account_prefs_reset.php

   1 <?php
   2 # MantisBT - A PHP based bugtracking system
   3
   4 # MantisBT is free software: you can redistribute it and/or modify
   5 # it under the terms of the GNU General Public License as published by
   6 # the Free Software Foundation, either version 2 of the License, or
   7 # (at your option) any later version.
   8 #
   9 # MantisBT is distributed in the hope that it will be useful,
  10 # but WITHOUT ANY WARRANTY; without even the implied warranty of
  11 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12 # GNU General Public License for more details.
  13 #
  14 # You should have received a copy of the GNU General Public License
  15 # along with MantisBT.  If not, see <http://www.gnu.org/licenses/>.
  16
  17 /**
  18  * CALLERS
  19  * This page is called from:
  20  * - account_prefs_inc.php
  21  *
  22  * EXPECTED BEHAVIOUR
  23  * - Reset the user's preferences to default values
  24  * - Redirect to account_prefs_page.php or another page, if given
  25  *
  26  * CALLS
  27  * This page conditionally redirects upon completion
  28  *
  29  * RESTRICTIONS & PERMISSIONS
  30  * - User must be authenticated
  31  *      - User must not be protected
  32  *
  33  * @package MantisBT
  34  * @copyright Copyright (C) 2000 - 2002  Kenzaburo Ito - kenito@300baud.org
  35  * @copyright Copyright (C) 2002 - 2010  MantisBT Team - mantisbt-dev@lists.sourceforge.net
  36  * @link http://www.mantisbt.org
  37  *
  38  * @uses core.php
  39  * @uses access_api.php
  40  * @uses authentication_api.php
  41  * @uses config_api.php
  42  * @uses form_api.php
  43  * @uses gpc_api.php
  44  * @uses print_api.php
  45  * @uses string_api.php
  46  * @uses user_api.php
  47  * @uses user_pref_api.php
  48  */
  49
  50 require_once( 'core.php' );
  51 require_api( 'access_api.php' );
  52 require_api( 'authentication_api.php' );
  53 require_api( 'config_api.php' );
  54 require_api( 'form_api.php' );
  55 require_api( 'gpc_api.php' );
  56 require_api( 'print_api.php' );
  57 require_api( 'string_api.php' );
  58 require_api( 'user_api.php' );
  59 require_api( 'user_pref_api.php' );
  60
  61 #============ Parameters ============
  62 $f_user_id = gpc_get_int( 'user_id' );
  63 $f_redirect_url = string_sanitize_url( gpc_get_string( 'redirect_url', 'account_prefs_page.php' ) );
  64
  65 #============ Permissions ============
  66 form_security_validate( 'account_prefs_reset' );
  67
  68 auth_ensure_user_authenticated();
  69
  70 user_ensure_exists( $f_user_id );
  71
  72 # This page is currently called from the manage_* namespace and thus we
  73 # have to allow authorised users to update the accounts of other users.
  74 # TODO: split this functionality into manage_user_prefs_reset.php
  75 if ( auth_get_current_user_id() != $f_user_id ) {
  76         access_ensure_global_level( config_get( 'manage_user_threshold' ) );
  77 } else {
  78         # Protected users should not be able to update the preferences of their
  79         # user account. The anonymous user is always considered a protected
  80         # user and hence will also not be allowed to update preferences.
  81         user_ensure_unprotected( $f_user_id );
  82 }
  83
  84 user_pref_delete( $f_user_id );
  85
  86 form_security_purge( 'account_prefs_reset' );
  87
  88 print_header_redirect( $f_redirect_url, true, true );