PageRenderTime 59ms CodeModel.GetById 30ms RepoModel.GetById 0ms app.codeStats 0ms

/class.xmoduser2.inc

https://github.com/jcplat/console-seolan
PHP | 678 lines | 590 code | 44 blank | 44 comment | 92 complexity | 43fc767467c06a72968147075b71a007 MD5 | raw file
Possible License(s): LGPL-2.0, LGPL-2.1, GPL-3.0, Apache-2.0, BSD-3-Clause 
    

  1. <?php
    2. 

  2. class XModUser2 extends XModUserAndGroup {
    3. 

  3.   public $lost_password=true;
    4. 

  4.   public $account_request=false;
    5. 

  5.   public $choose_lang_on_login = true; 
    6. 

  6.   public $send_account_request_to_email=NULL;
    7. 

  7. 

  8.   function __construct($ar=NULL) {
    9. 

  9.     parent::__construct($ar);
    10. 

  10.     if($GLOBALS['XUSER'] && !empty($this->xset->desc['BO']) && empty($this->fieldssec['BO'])){
    11. 

  11.       $rwv=$this->secure('',':rwv');
    12. 

  12.       if(!$rwv) $this->fieldssec['BO']='ro';
    13. 

  13.     }
    14. 

  14.     XLabels::loadLabels('xmoduser2');
    15. 

  15.     $this->group=XLabels::getSysLabel("general","systemproperties","text");
    16. 

  16.     $this->modulename=XLabels::getSysLabel("xmoduser2","modulename","text");
    17. 

  17.     if(!$this->xset->fieldExists('PUBLISH')) $this->account_request=false;
    18. 

  18.   }
    19. 

  19. 

  20.   /// Initialisation des propriétés
    21. 

  21.   public function initOptions() {
    22. 

  22.     parent::initOptions();
    23. 

  23.     $alabel = XLabels::getSysLabel('xmoduser2.modulename');
    24. 

  24.     $this->_options->setOpt(XLabels::getSysLabel('xmodtable','composed_fullnam'),'composed_fullnam','text',NULL,NULL,$alabel);
    25. 

  25.     $this->_options->setOpt(XLabels::getSysLabel('xmoduser2','lost_password'),'lost_password','boolean',NULL,NULL,$alabel);
    26. 

  26.     $this->_options->setOpt(XLabels::getSysLabel('xmoduser2','account_request'),'account_request','boolean',NULL,NULL,$alabel);
    27. 

  27.     $this->_options->setOpt(XLabels::getSysLabel('xmoduser2','choose_lang_on_login'),'choose_lang_on_login','boolean',NULL,NULL,$alabel);
    28. 

  28.     $this->_options->setComment(XLabels::getSysLabel('xmoduser2','account_request_comment'),'account_request');
    29. 

  29.     $this->_options->setOpt(XLabels::getSysLabel('xmoduser2','send_account_request_to_email'),'send_account_request_to_email','text',NULL,NULL,$alabel);
    30. 

  30.   }
    31. 

  31. 

  32.   /// securite des fonctions accessibles par le web
    33. 

  33.   function secGroups($function, $group=NULL) {
    34. 

  34.     $g=array(
    35. 

  35. 	     'setbackuid'=>array('none','admin'),
    36. 

  36. 	     'editPref'=>array('admin'),
    37. 

  37. 	     'setuid'=>array('admin'),
    38. 

  38. 	     'getBookmarks'=>array('none','admin'),
    39. 

  39. 	     'getBookmark'=>array('none','admin'),
    40. 

  40. 	     'insertBookmark'=>array('none','admin'),
    41. 

  41. 	     'procInsertBookmark'=>array('none','admin'),
    42. 

  42. 	     'editBookmark'=>array('none','admin'),
    43. 

  43. 	     'delBookmark'=>array('none','admin'),
    44. 

  44. 	     'procEditBookmark'=>array('none','admin'),
    45. 

  45. 	     'procEditPref'=>array('admin'),
    46. 

  46.              'sendPasswords'=>array('rw','rwv','admin'),
    47. 

  47. 	     'browseSelection'=>array('none','list','ro','rw','rwv','admin'),
    48. 

  48. 	     'myAccount'=>array('none','list','ro','rw','rwv','admin'),
    49. 

  49. 	     'procEditMyAccount'=>array('none','list','ro','rw','rwv','admin'),
    50. 

  50. 	     'getPreferences'=>array('none','list','ro','rw','rwv','admin'),
    51. 

  51. 	     'requestAnAccount'=>array('none'),
    52. 

  52. 	     'procRequestAnAccount'=>array('none'),
    53. 

  53.             );
    54. 

  54.     if(isset($g[$function])) {
    55. 

  55.       if(!empty($group)) return in_array($group, $g[$function]);
    56. 

  56.       return $g[$function];
    57. 

  57.     }
    58. 

  58.     return parent::secGroups($function,$group);
    59. 

  59.   }
    60. 

  60.   
    61. 

  61.   /// Edition des propriétés du module
    62. 

  62.   function procEditProperties($ar=NULL){
    63. 

  63.     $ret=parent::procEditProperties($ar);
    64. 

  64.     if($this->account_request && !$this->xset->fieldExists('PUBLISH')){
    65. 

  65.       $this->xset->createField('PUBLISH','Actif','XBoolDef','0','1','0','1','0','1','0','0');
    66. 

  66.       updateQuery('update USERS set UPD=UPD,PUBLISH=1');
    67. 

  67.     }
    68. 

  68.     return $ret;
    69. 

  69.   }
    70. 

  70. 

  71. 

  72.   /// Prépare une demande de compte
    73. 

  73.   function requestAnAccount($ar=NULL){
    74. 

  74.     $this->captcha=true;
    75. 

  75.     if(empty($ar['selectedfields'])){
    76. 

