source: forum/includes/ucp/ucp_groups.php@ 400

Last change on this file since 400 was 400, checked in by george, 16 years ago
  • Přidáno: Nové forum phpBB 3.
File size: 38.3 KB
Line 
1<?php
2/**
3*
4* @package ucp
5* @version $Id: ucp_groups.php 9067 2008-11-21 13:21:53Z Kellanved $
6* @copyright (c) 2005 phpBB Group
7* @license http://opensource.org/licenses/gpl-license.php GNU Public License
8*
9*/
10
11/**
12* @ignore
13*/
14if (!defined('IN_PHPBB'))
15{
16 exit;
17}
18
19/**
20* ucp_groups
21* @package ucp
22*/
23class ucp_groups
24{
25 var $u_action;
26
27 function main($id, $mode)
28 {
29 global $config, $phpbb_root_path, $phpEx;
30 global $db, $user, $auth, $cache, $template;
31
32 $user->add_lang('groups');
33
34 $return_page = '<br /><br />' . sprintf($user->lang['RETURN_PAGE'], '<a href="' . $this->u_action . '">', '</a>');
35
36 $mark_ary = request_var('mark', array(0));
37 $submit = (!empty($_POST['submit'])) ? true : false;
38 $delete = (!empty($_POST['delete'])) ? true : false;
39 $error = $data = array();
40
41 switch ($mode)
42 {
43 case 'membership':
44
45 $this->page_title = 'UCP_USERGROUPS_MEMBER';
46
47 if ($submit || isset($_POST['change_default']))
48 {
49 $action = (isset($_POST['change_default'])) ? 'change_default' : request_var('action', '');
50 $group_id = ($action == 'change_default') ? request_var('default', 0) : request_var('selected', 0);
51
52 if (!$group_id)
53 {
54 trigger_error('NO_GROUP_SELECTED');
55 }
56
57 $sql = 'SELECT group_id, group_name, group_type
58 FROM ' . GROUPS_TABLE . "
59 WHERE group_id IN ($group_id, {$user->data['group_id']})";
60 $result = $db->sql_query($sql);
61
62 $group_row = array();
63 while ($row = $db->sql_fetchrow($result))
64 {
65 $row['group_name'] = ($row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $row['group_name']] : $row['group_name'];
66 $group_row[$row['group_id']] = $row;
67 }
68 $db->sql_freeresult($result);
69
70 if (!sizeof($group_row))
71 {
72 trigger_error('GROUP_NOT_EXIST');
73 }
74
75 switch ($action)
76 {
77 case 'change_default':
78 // User already having this group set as default?
79 if ($group_id == $user->data['group_id'])
80 {
81 trigger_error($user->lang['ALREADY_DEFAULT_GROUP'] . $return_page);
82 }
83
84 if (!$auth->acl_get('u_chggrp'))
85 {
86 trigger_error($user->lang['NOT_AUTHORISED'] . $return_page);
87 }
88
89 // User needs to be member of the group in order to make it default
90 if (!group_memberships($group_id, $user->data['user_id'], true))
91 {
92 trigger_error($user->lang['NOT_MEMBER_OF_GROUP'] . $return_page);
93 }
94
95 if (confirm_box(true))
96 {
97 group_user_attributes('default', $group_id, $user->data['user_id']);
98
99 add_log('user', $user->data['user_id'], 'LOG_USER_GROUP_CHANGE', sprintf($user->lang['USER_GROUP_CHANGE'], $group_row[$user->data['group_id']]['group_name'], $group_row[$group_id]['group_name']));
100
101 meta_refresh(3, $this->u_action);
102 trigger_error($user->lang['CHANGED_DEFAULT_GROUP'] . $return_page);
103 }
104 else
105 {
106 $s_hidden_fields = array(
107 'default' => $group_id,
108 'change_default'=> true
109 );
110
111 confirm_box(false, sprintf($user->lang['GROUP_CHANGE_DEFAULT'], $group_row[$group_id]['group_name']), build_hidden_fields($s_hidden_fields));
112 }
113
114 break;
115
116 case 'resign':
117
118 // User tries to resign from default group but is not allowed to change it?
