PageRenderTime 50ms CodeModel.GetById 20ms RepoModel.GetById 0ms app.codeStats 0ms

/sources/controllers/Groups.controller.php

https://github.com/Arantor/Elkarte
PHP | 823 lines | 611 code | 87 blank | 125 comment | 84 complexity | 5c153027f2ddbc6774ba828bff380afa MD5 | raw file
Possible License(s): BSD-3-Clause, LGPL-3.0 
    

  1. <?php
    2. 

  2. 

  3. /**
    4. 

  4.  * @name      ElkArte Forum
    5. 

  5.  * @copyright ElkArte Forum contributors
    6. 

  6.  * @license   BSD http://opensource.org/licenses/BSD-3-Clause
    7. 

  7.  *
    8. 

  8.  * This software is a derived product, based on:
    9. 

  9.  *
    10. 

  10.  * Simple Machines Forum (SMF)
    11. 

  11.  * copyright:	2011 Simple Machines (http://www.simplemachines.org)
    12. 

  12.  * license:  	BSD, See included LICENSE.TXT for terms and conditions.
    13. 

  13.  *
    14. 

  14.  * @version 1.0 Alpha
    15. 

  15.  *
    16. 

  16.  * This file currently just shows group info, and allows certain priviledged members to add/remove members.
    17. 

  17.  *
    18. 

  18.  */
    19. 

  19. 

  20. if (!defined('ELKARTE'))
    21. 

  21. 	die('No access...');
    22. 

  22. 

  23. /**
    24. 

  24.  * Entry point function, permission checks, admin bars, etc.
    25. 

  25.  * It allows moderators and users to access the group showing functions.
    26. 

  26.  * It handles permission checks, and puts the moderation bar on as required.
    27. 

  27.  */
    28. 

  28. function action_groups()
    29. 

  29. {
    30. 

  30. 	global $context, $txt, $scripturl, $user_info;
    31. 

  31. 

  32. 	// The sub-actions that we can do. Format "Function Name, Mod Bar Index if appropriate".
    33. 

  33. 	$subActions = array(
    34. 

  34. 		'index' => array('action_grouplist', 'view_groups'),
    35. 

  35. 		'members' => array('action_groupmembers', 'view_groups'),
    36. 

  36. 		'requests' => array('action_grouprequests', 'group_requests'),
    37. 

  37. 	);
    38. 

  38. 

  39. 	// Default to sub action 'index' or 'settings' depending on permissions.
    40. 

  40. 	$_REQUEST['sa'] = isset($_REQUEST['sa']) && isset($subActions[$_REQUEST['sa']]) ? $_REQUEST['sa'] : 'index';
    41. 

  41. 

  42. 	// Get the template stuff up and running.
    43. 

  43. 	loadLanguage('ManageMembers');
    44. 

  44. 	loadLanguage('ModerationCenter');
    45. 

  45. 	loadTemplate('ManageMembergroups');
    46. 

  46. 

  47. 	// If we can see the moderation center, and this has a mod bar entry, add the mod center bar.
    48. 

  48. 	if (allowedTo('access_mod_center') || $user_info['mod_cache']['bq'] != '0=1' || $user_info['mod_cache']['gq'] != '0=1' || allowedTo('manage_membergroups'))
    49. 

  49. 	{
    50. 

  50. 		require_once(CONTROLLERDIR . '/ModerationCenter.controller.php');
    51. 

  51. 		$_GET['area'] = $_REQUEST['sa'] == 'requests' ? 'groups' : 'viewgroups';
    52. 

  52. 		action_modcenter(true);
    53. 

  53. 	}
    54. 

  54. 	// Otherwise add something to the link tree, for normal people.
    55. 

  55. 	else
    56. 

  56. 	{
    57. 

  57. 		isAllowedTo('view_mlist');
    58. 

  58. 

  59. 		$context['linktree'][] = array(
    60. 

  60. 			'url' => $scripturl . '?action=groups',
    61. 

  61. 			'name' => $txt['groups'],
    62. 

  62. 		);
    63. 

  63. 	}
    64. 

  64. 

  65. 	// Call the actual function.
    66. 

  66. 	$subActions[$_REQUEST['sa']][0]();
    67. 

  67. }
    68. 

  68. 

  69. /**
    70. 

  70.  * This very simply lists the groups, nothing snazy.
    71. 

  71.  */
    72. 

  72. function action_grouplist()
    73. 

  73. {
    74. 

  74. 	global $txt, $context, $scripturl, $user_info;
    75. 

  75. 

  76. 	$context['page_title'] = $txt['viewing_groups'];
    77. 

  77. 		$context[$context['moderation_menu_name']]['tab_data'] = array(
    78. 

  78. 			'title' => $txt['mc_group_requests'],
    79. 

  79. 		);
    80. 

  80. 

  81. 	// Making a list is not hard with this beauty.
    82. 

  82. 	require_once(SUBSDIR . '/List.subs.php');
    83. 

  83. 

  84. 	// Use the standard templates for showing this.
    85. 

  85. 	$listOptions = array(
    86. 

  86. 		'id' => 'group_lists',
    87. 

  87. 		'base_href' => $scripturl . '?action=moderate;area=viewgroups;sa=view',
    88. 

  88. 		'default_sort_col' => 'group',
    89. 

  89. 		'get_items' => array(
    90. 

  90. 			'file' => SUBSDIR . '/Membergroups.subs.php',
    91. 

  91. 			'function' => 'list_getMembergroups',
    92. 

  92. 			'params' => array(
    93. 

  93. 				'regular',
    94. 

  94. 				$user_info['id'],
    95. 

  95. 				allowedTo('manage_membergroups'),
    96. 

  96. 				allowedTo('admin_forum'),
    97. 

  97. 			),
    98. 

  98. 		),
    99. 

  99. 		'columns' => array(
    100. 

  100. 			'group' => array(
    101. 

  101. 				'header' => array(
    102. 

  102. 					'value' => $txt['name'],
    103. 

  103. 				),
    104. 

  104. 				'data' => array(
    105. 