  76.       $ar['selectedfields']=array_diff(array_keys($this->xset->desc),array('alias','GRP','GRPA','ldata','luser','passwd','DATEF','DATET',($this->composed_fullnam?'fullnam':'')));
    77. 

  77.     }
    78. 

  78.     // Désactive toutes les listbox
    79. 

  79.     foreach($this->xset->desc as $f){
    80. 

  80.       $f->listbox=false;
    81. 

  81.     }
    82. 

  82.     return $this->insert($ar);
    83. 

  83.   }
    84. 

  84. 

  85.   /// Enregistre une demande de compte
    86. 

  86.   function procRequestAnAccount($ar=NULL){
    87. 

  87.     $p=new XParam($ar,NULL);
    88. 

  88.     $this->captcha=true;
    89. 

  89.     $ar['PUBLISH']=2;
    90. 

  90.     $ar['alias']='user'.uniqid();
    91. 

  91.     $ar['ldata']=XShell::getLangUser();
    92. 

  92.     $ar['luser']=XShell::getLangUser();
    93. 

  93.     $ret=$this->procInsert($ar);
    94. 

  94.     
    95. 

  95.     if(!empty($ret) && !empty($ret['oid']) && !empty($this->send_account_request_to_email)) {
    96. 

  96.       $olduser=$GLOBALS['XUSER'];
    97. 

  97.       $GLOBALS['XUSER']=new XUser(array("UID"=>'root'));
    98. 

  98.       setSessionVar("UID",$GLOBALS['XUSER']->_curoid);
    99. 

  99.       $this->procSendACopyTo(array('oid'=>$ret['oid'], 
    100. 

  100. 				   'sendinmail' => array($ret['oid']=>true),
    101. 

  101. 				   'showdest'=>false,
    102. 

  102. 				   'dest_aemails' => $this->send_account_request_to_email,
    103. 

  103. 				   'asubject' => 'Account request : '.$p->get('fullnam'),
    104. 

  104. 				   'amessage' => 'You have received a new account request',
    105. 

  105. 				   'tplentry' => TZR_RETURN_DATA, '_local'=>true), TZR_SENDER_ADDRESS);
    106. 

  106.       if(!empty($olduser)) {
    107. 

  107. 	setSessionVar("UID",$olduser->uid());
    108. 

  108. 	$GLOBALS["XUSER"]=$olduser;
    109. 

  109.       }
    110. 

  110.       
    111. 

  111.     }
    112. 

  112.     return $r;
    113. 

  113.   }
    114. 

  114. 

  115.   /// Edite le compte de l'utilisateur courant
    116. 

  116.   function myAccount($ar=NULL){
    117. 

  117.     $ar['oid']=XUser::get_current_user_uid();
    118. 

  118.     if(!is_array($ar['fieldssec'])){
    119. 

  119.       foreach(array('DATET','DATEF','alias','GRP','GRPA','BO','bohome') as $f){
    120. 

  120.         $ar['fieldssec'][$f]='ro';
    121. 

  121.       }
    122. 

  122.     }
    123. 

  123.     return $this->edit($ar);
    124. 

  124.   }
    125. 

  125. 

  126.   /// Valide l'édition du compte de l'utilisateur courant
    127. 

  127.   function procEditMyAccount($ar=NULL){
    128. 

  128.     $p=new XParam($ar,NULL);
    129. 

  129.     $ar['oid']=XUser::get_current_user_uid();
    130. 

  130.     if(!is_array($ar['fieldssec'])){
    131. 

  131.       foreach(array('DATET','DATEF','alias','GRP','GRPA','BO','bohome') as $f){
    132. 

  132. 	$ar['fieldssec'][$f]='ro';
    133. 

  133.       }
    134. 

  134.     }
    135. 

  135.     $ret=$this->procEdit($ar);
    136. 

  136.     $d=$this->display(array('oid'=>$ar['oid'],'tplentry'=>TZR_RETURN_DATA,'selectedfields'=>array('fullnam','email')));
    137. 

  137.     setSessionVar('FullName',$d['ofullnam']->raw);
    138. 

  138.     setSessionVar('Email',$d['oemail']->raw);
    139. 

  139.     return $ret;
    140. 

  140.   }
    141. 

  141. 

  142.   /// Recupère les préferences de l'utilisateur sur chaque module
    143. 

  143.   function getPreferences($ar=NULL){
    144. 

  144.     $p=new XParam($ar,NULL);
    145. 

  145.     $tplentry=$p->get('tplentry');
    146. 

  146.     $modlist=XModule::modlist(array('tplentry'=>TZR_RETURN_DATA));
    147. 

  147.     foreach($modlist['lines_oid'] as $i=>$moid){
    148. 

  148.       $mod=XModule::objectFactory(array('moid'=>$moid,'tplentry'=>TZR_RETURN_DATA));
    149. 

  149.       $prefs=$mod->editPrefs();
    150. 

  150.       if(!empty($prefs)) $modlist['lines_prefs'][$i]=$prefs;
    151. 

  151.     }
    152. 

  152.     return XShell::toScreen1($tplentry,$modlist);
    153. 

  153.   }
    154. 

  154. 

  155.   /// Rempli le fullname dans le cas ou il est composé d'autres champs
    156. 

  156.   function getComposedFullnam(&$ar){
    157. 

  157.     $p = new XParam($ar,array());
    158. 

  158.     $oid = $p->get('oid');
    159. 

  159.     if(!is_array($oid) && !empty($this->composed_fullnam)){
    160. 

  160.       $tab=explode(',',$this->composed_fullnam);
    161. 

  161.       $ok=false;
    162. 

  162.       // On verifie qu'au moins un des champs qui composent le nom existe
    163. 

  163.       foreach($tab as $f){
    164. 

  164. 	if($p->is_set($f)){
    165. 

