Postade detta på phpBB.com just nu. Förmodligen är du snabbare med ett svar.....hoppas jag.
I have a lot of hacks installed, so fiddeling too much with the code did not appeal to me. BUT, I sequentially moved the admin_*.php files out of the admin-folder, and when i got to admin_pa_ug_auth.php, it all worked again. So back with all others, and it still worked.
My problem is in the admin_pa_ug_auth.php file, which is part of the pafileDB 0.0.9d Download manager mod.
Having found that, I´m afraid I´m stuck. Could someone please give a hint whart to do next? Here´s the code of the file:
Kod: Markera allt
<?php
/***************************************************************************
* admin_pa_ug_auth.php
* -------------------
* begin : Saturday, Feb 13, 2001
* copyright : (C) 2001 The phpBB Group
* email : support@phpbb.com
*
* $Id: admin_forumauth.php,v 1.23.2.4 2002/05/21 16:52:08 psotfx Exp $
*
*
***************************************************************************/
/***************************************************************************
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
***************************************************************************/
define('IN_PHPBB', 1);
if( !empty($setmodules) )
{
$filename = basename(__FILE__);
//$module['Download']['User_Permissions'] = $filename . "?mode=user";
//$module['Download']['Group_Permissions'] = $filename . "?mode=group";
return;
}
$no_page_header = TRUE;
$phpbb_root_path = './../';
require($phpbb_root_path . 'extension.inc');
require('./pagestart.' . $phpEx);
include($phpbb_root_path . 'pafiledb/pafiledb_common.'.$phpEx);
$pafiledb->init();
$params = array('mode' => 'mode', 'user_id' => POST_USERS_URL, 'group_id' => POST_GROUPS_URL);
foreach($params as $var => $param)
{
$$var = (isset($_REQUEST[$param])) ? $_REQUEST[$param] : '';
}
$user_id = intval($user_id);
$group_id = intval($group_id);
// MX Addon
$cat_auth_fields = array('auth_view', 'auth_read', 'auth_view_file', 'auth_edit_file', 'auth_delete_file', 'auth_upload', 'auth_download', 'auth_rate', 'auth_email', 'auth_view_comment', 'auth_post_comment', 'auth_edit_comment', 'auth_delete_comment');
$global_auth_fields = array('auth_search', 'auth_stats', 'auth_toplist', 'auth_viewall');
$global_fields_names = array('auth_search' => $lang['Auth_search'],
'auth_stats' => $lang['Auth_stats'],
'auth_toplist' => $lang['Auth_toplist'],
'auth_viewall' => $lang['Auth_viewall']);
$field_names = array(
'auth_view' => $lang['View'],
'auth_read' => $lang['Read'],
'auth_view_file' => $lang['View_file'],
// MX Addon
'auth_edit_file' => $lang['Edit_file'],
'auth_delete_file' => $lang['Delete_file'],
// End
'auth_upload' => $lang['Upload'],
'auth_download' => $lang['Download_file'],
'auth_rate' => $lang['Rate'],
'auth_email' => $lang['Email'],
'auth_view_comment' => $lang['View_comment'],
'auth_post_comment' => $lang['Post_comment'],
'auth_edit_comment' => $lang['Edit_comment'],
'auth_delete_comment' => $lang['Delete_comment']);
$permissions_menu = array(append_sid("admin_pa_catauth.$phpEx") => $lang['Cat_Permissions'],
append_sid("admin_pa_ug_auth.$phpEx?mode=user") => $lang['User_Permissions'],
append_sid("admin_pa_ug_auth.$phpEx?mode=group") => $lang['Group_Permissions'],
append_sid("admin_pa_ug_auth.$phpEx?mode=global_user") => $lang['User_Global_Permissions'],
append_sid("admin_pa_ug_auth.$phpEx?mode=global_group") => $lang['Group_Global_Permissions']);
foreach($permissions_menu as $url => $l_name)
{
$pafiledb_template->assign_block_vars('pertype', array(
'U_NAME' => $url,
'L_NAME' => $l_name)
);
}
if ( isset($_POST['submit']) && ( ( $mode == 'user' && $user_id ) || ( $mode == 'group' && $group_id ) ) )
{
if($mode == 'user')
{
$sql = "SELECT g.group_id
FROM " . GROUPS_TABLE . " g, " . USER_GROUP_TABLE . " ug
WHERE ug.user_id = $user_id
AND g.group_id = ug.group_id
AND g.group_single_user = '1'";
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't obtain user/group information", "", __LINE__, __FILE__, $sql);
