PageRenderTime 53ms CodeModel.GetById 17ms RepoModel.GetById 1ms app.codeStats 0ms

/admin_groups.php

https://github.com/Dratone/EveBB
PHP | 568 lines | 473 code | 74 blank | 21 comment | 134 complexity | 2dd3c0888408fb949a668d7c5cd6b55b MD5 | raw file
Possible License(s): GPL-2.0 
    

  1. <?php
    2. 

  2. 

  3. /**
    4. 

  4.  * Copyright (C) 2008-2010 FluxBB
    5. 

  5.  * based on code by Rickard Andersson copyright (C) 2002-2008 PunBB
    6. 

  6.  * License: http://www.gnu.org/licenses/gpl.html GPL version 2 or higher
    7. 

  7.  */
    8. 

  8. 

  9. // Tell header.php to use the admin template
    10. 

  10. define('PUN_ADMIN_CONSOLE', 1);
    11. 

  11. 

  12. define('PUN_ROOT', dirname(__FILE__).'/');
    13. 

  13. require PUN_ROOT.'include/common.php';
    14. 

  14. require PUN_ROOT.'include/common_admin.php';
    15. 

  15. 

  16. 

  17. if ($pun_user['g_id'] != PUN_ADMIN)
    18. 

  18. 	message($lang_common['No permission']);
    19. 

  19. 

  20. // Load the admin_censoring.php language file
    21. 

  21. require PUN_ROOT.'lang/'.$admin_language.'/admin_groups.php';
    22. 

  22. 

  23. // Add/edit a group (stage 1)
    24. 

  24. if (isset($_POST['add_group']) || isset($_GET['edit_group']))
    25. 

  25. {
    26. 

  26. 	if (isset($_POST['add_group']))
    27. 

  27. 	{
    28. 

  28. 		$base_group = intval($_POST['base_group']);
    29. 

  29. 

  30. 		$result = $db->query('SELECT * FROM '.$db->prefix.'groups WHERE g_id='.$base_group) or error('Unable to fetch user group info', __FILE__, __LINE__, $db->error());
    31. 

  31. 		$group = $db->fetch_assoc($result);
    32. 

  32. 

  33. 		$mode = 'add';
    34. 

  34. 	}
    35. 

  35. 	else // We are editing a group
    36. 

  36. 	{
    37. 

  37. 		$group_id = intval($_GET['edit_group']);
    38. 

  38. 		if ($group_id < 1)
    39. 

  39. 			message($lang_common['Bad request']);
    40. 

  40. 

  41. 		$result = $db->query('SELECT * FROM '.$db->prefix.'groups WHERE g_id='.$group_id) or error('Unable to fetch user group info', __FILE__, __LINE__, $db->error());
    42. 

  42. 		if (!$db->num_rows($result))
    43. 

  43. 			message($lang_common['Bad request']);
    44. 

  44. 

  45. 		$group = $db->fetch_assoc($result);
    46. 

  46. 

  47. 		$mode = 'edit';
    48. 

  48. 	}
    49. 

  49. 

  50. 

  51. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_admin_common['Admin'], $lang_admin_common['User groups']);
    52. 

  52. 	$required_fields = array('req_title' => $lang_admin_groups['Group title label']);
    53. 

  53. 	$focus_element = array('groups2', 'req_title');
    54. 

  54. 	define('PUN_ACTIVE_PAGE', 'admin');
    55. 

  55. 	require PUN_ROOT.'header.php';
    56. 

  56. 

  57. 	generate_admin_menu('groups');
    58. 

  58. 

  59. ?>
    60. 

  60. 	<div class="blockform">
    61. 

  61. 		<h2><span><?php echo $lang_admin_groups['Group settings head'] ?></span></h2>
    62. 

  62. 		<div class="box">
    63. 

  63. 			<form id="groups2" method="post" action="admin_groups.php" onsubmit="return process_form(this)">
    64. 

  64. 				<p class="submittop"><input type="submit" name="add_edit_group" value="<?php echo $lang_admin_common['Save'] ?>" /></p>
    65. 

  65. 				<div class="inform">
    66. 

  66. 					<input type="hidden" name="mode" value="<?php echo $mode ?>" />
    67. 

  67. <?php if ($mode == 'edit'): ?>					<input type="hidden" name="group_id" value="<?php echo $group_id ?>" />
    68. 

  68. <?php endif; ?><?php if ($mode == 'add'): ?>					<input type="hidden" name="base_group" value="<?php echo $base_group ?>" />
    69. 

  69. <?php endif; ?>					<fieldset>
    70. 

  70. 						<legend><?php echo $lang_admin_groups['Group settings subhead'] ?></legend>
    71. 

  71. 						<div class="infldset">
    72. 

  72. 							<p><?php echo $lang_admin_groups['Group settings info'] ?></p>
    73. 

  73. 							<table class="aligntop" cellspacing="0">
    74. 

  74. 								<tr>
    75. 

  75. 									<th scope="row"><?php echo $lang_admin_groups['Group title label'] ?></th>
    76. 

  76. 									<td>
    77. 

  77. 										<input type="text" name="req_title" size="25" maxlength="50" value="<?php if ($mode == 'edit') echo pun_htmlspecialchars($group['g_title']); ?>" tabindex="1" />
    78. 

