phpBB/ucp.php

   1 <?php
   2 /**
   3 *
   4 * @package ucp
   5 * @version $Id$
   6 * @copyright (c) 2005 phpBB Group
   7 * @license http://opensource.org/licenses/gpl-license.php GNU Public License
   8 *
   9 */
  10
  11 /**
  12 * @ignore
  13 */
  14 define('IN_PHPBB', true);
  15 if (!defined('PHPBB_ROOT_PATH')) define('PHPBB_ROOT_PATH', './');
  16 if (!defined('PHP_EXT')) define('PHP_EXT', substr(strrchr(__FILE__, '.'), 1));
  17 include(PHPBB_ROOT_PATH . 'common.' . PHP_EXT);
  18 require(PHPBB_ROOT_PATH . 'includes/functions_user.' . PHP_EXT);
  19 require(PHPBB_ROOT_PATH . 'includes/functions_module.' . PHP_EXT);
  20
  21 // Basic parameter data
  22 $id     = request_var('i', '');
  23 $mode   = request_var('mode', '');
  24
  25 if ($mode == 'login' || $mode == 'logout' || $mode == 'confirm')
  26 {
  27         define('IN_LOGIN', true);
  28 }
  29
  30 // Start session management
  31 $user->session_begin();
  32 $auth->acl($user->data);
  33 $user->setup('ucp');
  34
  35 // Setting a variable to let the style designer know where he is...
  36 $template->assign_var('S_IN_UCP', true);
  37
  38 $module = new p_master();
  39
  40 // Go through basic "global" modes
  41 switch ($mode)
  42 {
  43         case 'activate':
  44                 $module->load('ucp', 'activate');
  45                 $module->display($user->lang['UCP_ACTIVATE']);
  46
  47                 redirect(append_sid('index'));
  48         break;
  49
  50         case 'resend_act':
  51                 $module->load('ucp', 'resend');
  52                 $module->display($user->lang['UCP_RESEND']);
  53         break;
  54
  55         case 'sendpassword':
  56                 $module->load('ucp', 'remind');
  57                 $module->display($user->lang['UCP_REMIND']);
  58         break;
  59
  60         case 'register':
  61                 if ($user->data['is_registered'] || request::is_set('not_agreed'))
  62                 {
  63                         redirect(append_sid('index'));
  64                 }
  65
  66                 $module->load('ucp', 'register');
  67                 $module->display($user->lang['REGISTER']);
  68         break;
  69
  70         case 'confirm':
  71                 $module->load('ucp', 'confirm');
  72         break;
  73
  74         case 'login':
  75                 if ($user->data['is_registered'])
  76                 {
  77                         redirect(append_sid('index'));
  78                 }
  79
  80                 login_box(request_var('redirect', 'index'));
  81         break;
  82
  83         case 'logout':
  84                 if ($user->data['user_id'] != ANONYMOUS && request::variable('sid', '', false, request::GET) === $user->session_id)
  85                 {
  86                         $user->session_kill();
  87                         $user->session_begin();
  88                         $message = $user->lang['LOGOUT_REDIRECT'];
  89                 }
  90                 else
  91                 {
  92                         $message = ($user->data['user_id'] == ANONYMOUS) ? $user->lang['LOGOUT_REDIRECT'] : $user->lang['LOGOUT_FAILED'];
  93                 }
  94                 meta_refresh(3, append_sid('index'));
  95
  96                 $message = $message . '<br /><br />' . sprintf($user->lang['RETURN_INDEX'], '<a href="' . append_sid('index') . '">', '</a> ');
  97                 trigger_error($message);
  98
  99         break;
 100
 101         case 'terms':
 102         case 'privacy':
 103
 104                 $message = ($mode == 'terms') ? 'TERMS_OF_USE_CONTENT' : 'PRIVACY_POLICY';
 105                 $title = ($mode == 'terms') ? 'TERMS_USE' : 'PRIVACY';
 106
 107                 if (empty($user->lang[$message]))
 108                 {
 109                         if ($user->data['is_registered'])
 110                         {
 111                                 redirect(append_sid('index'));
 112                         }
 113
 114                         login_box();
 115                 }
 116
 117                 $template->set_filenames(array(
 118                         'body'          => 'ucp_agreement.html')
 119                 );
 120
 121                 // Disable online list
 122                 page_header($user->lang[$title], false);
 123
 124                 $template->assign_vars(array(
 125                         'S_AGREEMENT'                   => true,
 126                         'AGREEMENT_TITLE'               => $user->lang[$title],
 127                         'AGREEMENT_TEXT'                => sprintf($user->lang[$message], $config['sitename'], generate_board_url()),
 128                         'U_BACK'                                => append_sid('ucp', 'mode=login'),