}
$row = $db->sql_fetchrow($result);
$group_id = $row['group_id'];
$db->sql_freeresult($result);
}
$change_mod_list = ( isset($_POST['moderator']) ) ? $_POST['moderator'] : array();
$change_acl_list = array();
for($j = 0; $j < count($cat_auth_fields); $j++)
{
$auth_field = $cat_auth_fields[$j];
while( list($cat_id, $value) = @each($_POST['private_' . $auth_field]) )
{
$change_acl_list[$cat_id][$auth_field] = $value;
}
}
$sql = ( $mode == 'user' ) ? "SELECT aa.* FROM " . PA_AUTH_ACCESS_TABLE . " aa, " . USER_GROUP_TABLE . " ug, " . GROUPS_TABLE. " g WHERE ug.user_id = $user_id AND g.group_id = ug.group_id AND aa.group_id = ug.group_id AND g.group_single_user = " . TRUE : "SELECT * FROM " . PA_AUTH_ACCESS_TABLE . " WHERE group_id = $group_id";
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't obtain user/group permissions", "", __LINE__, __FILE__, $sql);
}
$auth_access = array();
while( $row = $db->sql_fetchrow($result) )
{
$auth_access[$row['cat_id']] = $row;
}
$db->sql_freeresult($result);
$cat_auth_action = array();
$update_acl_status = array();
$update_mod_status = array();
foreach($pafiledb->cat_rowset as $cat_id => $cat_data)
{
if (
( isset($auth_access[$cat_id]['auth_mod']) && $change_mod_list[$cat_id]['auth_mod'] != $auth_access[$cat_id]['auth_mod'] ) ||
( !isset($auth_access[$cat_id]['auth_mod']) && !empty($change_mod_list[$cat_id]['auth_mod']) )
)
{
$update_mod_status[$cat_id] = $change_mod_list[$cat_id]['auth_mod'];
if ( !$update_mod_status[$cat_id] )
{
$cat_auth_action[$cat_id] = 'delete';
}
else if ( !isset($auth_access[$cat_id]['auth_mod']) )
{
$cat_auth_action[$cat_id] = 'insert';
}
else
{
$cat_auth_action[$cat_id] = 'update';
}
}
for($j = 0; $j < count($cat_auth_fields); $j++)
{
$auth_field = $cat_auth_fields[$j];
if( $cat_data[$auth_field] == AUTH_ACL && isset($change_acl_list[$cat_id][$auth_field]) )
{
if ( ( empty($auth_access[$cat_id]['auth_mod']) &&
( isset($auth_access[$cat_id][$auth_field]) && $change_acl_list[$cat_id][$auth_field] != $auth_access[$cat_id][$auth_field] ) ||
( !isset($auth_access[$cat_id][$auth_field]) && !empty($change_acl_list[$cat_id][$auth_field]) ) ) ||
!empty($update_mod_status[$cat_id])
)
{
$update_acl_status[$cat_id][$auth_field] = ( !empty($update_mod_status[$cat_id]) ) ? 0 : $change_acl_list[$cat_id][$auth_field];
if ( isset($auth_access[$cat_id][$auth_field]) && empty($update_acl_status[$cat_id][$auth_field]) && $cat_auth_action[$cat_id] != 'insert' && $cat_auth_action[$cat_id] != 'update' )
{
$cat_auth_action[$cat_id] = 'delete';
}
else if ( !isset($auth_access[$cat_id][$auth_field]) && !( $cat_auth_action[$cat_id] == 'delete' && empty($update_acl_status[$cat_id][$auth_field]) ) )
{
$cat_auth_action[$cat_id] = 'insert';
}
else if ( isset($auth_access[$cat_id][$auth_field]) && !empty($update_acl_status[$cat_id][$auth_field]) )
{
$cat_auth_action[$cat_id] = 'update';
}
}
else if ( ( empty($auth_access[$cat_id]['auth_mod']) &&
( isset($auth_access[$cat_id][$auth_field]) && $change_acl_list[$cat_id][$auth_field] == $auth_access[$cat_id][$auth_field] ) ) && $cat_auth_action[$cat_id] == 'delete' )
{
$cat_auth_action[$cat_id] = 'update';
}
}
}
}
//
// Checks complete, make updates to DB
//
$delete_sql = '';
while( list($cat_id, $action) = @each($cat_auth_action) )
{
if ( $action == 'delete' )
{
$delete_sql .= ( ( $delete_sql != '' ) ? ', ' : '' ) . $cat_id;
}
else
{
if ( $action == 'insert' )
{
$sql_field = '';
$sql_value = '';
while ( list($auth_type, $value) = @each($update_acl_status[$cat_id]) )
{
$sql_field .= ( ( $sql_field != '' ) ? ', ' : '' ) . $auth_type;
$sql_value .= ( ( $sql_value != '' ) ? ', ' : '' ) . $value;
}
$sql_field .= ( ( $sql_field != '' ) ? ', ' : '' ) . 'auth_mod';
$sql_value .= ( ( $sql_value != '' ) ? ', ' : '' ) . ( ( !isset($update_mod_status[$cat_id]) ) ? 0 : $update_mod_status[$cat_id]);
$sql = "INSERT INTO " . PA_AUTH_ACCESS_TABLE . " (cat_id, group_id, $sql_field)
VALUES ($cat_id, $group_id, $sql_value)";
}
else
{
$sql_values = '';