119 if ($group_id == $user->data['group_id'] && !$auth->acl_get('u_chggrp'))
120 {
121 trigger_error($user->lang['NOT_RESIGN_FROM_DEFAULT_GROUP'] . $return_page);
122 }
123
124 if (!($row = group_memberships($group_id, $user->data['user_id'])))
125 {
126 trigger_error($user->lang['NOT_MEMBER_OF_GROUP'] . $return_page);
127 }
128 list(, $row) = each($row);
129
130 $sql = 'SELECT group_type
131 FROM ' . GROUPS_TABLE . '
132 WHERE group_id = ' . $group_id;
133 $result = $db->sql_query($sql);
134 $group_type = (int) $db->sql_fetchfield('group_type');
135 $db->sql_freeresult($result);
136
137 if ($group_type != GROUP_OPEN && $group_type != GROUP_FREE)
138 {
139 trigger_error($user->lang['CANNOT_RESIGN_GROUP'] . $return_page);
140 }
141
142 if (confirm_box(true))
143 {
144 group_user_del($group_id, $user->data['user_id']);
145
146 add_log('user', $user->data['user_id'], 'LOG_USER_GROUP_RESIGN', $group_row[$group_id]['group_name']);
147
148 meta_refresh(3, $this->u_action);
149 trigger_error($user->lang[($row['user_pending']) ? 'GROUP_RESIGNED_PENDING' : 'GROUP_RESIGNED_MEMBERSHIP'] . $return_page);
150 }
151 else
152 {
153 $s_hidden_fields = array(
154 'selected' => $group_id,
155 'action' => 'resign',
156 'submit' => true
157 );
158
159 confirm_box(false, ($row['user_pending']) ? 'GROUP_RESIGN_PENDING' : 'GROUP_RESIGN_MEMBERSHIP', build_hidden_fields($s_hidden_fields));
160 }
161
162 break;
163
164 case 'join':
165
166 $sql = 'SELECT ug.*, u.username, u.username_clean, u.user_email
167 FROM ' . USER_GROUP_TABLE . ' ug, ' . USERS_TABLE . ' u
168 WHERE ug.user_id = u.user_id
169 AND ug.group_id = ' . $group_id . '
170 AND ug.user_id = ' . $user->data['user_id'];
171 $result = $db->sql_query($sql);
172 $row = $db->sql_fetchrow($result);
173 $db->sql_freeresult($result);
174
175 if ($row)
176 {
177 if ($row['user_pending'])
178 {
179 trigger_error($user->lang['ALREADY_IN_GROUP_PENDING'] . $return_page);
180 }
181
182 trigger_error($user->lang['ALREADY_IN_GROUP'] . $return_page);
183 }
184
185 // Check permission to join (open group or request)
186 if ($group_row[$group_id]['group_type'] != GROUP_OPEN && $group_row[$group_id]['group_type'] != GROUP_FREE)
187 {
188 trigger_error($user->lang['CANNOT_JOIN_GROUP'] . $return_page);
189 }
190
191 if (confirm_box(true))
192 {
193 if ($group_row[$group_id]['group_type'] == GROUP_FREE)
194 {
195 group_user_add($group_id, $user->data['user_id']);
196
197 $email_template = 'group_added';
198 }
199 else
200 {
201 group_user_add($group_id, $user->data['user_id'], false, false, false, 0, 1);
202
203 $email_template = 'group_request';
204 }
205
206 include_once($phpbb_root_path . 'includes/functions_messenger.' . $phpEx);
207 $messenger = new messenger();
208
209 $sql = 'SELECT u.username, u.username_clean, u.user_email, u.user_notify_type, u.user_jabber, u.user_lang
210 FROM ' . USER_GROUP_TABLE . ' ug, ' . USERS_TABLE . ' u
211 WHERE ug.user_id = u.user_id
212 AND ' . (($group_row[$group_id]['group_type'] == GROUP_FREE) ? "ug.user_id = {$user->data['user_id']}" : 'ug.group_leader = 1') . "
213 AND ug.group_id = $group_id";
214 $result = $db->sql_query($sql);
215
216 while ($row = $db->sql_fetchrow($result))
217 {
218 $messenger->template($email_template, $row['user_lang']);
219
220 $messenger->to($row['user_email'], $row['username']);
221 $messenger->im($row['user_jabber'], $row['username']);
222
223 $messenger->assign_vars(array(
224 'USERNAME' => htmlspecialchars_decode($row['username']),
225 'GROUP_NAME' => htmlspecialchars_decode($group_row[$group_id]['group_name']),
226 'REQUEST_USERNAME' => $user->data['username'],
227
228 'U_PENDING' => generate_board_url() . "/ucp.$phpEx?i=groups&mode=manage&action=list&g=$group_id",
229 'U_GROUP' => generate_board_url() . "/memberlist.$phpEx?mode=group&g=$group_id")
230 );
231
232 $messenger->send($row['user_notify_type']);
233 }
234 $db->sql_freeresult($result);
235
236 $messenger->save_queue();
237
238 add_log('user', $user->data['user_id'], 'LOG_USER_GROUP_JOIN' . (($group_row[$group_id]['group_type'] == GROUP_FREE) ? '' : '_PENDING'), $group_row[$group_id]['group_name']);
239
240 meta_refresh(3, $this->u_action);
241 trigger_error($user->lang[($group_row[$group_id]['group_type'] == GROUP_FREE) ? 'GROUP_JOINED' : 'GROUP_JOINED_PENDING'] . $return_page);
242 }
243 else
244 {
245 $s_hidden_fields = array(
246 'selected' => $group_id,
247 'action' => 'join',
248 'submit' => true
249 );
250
251 confirm_box(false, ($group_row[$group_id]['group_type'] == GROUP_FREE) ? 'GROUP_JOIN' : 'GROUP_JOIN_PENDING', build_hidden_fields($s_hidden_fields));
252 }
253
254 break;
255
256 case 'demote':
257
258 if (!($row = group_memberships($group_id, $user->data['user_id'])))
259 {
260 trigger_error($user->lang['NOT_MEMBER_OF_GROUP'] . $return_page);
261 }
262 list(, $row) = each($row);
263
264 if (!$row['group_leader'])
265 {
266 trigger_error($user->lang['NOT_LEADER_OF_GROUP'] . $return_page);
267 }
268
269 if (confirm_box(true))
270 {
271 group_user_attributes('demote', $group_id, $user->data['user_id']);
272
273 add_log('user', $user->data['user_id'], 'LOG_USER_GROUP_DEMOTE', $group_row[$group_id]['group_name']);
274
275 meta_refresh(3, $this->u_action);
276 trigger_error($user->lang['USER_GROUP_DEMOTED'] . $return_page);
277 }
278 else
279 {