  78. 									</td>
    79. 

  79. 								</tr>
    80. 

  80. 								<tr>
    81. 

  81. 									<th scope="row"><?php echo $lang_admin_groups['User title label'] ?></th>
    82. 

  82. 									<td>
    83. 

  83. 										<input type="text" name="user_title" size="25" maxlength="50" value="<?php echo pun_htmlspecialchars($group['g_user_title']) ?>" tabindex="2" />
    84. 

  84. 										<span><?php echo $lang_admin_groups['User title help'] ?></span>
    85. 

  85. 									</td>
    86. 

  86. 								</tr>
    87. 

  87. <?php if ($group['g_id'] != PUN_ADMIN): if ($group['g_id'] != PUN_GUEST): if ($mode != 'edit' || $pun_config['o_default_user_group'] != $group['g_id']): ?>								<tr>
    88. 

  88. 									<th scope="row"> <?php echo $lang_admin_groups['Mod privileges label'] ?></th>
    89. 

  89. 									<td>
    90. 

  90. 										<input type="radio" name="moderator" value="1"<?php if ($group['g_moderator'] == '1') echo ' checked="checked"' ?> tabindex="3" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="moderator" value="0"<?php if ($group['g_moderator'] == '0') echo ' checked="checked"' ?> tabindex="4" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    91. 

  91. 										<span><?php echo $lang_admin_groups['Mod privileges help'] ?></span>
    92. 

  92. 									</td>
    93. 

  93. 								</tr>
    94. 

  94. 								<tr>
    95. 

  95. 									<th scope="row"><?php echo $lang_admin_groups['Edit profile label'] ?></th>
    96. 

  96. 									<td>
    97. 

  97. 										<input type="radio" name="mod_edit_users" value="1"<?php if ($group['g_mod_edit_users'] == '1') echo ' checked="checked"' ?> tabindex="5" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="mod_edit_users" value="0"<?php if ($group['g_mod_edit_users'] == '0') echo ' checked="checked"' ?> tabindex="6" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    98. 

  98. 										<span><?php echo $lang_admin_groups['Edit profile help'] ?></span>
    99. 

  99. 									</td>
    100. 

  100. 								</tr>
    101. 

  101. 								<tr>
    102. 

  102. 									<th scope="row"><?php echo $lang_admin_groups['Rename users label'] ?></th>
    103. 

  103. 									<td>
    104. 

  104. 										<input type="radio" name="mod_rename_users" value="1"<?php if ($group['g_mod_rename_users'] == '1') echo ' checked="checked"' ?> tabindex="5" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="mod_rename_users" value="0"<?php if ($group['g_mod_rename_users'] == '0') echo ' checked="checked"' ?> tabindex="6" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    105. 

  105. 										<span><?php echo $lang_admin_groups['Rename users help'] ?></span>
    106. 

  106. 									</td>
    107. 

  107. 								</tr>
    108. 

  108. 								<tr>
    109. 

  109. 									<th scope="row"><?php echo $lang_admin_groups['Change passwords label'] ?></th>
    110. 

  110. 									<td>
    111. 

  111. 										<input type="radio" name="mod_change_passwords" value="1"<?php if ($group['g_mod_change_passwords'] == '1') echo ' checked="checked"' ?> tabindex="5" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="mod_change_passwords" value="0"<?php if ($group['g_mod_change_passwords'] == '0') echo ' checked="checked"' ?> tabindex="6" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    112. 

  112. 										<span><?php echo $lang_admin_groups['Change passwords help'] ?></span>
    113. 

  113. 									</td>
    114. 

  114. 								</tr>
    115. 

  115. 								<tr>
    116. 

  116. 									<th scope="row"><?php echo $lang_admin_groups['Ban users label'] ?></th>
    117. 

  117. 									<td>
    118. 

  118. 										<input type="radio" name="mod_ban_users" value="1"<?php if ($group['g_mod_ban_users'] == '1') echo ' checked="checked"' ?> tabindex="5" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="mod_ban_users" value="0"<?php if ($group['g_mod_ban_users'] == '0') echo ' checked="checked"' ?> tabindex="6" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    119. 

  119. 										<span><?php echo $lang_admin_groups['Ban users help'] ?></span>
    120. 

  120. 									</td>
    121. 

  121. 								</tr>
    122. 

  122. <?php endif; endif; ?>								<tr>
    123. 

  123. 									<th scope="row"><?php echo $lang_admin_groups['Read board label'] ?></th>
    124. 

  124. 									<td>
    125. 

  125. 										<input type="radio" name="read_board" value="1"<?php if ($group['g_read_board'] == '1') echo ' checked="checked"' ?> tabindex="3" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="read_board" value="0"<?php if ($group['g_read_board'] == '0') echo ' checked="checked"' ?> tabindex="4" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    126. 

  126. 										<span><?php echo $lang_admin_groups['Read board help'] ?></span>
    127. 

  127. 									</td>
    128. 

  128. 								</tr>
    129. 

  129. 								<tr>
    130. 

  130. 									<th scope="row"><?php echo $lang_admin_groups['View user info label'] ?></th>
    131. 

  131. 									<td>
    132. 