while ( list($auth_type, $value) = @each($update_acl_status[$cat_id]) )
{
$sql_values .= ( ( $sql_values != '' ) ? ', ' : '' ) . $auth_type . ' = ' . $value;
}
$sql_values .= ( ( $sql_values != '' ) ? ', ' : '' ) . 'auth_mod = ' . ( ( !isset($update_mod_status[$cat_id]) ) ? 0 : $update_mod_status[$cat_id]);
$sql = "UPDATE " . PA_AUTH_ACCESS_TABLE . "
SET $sql_values
WHERE group_id = $group_id
AND cat_id = $cat_id";
}
if( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't update private forum permissions", "", __LINE__, __FILE__, $sql);
}
}
}
if ( $delete_sql != '' )
{
$sql = "DELETE FROM " . PA_AUTH_ACCESS_TABLE . "
WHERE group_id = $group_id
AND cat_id IN ($delete_sql)";
if( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't delete permission entries", "", __LINE__, __FILE__, $sql);
}
}
$l_auth_return = ( $mode == 'user' ) ? $lang['Click_return_userauth'] : $lang['Click_return_groupauth'];
$message = $lang['Auth_updated'] . '<br /><br />' . sprintf($l_auth_return, '<a href="' . append_sid("admin_pa_ug_auth.$phpEx?mode=$mode") . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_admin_index'], '<a href="' . append_sid("index.$phpEx?pane=right") . '">', '</a>');
message_die(GENERAL_MESSAGE, $message);
}
elseif ( isset($_POST['submit']) && ( ( $mode == 'global_user' && $user_id ) || ( $mode == 'global_group' && $group_id ) ) )
{
if($mode == 'global_user')
{
$sql = "SELECT g.group_id
FROM " . GROUPS_TABLE . " g, " . USER_GROUP_TABLE . " ug
WHERE ug.user_id = $user_id
AND g.group_id = ug.group_id
AND g.group_single_user = '1'";
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't obtain user/group information", "", __LINE__, __FILE__, $sql);
}
$row = $db->sql_fetchrow($result);
$group_id = $row['group_id'];
$db->sql_freeresult($result);
}
$change_acl_list = array();
for($j = 0; $j < count($global_auth_fields); $j++)
{
$auth_field = $global_auth_fields[$j];
$change_acl_list[$auth_field] = $_POST['private_' . $auth_field];
}
$sql = ( $mode == 'global_user' ) ? "SELECT aa.* FROM " . PA_AUTH_ACCESS_TABLE . " aa, " . USER_GROUP_TABLE . " ug, " . GROUPS_TABLE. " g WHERE ug.user_id = $user_id AND g.group_id = ug.group_id AND aa.group_id = ug.group_id AND g.group_single_user = " . TRUE . " AND aa.cat_id = '0'" : "SELECT * FROM " . PA_AUTH_ACCESS_TABLE . " WHERE group_id = $group_id AND cat_id = '0'";
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't obtain user/group permissions", "", __LINE__, __FILE__, $sql);
}
$auth_access = '';
if( $row = $db->sql_fetchrow($result) )
{
$auth_access = $row;
}
$db->sql_freeresult($result);
$global_auth_action = array();
$update_acl_status = array();
for($j = 0; $j < count($global_auth_fields); $j++)
{
$auth_field = $global_auth_fields[$j];
if( $pafiledb_config[$auth_field] == AUTH_ACL && isset($change_acl_list[$auth_field]) )
{
if ( ( !is_moderator($group_id) &&
( isset($auth_access[$auth_field]) && $change_acl_list[$auth_field] != $auth_access[$auth_field] ) ||
( !isset($auth_access[$cat_id][$auth_field]) && !empty($change_acl_list[$auth_field]) ) )
)
{
$update_acl_status[$auth_field] = $change_acl_list[$auth_field];
if ( isset($auth_access[$auth_field]) && empty($update_acl_status[$auth_field]) && $global_auth_action != 'insert' && $global_auth_action != 'update' )
{
$global_auth_action = 'delete';
}
else if ( !isset($auth_access[$auth_field]) && !( $global_auth_action == 'delete' && empty($update_acl_status[$auth_field]) ) )
{
$global_auth_action = 'insert';
}
else if ( isset($auth_access[$auth_field]) && !empty($update_acl_status[$auth_field]) )
{
$global_auth_action = 'update';
}
}
else if ( ( !is_moderator($auth_access['group_id']) &&
( isset($auth_access[$auth_field]) && $change_acl_list[$auth_field] == $auth_access[$auth_field] ) ) && $global_auth_action == 'delete' )
{
$global_auth_action = 'update';
}
}
}
//
// Checks complete, make updates to DB
//
$delete_sql = 0;
if ( $global_auth_action == 'delete' )
{
$delete_sql = 1;
}
else
{
if ( $global_auth_action == 'insert' )