280 $s_hidden_fields = array(
281 'selected' => $group_id,
282 'action' => 'demote',
283 'submit' => true
284 );
285
286 confirm_box(false, 'USER_GROUP_DEMOTE', build_hidden_fields($s_hidden_fields));
287 }
288
289 break;
290 }
291 }
292
293 $sql = 'SELECT g.*, ug.group_leader, ug.user_pending
294 FROM ' . GROUPS_TABLE . ' g, ' . USER_GROUP_TABLE . ' ug
295 WHERE ug.user_id = ' . $user->data['user_id'] . '
296 AND g.group_id = ug.group_id
297 ORDER BY g.group_type DESC, g.group_name';
298 $result = $db->sql_query($sql);
299
300 $group_id_ary = array();
301 $leader_count = $member_count = $pending_count = 0;
302 while ($row = $db->sql_fetchrow($result))
303 {
304 $block = ($row['group_leader']) ? 'leader' : (($row['user_pending']) ? 'pending' : 'member');
305
306 switch ($row['group_type'])
307 {
308 case GROUP_OPEN:
309 $group_status = 'OPEN';
310 break;
311
312 case GROUP_CLOSED:
313 $group_status = 'CLOSED';
314 break;
315
316 case GROUP_HIDDEN:
317 $group_status = 'HIDDEN';
318 break;
319
320 case GROUP_SPECIAL:
321 $group_status = 'SPECIAL';
322 break;
323
324 case GROUP_FREE:
325 $group_status = 'FREE';
326 break;
327 }
328
329 $template->assign_block_vars($block, array(
330 'GROUP_ID' => $row['group_id'],
331 'GROUP_NAME' => ($row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $row['group_name']] : $row['group_name'],
332 'GROUP_DESC' => ($row['group_type'] <> GROUP_SPECIAL) ? generate_text_for_display($row['group_desc'], $row['group_desc_uid'], $row['group_desc_bitfield'], $row['group_desc_options']) : $user->lang['GROUP_IS_SPECIAL'],
333 'GROUP_SPECIAL' => ($row['group_type'] <> GROUP_SPECIAL) ? false : true,
334 'GROUP_STATUS' => $user->lang['GROUP_IS_' . $group_status],
335 'GROUP_COLOUR' => $row['group_colour'],
336
337 'U_VIEW_GROUP' => append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=group&amp;g=' . $row['group_id']),
338
339 'S_GROUP_DEFAULT' => ($row['group_id'] == $user->data['group_id']) ? true : false,
340 'S_ROW_COUNT' => ${$block . '_count'}++)
341 );
342
343 $group_id_ary[] = $row['group_id'];
344 }
345 $db->sql_freeresult($result);
346
347 // Hide hidden groups unless user is an admin with group privileges
348 $sql_and = ($auth->acl_gets('a_group', 'a_groupadd', 'a_groupdel')) ? '<> ' . GROUP_SPECIAL : 'NOT IN (' . GROUP_SPECIAL . ', ' . GROUP_HIDDEN . ')';
349
350 $sql = 'SELECT group_id, group_name, group_colour, group_desc, group_desc_uid, group_desc_bitfield, group_desc_options, group_type, group_founder_manage
351 FROM ' . GROUPS_TABLE . '
352 WHERE ' . ((sizeof($group_id_ary)) ? $db->sql_in_set('group_id', $group_id_ary, true) . ' AND ' : '') . "
353 group_type $sql_and
354 ORDER BY group_type DESC, group_name";
355 $result = $db->sql_query($sql);
356
357 $nonmember_count = 0;
358 while ($row = $db->sql_fetchrow($result))
359 {
360 switch ($row['group_type'])
361 {
362 case GROUP_OPEN:
363 $group_status = 'OPEN';
364 break;
365
366 case GROUP_CLOSED:
367 $group_status = 'CLOSED';
368 break;
369
370 case GROUP_HIDDEN:
371 $group_status = 'HIDDEN';
372 break;
373
374 case GROUP_SPECIAL:
375 $group_status = 'SPECIAL';
376 break;
377
378 case GROUP_FREE:
379 $group_status = 'FREE';
380 break;
381 }
382
383 $template->assign_block_vars('nonmember', array(
384 'GROUP_ID' => $row['group_id'],
385 'GROUP_NAME' => ($row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $row['group_name']] : $row['group_name'],
386 'GROUP_DESC' => ($row['group_type'] <> GROUP_SPECIAL) ? generate_text_for_display($row['group_desc'], $row['group_desc_uid'], $row['group_desc_bitfield'], $row['group_desc_options']) : $user->lang['GROUP_IS_SPECIAL'],
387 'GROUP_SPECIAL' => ($row['group_type'] <> GROUP_SPECIAL) ? false : true,
388 'GROUP_CLOSED' => ($row['group_type'] <> GROUP_CLOSED || $auth->acl_gets('a_group', 'a_groupadd', 'a_groupdel')) ? false : true,
389 'GROUP_STATUS' => $user->lang['GROUP_IS_' . $group_status],
390 'S_CAN_JOIN' => ($row['group_type'] == GROUP_OPEN || $row['group_type'] == GROUP_FREE) ? true : false,
391 'GROUP_COLOUR' => $row['group_colour'],
392
393 'U_VIEW_GROUP' => append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=group&amp;g=' . $row['group_id']),
394
395 'S_ROW_COUNT' => $nonmember_count++)
396 );
397 }
398 $db->sql_freeresult($result);
399
400 $template->assign_vars(array(
401 'S_CHANGE_DEFAULT' => ($auth->acl_get('u_chggrp')) ? true : false,
402 'S_LEADER_COUNT' => $leader_count,
403 'S_MEMBER_COUNT' => $member_count,
404 'S_PENDING_COUNT' => $pending_count,
405 'S_NONMEMBER_COUNT' => $nonmember_count,
406
407 'S_UCP_ACTION' => $this->u_action)
408 );
409
410 break;
411
412 case 'manage':
413
414 $this->page_title = 'UCP_USERGROUPS_MANAGE';
415 $action = (isset($_POST['addusers'])) ? 'addusers' : request_var('action', '');
416 $group_id = request_var('g', 0);
417
418 include($phpbb_root_path . 'includes/functions_display.' . $phpEx);
419
420 add_form_key('ucp_groups');
421
422 if ($group_id)
423 {
424 $sql = 'SELECT *
425 FROM ' . GROUPS_TABLE . "
426 WHERE group_id = $group_id";
427 $result = $db->sql_query($sql);
428 $group_row = $db->sql_fetchrow($result);
429 $db->sql_freeresult($result);
430
431 if (!$group_row)
432 {
433 trigger_error($user->lang['NO_GROUP'] . $return_page);
434 }
435
436 // Check if the user is allowed to manage this group if set to founder only.