  105. 					'function' => create_function('$rowData', '
    106. 

  106. 						global $scripturl;
    107. 

  107. 

  108. 						// Since the moderator group has no explicit members, no link is needed.
    109. 

  109. 						if ($rowData[\'id_group\'] == 3)
    110. 

  110. 							$group_name = $rowData[\'group_name\'];
    111. 

  111. 						else
    112. 

  112. 						{
    113. 

  113. 							$color_style = empty($rowData[\'online_color\']) ? \'\' : sprintf(\' style="color: %1$s;"\', $rowData[\'online_color\']);
    114. 

  114. 							$group_name = sprintf(\'<a href="%1$s?action=admin;area=membergroups;sa=members;group=%2$d"%3$s>%4$s</a>\', $scripturl, $rowData[\'id_group\'], $color_style, $rowData[\'group_name\']);
    115. 

  115. 						}
    116. 

  116. 

  117. 						// Add a help option for moderator and administrator.
    118. 

  118. 						if ($rowData[\'id_group\'] == 1)
    119. 

  119. 							$group_name .= sprintf(\' (<a href="%1$s?action=quickhelp;help=membergroup_administrator" onclick="return reqOverlayDiv(this.href);">?</a>)\', $scripturl);
    120. 

  120. 						elseif ($rowData[\'id_group\'] == 3)
    121. 

  121. 							$group_name .= sprintf(\' (<a href="%1$s?action=quickhelp;help=membergroup_moderator" onclick="return reqOverlayDiv(this.href);">?</a>)\', $scripturl);
    122. 

    123. 

  123. 						return $group_name;
    124. 

  124. 					'),
    125. 

  125. 				),
    126. 

  126. 				'sort' => array(
    127. 

  127. 					'default' => 'CASE WHEN mg.id_group < 4 THEN mg.id_group ELSE 4 END, mg.group_name',
    128. 

  128. 					'reverse' => 'CASE WHEN mg.id_group < 4 THEN mg.id_group ELSE 4 END, mg.group_name DESC',
    129. 

  129. 				),
    130. 

  130. 			),
    131. 

  131. 			'icons' => array(
    132. 

  132. 				'header' => array(
    133. 

  133. 					'value' => $txt['membergroups_icons'],
    134. 

  134. 				),
    135. 

  135. 				'data' => array(
    136. 

  136. 					'function' => create_function('$rowData', '
    137. 

  137. 						global $settings;
    138. 

  138. 

  139. 						if (!empty($rowData[\'icons\'][0]) && !empty($rowData[\'icons\'][1]))
    140. 

  140. 							return str_repeat(\'<img src="\' . $settings[\'images_url\'] . \'/\' . $rowData[\'icons\'][1] . \'" alt="*" />\', $rowData[\'icons\'][0]);
    141. 

  141. 						else
    142. 

  142. 							return \'\';
    143. 

  143. 					'),
    144. 

  144. 				),
    145. 

  145. 				'sort' => array(
    146. 

  146. 					'default' => 'mg.icons',
    147. 

  147. 					'reverse' => 'mg.icons DESC',
    148. 

  148. 				)
    149. 

  149. 			),
    150. 

  150. 			'moderators' => array(
    151. 

  151. 				'header' => array(
    152. 

  152. 					'value' => $txt['moderators'],
    153. 

  153. 				),
    154. 

  154. 				'data' => array(
    155. 

  155. 					'function' => create_function('$group', '
    156. 

  156. 						global $txt;
    157. 

  157. 

  158. 						return empty($group[\'moderators\']) ? \'<em>\' . $txt[\'membergroups_new_copy_none\'] . \'</em>\' : implode(\', \', $group[\'moderators\']);
    159. 

  159. 					'),
    160. 

  160. 				),
    161. 

  161. 			),
    162. 

  162. 			'members' => array(
    163. 

  163. 				'header' => array(
    164. 

  164. 					'value' => $txt['membergroups_members_top'],
    165. 

  165. 				),
    166. 

  166. 				'data' => array(
    167. 

  167. 					'function' => create_function('$rowData', '
    168. 

  168. 						global $txt;
    169. 

  169. 

  170. 						// No explicit members for the moderator group.
    171. 

  171. 						return $rowData[\'id_group\'] == 3 ? $txt[\'membergroups_guests_na\'] : comma_format($rowData[\'num_members\']);
    172. 

  172. 					'),
    173. 

  173. 					'class' => 'centercol',
    174. 

  174. 				),
    175. 

  175. 				'sort' => array(
    176. 

  176. 					'default' => 'CASE WHEN mg.id_group < 4 THEN mg.id_group ELSE 4 END, 1',
    177. 

  177. 					'reverse' => 'CASE WHEN mg.id_group < 4 THEN mg.id_group ELSE 4 END, 1 DESC',
    178. 

  178. 				),
    179. 

  179. 			),
    180. 

  180. 		),
    181. 

  181. 	);
    182. 

  182. 

  183. 	// Create the request list.
    184. 

  184. 	createList($listOptions);
    185. 

  185. 

  186. 	$context['sub_template'] = 'show_list';
    187. 

  187. 	$context['default_list'] = 'group_lists';
    188. 

  188. }
    189. 

  189. 

  190. /**
    191. 

  191.  * Display members of a group, and allow adding of members to a group. Silly function name though ;)
    192. 

  192.  * It can be called from ManageMembergroups if it needs templating within the admin environment.
    193. 

  193.  * It shows a list of members that are part of a given membergroup.
    194. 

  194.  * It is called by ?action=moderate;area=viewgroups;sa=members;group=x
    195. 

  195.  * It requires the manage_membergroups permission.
    196. 

  196.  * It allows to add and remove members from the selected membergroup.
    197. 

  197.  * It allows sorting on several columns.
    198. 

  198.  * It redirects to itself.
    199. 

  199.  * @uses ManageMembergroups template, group_members sub template.
    200. 

  200.  * @todo: use createList
    201. 

  201.  */
    202. 

  202. function action_groupmembers()
    203. 

  203. {
    204. 