  132. 										<input type="radio" name="view_users" value="1"<?php if ($group['g_view_users'] == '1') echo ' checked="checked"' ?> tabindex="3" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="view_users" value="0"<?php if ($group['g_view_users'] == '0') echo ' checked="checked"' ?> tabindex="4" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    133. 

  133. 										<span><?php echo $lang_admin_groups['View user info help'] ?></span>
    134. 

  134. 									</td>
    135. 

  135. 								</tr>
    136. 

  136. 								<tr>
    137. 

  137. 									<th scope="row"><?php echo $lang_admin_groups['Post replies label'] ?></th>
    138. 

  138. 									<td>
    139. 

  139. 										<input type="radio" name="post_replies" value="1"<?php if ($group['g_post_replies'] == '1') echo ' checked="checked"' ?> tabindex="5" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="post_replies" value="0"<?php if ($group['g_post_replies'] == '0') echo ' checked="checked"' ?> tabindex="6" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    140. 

  140. 										<span><?php echo $lang_admin_groups['Post replies help'] ?></span>
    141. 

  141. 									</td>
    142. 

  142. 								</tr>
    143. 

  143. 								<tr>
    144. 

  144. 									<th scope="row"><?php echo $lang_admin_groups['Post topics label'] ?></th>
    145. 

  145. 									<td>
    146. 

  146. 										<input type="radio" name="post_topics" value="1"<?php if ($group['g_post_topics'] == '1') echo ' checked="checked"' ?> tabindex="7" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="post_topics" value="0"<?php if ($group['g_post_topics'] == '0') echo ' checked="checked"' ?> tabindex="8" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    147. 

  147. 										<span><?php echo $lang_admin_groups['Post topics help'] ?></span>
    148. 

  148. 									</td>
    149. 

  149. 								</tr>
    150. 

  150. <?php if ($group['g_id'] != PUN_GUEST): ?>								<tr>
    151. 

  151. 									<th scope="row"><?php echo $lang_admin_groups['Edit posts label'] ?></th>
    152. 

  152. 									<td>
    153. 

  153. 										<input type="radio" name="edit_posts" value="1"<?php if ($group['g_edit_posts'] == '1') echo ' checked="checked"' ?> tabindex="11" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="edit_posts" value="0"<?php if ($group['g_edit_posts'] == '0') echo ' checked="checked"' ?> tabindex="12" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    154. 

  154. 										<span><?php echo $lang_admin_groups['Edit posts help'] ?></span>
    155. 

  155. 									</td>
    156. 

  156. 								</tr>
    157. 

  157. 								<tr>
    158. 

  158. 									<th scope="row"><?php echo $lang_admin_groups['Delete posts label'] ?></th>
    159. 

  159. 									<td>
    160. 

  160. 										<input type="radio" name="delete_posts" value="1"<?php if ($group['g_delete_posts'] == '1') echo ' checked="checked"' ?> tabindex="13" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="delete_posts" value="0"<?php if ($group['g_delete_posts'] == '0') echo ' checked="checked"' ?> tabindex="14" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    161. 

  161. 										<span><?php echo $lang_admin_groups['Delete posts help'] ?></span>
    162. 

  162. 									</td>
    163. 

  163. 								</tr>
    164. 

  164. 								<tr>
    165. 

  165. 									<th scope="row"><?php echo $lang_admin_groups['Delete topics label'] ?></th>
    166. 

  166. 									<td>
    167. 

  167. 										<input type="radio" name="delete_topics" value="1"<?php if ($group['g_delete_topics'] == '1') echo ' checked="checked"' ?> tabindex="15" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="delete_topics" value="0"<?php if ($group['g_delete_topics'] == '0') echo ' checked="checked"' ?> tabindex="16" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    168. 

  168. 										<span><?php echo $lang_admin_groups['Delete topics help'] ?></span>
    169. 

  169. 									</td>
    170. 

  170. 								</tr>
    171. 

  171. 								<tr>
    172. 

  172. 									<th scope="row"><?php echo $lang_admin_groups['Set own title label'] ?></th>
    173. 

  173. 									<td>
    174. 

  174. 										<input type="radio" name="set_title" value="1"<?php if ($group['g_set_title'] == '1') echo ' checked="checked"' ?> tabindex="17" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="set_title" value="0"<?php if ($group['g_set_title'] == '0') echo ' checked="checked"' ?> tabindex="18" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    175. 

  175. 										<span><?php echo $lang_admin_groups['Set own title help'] ?></span>
    176. 

  176. 									</td>
    177. 

  177. 								</tr>
    178. 

  178. <?php endif; ?>								<tr>
    179. 

  179. 									<th scope="row"><?php echo $lang_admin_groups['User search label'] ?></th>
    180. 

  180. 									<td>
    181. 

  181. 										<input type="radio" name="search" value="1"<?php if ($group['g_search'] == '1') echo ' checked="checked"' ?> tabindex="19" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="search" value="0"<?php if ($group['g_search'] == '0') echo ' checked="checked"' ?> tabindex="20" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    182. 

  182. 										<span><?php echo $lang_admin_groups['User search help'] ?></span>
    183. 

  183. 									</td>
    184. 

  184. 								</tr>
    185. 

  185. 								<tr>
    186. 

  186. 									<th scope="row"><?php echo $lang_admin_groups['User list search label'] ?></th>
    187. 