  165. 	  $ok=true;
    166. 

  166. 	}
    167. 

  167.       }
    168. 

  168.       if($ok){
    169. 

  169. 	$fullnam='';
    170. 

  170. 	foreach($tab as $f){
    171. 

  171. 	  if($p->is_set($f)){
    172. 

  172. 	    $v=$p->get($f);
    173. 

  173. 	  }else{
    174. 

  174. 	    if(empty($d)) $d=$this->display(array('tplentry'=>TZR_RETURN_DATA,'oid'=>$oid,'selectedfields'=>$tab));
    175. 

  175. 	    $v=$d['o'.$f]->raw;
    176. 

  176. 	  }
    177. 

  177. 	  $fullnam.=$v;
    178. 

  178. 	  if(!empty($v)) $fullnam.=' ';
    179. 

  179. 	}
    180. 

  180. 	if(substr($fullnam,-1)==' ') $fullnam=substr($fullnam,0,-1);
    181. 

  181. 	if(!empty($fullnam)) $ar['fullnam']=$fullnam;
    182. 

  182.       }
    183. 

  183.     }
    184. 

  184.   }
    185. 

  185. 

  186.   /// Sauvegarde un compte utilisateur
    187. 

  187.   function procEdit($ar=NULL){
    188. 

  188.     $this->getComposedFullnam($ar);
    189. 

  189.     return parent::procEdit($ar);
    190. 

  190.   }
    191. 

  191. 

  192. 

  193.   /// Duplication d'un compte utilisateur
    194. 

  194.   function procEditDup($ar){
    195. 

  195.     $r=parent::procEditDup($ar);
    196. 

  196.     if(!empty($r['oid'])){
    197. 

  197.       $d1=$this->display(array('oid'=>$r['oid'], 'tplentry'=>TZR_RETURN_DATA));
    198. 

  198.       $groups=XDataSource::objectFactoryHelper8('BCLASS=XDSTable&SPECS='.'GRP');
    199. 

  199.       foreach($d1['oGRP']->oidcollection as $groupoid) {
    200. 

  200. 	$d2=&$groups->rDisplay($groupoid);
    201. 

  201. 	if(!empty($d2['oprefs']->raw)) {
    202. 

  202. 	  // on duplique le contenu des préférences stockées dans la table OPTS
    203. 

  203. 	  $templateoid=$d2['oprefs']->raw;
    204. 

  204. 	  $useroid=$r['oid'];
    205. 

  205. 	  $rs2=selectQuery('select * from OPTS where user="'.$templateoid.'"');
    206. 

  206. 	  $opts=XDataSource::objectFactoryHelper8('BCLASS=XDSTable&SPECS='.'OPTS');
    207. 

  207. 	  while($rs2 && ($ors2=$rs2->fetch())) {
    208. 

  208. 	    $opts->procInput(array('user'=>$useroid, 'specs'=>$ors2['specs'], 'modid'=>$ors2['modid'],
    209. 

  209. 				   'dtype'=>$ors2['dtype']));
    210. 

  210. 	  }
    211. 

  211. 	}
    212. 

  212.       }
    213. 

  213.     }
    214. 

  214.     return $r;
    215. 

  215.   }
    216. 

  216. 

  217. 

  218.   /// creation d'un nouvel utilisateur
    219. 

  219.   function procInsert($ar) {
    220. 

  220.     $this->getComposedFullnam($ar);
    221. 

  221. 

  222.     $p=new XParam($ar,array());
    223. 

  223.     $passwd=$p->get('passwd');
    224. 

  224.     if($passwd==TZR_UNCHANGED || !$passwd) {
    225. 

  225.       $ar['passwd']=newPassword();
    226. 

  226.     }
    227. 

  227.     $r=parent::procInsert($ar);
    228. 

  228.     if(!empty($r['oid'])) {
    229. 

  229.       $d1=$this->display(array('oid'=>$r['oid'], 'tplentry'=>TZR_RETURN_DATA));
    230. 

  230.       $groups=XDataSource::objectFactoryHelper8('BCLASS=XDSTable&SPECS='.'GRP');
    231. 

  231.       foreach($d1['oGRP']->oidcollection as $groupoid) {
    232. 

  232. 	$d2=&$groups->rDisplay($groupoid);
    233. 

  233. 	if(!empty($d2['oprefs']->raw)) {
    234. 

  234. 	  // on duplique le contenu des préférences stockées dans la table OPTS
    235. 

  235. 	  $templateoid=$d2['oprefs']->raw;
    236. 

  236. 	  $useroid=$r['oid'];
    237. 

  237. 	  $rs2=selectQuery('select * from OPTS where user="'.$templateoid.'"');
    238. 

  238. 	  $opts=XDataSource::objectFactoryHelper8('BCLASS=XDSTable&SPECS='.'OPTS');
    239. 

  239. 	  while($rs2 && ($ors2=$rs2->fetch())) {
    240. 

  240. 	    $opts->procInput(array('user'=>$useroid, 'specs'=>$ors2['specs'], 'modid'=>$ors2['modid'],
    241. 

  241. 				   'dtype'=>$ors2['dtype']));
    242. 

  242. 	  }
    243. 

  243. 	  return $r;
    244. 

  244. 	}
    245. 

  245.       }
    246. 

  246.     }
    247. 

  247.     return $r;
    248. 

  248.   }
    249. 

  249.   
    250. 

  250.   function browse_actions(&$r) {
    251. 

  251.     $self=$GLOBALS['TZR_SESSION_MANAGER']::complete_self();
    252. 

  252.     $self=$self."&moid=".$this->_moid."&oid=<oid>&tplentry=br&function=";
    253. 

  253.     if(!is_array($r['lines_oid'])) return;
    254. 

  254.     $viewico=XLabels::getSysLabel('general','view');
    255. 