  204. 	global $txt, $scripturl, $context, $modSettings, $user_info, $settings, $smcFunc;
    205. 

  205. 

  206. 	$_REQUEST['group'] = isset($_REQUEST['group']) ? (int) $_REQUEST['group'] : 0;
    207. 

  207. 

  208. 	// No browsing of guests, membergroup 0 or moderators.
    209. 

  209. 	if (in_array($_REQUEST['group'], array(-1, 0, 3)))
    210. 

  210. 		fatal_lang_error('membergroup_does_not_exist', false);
    211. 

  211. 

  212. 	require_once(SUBSDIR . '/Membergroups.subs.php');
    213. 

  213. 

  214. 	// Load up the group details.
    215. 

  215. 	$context['group'] = membergroupsById($_REQUEST['group'], 1, true, true);
    216. 

  216. 

  217. 	// Doesn't exist?
    218. 

  218. 	if (empty($context['group']))
    219. 

  219. 		fatal_lang_error('membergroup_does_not_exist', false);
    220. 

  220. 

  221. 	// @todo should we change id => id_group and name => name_group?
    222. 

  222. 	$context['group']['id'] = $context['group']['id_group'];
    223. 

  223. 	$context['group']['name'] = $context['group']['group_name'];
    224. 

  224. 

  225. 	// Fix the membergroup icons.
    226. 

  226. 	$context['group']['icons'] = explode('#', $context['group']['icons']);
    227. 

  227. 	$context['group']['icons'] = !empty($context['group']['icons'][0]) && !empty($context['group']['icons'][1]) ? str_repeat('<img src="' . $settings['images_url'] . '/' . $context['group']['icons'][1] . '" alt="*" />', $context['group']['icons'][0]) : '';
    228. 

  228. 	$context['group']['can_moderate'] = allowedTo('manage_membergroups') && (allowedTo('admin_forum') || $context['group']['group_type'] != 1);
    229. 

  229. 

  230. 	$context['linktree'][] = array(
    231. 

  231. 		'url' => $scripturl . '?action=groups;sa=members;group=' . $context['group']['id'],
    232. 

  232. 		'name' => $context['group']['name'],
    233. 

  233. 	);
    234. 

  234. 	$context['can_send_email'] = allowedTo('send_email_to_members');
    235. 

  235. 

  236. 	// Load all the group moderators, for fun.
    237. 

  237. 	$request = $smcFunc['db_query']('', '
    238. 

  238. 		SELECT mem.id_member, mem.real_name
    239. 

  239. 		FROM {db_prefix}group_moderators AS mods
    240. 

  240. 			INNER JOIN {db_prefix}members AS mem ON (mem.id_member = mods.id_member)
    241. 

  241. 		WHERE mods.id_group = {int:id_group}',
    242. 

  242. 		array(
    243. 

  243. 			'id_group' => $_REQUEST['group'],
    244. 

  244. 		)
    245. 

  245. 	);
    246. 

  246. 	$context['group']['moderators'] = array();
    247. 

  247. 	while ($row = $smcFunc['db_fetch_assoc']($request))
    248. 

  248. 	{
    249. 

  249. 		$context['group']['moderators'][] = array(
    250. 

  250. 			'id' => $row['id_member'],
    251. 

  251. 			'name' => $row['real_name']
    252. 

  252. 		);
    253. 

  253. 

  254. 		if ($user_info['id'] == $row['id_member'] && $context['group']['group_type'] != 1)
    255. 

  255. 			$context['group']['can_moderate'] = true;
    256. 

  256. 	}
    257. 

  257. 	$smcFunc['db_free_result']($request);
    258. 

  258. 

  259. 	// If this group is hidden then it can only "exists" if the user can moderate it!
    260. 

  260. 	if ($context['group']['hidden'] && !$context['group']['can_moderate'])
    261. 

  261. 		fatal_lang_error('membergroup_does_not_exist', false);
    262. 

  262. 

  263. 	// You can only assign membership if you are the moderator and/or can manage groups!
    264. 

  264. 	if (!$context['group']['can_moderate'])
    265. 

  265. 		$context['group']['assignable'] = 0;
    266. 

  266. 	// Non-admins cannot assign admins.
    267. 

  267. 	elseif ($context['group']['id'] == 1 && !allowedTo('admin_forum'))
    268. 

  268. 		$context['group']['assignable'] = 0;
    269. 

  269. 

  270. 	// Removing member from group?
    271. 

  271. 	if (isset($_POST['remove']) && !empty($_REQUEST['rem']) && is_array($_REQUEST['rem']) && $context['group']['assignable'])
    272. 

  272. 	{
    273. 

  273. 		checkSession();
    274. 

  274. 		validateToken('mod-mgm');
    275. 

  275. 

  276. 		// Make sure we're dealing with integers only.
    277. 

  277. 		foreach ($_REQUEST['rem'] as $key => $group)
    278. 

  278. 			$_REQUEST['rem'][$key] = (int) $group;
    279. 

  279. 

  280. 		removeMembersFromGroups($_REQUEST['rem'], $_REQUEST['group'], true);
    281. 

  281. 	}
    282. 

  282. 	// Must be adding new members to the group...
    283. 

  283. 	elseif (isset($_REQUEST['add']) && (!empty($_REQUEST['toAdd']) || !empty($_REQUEST['member_add'])) && $context['group']['assignable'])
    284. 

  284. 	{
    285. 

  285. 		checkSession();
    286. 

  286. 		validateToken('mod-mgm');
    287. 

  287. 

  288. 		$member_query = array();
    289. 

  289. 		$member_parameters = array();
    290. 

  290. 

  291. 		// Get all the members to be added... taking into account names can be quoted ;)
    292. 

  292. 		$_REQUEST['toAdd'] = strtr($smcFunc['htmlspecialchars']($_REQUEST['toAdd'], ENT_QUOTES), array('&quot;' => '"'));
    293. 

  293. 		preg_match_all('~"([^"]+)"~', $_REQUEST['toAdd'], $matches);
    294. 