  187. 									<td>
    188. 

  188. 										<input type="radio" name="search_users" value="1"<?php if ($group['g_search_users'] == '1') echo ' checked="checked"' ?> tabindex="21" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="search_users" value="0"<?php if ($group['g_search_users'] == '0') echo ' checked="checked"' ?> tabindex="22" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    189. 

  189. 										<span><?php echo $lang_admin_groups['User list search help'] ?></span>
    190. 

  190. 									</td>
    191. 

  191. 								</tr>
    192. 

  192. <?php if ($group['g_id'] != PUN_GUEST): ?>								<tr>
    193. 

  193. 									<th scope="row"><?php echo $lang_admin_groups['Send e-mails label'] ?></th>
    194. 

  194. 									<td>
    195. 

  195. 										<input type="radio" name="send_email" value="1"<?php if ($group['g_send_email'] == '1') echo ' checked="checked"' ?> tabindex="21" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="send_email" value="0"<?php if ($group['g_send_email'] == '0') echo ' checked="checked"' ?> tabindex="22" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    196. 

  196. 										<span><?php echo $lang_admin_groups['Send e-mails help'] ?></span>
    197. 

  197. 									</td>
    198. 

  198. 								</tr>
    199. 

  199. <?php endif; ?>								<tr>
    200. 

  200. 									<th scope="row"><?php echo $lang_admin_groups['Post flood label'] ?></th>
    201. 

  201. 									<td>
    202. 

  202. 										<input type="text" name="post_flood" size="5" maxlength="4" value="<?php echo $group['g_post_flood'] ?>" tabindex="24" />
    203. 

  203. 										<span><?php echo $lang_admin_groups['Post flood help'] ?></span>
    204. 

  204. 									</td>
    205. 

  205. 								</tr>
    206. 

  206. 								<tr>
    207. 

  207. 									<th scope="row"><?php echo $lang_admin_groups['Search flood label'] ?></th>
    208. 

  208. 									<td>
    209. 

  209. 										<input type="text" name="search_flood" size="5" maxlength="4" value="<?php echo $group['g_search_flood'] ?>" tabindex="25" />
    210. 

  210. 										<span><?php echo $lang_admin_groups['Search flood help'] ?></span>
    211. 

  211. 									</td>
    212. 

  212. 								</tr>
    213. 

  213. <?php if ($group['g_id'] != PUN_GUEST): ?>								<tr>
    214. 

  214. 									<th scope="row"><?php echo $lang_admin_groups['E-mail flood label'] ?></th>
    215. 

  215. 									<td>
    216. 

  216. 										<input type="text" name="email_flood" size="5" maxlength="4" value="<?php echo $group['g_email_flood'] ?>" tabindex="26" />
    217. 

  217. 										<span><?php echo $lang_admin_groups['E-mail flood help'] ?></span>
    218. 

  218. 									</td>
    219. 

  219. 								</tr>
    220. 

  220. 								<tr>
    221. 

  221. 									<th scope="row"><?php echo $lang_admin_groups['group_locked_label'] ?></th>
    222. 

  222. 									<td>
    223. 

  223. 										<input type="radio" name="group_locked" value="1"<?php if ($group['g_locked'] == '1') echo ' checked="checked"' ?> tabindex="21" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="group_locked" value="0"<?php if ($group['g_locked'] == '0') echo ' checked="checked"' ?> tabindex="26" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    224. 

  224. 										<span><?php echo $lang_admin_groups['group_locked_info'] ?></span>
    225. 

  225. 									</td>
    226. 

  226. 								</tr>
    227. 

  227. <?php endif; endif; ?>							</table>
    228. 

  228. <?php if ($group['g_moderator'] == '1' ): ?>							<p class="warntext"><?php echo $lang_admin_groups['Moderator info'] ?></p>
    229. 

  229. <?php endif; ?>						</div>
    230. 

  230. 					</fieldset>
    231. 

  231. 				</div>
    232. 

  232. 				<p class="submitend"><input type="submit" name="add_edit_group" value="<?php echo $lang_admin_common['Save'] ?>" tabindex="27" /></p>
    233. 

  233. 			</form>
    234. 

  234. 		</div>
    235. 

  235. 	</div>
    236. 

  236. 	<div class="clearer"></div>
    237. 

  237. </div>
    238. 

  238. <?php
    239. 

  239. 

  240. 	require PUN_ROOT.'footer.php';
    241. 

  241. }
    242. 

  242. 

  243. 

  244. // Add/edit a group (stage 2)
    245. 

  245. else if (isset($_POST['add_edit_group']))
    246. 

  246. {
    247. 

  247. 	confirm_referrer('admin_groups.php');
    248. 

  248. 

  249. 	// Is this the admin group? (special rules apply)
    250. 

  250. 	$is_admin_group = (isset($_POST['group_id']) && $_POST['group_id'] == PUN_ADMIN) ? true : false;
    251. 

  251. 

  252. 	$title = pun_trim($_POST['req_title']);
    253. 

  253. 	$user_title = pun_trim($_POST['user_title']);
    254. 

  254. 	$moderator = isset($_POST['moderator']) && $_POST['moderator'] == '1' ? '1' : '0';
    255. 