437 if ($user->data['user_type'] != USER_FOUNDER && $group_row['group_founder_manage'])
438 {
439 trigger_error($user->lang['NOT_ALLOWED_MANAGE_GROUP'] . $return_page, E_USER_WARNING);
440 }
441
442 $group_name = $group_row['group_name'];
443 $group_type = $group_row['group_type'];
444
445 $avatar_img = (!empty($group_row['group_avatar'])) ? get_user_avatar($group_row['group_avatar'], $group_row['group_avatar_type'], $group_row['group_avatar_width'], $group_row['group_avatar_height'], 'GROUP_AVATAR') : '<img src="' . $phpbb_root_path . 'adm/images/no_avatar.gif" alt="" />';
446
447 $template->assign_vars(array(
448 'GROUP_NAME' => ($group_type == GROUP_SPECIAL) ? $user->lang['G_' . $group_name] : $group_name,
449 'GROUP_INTERNAL_NAME' => $group_name,
450 'GROUP_COLOUR' => (isset($group_row['group_colour'])) ? $group_row['group_colour'] : '',
451 'GROUP_DESC_DISP' => generate_text_for_display($group_row['group_desc'], $group_row['group_desc_uid'], $group_row['group_desc_bitfield'], $group_row['group_desc_options']),
452 'GROUP_TYPE' => $group_row['group_type'],
453
454 'AVATAR' => $avatar_img,
455 'AVATAR_IMAGE' => $avatar_img,
456 'AVATAR_WIDTH' => (isset($group_row['group_avatar_width'])) ? $group_row['group_avatar_width'] : '',
457 'AVATAR_HEIGHT' => (isset($group_row['group_avatar_height'])) ? $group_row['group_avatar_height'] : '',
458 ));
459 }
460
461 switch ($action)
462 {
463 case 'edit':
464
465 if (!$group_id)
466 {
467 trigger_error($user->lang['NO_GROUP'] . $return_page);
468 }
469
470 if (!($row = group_memberships($group_id, $user->data['user_id'])))
471 {
472 trigger_error($user->lang['NOT_MEMBER_OF_GROUP'] . $return_page);
473 }
474 list(, $row) = each($row);
475
476 if (!$row['group_leader'])
477 {
478 trigger_error($user->lang['NOT_LEADER_OF_GROUP'] . $return_page);
479 }
480
481 $file_uploads = (@ini_get('file_uploads') || strtolower(@ini_get('file_uploads')) == 'on') ? true : false;
482 $user->add_lang(array('acp/groups', 'acp/common'));
483
484 $data = $submit_ary = array();
485
486 $update = (isset($_POST['update'])) ? true : false;
487
488 $error = array();
489
490 $avatar_select = basename(request_var('avatar_select', ''));
491 $category = basename(request_var('category', ''));
492
493 $can_upload = (file_exists($phpbb_root_path . $config['avatar_path']) && @is_writable($phpbb_root_path . $config['avatar_path']) && $file_uploads) ? true : false;
494
495 // Did we submit?
496 if ($update)
497 {
498 $group_name = utf8_normalize_nfc(request_var('group_name', '', true));
499 $group_desc = utf8_normalize_nfc(request_var('group_desc', '', true));
500 $group_type = request_var('group_type', GROUP_FREE);
501
502 $allow_desc_bbcode = request_var('desc_parse_bbcode', false);
503 $allow_desc_urls = request_var('desc_parse_urls', false);
504 $allow_desc_smilies = request_var('desc_parse_smilies', false);
505
506 $submit_ary = array(
507 'colour' => request_var('group_colour', ''),
508 'rank' => request_var('group_rank', 0),
509 'receive_pm' => isset($_REQUEST['group_receive_pm']) ? 1 : 0,
510 'message_limit' => request_var('group_message_limit', 0),
511 'max_recipients'=> request_var('group_max_recipients', 0),
512 );
513
514 $data['uploadurl'] = request_var('uploadurl', '');
515 $data['remotelink'] = request_var('remotelink', '');
516 $data['width'] = request_var('width', '');
517 $data['height'] = request_var('height', '');
518 $delete = request_var('delete', '');
519
520 if (!empty($_FILES['uploadfile']['tmp_name']) || $data['uploadurl'] || $data['remotelink'])
521 {
522 // Avatar stuff
523 $var_ary = array(
524 'uploadurl' => array('string', true, 5, 255),
525 'remotelink' => array('string', true, 5, 255),
526 'width' => array('string', true, 1, 3),
527 'height' => array('string', true, 1, 3),
528 );
529
530 if (!($error = validate_data($data, $var_ary)))
531 {
532 $data['user_id'] = "g$group_id";
533
534 if ((!empty($_FILES['uploadfile']['tmp_name']) || $data['uploadurl']) && $can_upload)
535 {
536 list($submit_ary['avatar_type'], $submit_ary['avatar'], $submit_ary['avatar_width'], $submit_ary['avatar_height']) = avatar_upload($data, $error);
537 }
538 else if ($data['remotelink'])
539 {
540 list($submit_ary['avatar_type'], $submit_ary['avatar'], $submit_ary['avatar_width'], $submit_ary['avatar_height']) = avatar_remote($data, $error);
541 }
542 }
543 }
544 else if ($avatar_select && $config['allow_avatar_local'])
545 {
546 // check avatar gallery
547 if (is_dir($phpbb_root_path . $config['avatar_gallery_path'] . '/' . $category))
548 {
549 $submit_ary['avatar_type'] = AVATAR_GALLERY;
550
551 list($submit_ary['avatar_width'], $submit_ary['avatar_height']) = getimagesize($phpbb_root_path . $config['avatar_gallery_path'] . '/' . $category . '/' . $avatar_select);
552 $submit_ary['avatar'] = $category . '/' . $avatar_select;
553 }
554 }
555 else if ($delete)
556 {
557 $submit_ary['avatar'] = '';
558 $submit_ary['avatar_type'] = $submit_ary['avatar_width'] = $submit_ary['avatar_height'] = 0;
559 }
560 else if ($data['width'] && $data['height'])
561 {
562 // Only update the dimensions?