  294. 		$member_names = array_unique(array_merge($matches[1], explode(',', preg_replace('~"[^"]+"~', '', $_REQUEST['toAdd']))));
    295. 

  295. 

  296. 		foreach ($member_names as $index => $member_name)
    297. 

  297. 		{
    298. 

  298. 			$member_names[$index] = trim($smcFunc['strtolower']($member_names[$index]));
    299. 

  299. 

  300. 			if (strlen($member_names[$index]) == 0)
    301. 

  301. 				unset($member_names[$index]);
    302. 

  302. 		}
    303. 

  303. 

  304. 		// Any passed by ID?
    305. 

  305. 		$member_ids = array();
    306. 

  306. 		if (!empty($_REQUEST['member_add']))
    307. 

  307. 			foreach ($_REQUEST['member_add'] as $id)
    308. 

  308. 				if ($id > 0)
    309. 

  309. 					$member_ids[] = (int) $id;
    310. 

  310. 

  311. 		// Construct the query pelements.
    312. 

  312. 		if (!empty($member_ids))
    313. 

  313. 		{
    314. 

  314. 			$member_query[] = 'id_member IN ({array_int:member_ids})';
    315. 

  315. 			$member_parameters['member_ids'] = $member_ids;
    316. 

  316. 		}
    317. 

  317. 		if (!empty($member_names))
    318. 

  318. 		{
    319. 

  319. 			$member_query[] = 'LOWER(member_name) IN ({array_string:member_names})';
    320. 

  320. 			$member_query[] = 'LOWER(real_name) IN ({array_string:member_names})';
    321. 

  321. 			$member_parameters['member_names'] = $member_names;
    322. 

  322. 		}
    323. 

  323. 

  324. 		$members = array();
    325. 

  325. 		if (!empty($member_query))
    326. 

  326. 		{
    327. 

  327. 			$request = $smcFunc['db_query']('', '
    328. 

  328. 				SELECT id_member
    329. 

  329. 				FROM {db_prefix}members
    330. 

  330. 				WHERE (' . implode(' OR ', $member_query) . ')
    331. 

  331. 					AND id_group != {int:id_group}
    332. 

  332. 					AND FIND_IN_SET({int:id_group}, additional_groups) = 0',
    333. 

  333. 				array_merge($member_parameters, array(
    334. 

  334. 					'id_group' => $_REQUEST['group'],
    335. 

  335. 				))
    336. 

  336. 			);
    337. 

  337. 			while ($row = $smcFunc['db_fetch_assoc']($request))
    338. 

  338. 				$members[] = $row['id_member'];
    339. 

  339. 			$smcFunc['db_free_result']($request);
    340. 

  340. 		}
    341. 

  341. 

  342. 		// @todo Add $_POST['additional'] to templates!
    343. 

  343. 

  344. 		// Do the updates...
    345. 

  345. 		if (!empty($members))
    346. 

  346. 		{
    347. 

  347. 			require_once(SUBSDIR . '/Membergroups.subs.php');
    348. 

  348. 			addMembersToGroup($members, $_REQUEST['group'], isset($_POST['additional']) || $context['group']['hidden'] ? 'only_additional' : 'auto', true);
    349. 

  349. 		}
    350. 

  350. 	}
    351. 

  351. 

  352. 	// Sort out the sorting!
    353. 

  353. 	$sort_methods = array(
    354. 

  354. 		'name' => 'real_name',
    355. 

  355. 		'email' => allowedTo('moderate_forum') ? 'email_address' : 'hide_email ' . (isset($_REQUEST['desc']) ? 'DESC' : 'ASC') . ', email_address',
    356. 

  356. 		'active' => 'last_login',
    357. 

  357. 		'registered' => 'date_registered',
    358. 

  358. 		'posts' => 'posts',
    359. 

  359. 	);
    360. 

  360. 

  361. 	// They didn't pick one, default to by name..
    362. 

  362. 	if (!isset($_REQUEST['sort']) || !isset($sort_methods[$_REQUEST['sort']]))
    363. 

  363. 	{
    364. 

  364. 		$context['sort_by'] = 'name';
    365. 

  365. 		$querySort = 'real_name';
    366. 

  366. 	}
    367. 

  367. 	// Otherwise default to ascending.
    368. 

  368. 	else
    369. 

  369. 	{
    370. 

  370. 		$context['sort_by'] = $_REQUEST['sort'];
    371. 

  371. 		$querySort = $sort_methods[$_REQUEST['sort']];
    372. 

  372. 	}
    373. 

  373. 

  374. 	$context['sort_direction'] = isset($_REQUEST['desc']) ? 'down' : 'up';
    375. 

  375. 

  376. 	// The where on the query is interesting. Non-moderators should only see people who are in this group as primary.
    377. 

  377. 	if ($context['group']['can_moderate'])
    378. 

  378. 		$where = $context['group']['is_post_group'] ? 'id_post_group = {int:group}' : 'id_group = {int:group} OR FIND_IN_SET({int:group}, additional_groups) != 0';
    379. 

  379. 	else
    380. 

  380. 		$where = $context['group']['is_post_group'] ? 'id_post_group = {int:group}' : 'id_group = {int:group}';
    381. 

  381. 

  382. 	// Count members of the group.
    383. 

  383. 	$request = $smcFunc['db_query']('', '
    384. 

  384. 		SELECT COUNT(*)
    385. 

  385. 		FROM {db_prefix}members
    386. 

  386. 		WHERE ' . $where,
    387. 

  387. 		array(
    388. 

  388. 			'group' => $_REQUEST['group'],
    389. 

  389. 		)
    390. 

  390. 	);
    391. 

  391. 	list ($context['total_members']) = $smcFunc['db_fetch_row']($request);
    392. 

  392. 	$smcFunc['db_free_result']($request);
    393. 

  393. 	$context['total_members'] = comma_format($context['total_members']);
    394. 

  394. 

  395. 	// Create the page index.
    396. 