 129                         'L_BACK'                                => $user->lang['BACK_TO_LOGIN'])
 130                 );
 131
 132                 page_footer();
 133
 134         break;
 135
 136         case 'delete_cookies':
 137
 138                 // Delete Cookies with dynamic names (do NOT delete poll cookies)
 139                 if (confirm_box(true))
 140                 {
 141                         $set_time = time() - 31536000;
 142
 143                         $cookies = request::variable_names(request::COOKIE);
 144                         foreach ($cookies as $cookie_name)
 145                         {
 146                                 $cookie_name = str_replace($config['cookie_name'] . '_', '', $cookie_name);
 147
 148                                 // Polls are stored as {cookie_name}_poll_{topic_id}, cookie_name_ got removed, therefore checking for poll_
 149                                 if (strpos($cookie_name, 'poll_') !== 0)
 150                                 {
 151                                         $user->set_cookie($cookie_name, '', $set_time);
 152                                 }
 153                         }
 154
 155                         $user->set_cookie('track', '', $set_time);
 156                         $user->set_cookie('u', '', $set_time);
 157                         $user->set_cookie('k', '', $set_time);
 158                         $user->set_cookie('sid', '', $set_time);
 159
 160                         // We destroy the session here, the user will be logged out nevertheless
 161                         $user->session_kill();
 162                         $user->session_begin();
 163
 164                         meta_refresh(3, append_sid('index'));
 165
 166                         $message = $user->lang['COOKIES_DELETED'] . '<br /><br />' . sprintf($user->lang['RETURN_INDEX'], '<a href="' . append_sid('index') . '">', '</a>');
 167                         trigger_error($message);
 168                 }
 169                 else
 170                 {
 171                         confirm_box(false, 'DELETE_COOKIES', '');
 172                 }
 173
 174                 redirect(append_sid('index'));
 175
 176         break;
 177
 178         case 'switch_perm':
 179
 180                 $user_id = request_var('u', 0);
 181
 182                 $sql = 'SELECT *
 183                         FROM ' . USERS_TABLE . '
 184                         WHERE user_id = ' . (int) $user_id;
 185                 $result = $db->sql_query($sql);
 186                 $user_row = $db->sql_fetchrow($result);
 187                 $db->sql_freeresult($result);
 188
 189                 if (!$auth->acl_get('a_switchperm') || !$user_row || $user_id == $user->data['user_id'])
 190                 {
 191                         redirect(append_sid('index'));
 192                 }
 193
 194                 include(PHPBB_ROOT_PATH . 'includes/acp/auth.' . PHP_EXT);
 195
 196                 $auth_admin = new auth_admin();
 197                 if (!$auth_admin->ghost_permissions($user_id, $user->data['user_id']))
 198                 {
 199                         redirect(append_sid('index'));
 200                 }
 201
 202                 add_log('admin', 'LOG_ACL_TRANSFER_PERMISSIONS', $user_row['username']);
 203
 204                 $message = sprintf($user->lang['PERMISSIONS_TRANSFERRED'], $user_row['username']) . '<br /><br />' . sprintf($user->lang['RETURN_INDEX'], '<a href="' . append_sid('index') . '">', '</a>');
 205                 trigger_error($message);
 206
 207         break;
 208
 209         case 'restore_perm':
 210
 211                 if (!$user->data['user_perm_from'] || !$auth->acl_get('a_switchperm'))
 212                 {
 213                         redirect(append_sid('index'));
 214                 }
 215
 216                 $auth->acl_cache($user->data);
 217
 218                 $sql = 'UPDATE ' . USERS_TABLE . "
 219                         SET user_perm_from = 0
 220                         WHERE user_id = " . $user->data['user_id'];
 221                 $db->sql_query($sql);
 222
 223                 $sql = 'SELECT username
 224                         FROM ' . USERS_TABLE . '
 225                         WHERE user_id = ' . $user->data['user_perm_from'];
 226                 $result = $db->sql_query($sql);
 227                 $username = $db->sql_fetchfield('username');
 228                 $db->sql_freeresult($result);
 229
 230                 add_log('admin', 'LOG_ACL_RESTORE_PERMISSIONS', $username);
 231
 232                 $message = $user->lang['PERMISSIONS_RESTORED'] . '<br /><br />' . sprintf($user->lang['RETURN_INDEX'], '<a href="' . append_sid('index') . '">', '</a>');