563 if ($config['avatar_max_width'] || $config['avatar_max_height'])
564 {
565 if ($data['width'] > $config['avatar_max_width'] || $data['height'] > $config['avatar_max_height'])
566 {
567 $error[] = sprintf($user->lang['AVATAR_WRONG_SIZE'], $config['avatar_min_width'], $config['avatar_min_height'], $config['avatar_max_width'], $config['avatar_max_height'], $data['width'], $data['height']);
568 }
569 }
570
571 if (!sizeof($error))
572 {
573 if ($config['avatar_min_width'] || $config['avatar_min_height'])
574 {
575 if ($data['width'] < $config['avatar_min_width'] || $data['height'] < $config['avatar_min_height'])
576 {
577 $error[] = sprintf($user->lang['AVATAR_WRONG_SIZE'], $config['avatar_min_width'], $config['avatar_min_height'], $config['avatar_max_width'], $config['avatar_max_height'], $data['width'], $data['height']);
578 }
579 }
580 }
581
582 if (!sizeof($error))
583 {
584 $submit_ary['avatar_width'] = $data['width'];
585 $submit_ary['avatar_height'] = $data['height'];
586 }
587 }
588
589 if ((isset($submit_ary['avatar']) && $submit_ary['avatar'] && (!isset($group_row['group_avatar']))) || $delete)
590 {
591 if (isset($group_row['group_avatar']) && $group_row['group_avatar'])
592 {
593 avatar_delete('group', $group_row, true);
594 }
595 }
596
597 if (!check_form_key('ucp_groups'))
598 {
599 $error[] = $user->lang['FORM_INVALID'];
600 }
601
602 if (!sizeof($error))
603 {
604 // Only set the rank, colour, etc. if it's changed or if we're adding a new
605 // group. This prevents existing group members being updated if no changes
606 // were made.
607
608 $group_attributes = array();
609 $test_variables = array('rank', 'colour', 'avatar', 'avatar_type', 'avatar_width', 'avatar_height', 'receive_pm', 'legend', 'message_limit', 'max_recipients');
610 foreach ($test_variables as $test)
611 {
612 if ($action == 'add' || (isset($submit_ary[$test]) && $group_row['group_' . $test] != $submit_ary[$test]))
613 {
614 $group_attributes['group_' . $test] = $group_row['group_' . $test] = $submit_ary[$test];
615 }
616 }
617
618 if (!($error = group_create($group_id, $group_type, $group_name, $group_desc, $group_attributes, $allow_desc_bbcode, $allow_desc_urls, $allow_desc_smilies)))
619 {
620 $cache->destroy('sql', GROUPS_TABLE);
621
622 $message = ($action == 'edit') ? 'GROUP_UPDATED' : 'GROUP_CREATED';
623 trigger_error($user->lang[$message] . $return_page);
624 }
625 }
626
627 if (sizeof($error))
628 {
629 $group_rank = $submit_ary['rank'];
630
631 $group_desc_data = array(
632 'text' => $group_desc,
633 'allow_bbcode' => $allow_desc_bbcode,
634 'allow_smilies' => $allow_desc_smilies,
635 'allow_urls' => $allow_desc_urls
636 );
637 }
638 }
639 else if (!$group_id)
640 {
641 $group_name = utf8_normalize_nfc(request_var('group_name', '', true));
642 $group_desc_data = array(
643 'text' => '',
644 'allow_bbcode' => true,
645 'allow_smilies' => true,
646 'allow_urls' => true
647 );
648 $group_rank = 0;
649 $group_type = GROUP_OPEN;
650 }
651 else
652 {
653 $group_desc_data = generate_text_for_edit($group_row['group_desc'], $group_row['group_desc_uid'], $group_row['group_desc_options']);
654 $group_rank = $group_row['group_rank'];
655 }
656
657 $sql = 'SELECT *
658 FROM ' . RANKS_TABLE . '
659 WHERE rank_special = 1
660 ORDER BY rank_title';
661 $result = $db->sql_query($sql);
662
663 $rank_options = '<option value="0"' . ((!$group_rank) ? ' selected="selected"' : '') . '>' . $user->lang['USER_DEFAULT'] . '</option>';
664 while ($row = $db->sql_fetchrow($result))
665 {
666 $selected = ($group_rank && $row['rank_id'] == $group_rank) ? ' selected="selected"' : '';
667 $rank_options .= '<option value="' . $row['rank_id'] . '"' . $selected . '>' . $row['rank_title'] . '</option>';
668 }
669 $db->sql_freeresult($result);
670
671 $type_free = ($group_type == GROUP_FREE) ? ' checked="checked"' : '';
672 $type_open = ($group_type == GROUP_OPEN) ? ' checked="checked"' : '';
673 $type_closed = ($group_type == GROUP_CLOSED) ? ' checked="checked"' : '';
674 $type_hidden = ($group_type == GROUP_HIDDEN) ? ' checked="checked"' : '';
675
676 $display_gallery = (isset($_POST['display_gallery'])) ? true : false;
677
678 if ($config['allow_avatar_local'] && $display_gallery)
679 {
680 avatar_gallery($category, $avatar_select, 4);
681 }
682
683 $avatars_enabled = ($can_upload || ($config['allow_avatar_local'] || $config['allow_avatar_remote'])) ? true : false;
684
685 $template->assign_vars(array(
686 'S_EDIT' => true,
687 'S_INCLUDE_SWATCH' => true,
688 'S_CAN_UPLOAD' => $can_upload,
689 'S_FORM_ENCTYPE' => ($can_upload) ? ' enctype="multipart/form-data"' : '',