  396. 	$context['page_index'] = constructPageIndex($scripturl . '?action=' . ($context['group']['can_moderate'] ? 'moderate;area=viewgroups' : 'groups') . ';sa=members;group=' . $_REQUEST['group'] . ';sort=' . $context['sort_by'] . (isset($_REQUEST['desc']) ? ';desc' : ''), $_REQUEST['start'], $context['total_members'], $modSettings['defaultMaxMembers']);
    397. 

  397. 	$context['start'] = $_REQUEST['start'];
    398. 

  398. 	$context['can_moderate_forum'] = allowedTo('moderate_forum');
    399. 

  399. 

  400. 	// Load up all members of this group.
    401. 

  401. 	$request = $smcFunc['db_query']('', '
    402. 

  402. 		SELECT id_member, member_name, real_name, email_address, member_ip, date_registered, last_login,
    403. 

  403. 			hide_email, posts, is_activated, real_name
    404. 

  404. 		FROM {db_prefix}members
    405. 

  405. 		WHERE ' . $where . '
    406. 

  406. 		ORDER BY ' . $querySort . ' ' . ($context['sort_direction'] == 'down' ? 'DESC' : 'ASC') . '
    407. 

  407. 		LIMIT ' . $context['start'] . ', ' . $modSettings['defaultMaxMembers'],
    408. 

  408. 		array(
    409. 

  409. 			'group' => $_REQUEST['group'],
    410. 

  410. 		)
    411. 

  411. 	);
    412. 

  412. 	$context['members'] = array();
    413. 

  413. 	while ($row = $smcFunc['db_fetch_assoc']($request))
    414. 

  414. 	{
    415. 

  415. 		$last_online = empty($row['last_login']) ? $txt['never'] : timeformat($row['last_login']);
    416. 

  416. 

  417. 		// Italicize the online note if they aren't activated.
    418. 

  418. 		if ($row['is_activated'] % 10 != 1)
    419. 

  419. 			$last_online = '<em title="' . $txt['not_activated'] . '">' . $last_online . '</em>';
    420. 

  420. 

  421. 		$context['members'][] = array(
    422. 

  422. 			'id' => $row['id_member'],
    423. 

  423. 			'name' => '<a href="' . $scripturl . '?action=profile;u=' . $row['id_member'] . '">' . $row['real_name'] . '</a>',
    424. 

  424. 			'email' => $row['email_address'],
    425. 

  425. 			'show_email' => showEmailAddress(!empty($row['hide_email']), $row['id_member']),
    426. 

  426. 			'ip' => '<a href="' . $scripturl . '?action=trackip;searchip=' . $row['member_ip'] . '">' . $row['member_ip'] . '</a>',
    427. 

  427. 			'registered' => timeformat($row['date_registered']),
    428. 

  428. 			'last_online' => $last_online,
    429. 

  429. 			'posts' => comma_format($row['posts']),
    430. 

  430. 			'is_activated' => $row['is_activated'] % 10 == 1,
    431. 

  431. 		);
    432. 

  432. 	}
    433. 

  433. 	$smcFunc['db_free_result']($request);
    434. 

  434. 

  435. 	// Select the template.
    436. 

  436. 	$context['sub_template'] = 'group_members';
    437. 

  437. 	$context['page_title'] = $txt['membergroups_members_title'] . ': ' . $context['group']['name'];
    438. 

  438. 	createToken('mod-mgm');
    439. 

  439. }
    440. 

  440. 

  441. /**
    442. 

  442.  * Show and manage all group requests.
    443. 

  443.  */
    444. 

  444. function action_grouprequests()
    445. 

  445. {
    446. 

  446. 	global $txt, $context, $scripturl, $user_info, $smcFunc, $modSettings, $language;
    447. 

  447. 

  448. 	// Set up the template stuff...
    449. 

  449. 	$context['page_title'] = $txt['mc_group_requests'];
    450. 

  450. 	$context['sub_template'] = 'show_list';
    451. 

  451. 	$context[$context['moderation_menu_name']]['tab_data'] = array(
    452. 

  452. 		'title' => $txt['mc_group_requests'],
    453. 

  453. 	);
    454. 

  454. 

  455. 	// Verify we can be here.
    456. 

  456. 	if ($user_info['mod_cache']['gq'] == '0=1')
    457. 

  457. 		isAllowedTo('manage_membergroups');
    458. 

  458. 

  459. 	// Normally, we act normally...
    460. 

  460. 	$where = $user_info['mod_cache']['gq'] == '1=1' || $user_info['mod_cache']['gq'] == '0=1' ? $user_info['mod_cache']['gq'] : 'lgr.' . $user_info['mod_cache']['gq'];
    461. 

  461. 	$where_parameters = array();
    462. 

  462. 

  463. 	// We've submitted?
    464. 

  464. 	if (isset($_POST[$context['session_var']]) && !empty($_POST['groupr']) && !empty($_POST['req_action']))
    465. 

  465. 	{
    466. 

  466. 		checkSession('post');
    467. 

  467. 		validateToken('mod-gr');
    468. 

  468. 

  469. 		// Clean the values.
    470. 

  470. 		foreach ($_POST['groupr'] as $k => $request)
    471. 

  471. 			$_POST['groupr'][$k] = (int) $request;
    472. 

  472. 

  473. 		// If we are giving a reason (And why shouldn't we?), then we don't actually do much.
    474. 

  474. 		if ($_POST['req_action'] == 'reason')
    475. 

  475. 		{
    476. 

  476. 			// Different sub template...
    477. 

  477. 			$context['sub_template'] = 'group_request_reason';
    478. 

  478. 			// And a limitation. We don't care that the page number bit makes no sense, as we don't need it!
    479. 

  479. 			$where .= ' AND lgr.id_request IN ({array_int:request_ids})';
    480. 

  480. 			$where_parameters['request_ids'] = $_POST['groupr'];
    481. 

  481. 

  482. 			$context['group_requests'] = list_getGroupRequests(0, $modSettings['defaultMaxMessages'], 'lgr.id_request', $where, $where_parameters);
    483. 

  483. 

  484. 			// Let obExit etc sort things out.
    485. 

  485. 			obExit();
    486. 

  486. 		}
    487. 

  487. 		// Otherwise we do something!
    488. 