{
$sql_field = '';
$sql_value = '';
while ( list($auth_type, $value) = @each($update_acl_status) )
{
$sql_field .= ( ( $sql_field != '' ) ? ', ' : '' ) . $auth_type;
$sql_value .= ( ( $sql_value != '' ) ? ', ' : '' ) . $value;
}
$sql = "INSERT INTO " . PA_AUTH_ACCESS_TABLE . " (cat_id, group_id, $sql_field)
VALUES (0, $group_id, $sql_value)";
}
else
{
$sql_values = '';
while ( list($auth_type, $value) = @each($update_acl_status) )
{
$sql_values .= ( ( $sql_values != '' ) ? ', ' : '' ) . $auth_type . ' = ' . $value;
}
$sql = "UPDATE " . PA_AUTH_ACCESS_TABLE . "
SET $sql_values
WHERE group_id = $group_id
AND cat_id = 0";
}
if( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't update private forum permissions", "", __LINE__, __FILE__, $sql);
}
}
if ( $delete_sql )
{
$sql = "DELETE FROM " . PA_AUTH_ACCESS_TABLE . "
WHERE group_id = $group_id
AND cat_id = 0";
if( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't delete permission entries", "", __LINE__, __FILE__, $sql);
}
}
$l_auth_return = ( $mode == 'global_user' ) ? $lang['Click_return_userauth'] : $lang['Click_return_groupauth'];
$message = $lang['Auth_updated'] . '<br /><br />' . sprintf($l_auth_return, '<a href="' . append_sid("admin_pa_ug_auth.$phpEx?mode=$mode") . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_admin_index'], '<a href="' . append_sid("index.$phpEx?pane=right") . '">', '</a>');
message_die(GENERAL_MESSAGE, $message);
}
elseif ( ( $mode == 'user' && ( isset($_POST['username']) || $user_id ) ) || ( $mode == 'group' && $group_id ) )
{
if ( isset($_POST['username']) )
{
$this_userdata = get_userdata($_POST['username'], true);
if ( !is_array($this_userdata) )
{
message_die(GENERAL_MESSAGE, $lang['No_such_user']);
}
$user_id = $this_userdata['user_id'];
}
//
// Front end
//
$sql = "SELECT u.user_id, u.username, u.user_level, g.group_id, g.group_name, g.group_single_user FROM " . USERS_TABLE . " u, " . GROUPS_TABLE . " g, " . USER_GROUP_TABLE . " ug WHERE ";
$sql .= ( $mode == 'user' ) ? "u.user_id = $user_id AND ug.user_id = u.user_id AND g.group_id = ug.group_id" : "g.group_id = $group_id AND ug.group_id = g.group_id AND u.user_id = ug.user_id";
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't obtain user/group information", "", __LINE__, __FILE__, $sql);
}
$ug_info = array();
while( $row = $db->sql_fetchrow($result) )
{
$ug_info[] = $row;
}
$db->sql_freeresult($result);
$sql = ( $mode == 'user' ) ? "SELECT aa.*, g.group_single_user FROM " . PA_AUTH_ACCESS_TABLE . " aa, " . USER_GROUP_TABLE . " ug, " . GROUPS_TABLE. " g WHERE ug.user_id = $user_id AND g.group_id = ug.group_id AND aa.group_id = ug.group_id AND g.group_single_user = 1" : "SELECT * FROM " . PA_AUTH_ACCESS_TABLE . " WHERE group_id = $group_id";
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't obtain user/group permissions", "", __LINE__, __FILE__, $sql);
}
$auth_access = array();
$auth_access_count = array();
while( $row = $db->sql_fetchrow($result) )
{
$auth_access[$row['cat_id']][] = $row;
$auth_access_count[$row['cat_id']]++;
}
$db->sql_freeresult($result);
$is_admin = ( $mode == 'user' ) ? ( ( $ug_info[0]['user_level'] == ADMIN && $ug_info[0]['user_id'] != ANONYMOUS ) ? 1 : 0 ) : 0;
foreach($pafiledb->cat_rowset as $cat_id => $cat_data)
{
for($j = 0; $j < count($cat_auth_fields); $j++)
{
$key = $cat_auth_fields[$j];
$value = $cat_data[$key];
switch( $value )
{
case AUTH_ALL:
case AUTH_REG:
$auth_ug[$cat_id][$key] = 1;
break;
case AUTH_ACL:
$auth_ug[$cat_id][$key] = ( !empty($auth_access_count[$cat_id]) ) ? $pafiledb->auth_check_user(AUTH_ACL, $key, $auth_access[$cat_id], $is_admin) : 0;
$auth_field_acl[$cat_id][$key] = $auth_ug[$cat_id][$key];
break;
case AUTH_MOD:
$auth_ug[$cat_id][$key] = ( !empty($auth_access_count[$cat_id]) ) ? $pafiledb->auth_check_user(AUTH_MOD, $key, $auth_access[$cat_id], $is_admin) : 0;
break;
case AUTH_ADMIN:
$auth_ug[$cat_id][$key] = $is_admin;
break;
default:
$auth_ug[$cat_id][$key] = 0;
break;
}
}
//
// Is user a moderator?