  255. 	$mod_edit_users = $moderator == '1' && isset($_POST['mod_edit_users']) && $_POST['mod_edit_users'] == '1' ? '1' : '0';
    256. 

  256. 	$mod_rename_users = $moderator == '1' && isset($_POST['mod_rename_users']) && $_POST['mod_rename_users'] == '1' ? '1' : '0';
    257. 

  257. 	$mod_change_passwords = $moderator == '1' && isset($_POST['mod_change_passwords']) && $_POST['mod_change_passwords'] == '1' ? '1' : '0';
    258. 

  258. 	$mod_ban_users = $moderator == '1' && isset($_POST['mod_ban_users']) && $_POST['mod_ban_users'] == '1' ? '1' : '0';
    259. 

  259. 	$read_board = isset($_POST['read_board']) ? intval($_POST['read_board']) : '1';
    260. 

  260. 	$view_users = (isset($_POST['view_users']) && $_POST['view_users'] == '1') || $is_admin_group ? '1' : '0';
    261. 

  261. 	$post_replies = isset($_POST['post_replies']) ? intval($_POST['post_replies']) : '1';
    262. 

  262. 	$post_topics = isset($_POST['post_topics']) ? intval($_POST['post_topics']) : '1';
    263. 

  263. 	$edit_posts = isset($_POST['edit_posts']) ? intval($_POST['edit_posts']) : ($is_admin_group) ? '1' : '0';
    264. 

  264. 	$delete_posts = isset($_POST['delete_posts']) ? intval($_POST['delete_posts']) : ($is_admin_group) ? '1' : '0';
    265. 

  265. 	$delete_topics = isset($_POST['delete_topics']) ? intval($_POST['delete_topics']) : ($is_admin_group) ? '1' : '0';
    266. 

  266. 	$set_title = isset($_POST['set_title']) ? intval($_POST['set_title']) : ($is_admin_group) ? '1' : '0';
    267. 

  267. 	$search = isset($_POST['search']) ? intval($_POST['search']) : '1';
    268. 

  268. 	$search_users = isset($_POST['search_users']) ? intval($_POST['search_users']) : '1';
    269. 

  269. 	$send_email = (isset($_POST['send_email']) && $_POST['send_email'] == '1') || $is_admin_group ? '1' : '0';
    270. 

  270. 	$post_flood = isset($_POST['post_flood']) ? intval($_POST['post_flood']) : '0';
    271. 

  271. 	$search_flood = isset($_POST['search_flood']) ? intval($_POST['search_flood']) : '0';
    272. 

  272. 	$email_flood = isset($_POST['email_flood']) ? intval($_POST['email_flood']) : '0';
    273. 

  273. 	$group_locked =  (isset($_POST['group_locked']) && $_POST['group_locked'] == '1') ? '1' : '0';
    274. 

  274. 

  275. 	if ($title == '')
    276. 

  276. 		message($lang_admin_groups['Must enter title message']);
    277. 

  277. 

  278. 	$user_title = ($user_title != '') ? '\''.$db->escape($user_title).'\'' : 'NULL';
    279. 

  279. 

  280. 	if ($_POST['mode'] == 'add')
    281. 

  281. 	{
    282. 

  282. 		$result = $db->query('SELECT 1 FROM '.$db->prefix.'groups WHERE g_title=\''.$db->escape($title).'\'') or error('Unable to check group title collision', __FILE__, __LINE__, $db->error());
    283. 

  283. 		if ($db->num_rows($result))
    284. 

  284. 			message(sprintf($lang_admin_groups['Title already exists message'], pun_htmlspecialchars($title)));
    285. 

  285. 

  286. 		$db->query('INSERT INTO '.$db->prefix.'groups (g_title, g_user_title, g_moderator, g_mod_edit_users, g_mod_rename_users, g_mod_change_passwords, g_mod_ban_users, g_read_board, g_view_users, g_post_replies, g_post_topics, g_edit_posts, g_delete_posts, g_delete_topics, g_set_title, g_search, g_search_users, g_send_email, g_post_flood, g_search_flood, g_email_flood, g_locked) VALUES(\''.$db->escape($title).'\', '.$user_title.', '.$moderator.', '.$mod_edit_users.', '.$mod_rename_users.', '.$mod_change_passwords.', '.$mod_ban_users.', '.$read_board.', '.$view_users.', '.$post_replies.', '.$post_topics.', '.$edit_posts.', '.$delete_posts.', '.$delete_topics.', '.$set_title.', '.$search.', '.$search_users.', '.$send_email.', '.$post_flood.', '.$search_flood.', '.$email_flood.', '.$group_locked.')') or error('Unable to add group', __FILE__, __LINE__, $db->error());
    287. 

  287. 		$new_group_id = $db->insert_id();
    288. 

  288. 

  289. 		// Now lets copy the forum specific permissions from the group which this group is based on
    290. 

  290. 		$result = $db->query('SELECT forum_id, read_forum, post_replies, post_topics FROM '.$db->prefix.'forum_perms WHERE group_id='.intval($_POST['base_group'])) or error('Unable to fetch group forum permission list', __FILE__, __LINE__, $db->error());
    291. 

  291. 		while ($cur_forum_perm = $db->fetch_assoc($result))
    292. 