  488. 		else
    489. 

  489. 		{
    490. 

  490. 			// Get the details of all the members concerned...
    491. 

  491. 			$request = $smcFunc['db_query']('', '
    492. 

  492. 				SELECT lgr.id_request, lgr.id_member, lgr.id_group, mem.email_address, mem.id_group AS primary_group,
    493. 

  493. 					mem.additional_groups AS additional_groups, mem.lngfile, mem.member_name, mem.notify_types,
    494. 

  494. 					mg.hidden, mg.group_name
    495. 

  495. 				FROM {db_prefix}log_group_requests AS lgr
    496. 

  496. 					INNER JOIN {db_prefix}members AS mem ON (mem.id_member = lgr.id_member)
    497. 

  497. 					INNER JOIN {db_prefix}membergroups AS mg ON (mg.id_group = lgr.id_group)
    498. 

  498. 				WHERE ' . $where . '
    499. 

  499. 					AND lgr.id_request IN ({array_int:request_list})
    500. 

  500. 				ORDER BY mem.lngfile',
    501. 

  501. 				array(
    502. 

  502. 					'request_list' => $_POST['groupr'],
    503. 

  503. 				)
    504. 

  504. 			);
    505. 

  505. 			$email_details = array();
    506. 

  506. 			$group_changes = array();
    507. 

  507. 			while ($row = $smcFunc['db_fetch_assoc']($request))
    508. 

  508. 			{
    509. 

  509. 				$row['lngfile'] = empty($row['lngfile']) || empty($modSettings['userLanguage']) ? $language : $row['lngfile'];
    510. 

  510. 

  511. 				// If we are approving work out what their new group is.
    512. 

  512. 				if ($_POST['req_action'] == 'approve')
    513. 

  513. 				{
    514. 

  514. 					// For people with more than one request at once.
    515. 

  515. 					if (isset($group_changes[$row['id_member']]))
    516. 

  516. 					{
    517. 

  517. 						$row['additional_groups'] = $group_changes[$row['id_member']]['add'];
    518. 

  518. 						$row['primary_group'] = $group_changes[$row['id_member']]['primary'];
    519. 

  519. 					}
    520. 

  520. 					else
    521. 

  521. 						$row['additional_groups'] = explode(',', $row['additional_groups']);
    522. 

  522. 

  523. 					// Don't have it already?
    524. 

  524. 					if ($row['primary_group'] == $row['id_group'] || in_array($row['id_group'], $row['additional_groups']))
    525. 

  525. 						continue;
    526. 

  526. 

  527. 					// Should it become their primary?
    528. 

  528. 					if ($row['primary_group'] == 0 && $row['hidden'] == 0)
    529. 

  529. 						$row['primary_group'] = $row['id_group'];
    530. 

  530. 					else
    531. 

  531. 						$row['additional_groups'][] = $row['id_group'];
    532. 

  532. 

  533. 					// Add them to the group master list.
    534. 

  534. 					$group_changes[$row['id_member']] = array(
    535. 

  535. 						'primary' => $row['primary_group'],
    536. 

  536. 						'add' => $row['additional_groups'],
    537. 

  537. 					);
    538. 

  538. 				}
    539. 

  539. 

  540. 				// Add required information to email them.
    541. 

  541. 				if ($row['notify_types'] != 4)
    542. 

  542. 					$email_details[] = array(
    543. 

  543. 						'rid' => $row['id_request'],
    544. 

  544. 						'member_id' => $row['id_member'],
    545. 

  545. 						'member_name' => $row['member_name'],
    546. 

  546. 						'group_id' => $row['id_group'],
    547. 

  547. 						'group_name' => $row['group_name'],
    548. 

  548. 						'email' => $row['email_address'],
    549. 

  549. 						'language' => $row['lngfile'],
    550. 

  550. 					);
    551. 

  551. 			}
    552. 

  552. 			$smcFunc['db_free_result']($request);
    553. 

  553. 

  554. 			// Remove the evidence...
    555. 

  555. 			$smcFunc['db_query']('', '
    556. 

  556. 				DELETE FROM {db_prefix}log_group_requests
    557. 

  557. 				WHERE id_request IN ({array_int:request_list})',
    558. 

  558. 				array(
    559. 

  559. 					'request_list' => $_POST['groupr'],
    560. 

  560. 				)
    561. 

  561. 			);
    562. 

  562. 

  563. 			// Ensure everyone who is online gets their changes right away.
    564. 

  564. 			updateSettings(array('settings_updated' => time()));
    565. 

  565. 

  566. 			if (!empty($email_details))
    567. 

  567. 			{
    568. 

  568. 				require_once(SUBSDIR . '/Mail.subs.php');
    569. 

  569. 

  570. 				// They are being approved?
    571. 

  571. 				if ($_POST['req_action'] == 'approve')
    572. 

  572. 				{
    573. 

  573. 					// Make the group changes.
    574. 

  574. 					foreach ($group_changes as $id => $groups)
    575. 

  575. 					{
    576. 

  576. 						// Sanity check!
    577. 

  577. 						foreach ($groups['add'] as $key => $value)
    578. 

  578. 							if ($value == 0 || trim($value) == '')
    579. 

  579. 								unset($groups['add'][$key]);
    580. 

  580. 

  581. 						$smcFunc['db_query']('', '
    582. 

  582. 							UPDATE {db_prefix}members
    583. 

  583. 							SET id_group = {int:primary_group}, additional_groups = {string:additional_groups}
    584. 

  584. 							WHERE id_member = {int:selected_member}',
    585. 

  585. 							array(
    586. 

  586. 								'primary_group' => $groups['primary'],
    587. 

  587. 								'selected_member' => $id,
    588. 

  588. 								'additional_groups' => implode(',', $groups['add']),
    589. 

  589. 							)
    590. 

  590. 						);
    591. 

  591. 					}
    592. 

  592. 

  593. 					$lastLng = $user_info['language'];
    594. 

  594. 					foreach ($email_details as $email)
    595. 

  595. 					{
    596. 

  596. 						$replacements = array(
    597. 