690 'S_ERROR' => (sizeof($error)) ? true : false,
691 'S_SPECIAL_GROUP' => ($group_type == GROUP_SPECIAL) ? true : false,
692 'S_AVATARS_ENABLED' => $avatars_enabled,
693 'S_DISPLAY_GALLERY' => ($config['allow_avatar_local'] && !$display_gallery) ? true : false,
694 'S_IN_GALLERY' => ($config['allow_avatar_local'] && $display_gallery) ? true : false,
695
696 'ERROR_MSG' => (sizeof($error)) ? implode('<br />', $error) : '',
697 'GROUP_RECEIVE_PM' => (isset($group_row['group_receive_pm']) && $group_row['group_receive_pm']) ? ' checked="checked"' : '',
698 'GROUP_MESSAGE_LIMIT' => (isset($group_row['group_message_limit'])) ? $group_row['group_message_limit'] : 0,
699 'GROUP_MAX_RECIPIENTS' => (isset($group_row['group_max_recipients'])) ? $group_row['group_max_recipients'] : 0,
700
701 'GROUP_DESC' => $group_desc_data['text'],
702 'S_DESC_BBCODE_CHECKED' => $group_desc_data['allow_bbcode'],
703 'S_DESC_URLS_CHECKED' => $group_desc_data['allow_urls'],
704 'S_DESC_SMILIES_CHECKED'=> $group_desc_data['allow_smilies'],
705
706 'S_RANK_OPTIONS' => $rank_options,
707 'AVATAR_MAX_FILESIZE' => $config['avatar_filesize'],
708
709 'GROUP_TYPE_FREE' => GROUP_FREE,
710 'GROUP_TYPE_OPEN' => GROUP_OPEN,
711 'GROUP_TYPE_CLOSED' => GROUP_CLOSED,
712 'GROUP_TYPE_HIDDEN' => GROUP_HIDDEN,
713 'GROUP_TYPE_SPECIAL' => GROUP_SPECIAL,
714
715 'GROUP_FREE' => $type_free,
716 'GROUP_OPEN' => $type_open,
717 'GROUP_CLOSED' => $type_closed,
718 'GROUP_HIDDEN' => $type_hidden,
719
720 'U_SWATCH' => append_sid("{$phpbb_root_path}adm/swatch.$phpEx", 'form=ucp&amp;name=group_colour'),
721 'S_UCP_ACTION' => $this->u_action . "&amp;action=$action&amp;g=$group_id",
722 'L_AVATAR_EXPLAIN' => sprintf($user->lang['AVATAR_EXPLAIN'], $config['avatar_max_width'], $config['avatar_max_height'], $config['avatar_filesize'] / 1024),
723 ));
724
725 break;
726
727 case 'list':
728
729 if (!$group_id)
730 {
731 trigger_error($user->lang['NO_GROUP'] . $return_page);
732 }
733
734 if (!($row = group_memberships($group_id, $user->data['user_id'])))
735 {
736 trigger_error($user->lang['NOT_MEMBER_OF_GROUP'] . $return_page);
737 }
738 list(, $row) = each($row);
739
740 if (!$row['group_leader'])
741 {
742 trigger_error($user->lang['NOT_LEADER_OF_GROUP'] . $return_page);
743 }
744
745 $user->add_lang(array('acp/groups', 'acp/common'));
746 $start = request_var('start', 0);
747
748 // Grab the leaders - always, on every page...
749 $sql = 'SELECT u.user_id, u.username, u.username_clean, u.user_colour, u.user_regdate, u.user_posts, u.group_id, ug.group_leader, ug.user_pending
750 FROM ' . USERS_TABLE . ' u, ' . USER_GROUP_TABLE . " ug
751 WHERE ug.group_id = $group_id
752 AND u.user_id = ug.user_id
753 AND ug.group_leader = 1
754 ORDER BY ug.user_pending DESC, u.username_clean";
755 $result = $db->sql_query($sql);
756
757 while ($row = $db->sql_fetchrow($result))
758 {
759 $template->assign_block_vars('leader', array(
760 'USERNAME' => $row['username'],
761 'USERNAME_COLOUR' => $row['user_colour'],
762 'USERNAME_FULL' => get_username_string('full', $row['user_id'], $row['username'], $row['user_colour']),
763 'U_USER_VIEW' => get_username_string('profile', $row['user_id'], $row['username']),
764 'S_GROUP_DEFAULT' => ($row['group_id'] == $group_id) ? true : false,
765 'JOINED' => ($row['user_regdate']) ? $user->format_date($row['user_regdate']) : ' - ',
766 'USER_POSTS' => $row['user_posts'],
767 'USER_ID' => $row['user_id'])
768 );
769 }
770 $db->sql_freeresult($result);
771
772 // Total number of group members (non-leaders)
773 $sql = 'SELECT COUNT(user_id) AS total_members
774 FROM ' . USER_GROUP_TABLE . "
775 WHERE group_id = $group_id
776 AND group_leader = 0";
777 $result = $db->sql_query($sql);
778 $total_members = (int) $db->sql_fetchfield('total_members');
779 $db->sql_freeresult($result);
780
781 // Grab the members
782 $sql = 'SELECT u.user_id, u.username, u.username_clean, u.user_colour, u.user_regdate, u.user_posts, u.group_id, ug.group_leader, ug.user_pending
783 FROM ' . USERS_TABLE . ' u, ' . USER_GROUP_TABLE . " ug
784 WHERE ug.group_id = $group_id
785 AND u.user_id = ug.user_id
786 AND ug.group_leader = 0
787 ORDER BY ug.user_pending DESC, u.username_clean";
788 $result = $db->sql_query_limit($sql, $config['topics_per_page'], $start);
789
790 $pending = false;
791 $approved = false;
792
793 while ($row = $db->sql_fetchrow($result))
794 {
795 if ($row['user_pending'] && !$pending)
796 {
797 $template->assign_block_vars('member', array(
798 'S_PENDING' => true)
799 );
800 $template->assign_var('S_PENDING_SET', true);
801
802 $pending = true;
803 }