//
$auth_ug[$cat_id]['auth_mod'] = ( !empty($auth_access_count[$cat_id]) ) ? $pafiledb->auth_check_user(AUTH_MOD, 'auth_mod', $auth_access[$cat_id], 0) : 0;
}
$optionlist_acl_adv = array();
$optionlist_mod = array();
foreach($auth_ug as $cat_id => $user_ary)
{
for($k = 0; $k < count($cat_auth_fields); $k++)
{
$field_name = $cat_auth_fields[$k];
if( $pafiledb->cat_rowset[$cat_id][$field_name] == AUTH_ACL )
{
$optionlist_acl_adv[$cat_id][$k] = '<select name="private_' . $field_name . '[' . $cat_id . ']">';
if( isset($auth_field_acl[$cat_id][$field_name]) && !($is_admin || $user_ary['auth_mod']) )
{
if( !$auth_field_acl[$cat_id][$field_name] )
{
$optionlist_acl_adv[$cat_id][$k] .= '<option value="1">' . $lang['ON'] . '</option><option value="0" selected="selected">' . $lang['OFF'] . '</option>';
}
else
{
$optionlist_acl_adv[$cat_id][$k] .= '<option value="1" selected="selected">' . $lang['ON'] . '</option><option value="0">' . $lang['OFF'] . '</option>';
}
}
else
{
if( $is_admin || $user_ary['auth_mod'] )
{
$optionlist_acl_adv[$cat_id][$k] .= '<option value="1">' . $lang['ON'] . '</option>';
}
else
{
$optionlist_acl_adv[$cat_id][$k] .= '<option value="1">' . $lang['ON'] . '</option><option value="0" selected="selected">' . $lang['OFF'] . '</option>';
}
}
$optionlist_acl_adv[$cat_id][$k] .= '</select>';
}
}
$optionlist_mod[$cat_id] = '<select name="moderator[' . $cat_id . ']">';
$optionlist_mod[$cat_id] .= ( $user_ary['auth_mod'] ) ? '<option value="1" selected="selected">' . $lang['Is_Moderator'] . '</option><option value="0">' . $lang['Not_Moderator'] . '</option>' : '<option value="1">' . $lang['Is_Moderator'] . '</option><option value="0" selected="selected">' . $lang['Not_Moderator'] . '</option>';
$optionlist_mod[$cat_id] .= '</select>';
}
admin_display_cat_auth();
if ( $mode == 'user' )
{
$t_username = $ug_info[0]['username'];
}
else
{
$t_groupname = $ug_info[0]['group_name'];
}
$name = array();
$id = array();
for($i = 0; $i < count($ug_info); $i++)
{
if( ( $mode == 'user' && !$ug_info[$i]['group_single_user'] ) || $mode == 'group' )
{
$name[] = ( $mode == 'user' ) ? $ug_info[$i]['group_name'] : $ug_info[$i]['username'];
$id[] = ( $mode == 'user' ) ? intval($ug_info[$i]['group_id']) : intval($ug_info[$i]['user_id']);
}
}
if( count($name) )
{
$t_usergroup_list = '';
for($i = 0; $i < count($ug_info); $i++)
{
$ug = ( $mode == 'user' ) ? 'group&' . POST_GROUPS_URL : 'user&' . POST_USERS_URL;
$t_usergroup_list .= ( ( $t_usergroup_list != '' ) ? ', ' : '' ) . '<a href="' . append_sid("admin_pa_ug_auth.$phpEx?mode=$ug=" . $id[$i]) . '">' . $name[$i] . '</a>';
}
}
else
{
$t_usergroup_list = $lang['None'];
}
for($i = 0; $i < count($cat_auth_fields); $i++)
{
$cell_title = $field_names[$cat_auth_fields[$i]];
$pafiledb_template->assign_block_vars('acltype', array(
'L_UG_ACL_TYPE' => $cell_title)
);
$s_column_span++;
}
$s_hidden_fields = '<input type="hidden" name="mode" value="' . $mode . '" />';
$s_hidden_fields .= ( $mode == 'user' ) ? '<input type="hidden" name="' . POST_USERS_URL . '" value="' . $user_id . '" />' : '<input type="hidden" name="' . POST_GROUPS_URL . '" value="' . $group_id . '" />';
include('./page_header_admin.'.$phpEx);
$pafiledb_template->set_filenames(array(
'body' => 'admin/pa_auth_ug_body.tpl')
);
if ( $mode == 'user' )
{
$pafiledb_template->assign_vars(array(
'USER' => TRUE,
'USERNAME' => $t_username,
'USER_LEVEL' => $lang['User_Level'],
'USER_GROUP_MEMBERSHIPS' => $lang['Group_memberships'] . ' : ' . $t_usergroup_list)
);
}
else
{
$pafiledb_template->assign_vars(array(
'USER' => FALSE,
'USERNAME' => $t_groupname,
'GROUP_MEMBERSHIP' => $lang['Usergroup_members'] . ' : ' . $t_usergroup_list)
);
}
$pafiledb_template->assign_vars(array(
'SHOW_MOD' => true,