  292. 			$db->query('INSERT INTO '.$db->prefix.'forum_perms (group_id, forum_id, read_forum, post_replies, post_topics) VALUES('.$new_group_id.', '.$cur_forum_perm['forum_id'].', '.$cur_forum_perm['read_forum'].', '.$cur_forum_perm['post_replies'].', '.$cur_forum_perm['post_topics'].')') or error('Unable to insert group forum permissions', __FILE__, __LINE__, $db->error());
    293. 

  293. 	}
    294. 

  294. 	else
    295. 

  295. 	{
    296. 

  296. 		$result = $db->query('SELECT 1 FROM '.$db->prefix.'groups WHERE g_title=\''.$db->escape($title).'\' AND g_id!='.intval($_POST['group_id'])) or error('Unable to check group title collision', __FILE__, __LINE__, $db->error());
    297. 

  297. 		if ($db->num_rows($result))
    298. 

  298. 			message(sprintf($lang_admin_groups['Title already exists message'], pun_htmlspecialchars($title)));
    299. 

  299. 

  300. 		$db->query('UPDATE '.$db->prefix.'groups SET g_title=\''.$db->escape($title).'\', g_user_title='.$user_title.', g_moderator='.$moderator.', g_mod_edit_users='.$mod_edit_users.', g_mod_rename_users='.$mod_rename_users.', g_mod_change_passwords='.$mod_change_passwords.', g_mod_ban_users='.$mod_ban_users.', g_read_board='.$read_board.', g_view_users='.$view_users.', g_post_replies='.$post_replies.', g_post_topics='.$post_topics.', g_edit_posts='.$edit_posts.', g_delete_posts='.$delete_posts.', g_delete_topics='.$delete_topics.', g_set_title='.$set_title.', g_search='.$search.', g_search_users='.$search_users.', g_send_email='.$send_email.', g_post_flood='.$post_flood.', g_search_flood='.$search_flood.', g_email_flood='.$email_flood.', g_locked='.$group_locked.' WHERE g_id='.intval($_POST['group_id'])) or error('Unable to update group', __FILE__, __LINE__, $db->error());
    301. 

  301. 	}
    302. 

  302. 

  303. 	// Regenerate the quick jump cache
    304. 

  304. 	if (!defined('FORUM_CACHE_FUNCTIONS_LOADED'))
    305. 

  305. 		require PUN_ROOT.'include/cache.php';
    306. 

  306. 

  307. 	$group_id = $_POST['mode'] == 'add' ? $new_group_id : intval($_POST['group_id']);
    308. 

  308. 	generate_quickjump_cache($group_id);
    309. 

  309. 

  310. 	if ($_POST['mode'] == 'edit')
    311. 

  311. 		redirect('admin_groups.php', $lang_admin_groups['Group edited redirect']);
    312. 

  312. 	else
    313. 

  313. 		redirect('admin_groups.php', $lang_admin_groups['Group added redirect']);
    314. 

  314. }
    315. 

  315. 

  316. 

  317. // Set default group
    318. 

  318. else if (isset($_POST['set_default_group']))
    319. 

  319. {
    320. 

  320. 	confirm_referrer('admin_groups.php');
    321. 

  321. 

  322. 	$group_id = intval($_POST['default_group']);
    323. 

  323. 

  324. 	// Make sure it's not the admin or guest groups
    325. 

  325. 	if ($group_id == PUN_ADMIN || $group_id == PUN_GUEST)
    326. 

  326. 		message($lang_common['Bad request']);
    327. 

  327. 

  328. 	// Make sure it's not a moderator group
    329. 

  329. 	$result = $db->query('SELECT 1 FROM '.$db->prefix.'groups WHERE g_id='.$group_id.' AND g_moderator=0') or error('Unable to check group moderator status', __FILE__, __LINE__, $db->error());
    330. 

  330. 	if (!$db->num_rows($result))
    331. 

  331. 		message($lang_common['Bad request']);
    332. 

  332. 

  333. 	$db->query('UPDATE '.$db->prefix.'config SET conf_value='.$group_id.' WHERE conf_name=\'o_default_user_group\'') or error('Unable to update board config', __FILE__, __LINE__, $db->error());
    334. 

  334. 

  335. 	// Regenerate the config cache
    336. 

  336. 	if (!defined('FORUM_CACHE_FUNCTIONS_LOADED'))
    337. 

  337. 		require PUN_ROOT.'include/cache.php';
    338. 

  338. 

  339. 	generate_config_cache();
    340. 

  340. 

  341. 	redirect('admin_groups.php', $lang_admin_groups['Default group redirect']);
    342. 

  342. }
    343. 

  343. 

  344. 

  345. // Remove a group
    346. 

  346. else if (isset($_GET['del_group']))
    347. 

  347. {
    348. 

  348. 	confirm_referrer('admin_groups.php');
    349. 

  349. 

  350. 	$group_id = isset($_POST['group_to_delete']) ? intval($_POST['group_to_delete']) : intval($_GET['del_group']);
    351. 

  351. 	if ($group_id < 5)
    352. 

  352. 		message($lang_common['Bad request']);
    353. 

  353. 

  354. 	// Make sure we don't remove the default group
    355. 

  355. 	if ($group_id == $pun_config['o_default_user_group'])
    356. 

  356. 		message($lang_admin_groups['Cannot remove default message']);
    357. 