  255.     $viewtxt=XLabels::getSysLabel('general','view','text');
    256. 

  256.     $editico=XLabels::getSysLabel('general','edit');
    257. 

  257.     $edittxt=XLabels::getSysLabel('general','edit','text');
    258. 

  258.     $delico=XLabels::getSysLabel('general','delete');
    259. 

  259.     $deltxt=XLabels::getSysLabel('general','delete','text');
    260. 

  260.     $secico=XLabels::getSysLabel('general','security');
    261. 

  261.     $sectxt=XLabels::getSysLabel('general','security','text');
    262. 

  262.     $moveico=XLabels::getSysLabel('general','move');
    263. 

  263.     $movetxt=XLabels::getSysLabel('general','move','text');
    264. 

  264.     $editlvl=$this->secGroups('edit');
    265. 

  265.     $dellvl=$this->secGroups('del');
    266. 

  266.     $seclvl=$this->secGroups('editSec');
    267. 

  267.     $sec2lvl=$this->secGroups('setuid');
    268. 

  268.     $moidadmin=XModule::getMoid(XMODADMIN_TOID);
    269. 

  269. 

  270.     foreach($r['lines_oid'] as $i =>$oid) {
    271. 

  271.       $oidlvl=array_keys($r['objects_sec'][$i]);
    272. 

  272.       $self1=str_replace('<oid>',$oid,$self);
    273. 

  273.       $r['actions'][$i][0]='<a class="cv8-ajaxlink cv8-dispaction" href="'.$self1.'display&template=xmodtable/view.html" title="'.$viewtxt.'">'.$viewico.'</a>';
    274. 

  274.       $r['actions_label'][$i][0]=$viewico;
    275. 

  275.       $r['actions_url'][$i][0]=$self1.'display&template=xmodtable/view.html';
    276. 

  276.       // edition
    277. 

  277.       $inter=array_intersect($editlvl,$oidlvl);
    278. 

  278.       if(!empty($inter)){
    279. 

  279. 	$url=$self1.'edit&template=xmodtable/edit.html';
    280. 

  280. 	$r['actions'][$i][1]='<a class="cv8-ajaxlink cv8-editaction" href="'.$url.'" title="'.$edittxt.'">'.$editico.'</a>';
    281. 

  281. 	$r['actions_url'][$i][1]=$url;
    282. 

  282. 	$r['actions_label'][$i][1]=$editico;
    283. 

  283.       }
    284. 

  284.       // suppression
    285. 

  285.       $inter=array_intersect($dellvl,$oidlvl);
    286. 

  286.       if(!empty($inter)){
    287. 

  287. 	$url=$self1.'del&template=basic/message.html';
    288. 

  288. 	$r['actions'][$i][2]='<a class="cv8-delaction" href="'.$url.'" title="'.$deltxt.'">'.$delico.'</a>';
    289. 

  289. 	$r['actions_url'][$i][2]=$url;
    290. 

  290. 	$r['actions_label'][$i][2]=$deltxt;
    291. 

  291.       }
    292. 

  292.       // securité
    293. 

  293.       $inter=array_intersect($seclvl,$oidlvl);
    294. 

  294.       if(!empty($inter)){
    295. 

  295. 	$url=$self1.'editSec&moid='.$this->_moid."&oid=$oid&template=xmoduser2/secedit.html&tplentry=br";
    296. 

  296. 	$r['actions'][$i][3]='<a class="cv8-ajaxlink" href="'.$url.'" title="'.$sectxt.'">'.$secico.'</a>';
    297. 

  297. 	$r['actions_url'][$i][3]=$url;
    298. 

  298. 	$r['actions_label'][$i][3]=$sectxt;
    299. 

  299.       }
    300. 

  300.       // changer user
    301. 

  301.       $inter=array_intersect($sec2lvl,$oidlvl);
    302. 

  302.       if(!empty($inter)){
    303. 

  303. 	$url2='&function=portail&template=home.html&moid='.$moidadmin;
    304. 

  304. 	$url=$self1.'setuid&moid='.$this->_moid."&oid=$oid&template=xmoduser2/secedit.html&tplentry=br&_next=".urlencode($url2);
    305. 

  305. 	$r['actions'][$i][4]='<a href="'.$url.'" title="'.$movetxt.'">'.$moveico.'</a>';
    306. 

  306. 	$r['actions_url'][$i][4]=$url;
    307. 

  307.       }
    308. 

  308.     }
    309. 

  309.   }
    310. 

  310.   
    311. 

  311.   /// Controle si une édition est valide
    312. 

  312.   function procEditCtrl($ar=NULL) {
    313. 

  313.     if(!parent::procEditCtrl($ar)) return false;
    314. 

  314. 

  315.     $p=new XParam($ar,array());
    316. 

  316. 

  317.     $alias=$p->get('alias');
    318. 

  318.     if(!empty($alias) && !preg_match('/^([a-z0-9@\._-]{3,30})$/i',$alias)) {
    319. 

  319.       XShell::toScreen2('','message','Username must be 3 to 30 characters long and must contain a-z, 0-9 and _, - characters only');
    320. 

  320.       return false;
    321. 

  321.     }
    322. 

  322. 

  323.     $cnt=0;
    324. 

  324.     $oid=$p->get('oid');
    325. 

  325.     if(!empty($oid) && !empty($alias)) $cnt=countSelectQuery('select COUNT(*) from '.$this->table.' where alias="'.$alias.'" and KOID!="'.$oid.'"');
    326. 

  326.     elseif(!empty($alias)) $cnt=countSelectQuery('select COUNT(*) from '.$this->table.' where alias="'.$alias.'"');
    327. 

  327.     if($cnt) {
    328. 