804 else if (!$row['user_pending'] && !$approved)
805 {
806 $template->assign_block_vars('member', array(
807 'S_APPROVED' => true)
808 );
809 $template->assign_var('S_APPROVED_SET', true);
810
811 $approved = true;
812 }
813
814 $template->assign_block_vars('member', array(
815 'USERNAME' => $row['username'],
816 'USERNAME_COLOUR' => $row['user_colour'],
817 'USERNAME_FULL' => get_username_string('full', $row['user_id'], $row['username'], $row['user_colour']),
818 'U_USER_VIEW' => get_username_string('profile', $row['user_id'], $row['username']),
819 'S_GROUP_DEFAULT' => ($row['group_id'] == $group_id) ? true : false,
820 'JOINED' => ($row['user_regdate']) ? $user->format_date($row['user_regdate']) : ' - ',
821 'USER_POSTS' => $row['user_posts'],
822 'USER_ID' => $row['user_id'])
823 );
824 }
825 $db->sql_freeresult($result);
826
827 $s_action_options = '';
828 $options = array('default' => 'DEFAULT', 'approve' => 'APPROVE', 'deleteusers' => 'DELETE');
829
830 foreach ($options as $option => $lang)
831 {
832 $s_action_options .= '<option value="' . $option . '">' . $user->lang['GROUP_' . $lang] . '</option>';
833 }
834
835 $template->assign_vars(array(
836 'S_LIST' => true,
837 'S_ACTION_OPTIONS' => $s_action_options,
838 'S_ON_PAGE' => on_page($total_members, $config['topics_per_page'], $start),
839 'PAGINATION' => generate_pagination($this->u_action . "&amp;action=$action&amp;g=$group_id", $total_members, $config['topics_per_page'], $start),
840
841 'U_ACTION' => $this->u_action . "&amp;g=$group_id",
842 'U_FIND_USERNAME' => append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=searchuser&amp;form=ucp&amp;field=usernames'),
843 ));
844
845 break;
846
847 case 'approve':
848
849 if (!$group_id)
850 {
851 trigger_error($user->lang['NO_GROUP'] . $return_page);
852 }
853
854 if (!($row = group_memberships($group_id, $user->data['user_id'])))
855 {
856 trigger_error($user->lang['NOT_MEMBER_OF_GROUP'] . $return_page);
857 }
858 list(, $row) = each($row);
859
860 if (!$row['group_leader'])
861 {
862 trigger_error($user->lang['NOT_LEADER_OF_GROUP'] . $return_page);
863 }
864
865 $user->add_lang('acp/groups');
866
867 // Approve, demote or promote
868 group_user_attributes('approve', $group_id, $mark_ary, false, false);
869
870 trigger_error($user->lang['USERS_APPROVED'] . '<br /><br />' . sprintf($user->lang['RETURN_PAGE'], '<a href="' . $this->u_action . '&amp;action=list&amp;g=' . $group_id . '">', '</a>'));
871
872 break;
873
874 case 'default':
875
876 if (!$group_id)
877 {
878 trigger_error($user->lang['NO_GROUP'] . $return_page);
879 }
880
881 if (!($row = group_memberships($group_id, $user->data['user_id'])))
882 {
883 trigger_error($user->lang['NOT_MEMBER_OF_GROUP'] . $return_page);
884 }
885 list(, $row) = each($row);
886
887 if (!$row['group_leader'])
888 {
889 trigger_error($user->lang['NOT_LEADER_OF_GROUP'] . $return_page);
890 }
891
892 $group_row['group_name'] = ($group_row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $group_row['group_name']] : $group_row['group_name'];
893
894 if (confirm_box(true))
895 {
896 if (!sizeof($mark_ary))
897 {
898 $start = 0;
899
900 do
901 {
902 $sql = 'SELECT user_id
903 FROM ' . USER_GROUP_TABLE . "
904 WHERE group_id = $group_id
905 ORDER BY user_id";
906 $result = $db->sql_query_limit($sql, 200, $start);
907
908 $mark_ary = array();
909 if ($row = $db->sql_fetchrow($result))
910 {
911 do
912 {
913 $mark_ary[] = $row['user_id'];
914 }
915 while ($row = $db->sql_fetchrow($result));
916
917 group_user_attributes('default', $group_id, $mark_ary, false, $group_row['group_name'], $group_row);
918
919 $start = (sizeof($mark_ary) < 200) ? 0 : $start + 200;
920 }
921 else
922 {
923 $start = 0;
924 }
925 $db->sql_freeresult($result);
926 }
927 while ($start);
928 }
929 else
930 {
931 group_user_attributes('default', $group_id, $mark_ary, false, $group_row['group_name'], $group_row);
932 }
933
934 $user->add_lang('acp/groups');
935
936 trigger_error($user->lang['GROUP_DEFS_UPDATED'] . '<br /><br />' . sprintf($user->lang['RETURN_PAGE'], '<a href="' . $this->u_action . '&amp;action=list&amp;g=' . $group_id . '">', '</a>'));
937 }
938 else
939 {
940 $user->add_lang('acp/common');
941
942 confirm_box(false, $user->lang['CONFIRM_OPERATION'], build_hidden_fields(array(
943 'mark' => $mark_ary,
944 'g' => $group_id,
945 'i' => $id,
946 'mode' => $mode,
947 'action' => $action))
948 );
949 }
950
951 break;
952
953 case 'deleteusers':
954
955 $user->add_lang(array('acp/groups', 'acp/common'));
956
957 if (!($row = group_memberships($group_id, $user->data['user_id'])))
958 {