  357. 

  358. 	// Check if this group has any members
    359. 

  359. 	$result = $db->query('SELECT g.g_title, COUNT(u.id) FROM '.$db->prefix.'groups AS g INNER JOIN '.$db->prefix.'users AS u ON g.g_id=u.group_id WHERE g.g_id='.$group_id.' GROUP BY g.g_id, g_title') or error('Unable to fetch group info', __FILE__, __LINE__, $db->error());
    360. 

  360. 

  361. 	// If the group doesn't have any members or if we've already selected a group to move the members to
    362. 

  362. 	if (!$db->num_rows($result) || isset($_POST['del_group']))
    363. 

  363. 	{
    364. 

  364. 		if (isset($_POST['del_group_comply']) || isset($_POST['del_group']))
    365. 

  365. 		{
    366. 

  366. 			if (isset($_POST['del_group']))
    367. 

  367. 			{
    368. 

  368. 				$move_to_group = intval($_POST['move_to_group']);
    369. 

  369. 				$db->query('UPDATE '.$db->prefix.'users SET group_id='.$move_to_group.' WHERE group_id='.$group_id) or error('Unable to move users into group', __FILE__, __LINE__, $db->error());
    370. 

  370. 			}
    371. 

  371. 

  372. 			// Delete the group and any forum specific permissions
    373. 

  373. 			$db->query('DELETE FROM '.$db->prefix.'groups WHERE g_id='.$group_id) or error('Unable to delete group', __FILE__, __LINE__, $db->error());
    374. 

  374. 			$db->query('DELETE FROM '.$db->prefix.'forum_perms WHERE group_id='.$group_id) or error('Unable to delete group forum permissions', __FILE__, __LINE__, $db->error());
    375. 

  375. 

  376. 			redirect('admin_groups.php', $lang_admin_groups['Group removed redirect']);
    377. 

  377. 		}
    378. 

  378. 		else
    379. 

  379. 		{
    380. 

  380. 			$result = $db->query('SELECT g_title FROM '.$db->prefix.'groups WHERE g_id='.$group_id) or error('Unable to fetch group title', __FILE__, __LINE__, $db->error());
    381. 

  381. 			$group_title = $db->result($result);
    382. 

  382. 

  383. 			$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_admin_common['Admin'], $lang_admin_common['User groups']);
    384. 

  384. 			define('PUN_ACTIVE_PAGE', 'admin');
    385. 

  385. 			require PUN_ROOT.'header.php';
    386. 

  386. 

  387. 			generate_admin_menu('groups');
    388. 

  388. 

  389. ?>
    390. 

  390. 	<div class="blockform">
    391. 

  391. 		<h2><span><?php echo $lang_admin_groups['Group delete head'] ?></span></h2>
    392. 

  392. 		<div class="box">
    393. 

  393. 			<form method="post" action="admin_groups.php?del_group=<?php echo $group_id ?>">
    394. 

  394. 				<div class="inform">
    395. 

  395. 				<input type="hidden" name="group_to_delete" value="<?php echo $group_id ?>" />
    396. 

  396. 					<fieldset>
    397. 

  397. 						<legend><?php echo $lang_admin_groups['Confirm delete subhead'] ?></legend>
    398. 

  398. 						<div class="infldset">
    399. 

  399. 							<p><?php printf($lang_admin_groups['Confirm delete info'], pun_htmlspecialchars($group_title)) ?></p>
    400. 

  400. 							<p class="warntext"><?php echo $lang_admin_groups['Confirm delete warn'] ?></p>
    401. 

  401. 						</div>
    402. 

  402. 					</fieldset>
    403. 

  403. 				</div>
    404. 

  404. 				<p class="buttons"><input type="submit" name="del_group_comply" value="<?php echo $lang_admin_common['Delete'] ?>" /><a href="javascript:history.go(-1)"><?php echo $lang_admin_common['Go back'] ?></a></p>
    405. 

  405. 			</form>
    406. 

  406. 		</div>
    407. 

  407. 	</div>
    408. 

  408. 	<div class="clearer"></div>
    409. 

  409. </div>
    410. 

  410. <?php
    411. 

  411. 

  412. 			require PUN_ROOT.'footer.php';
    413. 

  413. 		}
    414. 

  414. 	}
    415. 

  415. 

  416. 	list($group_title, $group_members) = $db->fetch_row($result);
    417. 

  417. 

  418. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_admin_common['Admin'], $lang_admin_common['User groups']);
    419. 

  419. 	define('PUN_ACTIVE_PAGE', 'admin');
    420. 

  420. 	require PUN_ROOT.'header.php';
    421. 

  421. 

  422. 	generate_admin_menu('groups');
    423. 

  423. 

  424. ?>
    425. 

  425. 	<div class="blockform">
    426. 

  426. 		<h2><span><?php echo $lang_admin_groups['Delete group head'] ?></span></h2>
    427. 

  427. 		<div class="box">
    428. 

  428. 			<form id="groups" method="post" action="admin_groups.php?del_group=<?php echo $group_id ?>">
    429. 

  429. 				<div class="inform">
    430. 

  430. 					<fieldset>
    431. 

  431. 						<legend><?php echo $lang_admin_groups['Move users subhead'] ?></legend>
    432. 