  328.       XShell::toScreen2('','message',XLabels::getSysLabel('xmoduser2','existing_user','text'));
    329. 

  329.       return false;
    330. 

  330.     }
    331. 

  331. 

  332.     // Verifie que les nouveaux droits ne sont pas supérieurs aux droits de l'utilisateur actuel
    333. 

  333.     $grp=$p->get('GRP');
    334. 

  334.     if(false && !empty($grp) && !XShell::isRoot()){
    335. 

  335.       $grp=$this->xset->desc['GRP']->post_edit($grp,array('GRP_HID'=>$p->get('GRP_HID'),'GRP_FMT'=>$p->get('GRP_FMT')));
    336. 

  336.       if(!empty($grp)){
    337. 

  337. 	$rs=&selectQuery('select * from MODULES');
    338. 

  338. 	while($rs && $ors=$rs->fetch()){
    339. 

  339. 	  foreach($GLOBALS['TZR_LANGUAGES'] as $lang=>$foo){
    340. 

  340. 	    $nlvl=XUser::secure8maxlevel($ors['MOID'],'',$grp->raw,$lang);
    341. 

  341. 	    $alvl=XUser::secure8maxlevel($ors['MOID'],'',null,$lang);
    342. 

  342. 	    if(XUser::compareSecLevels($ors['MOID'],$nlvl,$alvl,'>')){
    343. 

  343. 	      XShell::toScreen2('','message',XLabels::getSysLabel('security','noauthtosetsec'));;
    344. 

  344. 	      return false;
    345. 

  345. 	    }
    346. 

  346. 	  }
    347. 

  347. 	}
    348. 

  348.       }
    349. 

  349.     }
    350. 

  350.     return true;
    351. 

  351.   }
    352. 

  352. 

  353.   /// suppression d'un utilisateur
    354. 

  354.   function del($ar) {
    355. 

  355.     if(parent::del($ar)) {
    356. 

  356.       $p = new XParam($ar, array());
    357. 

  357.       $oid = $p->get('oid');
    358. 

  358.       // suppression des abonnements
    359. 

  359.       updateQuery("delete from OPTS where user like '$oid'");
    360. 

  360.       // suppression des regles de secuite inutiles
    361. 

  361.       updateQuery("delete from ACL4 where AGRP like '$oid'");
    362. 

  362.       // suppression des enregistrements dans les logs
    363. 

  363.       XArchives::appendOid($oid, 'LOGS.user', true);
    364. 

  364.       XArchives::appendOid($oid, 'LOGS.object', true);
    365. 

  365.       if(!empty($GLOBALS['XLOCK'])) {
    366. 

  366. 	$GLOBALS['XLOCK']->cleanLocksForUser($oid);
    367. 

  367.       }
    368. 

  368.     }
    369. 

  369.   }
    370. 

  370. 

  371.   /// Obtenir la liste des bookmarks de l'utilisateur connecté ou de l'utilisateur dont l'oid est passé dans le paramètre
    372. 

  372.   function &getBookmarks($ar) {
    373. 

  373.     $p=new XParam($ar,array());
    374. 

  374.     $oid=$p->get('oid','norequest');
    375. 

  375.     if(empty($oid)) $oid=XUser::get_current_user_uid();
    376. 

  376.     $tplentry=$p->get('tplentry');
    377. 

  377.     $r1=XOpts::getOpt($oid, $this->_moid, 'book');
    378. 

  378.     $sortarray=array();
    379. 

  379.     foreach($r1 as $k=>&$v1) {
    380. 

  380.       $sortarray[$k]=$v1['group'].$v1['title'];
    381. 

  381.       $v1['key']=$k;
    382. 

  382.       $v1['text']=nl2br(htmlspecialchars(strip_tags($v1['text'])));
    383. 

  383.       $v1['group']=htmlspecialchars(strip_tags($v1['group']));
    384. 

  384.       $v1['title']=htmlspecialchars(strip_tags($v1['title']));
    385. 

  385.       $v1['autostart']=@$v1['autostart'];
    386. 

  386.       $v1['viewhome']=@$v1['viewhome'];
    387. 

  387.     }
    388. 

  388.     array_multisort($sortarray,SORT_ASC,$r1);
    389. 

  389.     if($tplentry==TZR_RETURN_DATA) return $r1;
    390. 

  390.     else{
    391. 

  391.       $r2['bks']=&$r1;
    392. 

  392.       XShell::toScreen1($tplentry,$r2);
    393. 

  393.     }
    394. 

  394.   }
    395. 

  395. 

  396.   /// Recupere les parametres d'un bookmark
    397. 

  397.   function &getBookmark($ar) {
    398. 

  398.     $p=new XParam($ar,array());
    399. 

  399.     $oid=$p->get('oid','norequest');
    400. 

  400.     if(empty($oid)) $oid=XUser::get_current_user_uid();
    401. 

  401.     $tplentry=$p->get('tplentry');
    402. 

  402.     $key=$p->get('key');
    403. 

  403.     $r1=XOpts::getOpt($oid, $this->_moid, 'book');
    404. 

  404.     $v1=$r1[$key];
    405. 

  405.     // Assure compatibilité <V8
    406. 

  406.     if(!is_array($v1['urls'])) $v1['urls']=array($v1['url']);
    407. 

  407.     $v1['key']=$key;
    408. 

  408.     $v1['text']=htmlspecialchars(strip_tags($v1['text']));
    409. 

  409.     $v1['group']=htmlspecialchars(strip_tags($v1['group']));
    410. 

  410.     $v1['title']=htmlspecialchars(strip_tags($v1['title']));
    411. 

  411.     $v1['autostart']=@$v1['autostart'];
    412. 

  412.     $v1['viewhome']=@$v1['viewhome'];
    413. 

  413.     return XShell::toScreen1($tplentry,$v1);
    414. 

  414.   }
    415. 