  597. 							'USERNAME' => $email['member_name'],
    598. 

  598. 							'GROUPNAME' => $email['group_name'],
    599. 

  599. 						);
    600. 

  600. 

  601. 						$emaildata = loadEmailTemplate('mc_group_approve', $replacements, $email['language']);
    602. 

  602. 

  603. 						sendmail($email['email'], $emaildata['subject'], $emaildata['body'], null, null, false, 2);
    604. 

  604. 					}
    605. 

  605. 				}
    606. 

  606. 				// Otherwise, they are getting rejected (With or without a reason).
    607. 

  607. 				else
    608. 

  608. 				{
    609. 

  609. 					// Same as for approving, kind of.
    610. 

  610. 					$lastLng = $user_info['language'];
    611. 

  611. 					foreach ($email_details as $email)
    612. 

  612. 					{
    613. 

  613. 						$custom_reason = isset($_POST['groupreason']) && isset($_POST['groupreason'][$email['rid']]) ? $_POST['groupreason'][$email['rid']] : '';
    614. 

  614. 

  615. 						$replacements = array(
    616. 

  616. 							'USERNAME' => $email['member_name'],
    617. 

  617. 							'GROUPNAME' => $email['group_name'],
    618. 

  618. 						);
    619. 

  619. 

  620. 						if (!empty($custom_reason))
    621. 

  621. 							$replacements['REASON'] = $custom_reason;
    622. 

  622. 

  623. 						$emaildata = loadEmailTemplate(empty($custom_reason) ? 'mc_group_reject' : 'mc_group_reject_reason', $replacements, $email['language']);
    624. 

  624. 

  625. 						sendmail($email['email'], $emaildata['subject'], $emaildata['body'], null, null, false, 2);
    626. 

  626. 					}
    627. 

  627. 				}
    628. 

  628. 			}
    629. 

  629. 

  630. 			// Restore the current language.
    631. 

  631. 			loadLanguage('ModerationCenter');
    632. 

  632. 		}
    633. 

  633. 	}
    634. 

  634. 

  635. 	// We're going to want this for making our list.
    636. 

  636. 	require_once(SUBSDIR . '/List.subs.php');
    637. 

  637. 

  638. 	// This is all the information required for a group listing.
    639. 

  639. 	$listOptions = array(
    640. 

  640. 		'id' => 'group_request_list',
    641. 

  641. 		'width' => '100%',
    642. 

  642. 		'items_per_page' => $modSettings['defaultMaxMessages'],
    643. 

  643. 		'no_items_label' => $txt['mc_groupr_none_found'],
    644. 

  644. 		'base_href' => $scripturl . '?action=groups;sa=requests',
    645. 

  645. 		'default_sort_col' => 'member',
    646. 

  646. 		'get_items' => array(
    647. 

  647. 			'function' => 'list_getGroupRequests',
    648. 

  648. 			'params' => array(
    649. 

  649. 				$where,
    650. 

  650. 				$where_parameters,
    651. 

  651. 			),
    652. 

  652. 		),
    653. 

  653. 		'get_count' => array(
    654. 

  654. 			'function' => 'list_getGroupRequestCount',
    655. 

  655. 			'params' => array(
    656. 

  656. 				$where,
    657. 

  657. 				$where_parameters,
    658. 

  658. 			),
    659. 

  659. 		),
    660. 

  660. 		'columns' => array(
    661. 

  661. 			'member' => array(
    662. 

  662. 				'header' => array(
    663. 

  663. 					'value' => $txt['mc_groupr_member'],
    664. 

  664. 				),
    665. 

  665. 				'data' => array(
    666. 

  666. 					'db' => 'member_link',
    667. 

  667. 				),
    668. 

  668. 				'sort' => array(
    669. 

  669. 					'default' => 'mem.member_name',
    670. 

  670. 					'reverse' => 'mem.member_name DESC',
    671. 

  671. 				),
    672. 

  672. 			),
    673. 

  673. 			'group' => array(
    674. 

  674. 				'header' => array(
    675. 

  675. 					'value' => $txt['mc_groupr_group'],
    676. 

  676. 				),
    677. 

  677. 				'data' => array(
    678. 

  678. 					'db' => 'group_link',
    679. 

  679. 				),
    680. 

  680. 				'sort' => array(
    681. 

  681. 					'default' => 'mg.group_name',
    682. 

  682. 					'reverse' => 'mg.group_name DESC',
    683. 

  683. 				),
    684. 

  684. 			),
    685. 

  685. 			'reason' => array(
    686. 

  686. 				'header' => array(
    687. 

  687. 					'value' => $txt['mc_groupr_reason'],
    688. 

  688. 				),
    689. 

  689. 				'data' => array(
    690. 

  690. 					'db' => 'reason',
    691. 

  691. 				),
    692. 

  692. 			),
    693. 

  693. 			'date' => array(
    694. 

  694. 				'header' => array(
    695. 

  695. 					'value' => $txt['date'],
    696. 

  696. 					'style' => 'width: 18%; white-space:nowrap;',
    697. 

  697. 				),
    698. 

  698. 				'data' => array(
    699. 

  699. 					'db' => 'time_submitted',
    700. 

  700. 				),
    701. 

  701. 			),
    702. 

  702. 			'action' => array(
    703. 

  703. 				'header' => array(
    704. 

  704. 					'value' => '<input type="checkbox" class="input_check" onclick="invertAll(this, this.form);" />',
    705. 

  705. 					'style' => 'width: 4%;',
    706. 

  706. 					'class' => 'centercol',
    707. 

  707. 				),
    708. 

  708. 				'data' => array(
    709. 

  709. 					'sprintf' => array(
    710. 

  710. 						'format' => '<input type="checkbox" name="groupr[]" value="%1$d" class="input_check" />',
    711. 

  711. 						'params' => array(
    712. 

  712. 							'id' => false,
    713. 

  713. 						),
    714. 

  714. 					),
    715. 

  715. 					'class' => 'centercol',
    716. 

  716. 				),
    717. 

  717. 			),
    718. 