 233                 trigger_error($message);
 234
 235         break;
 236
 237         default:
 238
 239                 // Only registered users can go beyond this point
 240                 if (!$user->data['is_registered'])
 241                 {
 242                         if ($user->data['is_bot'])
 243                         {
 244                                 redirect(append_sid('index'));
 245                         }
 246
 247                         login_box('', $user->lang['LOGIN_EXPLAIN_UCP']);
 248                 }
 249
 250                 // Instantiate module system and generate list of available modules
 251                 $module->list_modules('ucp');
 252
 253                 // Check if the zebra module is set
 254                 if ($module->is_active('zebra', 'friends'))
 255                 {
 256                         _display_friends();
 257                 }
 258
 259                 // Do not display subscribed topics/forums if not allowed
 260                 if (!$config['allow_topic_notify'] && !$config['allow_forum_notify'])
 261                 {
 262                         $module->set_display('main', 'subscribed', false);
 263                 }
 264
 265                 // Select the active module
 266                 $module->set_active($id, $mode);
 267
 268                 // Load and execute the relevant module
 269                 $module->load_active();
 270
 271                 // Assign data to the template engine for the list of modules
 272                 $module->assign_tpl_vars(append_sid('ucp'));
 273
 274                 // Generate the page, do not display/query online list
 275                 $module->display($module->get_page_title(), false);
 276
 277         break;
 278 }
 279
 280 /**
 281 * Output listing of friends online
 282 */
 283 function _display_friends()
 284 {
 285         global $config, $db, $template, $user, $auth;
 286
 287         $update_time = $config['load_online_time'] * 60;
 288
 289         $sql = $db->sql_build_query('SELECT_DISTINCT', array(
 290                 'SELECT'        => 'u.user_id, u.username, u.username_clean, u.user_colour, MAX(s.session_time) as online_time, MIN(s.session_viewonline) AS viewonline',
 291
 292                 'FROM'          => array(
 293                         USERS_TABLE             => 'u',
 294                         ZEBRA_TABLE             => 'z'
 295                 ),
 296
 297                 'LEFT_JOIN'     => array(
 298                         array(
 299                                 'FROM'  => array(SESSIONS_TABLE => 's'),
 300                                 'ON'    => 's.session_user_id = z.zebra_id'
 301                         )
 302                 ),
 303
 304                 'WHERE'         => 'z.user_id = ' . $user->data['user_id'] . '
 305                         AND z.friend = 1
 306                         AND u.user_id = z.zebra_id',
 307
 308                 'GROUP_BY'      => 'z.zebra_id, u.user_id, u.username_clean, u.user_colour, u.username',
 309
 310                 'ORDER_BY'      => 'u.username_clean ASC',
 311         ));
 312
 313         $result = $db->sql_query($sql);
 314
 315         while ($row = $db->sql_fetchrow($result))
 316         {
 317                 $which = (time() - $update_time < $row['online_time'] && ($row['viewonline'] || $auth->acl_get('u_viewonline'))) ? 'online' : 'offline';
 318
 319                 $template->assign_block_vars("friends_{$which}", array(
 320                         'USER_ID'               => $row['user_id'],
 321
 322                         'U_PROFILE'             => get_username_string('profile', $row['user_id'], $row['username'], $row['user_colour']),
 323                         'USER_COLOUR'   => get_username_string('colour', $row['user_id'], $row['username'], $row['user_colour']),
 324                         'USERNAME'              => get_username_string('username', $row['user_id'], $row['username'], $row['user_colour']),
 325                         'USERNAME_FULL' => get_username_string('full', $row['user_id'], $row['username'], $row['user_colour']))
 326                 );
 327         }
 328         $db->sql_freeresult($result);
 329 }
 330
 331 /**
 332 * Function for assigning a template var if the zebra module got included
 333 */
 334 function _module_zebra($mode, &$module_row)
 335 {
 336         global $template;
 337
 338         $template->assign_var('S_ZEBRA_ENABLED', true);
 339
 340         if ($mode == 'friends')
 341         {
 342                 $template->assign_var('S_ZEBRA_FRIENDS_ENABLED', true);
 343         }
 344
 345         if ($mode == 'foes')
 346         {
 347                 $template->assign_var('S_ZEBRA_FOES_ENABLED', true);
 348         }
 349 }
 350
 351 ?>