  415. 

  416.   /// Modifie l'intégralité des bookmarks d'un utilisateur
    417. 

  417.   function &setBookmarks($ar) {
    418. 

  418.     $p=new XParam($ar,array());
    419. 

  419.     $oid=$p->get('oid','norequest');
    420. 

  420.     if(empty($oid)) $oid=XUser::get_current_user_uid();
    421. 

  421.     $specs=$p->get('specs');
    422. 

  422.     XOpts::setOpt($oid, $this->_moid, 'book', $specs);
    423. 

  423.   }
    424. 

  424. 

  425.   /// Suppression d'un bookmark
    426. 

  426.   function delBookmark($ar) {
    427. 

  427.     $p=new XParam($ar,array('oid'=>XUser::get_current_user_uid()));
    428. 

  428.     $oid=$p->get('oid','norequest');
    429. 

  429.     if(!($oid==XUser::get_current_user_uid() || XShell::isRoot()))
    430. 

  430.       securityWarning('XModUser2::delBookmark: user '.$oid.' cannot apply');
    431. 

  431.     $tplentry=$p->get('tplentry');
    432. 

  432.     $key=$p->get('key');
    433. 

  433.     $r1=XOpts::unsetSubOpt($oid, $this->_moid, 'book', $key);
    434. 

  434.   }
    435. 

  435. 

  436.   /// Prépare l'insertion d'un nouveau bookmark
    437. 

  437.   function insertBookmark($ar=NULL){
    438. 

  438.     $p=new XParam($ar,NULL);
    439. 

  439.     $urls=XModUser2::_normalizeBookmark($p->get('urls'));
    440. 

  440.     $titles=$p->get('titles');
    441. 

  441.     $comments=$p->get('comments');
    442. 

  442.     $tplentry=$p->get('tplentry');
    443. 

  443.     $ret=array('urls'=>$urls,'titles'=>$titles,'comments'=>$comments);
    444. 

  444.     XShell::toScreen1($tplentry,$ret);
    445. 

  445.   }
    446. 

  446. 

  447.   /// Enregistre un nouveau bookmark
    448. 

  448.   function procInsertBookmark($ar=NULL){
    449. 

  449.     return $this->procEditBookmark($ar);
    450. 

  450.   }
    451. 

  451. 

  452.   /// Modification d'un bookmark, préparation de l'écran
    453. 

  453.   function editBookmark($ar) {
    454. 

  454.     $p=new XParam($ar,array('oid'=>XUser::get_current_user_uid()));
    455. 

  455.     $oid=$p->get('oid','norequest');
    456. 

  456.     if(!($oid==XUser::get_current_user_uid() || XShell::isRoot())) 
    457. 

  457.       securityWarning('XModUser2::editBookmark: user '.$oid.' cannot apply');
    458. 

  458.     $tplentry=$p->get('tplentry');
    459. 

  459.     $key=$p->get('key');
    460. 

  460.     $r1=XOpts::getOpt($oid, $this->_moid, 'book');
    461. 

  461.     $r2=$r1[$key];
    462. 

  462.     // Assure compatibilité <V8
    463. 

  463.     if(!is_array($r2['urls'])) $r2['urls']=array($r2['url']);
    464. 

  464.     $r2['key']=$key;
    465. 

  465.     return XShell::toScreen1($tplentry, $r2);
    466. 

  466.   }
    467. 

  467. 

  468.   /// Normalisation des bookmarks: on essaie de transformer les bookmarks en url generiques par defaut
    469. 

  469.   static public function _normalizeBookmark($urls) {
    470. 

  470.     if(!is_array($urls)){
    471. 

  471.       $urls=array($urls);
    472. 

  472.       $one=true;
    473. 

  473.     }
    474. 

  474.     foreach($urls as &$url){
    475. 

  475.       $url=strip_tags(trim($url));
    476. 

  476.       $url=preg_replace('/^(javascript[^&]*)/','',$url);
    477. 

  477.       $url=preg_replace('/^(http[^&]*)/','',$url);
    478. 

  478.       $url=preg_replace('@^(/[^&]*)@','',$url);
    479. 

  479.       $url=preg_replace('/'.session_name().'=[a-z0-9]+/i','',$url);
    480. 

  480.       $url=preg_replace('/_bdx=[a-z0-9_]+/i','',$url);
    481. 

  481.       $url=preg_replace('/&_nohistory=./i','',$url);
    482. 

  482.       $url=preg_replace('/&_raw=./i','',$url);
    483. 

  483.       $url=preg_replace('/&_ajax=./i','',$url);
    484. 

  484.       $url=preg_replace('/&_bdxnewstack=./i','',$url);
    485. 

  485.       $url=preg_replace('/&_=[^&]+/i','',$url);
    486. 

  486.       $url=str_replace('&&','&',$url);
    487. 

  487.     }
    488. 

  488.     if($one) return $urls[0];
    489. 

  489.     else return $urls;
    490. 

  490.   }
    491. 

  491. 

  492.   /// Enregistres les modifications d'un bookmark
    493. 

  493.   function procEditBookmark($ar) {
    494. 

  494.     $p=new XParam($ar,array('oid'=>XUser::get_current_user_uid()));
    495. 

  495.     $oid=$p->get('oid','norequest');
    496. 

  496.     if(!($oid==XUser::get_current_user_uid() || XShell::isRoot()))
    497. 

  497.       securityWarning('XModUser2::procEditBookmark: user '.$oid.' cannot apply');
    498. 

  498.     $tplentry=$p->get('tplentry');
    499. 

  499.     $key=$p->get('key');
    500. 

  500.     $group=strip_tags($p->get('group'));
    501. 

  501.     $title=strip_tags($p->get('title'));
    502. 

  502.     $text=strip_tags($p->get('text'));
    503. 

