m=rights&g=".$g)
));
$t -> parse("ADMIN_USERS.USERS_EDIT");
break;
default:
$sql = sed_sql_query("SELECT DISTINCT(gru_groupid), COUNT(*) FROM $db_groups_users WHERE 1 GROUP BY gru_groupid");
while ($row = sed_sql_fetchassoc($sql))
{ $members[$row['gru_groupid']] = $row['COUNT(*)']; }
$sql = sed_sql_query("SELECT DISTINCT(user_maingrp), COUNT(*) FROM $db_users WHERE 1 GROUP BY user_maingrp");
while ($row = sed_sql_fetchassoc($sql))
{ $members_main[$row['user_maingrp']] = $row['COUNT(*)']; }
$sql = sed_sql_query("SELECT grp_id, grp_title, grp_disabled, grp_hidden FROM $db_groups WHERE 1 order by grp_level DESC, grp_id DESC");
if (sed_sql_numrows($sql)>0)
{
while ($row = sed_sql_fetchassoc($sql))
{
$row['grp_hidden'] = ($row['grp_hidden']) ? '1' : '0';
$members[$row['grp_id']] = (!isset($members[$row['grp_id']])) ? '0' : $members[$row['grp_id']];
$members_main[$row['grp_id']] = (!isset($members_main[$row['grp_id']])) ? '0' : $members_main[$row['grp_id']];
$t->assign(array(
"GROUP_LIST_ID" => $row['grp_id'],
"GROUP_LIST_URL" => sed_url("admin", "m=users&n=edit&g=".$row['grp_id']),
"GROUP_LIST_TITLE" => sed_cc($row['grp_title']),
"GROUP_LIST_GRP_COUNT" => "<a href=\"".sed_url("users", "gm=".$row['grp_id'])."\">".$members[$row['grp_id']]."</a>",
"GROUP_LIST_MAINGRP_COUNT" => "<a href=\"".sed_url("users", "g=".$row['grp_id'])."\">".$members_main[$row['grp_id']]."</a>",
"GROUP_LIST_DISABLE" => $sed_yesno[!$row['grp_disabled']],
"GROUP_LIST_COUNT" => $sed_yesno[$row['grp_hidden']],
"GROUP_LIST_RIGHT_URL" => sed_url("admin", "m=rights&g=".$row['grp_id'])
));
$t -> parse("ADMIN_USERS.USERS_GROUPS.GROUP_LIST");
}
}
$grpcolor = "<select name=\"ncolor\" size=\"1\">";
foreach ($cfg['group_colors'] as $color)
{
$grpcolor .= "<option value=\"".$color."\" style=\"color:#202020; background-color:".$color.";\">".$color."</option>";
}
$grpcolor .= "</select>";
$grplevel = "<select name=\"nlevel\" size=\"1\">";
for ($i = 1; $i < 100; $i++)
{ $grplevel .= "<option value=\"$i\">".$i."</option>"; }
$grplevel .= "</select>";
$grpdisable = sed_radiobox("ndisabled", $yesno_revers_arr, 0);
$grphidden = sed_radiobox("nhidden", $yesno_arr, 0);
$t->assign(array(
"GROUP_ADD_SEND" => sed_url("admin", "m=users&n=add"),
"GROUP_ADD_TITLE" => sed_textbox('ntitle','', 40, 64),
"GROUP_ADD_DESC" => sed_textbox('ndesc','', 40, 64),
"GROUP_ADD_ICON" => sed_textbox('nicon','', 40, 128),
"GROUP_ADD_ALIAS" => sed_textbox('nalias','', 16, 24),
"GROUP_ADD_COLOR" => $grpcolor,
"GROUP_ADD_MAXFILESIZE" => sed_textbox('nmaxsingle', '0', 16, 16),
"GROUP_ADD_MAXTOTALSIZE" => sed_textbox('nmaxtotal', '0', 16, 16),
"GROUP_ADD_COPYRIGHTSFROM" => sed_selectbox_groups(4, 'ncopyrightsfrom', array('5')),
"GROUP_ADD_GRPLEVEL" => $grplevel,
"GROUP_ADD_GRPDISABLE" => $grpdisable,
"GROUP_ADD_GRPHIDDEN" => $grphidden
));
$t -> parse("ADMIN_USERS.USERS_GROUPS");
break;
}
$t->assign("ADMIN_USERS_TITLE", $admintitle);
$t -> parse("ADMIN_USERS");
$adminmain .= $t -> text("ADMIN_USERS");
?>