959 trigger_error($user->lang['NOT_MEMBER_OF_GROUP'] . $return_page);
960 }
961 list(, $row) = each($row);
962
963 if (!$row['group_leader'])
964 {
965 trigger_error($user->lang['NOT_LEADER_OF_GROUP'] . $return_page);
966 }
967
968 $group_row['group_name'] = ($group_row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $group_row['group_name']] : $group_row['group_name'];
969
970 if (confirm_box(true))
971 {
972 if (!$group_id)
973 {
974 trigger_error($user->lang['NO_GROUP'] . $return_page);
975 }
976
977 $error = group_user_del($group_id, $mark_ary, false, $group_row['group_name']);
978
979 if ($error)
980 {
981 trigger_error($user->lang[$error] . '<br /><br />' . sprintf($user->lang['RETURN_PAGE'], '<a href="' . $this->u_action . '&amp;action=list&amp;g=' . $group_id . '">', '</a>'));
982 }
983
984 trigger_error($user->lang['GROUP_USERS_REMOVE'] . '<br /><br />' . sprintf($user->lang['RETURN_PAGE'], '<a href="' . $this->u_action . '&amp;action=list&amp;g=' . $group_id . '">', '</a>'));
985 }
986 else
987 {
988 confirm_box(false, $user->lang['CONFIRM_OPERATION'], build_hidden_fields(array(
989 'mark' => $mark_ary,
990 'g' => $group_id,
991 'i' => $id,
992 'mode' => $mode,
993 'action' => $action))
994 );
995 }
996
997 break;
998
999 case 'addusers':
1000
1001 $user->add_lang(array('acp/groups', 'acp/common'));
1002
1003 $names = utf8_normalize_nfc(request_var('usernames', '', true));
1004
1005 if (!$group_id)
1006 {
1007 trigger_error($user->lang['NO_GROUP'] . $return_page);
1008 }
1009
1010 if (!$names)
1011 {
1012 trigger_error($user->lang['NO_USERS'] . $return_page);
1013 }
1014
1015 if (!($row = group_memberships($group_id, $user->data['user_id'])))
1016 {
1017 trigger_error($user->lang['NOT_MEMBER_OF_GROUP'] . $return_page);
1018 }
1019 list(, $row) = each($row);
1020
1021 if (!$row['group_leader'])
1022 {
1023 trigger_error($user->lang['NOT_LEADER_OF_GROUP'] . $return_page);
1024 }
1025
1026 $name_ary = array_unique(explode("\n", $names));
1027 $group_name = ($group_row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $group_row['group_name']] : $group_row['group_name'];
1028
1029 $default = request_var('default', 0);
1030
1031 if (confirm_box(true))
1032 {
1033 // Add user/s to group
1034 if ($error = group_user_add($group_id, false, $name_ary, $group_name, $default, 0, 0, $group_row))
1035 {
1036 trigger_error($user->lang[$error] . $return_page);
1037 }
1038
1039 trigger_error($user->lang['GROUP_USERS_ADDED'] . '<br /><br />' . sprintf($user->lang['RETURN_PAGE'], '<a href="' . $this->u_action . '&amp;action=list&amp;g=' . $group_id . '">', '</a>'));
1040 }
1041 else
1042 {
1043 $s_hidden_fields = array(
1044 'default' => $default,
1045 'usernames' => $names,
1046 'g' => $group_id,
1047 'i' => $id,
1048 'mode' => $mode,
1049 'action' => $action
1050 );
1051 confirm_box(false, sprintf($user->lang['GROUP_CONFIRM_ADD_USER' . ((sizeof($name_ary) == 1) ? '' : 'S')], implode(', ', $name_ary)), build_hidden_fields($s_hidden_fields));
1052 }
1053
1054 trigger_error($user->lang['NO_USERS_ADDED'] . '<br /><br />' . sprintf($user->lang['RETURN_PAGE'], '<a href="' . $this->u_action . '&amp;action=list&amp;g=' . $group_id . '">', '</a>'));
1055
1056 break;
1057
1058 default:
1059 $user->add_lang('acp/common');
1060
1061 $sql = 'SELECT g.group_id, g.group_name, g.group_colour, g.group_desc, g.group_desc_uid, g.group_desc_bitfield, g.group_desc_options, g.group_type, ug.group_leader
1062 FROM ' . GROUPS_TABLE . ' g, ' . USER_GROUP_TABLE . ' ug
1063 WHERE ug.user_id = ' . $user->data['user_id'] . '
1064 AND g.group_id = ug.group_id
1065 AND ug.group_leader = 1
1066 ORDER BY g.group_type DESC, g.group_name';
1067 $result = $db->sql_query($sql);
1068
1069 while ($value = $db->sql_fetchrow($result))
1070 {
1071 $template->assign_block_vars('leader', array(
1072 'GROUP_NAME' => ($value['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $value['group_name']] : $value['group_name'],
1073 'GROUP_DESC' => generate_text_for_display($value['group_desc'], $value['group_desc_uid'], $value['group_desc_bitfield'], $value['group_desc_options']),
1074 'GROUP_TYPE' => $value['group_type'],
1075 'GROUP_ID' => $value['group_id'],
1076 'GROUP_COLOUR' => $value['group_colour'],
1077
1078 'U_LIST' => $this->u_action . "&amp;action=list&amp;g={$value['group_id']}",
1079 'U_EDIT' => $this->u_action . "&amp;action=edit&amp;g={$value['group_id']}")
1080 );
1081 }
1082 $db->sql_freeresult($result);
1083
1084 break;
1085 }
1086
1087 break;
1088 }
1089
1090 $this->tpl_name = 'ucp_groups_' . $mode;
1091 }
1092}
1093
1094?>
Note: See TracBrowser for help on using the repository browser.