  503.     $autostart=$p->get('autostart');
    504. 

  504.     $viewhome=$p->get('viewhome');
    505. 

  505.     $titles=$p->get('titles');
    506. 

  506.     $comms=$p->get('comments');
    507. 

  507.     $urls=XModUser2::_normalizeBookmark($p->get('urls'));
    508. 

  508.     $r1=XOpts::getOpt($oid, $this->_moid, 'book');
    509. 

  509.     $new=array('title'=>$title,'text'=>$text,'group'=>$group,'urls'=>$urls,'titles'=>$titles,'comments'=>$comms,'autostart'=>$autostart,
    510. 

  510. 	       'viewhome'=>$viewhome);
    511. 

  511.     if(isset($key)) $r1[$key]=$new;
    512. 

  512.     else $r1[]=$new;
    513. 

  513.     XOpts::setOpt($oid, $this->_moid, 'book', $r1);
    514. 

  514.   }
    515. 

  515.   /* Fin gestion des bookmarks */
    516. 

  516.   
    517. 

  517.   /// Envoie du mot de passe aux utilisteurs spécifiés
    518. 

  518.   function sendPasswords($ar=NULL) {
    519. 

  519.     $p=new XParam($ar, array());
    520. 

  520.     $_selected=$p->get('_selected');
    521. 

  521.     $adminonly=$p->get('adminonly');
    522. 

  522.     if(empty($_selected)) $_selected=array($p->get('oid')=>1);
    523. 

  523.     $fields=array('KOID','alias','fullnam','email');
    524. 

  524.     if($this->xset->fieldExists('ldata')) $fields[]="ldata";
    525. 

  525.     if($this->xset->fieldExists('luser')) $fields[]="luser";
    526. 

  526.     $actlangdata=XShell::getLangData();
    527. 

  527.     $actreqlangdata=$_REQUEST['LANG_DATA'];
    528. 

  528.     $actreqlanguser=$_REQUEST['LANG_USER'];
    529. 

  529.     foreach($_selected as $oid=>$foo) {
    530. 

  530.       $rs=selectQuery("select distinct ".implode(',',$fields)." from USERS where KOID='$oid'");
    531. 

  531.       if($ors=$rs->fetch()) {
    532. 

  532. 	if($this->xset->fieldExists('ldata')){
    533. 

  533. 	  XShell::getLangData($ors['ldata'],true);
    534. 

  534. 	  $_REQUEST['LANG_DATA']=$ors['ldata'];
    535. 

  535. 	}
    536. 

  536. 	if($this->xset->fieldExists('luser')){
    537. 

  537. 	  $_REQUEST['LANG_USER']=$ors['luser'];
    538. 

  538. 	  $GLOBALS['XSHELL']->labels->reloadLabels();
    539. 

  539. 	}
    540. 

  540. 	$alias=$ors['alias'];
    541. 

  541. 	$pwd=newPassword();
    542. 

  542. 	$text=$GLOBALS['XSHELL']->labels->getCustomSysLabel('xsession.messages','login_msg','mail');
    543. 

  543. 	$text=sprintf($text,$alias,$pwd);
    544. 

  544. 	updateQuery('update USERS set passwd=MD5("'.$pwd.'") where alias="'.$alias.'"');
    545. 

  545. 	$subject=$GLOBALS['XSHELL']->labels->getCustomSysLabel('xsession.messages','login_sub','mail');
    546. 

  546. 	if(empty($adminonly)) $this->sendMail2User($subject, $text,$ors['email'],$this->sender);
    547. 

  547. 	$this->sendMail2User($subject, $text,TZR_DEBUG_ADDRESS, $this->sender);
    548. 

  548. 	$rs->closeCursor();
    549. 

  549.       }
    550. 

  550.     }
    551. 

  551.     if($this->xset->fieldExists('ldata')){
    552. 

  552.       XShell::getLangData($actlangdata,true);
    553. 

  553.       $_REQUEST['LANG_DATA']=$actreqlangdata;
    554. 

  554.     }
    555. 

  555.     if($this->xset->fieldExists('luser')){
    556. 

  556.       $_REQUEST['LANG_USER']=$actreqlanguser;
    557. 

  557.       $GLOBALS['XSHELL']->labels->reloadLabels();
    558. 

  558.     }
    559. 

  559.   }
    560. 

  560. 

  561.   protected function _actionlist(&$my) {
    562. 

  562.     parent::_actionlist($my);
    563. 

  563.     $moid=$this->_moid;
    564. 

  564.     $oid=@$_REQUEST['oid'];
    565. 

  565.     $uniqid=XShell::uniqid();
    566. 

  566.     if($this->secure('','sendPasswords')) {
    567. 

  567.       if(in_array(XShell::_function(),array('edit','display'))) {
    568. 

  568.         $o1=new XModuleAction($this,'sendaccount',XLabels::getSysLabel('xmoduser2','sendaccount','text'),
    569. 

  569. 			      '&moid='.$moid.'&oid='.$oid.'&_function=sendPasswords&template=basic/message.html&tplentry=br','edit');
    570. 

  570.         $o1->menuable=true;
    571. 

  571.         $my['sendaccount']=$o1;
    572. 

  572.       }elseif(in_array(XShell::_function(),array('browse','procQuery'))) {
    573. 

  573.         $message=addslashes(XLabels::getSysLabel('general','operation_succeeded','text'));
    574. 

  574.         $o1=new XModuleAction($this,'sendaccount',XLabels::getSysLabel('xmoduser2','sendaccount','text'),
    575. 

  575. 			      'javascript:TZR.applySelected("sendPasswords",document.browse'.$uniqid.',"'.$message.'",'.
    576. 

  576. 			      '"basic/message.html",0,"'.addslashes(XLabels::getSysLabel('general','error_select_object','text')).'");',
    577. 