  718. 		),
    719. 

  719. 		'form' => array(
    720. 

  720. 			'href' => $scripturl . '?action=groups;sa=requests',
    721. 

  721. 			'include_sort' => true,
    722. 

  722. 			'include_start' => true,
    723. 

  723. 			'hidden_fields' => array(
    724. 

  724. 				$context['session_var'] => $context['session_id'],
    725. 

  725. 			),
    726. 

  726. 			'token' => 'mod-gr',
    727. 

  727. 		),
    728. 

  728. 		'additional_rows' => array(
    729. 

  729. 			array(
    730. 

  730. 				'position' => 'bottom_of_list',
    731. 

  731. 				'value' => '
    732. 

  732. 					<select name="req_action" onchange="if (this.value != 0 &amp;&amp; (this.value == \'reason\' || confirm(\'' . $txt['mc_groupr_warning'] . '\'))) this.form.submit();">
    733. 

  733. 						<option value="0">' . $txt['with_selected'] . ':</option>
    734. 

  734. 						<option value="0">---------------------</option>
    735. 

  735. 						<option value="approve">' . $txt['mc_groupr_approve'] . '</option>
    736. 

  736. 						<option value="reject">' . $txt['mc_groupr_reject'] . '</option>
    737. 

  737. 						<option value="reason">' . $txt['mc_groupr_reject_w_reason'] . '</option>
    738. 

  738. 					</select>
    739. 

  739. 					<input type="submit" name="go" value="' . $txt['go'] . '" onclick="var sel = document.getElementById(\'req_action\'); if (sel.value != 0 &amp;&amp; sel.value != \'reason\' &amp;&amp; !confirm(\'' . $txt['mc_groupr_warning'] . '\')) return false;" class="button_submit" />',
    740. 

  740. 				'class' => 'floatright',
    741. 

  741. 			),
    742. 

  742. 		),
    743. 

  743. 	);
    744. 

  744. 

  745. 	// Create the request list.
    746. 

  746. 	createToken('mod-gr');
    747. 

  747. 	createList($listOptions);
    748. 

  748. 

  749. 	$context['default_list'] = 'group_request_list';
    750. 

  750. }
    751. 

  751. 

  752. /**
    753. 

  753.  * Callback function for createList().
    754. 

  754.  *
    755. 

  755.  * @param $where
    756. 

  756.  * @param $where_parameters
    757. 

  757.  * @return int, the count of group requests
    758. 

  758.  */
    759. 

  759. function list_getGroupRequestCount($where, $where_parameters)
    760. 

  760. {
    761. 

  761. 	global $smcFunc;
    762. 

  762. 

  763. 	$request = $smcFunc['db_query']('', '
    764. 

  764. 		SELECT COUNT(*)
    765. 

  765. 		FROM {db_prefix}log_group_requests AS lgr
    766. 

  766. 		WHERE ' . $where,
    767. 

  767. 		array_merge($where_parameters, array(
    768. 

  768. 		))
    769. 

  769. 	);
    770. 

  770. 	list ($totalRequests) = $smcFunc['db_fetch_row']($request);
    771. 

  771. 	$smcFunc['db_free_result']($request);
    772. 

  772. 

  773. 	return $totalRequests;
    774. 

  774. }
    775. 

  775. 

  776. /**
    777. 

  777.  * Callback function for createList()
    778. 

  778.  *
    779. 

  779.  * @param int $start
    780. 

  780.  * @param int $items_per_page
    781. 

  781.  * @param string $sort
    782. 

  782.  * @param string $where
    783. 

  783.  * @param string $where_parameters
    784. 

  784.  * @return array, an array of group requests
    785. 

  785.  * Each group request has:
    786. 

  786.  * 		'id'
    787. 

  787.  * 		'member_link'
    788. 

  788.  * 		'group_link'
    789. 

  789.  * 		'reason'
    790. 

  790.  * 		'time_submitted'
    791. 

  791.  */
    792. 

  792. function list_getGroupRequests($start, $items_per_page, $sort, $where, $where_parameters)
    793. 

  793. {
    794. 

  794. 	global $smcFunc, $txt, $scripturl;
    795. 

  795. 

  796. 	$request = $smcFunc['db_query']('', '
    797. 

  797. 		SELECT lgr.id_request, lgr.id_member, lgr.id_group, lgr.time_applied, lgr.reason,
    798. 

  798. 			mem.member_name, mg.group_name, mg.online_color, mem.real_name
    799. 

  799. 		FROM {db_prefix}log_group_requests AS lgr
    800. 

  800. 			INNER JOIN {db_prefix}members AS mem ON (mem.id_member = lgr.id_member)
    801. 

  801. 			INNER JOIN {db_prefix}membergroups AS mg ON (mg.id_group = lgr.id_group)
    802. 

  802. 		WHERE ' . $where . '
    803. 

  803. 		ORDER BY {raw:sort}
    804. 

  804. 		LIMIT ' . $start . ', ' . $items_per_page,
    805. 

  805. 		array_merge($where_parameters, array(
    806. 

  806. 			'sort' => $sort,
    807. 

  807. 		))
    808. 

  808. 	);
    809. 

  809. 	$group_requests = array();
    810. 

  810. 	while ($row = $smcFunc['db_fetch_assoc']($request))
    811. 

  811. 	{
    812. 

  812. 		$group_requests[] = array(
    813. 

  813. 			'id' => $row['id_request'],
    814. 

  814. 			'member_link' => '<a href="' . $scripturl . '?action=profile;u=' . $row['id_member'] . '">' . $row['real_name'] . '</a>',
    815. 

  815. 			'group_link' => '<span style="color: ' . $row['online_color'] . '">' . $row['group_name'] . '</span>',
    816. 

  816. 			'reason' => censorText($row['reason']),
    817. 

  817. 			'time_submitted' => timeformat($row['time_applied']),
    818. 

  818. 		);
    819. 

  819. 	}
    820. 

  820. 	$smcFunc['db_free_result']($request);
    821. 

  821. 

  822. 	return $group_requests;
    823. 

  823. }
    824.