'L_USER_OR_GROUPNAME' => ( $mode == 'user' ) ? $lang['Username'] : $lang['Group_name'],
'L_AUTH_TITLE' => ( $mode == 'user' ) ? $lang['Auth_Control_User'] : $lang['Auth_Control_Group'],
'L_AUTH_EXPLAIN' => ( $mode == 'user' ) ? $lang['User_auth_explain'] : $lang['Group_auth_explain'],
'L_MODERATOR_STATUS' => $lang['Moderator_status'],
'L_PERMISSIONS' => $lang['Permissions'],
'L_SUBMIT' => $lang['Submit'],
'L_RESET' => $lang['Reset'],
'L_CAT' => $lang['Category'],
'U_USER_OR_GROUP' => append_sid("admin_pa_ug_auth.$phpEx"),
'S_COLUMN_SPAN' => $s_column_span + 2,
'S_AUTH_ACTION' => append_sid("admin_pa_ug_auth.$phpEx"),
'S_HIDDEN_FIELDS' => $s_hidden_fields)
);
}
elseif(( $mode == 'global_user' && ( isset($_POST['username']) || $user_id ) ) || ( $mode == 'global_group' && $group_id ) )
{
if ( isset($_POST['username']) )
{
$this_userdata = get_userdata($_POST['username'], true);
if ( !is_array($this_userdata) )
{
message_die(GENERAL_MESSAGE, $lang['No_such_user']);
}
$user_id = $this_userdata['user_id'];
}
//
// Front end
//
if($mode == 'global_user')
{
$sql = "SELECT g.group_id
FROM " . GROUPS_TABLE . " g, " . USER_GROUP_TABLE . " ug
WHERE ug.user_id = $user_id
AND g.group_id = ug.group_id
AND g.group_single_user = '1'";
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't obtain user/group information", "", __LINE__, __FILE__, $sql);
}
$row = $db->sql_fetchrow($result);
$group_id = $row['group_id'];
$db->sql_freeresult($result);
}
$sql = "SELECT u.user_id, u.username, u.user_level, g.group_id, g.group_name, g.group_single_user FROM " . USERS_TABLE . " u, " . GROUPS_TABLE . " g, " . USER_GROUP_TABLE . " ug WHERE ";
$sql .= ( $mode == 'global_user' ) ? "u.user_id = $user_id AND ug.user_id = u.user_id AND g.group_id = ug.group_id" : "g.group_id = $group_id AND ug.group_id = g.group_id AND u.user_id = ug.user_id";
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't obtain user/group information", "", __LINE__, __FILE__, $sql);
}
$ug_info = array();
while( $row = $db->sql_fetchrow($result) )
{
$ug_info[] = $row;
}
$db->sql_freeresult($result);
$sql = ( $mode == 'global_user' ) ? "SELECT aa.*, g.group_single_user FROM " . PA_AUTH_ACCESS_TABLE . " aa, " . USER_GROUP_TABLE . " ug, " . GROUPS_TABLE. " g WHERE ug.user_id = $user_id AND g.group_id = ug.group_id AND aa.group_id = ug.group_id AND g.group_single_user = 1 AND aa.cat_id = '0'" : "SELECT * FROM " . PA_AUTH_ACCESS_TABLE . " WHERE group_id = $group_id AND cat_id = '0'";
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't obtain user/group permissions", "", __LINE__, __FILE__, $sql);
}
$auth_access = array();
$auth_access_count = 0;
if( $row = $db->sql_fetchrow($result) )
{
$auth_access = $row;
$auth_access_count++;
}
$db->sql_freeresult($result);
$is_admin = ( $mode == 'global_user' ) ? ( ( $ug_info[0]['user_level'] == ADMIN && $ug_info[0]['user_id'] != ANONYMOUS ) ? 1 : 0 ) : 0;
for($j = 0; $j < count($global_auth_fields); $j++)
{
$key = $global_auth_fields[$j];
$value = $pafiledb_config[$key];
switch( $value )
{
case AUTH_ALL:
case AUTH_REG:
$auth_ug[$key] = 1;
break;
case AUTH_ACL:
$auth_ug[$key] = ( !empty($auth_access_count) ) ? global_auth_check_user(AUTH_ACL, $key, $auth_access, $is_admin) : 0;
$auth_field_acl[$key] = $auth_ug[$key];
break;
case AUTH_MOD:
$auth_ug[$key] = ( !empty($auth_access_count) ) ? global_auth_check_user(AUTH_MOD, $key, $auth_access, $is_admin) : 0;
break;
case AUTH_ADMIN:
$auth_ug[$key] = $is_admin;
break;
default:
$auth_ug[$key] = 0;
break;
}
}
for($k = 0; $k < count($global_auth_fields); $k++)
{
$field_name = $global_auth_fields[$k];
if( $pafiledb_config[$field_name] == AUTH_ACL )
{
$optionlist_acl_adv[$k] = '<select name="private_' . $field_name . '">';
if( isset($auth_field_acl[$field_name]) && !($is_admin || is_moderator($group_id)) )