  577. 			      'edit');
    578. 

  578.         $o1->menuable=true;
    579. 

  579.         $my['sendaccount']=$o1;
    580. 

  580.       }
    581. 

  581.     }
    582. 

  582.     $goid=XModule::getMoid(XMODGROUP_TOID);
    583. 

  583.     $ri=XUser::secure8maxlevel($goid);
    584. 

  584.     if(in_array($ri, array('admin', 'rwv', 'rw', 'ro'))){
    585. 

  585.       $o1=new XModuleAction($this,'groups',XLabels::getSysLabel('xmodgroup','groups','text'),
    586. 

  586. 			    '&function=browse&moid='.$goid.'&template=xmodtable/browse.html&tplentry=br','display');
    587. 

  587.       $o1->menuable=true;
    588. 

  588.       $o1->setToolbar('xmodgroup','groups');
    589. 

  589.       $my['groups']=$o1;
    590. 

  590.     }
    591. 

  591.   }
    592. 

  592. 

  593.   function al_browse(&$my){
    594. 

  594.     parent::al_browse($my);
    595. 

  595.     $uniqid='v'.XShell::uniqid();
    596. 

  596.     if($this->secure('','editSec')){
    597. 

  597.       $o1=new XModuleAction($this,'editsec',XLabels::getSysLabel('general','security','text'),
    598. 

  598. 			    'javascript:'.$uniqid.'.applyfunction("editSec","",{template:"xmoduser2/secedit.html"},true,true);','edit');
    599. 

  599.       $o1->setToolbar('general','security');
    600. 

  600.       $o1->order=4;
    601. 

  601.       $my['editsec']=$o1;
    602. 

  602.     }
    603. 

  603.   }
    604. 

  604. 

  605.   function setbackuid($ar) {
    606. 

  606.     $this->setuid($ar);
    607. 

  607.     
    608. 

  608.   }
    609. 

  609.   function setuid($ar) {
    610. 

  610.     $p=new XParam($ar,array());
    611. 

  611.     $oid=$p->get('oid');
    612. 

  612.     $suid=getSessionVar('SUID');
    613. 

  613.     
    614. 

  614.     $c=$GLOBALS['TZR_SESSION_MANAGER'];
    615. 

  615.     $sess=new $c();
    616. 

  616.     $params = array(
    617. 

  617.       '_options' => array('local' => 1),
    618. 

  618.       'suid' => 1,
    619. 

  619.       'admini' => getSessionVar('ADMINI'));
    620. 

  620.     if (empty($suid)){
    621. 

  621.       $params['uid'] = $oid;
    622. 

  622.       $sess->procAuth($params);
    623. 

  623.     } else {
    624. 

  624.       $params['uid'] = $suid;
    625. 

  625.       $sess->procAuth($params);
    626. 

  626.     }
    627. 

  627.   }
    628. 

  628. 

  629.   /* Gestion de la selection */
    630. 

  630.   /// Ajoute des données à la selection
    631. 

  631.   function addToSelection($moid,$data){
    632. 

  632.     $sel=getSessionVar('selection');
    633. 

  633.     if(empty($sel[$moid])) $sel[$moid]=array();
    634. 

  634.     $sel[$moid]=array_merge($sel[$moid],$data);
    635. 

  635.     setSessionVar('selection',$sel);
    636. 

  636.   }
    637. 

  637.   /// Ajoute des données à la selection
    638. 

  638.   function delToSelection($moid,$data){
    639. 

  639.     $sel=getSessionVar('selection');
    640. 

  640.     foreach($data as $oid=>&$foo){
    641. 

  641.       unset($sel[$moid][$oid]);
    642. 

  642.     }
    643. 

  643.     if(empty($sel[$moid])) unset($sel[$moid]);
    644. 

  644.     setSessionVar('selection',$sel);
    645. 

  645.   }
    646. 

  646.   /// Parcours toute la selection
    647. 

  647.   function browseSelection($ar=NULL){
    648. 

  648.     $p=new XParam($ar,NULL);
    649. 

  649.     $tplentry=$p->get('tplentry');
    650. 

  650.     $details=$p->get('details');
    651. 

  651.     $sel=getSessionVar('selection');
    652. 

  652.     $result=array();
    653. 

  653.     $names=array();
    654. 

  654.     if(is_array($sel)) {
    655. 

  655.       foreach($sel as $moid=>&$data){
    656. 

  656. 	$mod=XModule::objectFactory(array('moid'=>$moid,'tplentry'=>TZR_RETURN_DATA));
    657. 

  657. 	$br=&$mod->browseUserSelection(array('tplentry'=>TZR_RETURN_DATA));
    658. 

  658. 	$br['_actions']=$mod->userSelectionActions();
    659. 

  659. 	if(empty($br['_count'])){
    660. 

  660. 	  unset($sel[$moid]);
    661. 

  661. 	  continue;
    662. 

  662. 	}
    663. 

  663. 	$result[]=$br;
    664. 

  664. 	$names[]=$br['_modulename'];
    665. 

  665.       }
    666. 

  666.       setSessionVar('selection',$sel);
    667. 

  667.       array_multisort($names,$result);
    668. 

  668.     }
    669. 

  669.     return XShell::toScreen2($tplentry,'selections',$result);
    670. 

  670.   }
    671. 

  671. 

  672.   /// Rend l'accessibilite du module avec l'oid donne
    673. 

  673.   function secure($oid, $func, $user=NULL, $lang=TZR_DEFAULT_LANG) {
    674. 

  674.     if(($func=='requestAnAccount' || $func=='procRequestAnAccount') && !$this->account_request) return false;
    675. 

  675.     return parent::secure($oid,$func,$user,$lang);
    676. 

  676.   }
    677. 

  677. }
    678. 

  678. ?>
    679. 

  679.