{
if( !$auth_field_acl[$field_name] )
{
$optionlist_acl_adv[$k] .= '<option value="1">' . $lang['ON'] . '</option><option value="0" selected="selected">' . $lang['OFF'] . '</option>';
}
else
{
$optionlist_acl_adv[$k] .= '<option value="1" selected="selected">' . $lang['ON'] . '</option><option value="0">' . $lang['OFF'] . '</option>';
}
}
else
{
if( $is_admin || is_moderator($group_id) )
{
$optionlist_acl_adv[$k] .= '<option value="1">' . $lang['ON'] . '</option>';
}
else
{
$optionlist_acl_adv[$k] .= '<option value="1">' . $lang['ON'] . '</option><option value="0" selected="selected">' . $lang['OFF'] . '</option>';
}
}
$optionlist_acl_adv[$k] .= '</select>';
}
}
$pafiledb_template->assign_block_vars('cat_row', array(
'CAT_NAME' => ($mode == 'global_user') ? $lang['User_Global_Permissions'] : $lang['Group_Global_Permissions'],
'IS_HIGHER_CAT' => false,
'PRE' => '',
'U_CAT' => append_sid("admin_pa_settings.$phpEx"))
);
for($j = 0; $j < count($global_auth_fields); $j++)
{
$pafiledb_template->assign_block_vars('cat_row.aclvalues', array(
'S_ACL_SELECT' => $optionlist_acl_adv[$j])
);
}
if ( $mode == 'global_user' )
{
$t_username = $ug_info[0]['username'];
}
else
{
$t_groupname = $ug_info[0]['group_name'];
}
$name = array();
$id = array();
for($i = 0; $i < count($ug_info); $i++)
{
if( ( $mode == 'global_user' && !$ug_info[$i]['group_single_user'] ) || $mode == 'global_group' )
{
$name[] = ( $mode == 'global_user' ) ? $ug_info[$i]['group_name'] : $ug_info[$i]['username'];
$id[] = ( $mode == 'global_user' ) ? intval($ug_info[$i]['group_id']) : intval($ug_info[$i]['user_id']);
}
}
if( count($name) )
{
$t_usergroup_list = '';
for($i = 0; $i < count($ug_info); $i++)
{
$ug = ( $mode == 'global_user' ) ? 'global_group&' . POST_GROUPS_URL : 'global_user&' . POST_USERS_URL;
$t_usergroup_list .= ( ( $t_usergroup_list != '' ) ? ', ' : '' ) . '<a href="' . append_sid("admin_pa_ug_auth.$phpEx?mode=$ug=" . $id[$i]) . '">' . $name[$i] . '</a>';
}
}
else
{
$t_usergroup_list = $lang['None'];
}
for($i = 0; $i < count($global_auth_fields); $i++)
{
$cell_title = $global_fields_names[$global_auth_fields[$i]];
$pafiledb_template->assign_block_vars('acltype', array(
'L_UG_ACL_TYPE' => $cell_title)
);
$s_column_span++;
}
$s_hidden_fields = '<input type="hidden" name="mode" value="' . $mode . '" />';
$s_hidden_fields .= ( $mode == 'global_user' ) ? '<input type="hidden" name="' . POST_USERS_URL . '" value="' . $user_id . '" />' : '<input type="hidden" name="' . POST_GROUPS_URL . '" value="' . $group_id . '" />';
include('./page_header_admin.'.$phpEx);
$pafiledb_template->set_filenames(array(
'body' => 'admin/pa_auth_ug_body.tpl')
);
if ( $mode == 'global_user' )
{
$pafiledb_template->assign_vars(array(
'USER' => TRUE,
'USERNAME' => $t_username,
'USER_LEVEL' => $lang['User_Level'],
'USER_GROUP_MEMBERSHIPS' => $lang['Group_memberships'] . ' : ' . $t_usergroup_list)
);
}
else
{
$pafiledb_template->assign_vars(array(
'USER' => FALSE,
'USERNAME' => $t_groupname,
'GROUP_MEMBERSHIP' => $lang['Usergroup_members'] . ' : ' . $t_usergroup_list)
);
}
$pafiledb_template->assign_vars(array(
'SHOW_MOD' => false,
'L_USER_OR_GROUPNAME' => ( $mode == 'global_user' ) ? $lang['Username'] : $lang['Group_name'],
'L_AUTH_TITLE' => ( $mode == 'global_user' ) ? $lang['Auth_Control_User'] : $lang['Auth_Control_Group'],
'L_AUTH_EXPLAIN' => ( $mode == 'global_user' ) ? $lang['User_auth_explain'] : $lang['Group_auth_explain'],
'L_PERMISSIONS' => $lang['Permissions'],
'L_SUBMIT' => $lang['Submit'],
'L_RESET' => $lang['Reset'],
'L_CAT' => ($mode == 'global_user') ? $lang['User_Global_Permissions'] : $lang['Group_Global_Permissions'],
'U_USER_OR_GROUP' => append_sid("admin_pa_ug_auth.$phpEx"),
'S_COLUMN_SPAN' => $s_column_span + 1,
'S_AUTH_ACTION' => append_sid("admin_pa_ug_auth.$phpEx"),
'S_HIDDEN_FIELDS' => $s_hidden_fields)
);
}
else
{
//
// Select a user/group
//
include('./page_header_admin.'.$phpEx);
$pafiledb_template->set_filenames(array(
'body' => ( $mode == 'user' || $mode == 'global_user' ) ? 'admin/user_select_body.tpl' : 'admin/auth_select_body.tpl')
);
if ( $mode == 'user' || $mode == 'global_user')
{
$pafiledb_template->assign_vars(array(
'L_FIND_USERNAME' => $lang['Find_username'],
'U_SEARCH_USER' => append_sid("../search.$phpEx?mode=searchuser"))
);
}
else
{
$sql = "SELECT group_id, group_name
FROM " . GROUPS_TABLE . "
WHERE group_single_user <> " . TRUE;
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't get group list", "", __LINE__, __FILE__, $sql);
}
if ( $row = $db->sql_fetchrow($result) )
{
$select_list = '<select name="' . POST_GROUPS_URL . '">';
do
{
$select_list .= '<option value="' . $row['group_id'] . '">' . $row['group_name'] . '</option>';
}
while ( $row = $db->sql_fetchrow($result) );
$select_list .= '</select>';
}
$pafiledb_template->assign_vars(array(
'S_AUTH_SELECT' => $select_list)
);
}
$s_hidden_fields = '<input type="hidden" name="mode" value="' . $mode . '" />';
$l_type = ( $mode == 'user' || $mode == 'global_user' ) ? 'USER' : 'AUTH';
$pafiledb_template->assign_vars(array(
'L_' . $l_type . '_TITLE' => ( $mode == 'user' || $mode == 'global_user' ) ? $lang['Auth_Control_User'] : $lang['Auth_Control_Group'],
'L_' . $l_type . '_EXPLAIN' => ( $mode == 'user' || $mode == 'global_user' ) ? $lang['User_auth_explain'] : $lang['Group_auth_explain'],
'L_' . $l_type . '_SELECT' => ( $mode == 'user' || $mode == 'global_user' ) ? $lang['Select_a_User'] : $lang['Select_a_Group'],
'L_LOOK_UP' => ( $mode == 'user' || $mode == 'global_user' ) ? $lang['Look_up_User'] : $lang['Look_up_Group'],
'S_HIDDEN_FIELDS' => $s_hidden_fields,
'S_' . $l_type . '_ACTION' => append_sid("admin_pa_ug_auth.$phpEx"))
);
}
$pafiledb_template->display('body');
$pafiledb->_pafiledb();
$cache->unload();
include('./page_footer_admin.'.$phpEx);
function admin_display_cat_auth($cat_parent = 0, $depth = 0)
{
global $pafiledb, $phpbb_root_path, $pafiledb_template, $phpEx;
global $cat_auth_fields, $optionlist_mod, $optionlist_acl_adv;
$pre = str_repeat(' ', $depth);
if(isset($pafiledb->subcat_rowset[$cat_parent]))
{
foreach($pafiledb->subcat_rowset[$cat_parent] as $sub_cat_id => $cat_data)
{
$pafiledb_template->assign_block_vars('cat_row', array(
'CAT_NAME' => $cat_data['cat_name'],
'IS_HIGHER_CAT' => ($cat_data['cat_allow_file']) ? false : true,
'PRE' => $pre,
'U_CAT' => append_sid("admin_pa_catauth.$phpEx?cat_id=$sub_cat_id"),
'S_MOD_SELECT' => $optionlist_mod[$sub_cat_id])
);
for($j = 0; $j < count($cat_auth_fields); $j++)
{
$pafiledb_template->assign_block_vars('cat_row.aclvalues', array(
'S_ACL_SELECT' => $optionlist_acl_adv[$sub_cat_id][$j])
);
}
admin_display_cat_auth($sub_cat_id, $depth + 1);
}
return;
}
return;
}
function global_auth_check_user($type, $key, $global_u_access, $is_admin)
{
$auth_user = 0;
if ( !empty($global_u_access) )
{
$result = 0;
switch($type)
{
case AUTH_ACL:
$result = $global_u_access[$key];
case AUTH_MOD:
$result = $result || is_moderator($global_u_access['group_id']);
case AUTH_ADMIN:
$result = $result || $is_admin;
break;
}
$auth_user = $auth_user || $result;
}
else
{
$auth_user = $is_admin;
}
return $auth_user;
}
function is_moderator($group_id)
{
static $is_mod = false;
if($is_mod !== false)
{
return $is_mod;
}
global $db;
$sql = "SELECT *
FROM " . PA_AUTH_ACCESS_TABLE . "
WHERE group_id = $group_id
AND auth_mod = '1'";
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't check for moderator $sql", "", __LINE__, __FILE__, $sql);
}
return ($is_mod = ($db->sql_fetchrow($result)) ? 1 : 0 );
}
?>
Gunnar L.