  432. 						<div class="infldset">
    433. 

  433. 							<p><?php printf($lang_admin_groups['Move users info'], pun_htmlspecialchars($group_title), forum_number_format($group_members)) ?></p>
    434. 

  434. 							<label><?php echo $lang_admin_groups['Move users label'] ?>
    435. 

  435. 							<select name="move_to_group">
    436. 

  436. <?php
    437. 

  437. 

  438. 	$result = $db->query('SELECT g_id, g_title FROM '.$db->prefix.'groups WHERE g_id!='.PUN_GUEST.' AND g_id!='.$group_id.' ORDER BY g_title') or error('Unable to fetch user group list', __FILE__, __LINE__, $db->error());
    439. 

  439. 

  440. 	while ($cur_group = $db->fetch_assoc($result))
    441. 

  441. 	{
    442. 

  442. 		if ($cur_group['g_id'] == PUN_MEMBER) // Pre-select the pre-defined Members group
    443. 

  443. 			echo "\t\t\t\t\t\t\t\t\t\t".'<option value="'.$cur_group['g_id'].'" selected="selected">'.pun_htmlspecialchars($cur_group['g_title']).'</option>'."\n";
    444. 

  444. 		else
    445. 

  445. 			echo "\t\t\t\t\t\t\t\t\t\t".'<option value="'.$cur_group['g_id'].'">'.pun_htmlspecialchars($cur_group['g_title']).'</option>'."\n";
    446. 

  446. 	}
    447. 

  447. 

  448. ?>
    449. 

  449. 							</select>
    450. 

  450. 							<br /></label>
    451. 

  451. 						</div>
    452. 

  452. 					</fieldset>
    453. 

  453. 				</div>
    454. 

  454. 				<p class="buttons"><input type="submit" name="del_group" value="<?php echo $lang_admin_groups['Delete group'] ?>" /><a href="javascript:history.go(-1)"><?php echo $lang_admin_common['Go back'] ?></a></p>
    455. 

  455. 			</form>
    456. 

  456. 		</div>
    457. 

  457. 	</div>
    458. 

  458. 	<div class="clearer"></div>
    459. 

  459. </div>
    460. 

  460. <?php
    461. 

  461. 

  462. 	require PUN_ROOT.'footer.php';
    463. 

  463. }
    464. 

  464. 

  465. 

  466. $page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_admin_common['Admin'], $lang_admin_common['User groups']);
    467. 

  467. define('PUN_ACTIVE_PAGE', 'admin');
    468. 

  468. require PUN_ROOT.'header.php';
    469. 

  469. 

  470. generate_admin_menu('groups');
    471. 

  471. 

  472. ?>
    473. 

  473. 	<div class="blockform">
    474. 

  474. 		<h2><span><?php echo $lang_admin_groups['Add groups head'] ?></span></h2>
    475. 

  475. 		<div class="box">
    476. 

  476. 			<form id="groups" method="post" action="admin_groups.php">
    477. 

  477. 				<div class="inform">
    478. 

  478. 					<fieldset>
    479. 

  479. 						<legend><?php echo $lang_admin_groups['Add group subhead'] ?></legend>
    480. 

  480. 						<div class="infldset">
    481. 

  481. 							<table class="aligntop" cellspacing="0">
    482. 

  482. 								<tr>
    483. 

  483. 									<th scope="row"><?php echo $lang_admin_groups['New group label'] ?><div><input type="submit" name="add_group" value="<?php echo $lang_admin_common['Add'] ?>" tabindex="2" /></div></th>
    484. 

  484. 									<td>
    485. 

  485. 										<select id="base_group" name="base_group" tabindex="1">
    486. 

  486. <?php
    487. 

  487. 

  488. $result = $db->query('SELECT g_id, g_title FROM '.$db->prefix.'groups WHERE g_id!='.PUN_ADMIN.' AND g_id!='.PUN_GUEST.' ORDER BY g_title') or error('Unable to fetch user group list', __FILE__, __LINE__, $db->error());
    489. 

  489. 

  490. while ($cur_group = $db->fetch_assoc($result))
    491. 

  491. {
    492. 

  492. 	if ($cur_group['g_id'] == $pun_config['o_default_user_group'])
    493. 

  493. 		echo "\t\t\t\t\t\t\t\t\t\t\t".'<option value="'.$cur_group['g_id'].'" selected="selected">'.pun_htmlspecialchars($cur_group['g_title']).'</option>'."\n";
    494. 

  494. 	else
    495. 

  495. 		echo "\t\t\t\t\t\t\t\t\t\t\t".'<option value="'.$cur_group['g_id'].'">'.pun_htmlspecialchars($cur_group['g_title']).'</option>'."\n";
    496. 

  496. }
    497. 

  497. 

  498. ?>
    499. 

  499. 										</select>
    500. 

  500. 										<span><?php echo $lang_admin_groups['New group help'] ?></span>
    501. 

  501. 									</td>
    502. 

  502. 								</tr>
    503. 

  503. 							</table>
    504. 

  504. 						</div>
    505. 

  505. 					</fieldset>
    506. 

  506. 				</div>
    507. 

  507. 				<div class="inform">
    508. 

  508. 					<fieldset>
    509. 

  509. 						<legend><?php echo $lang_admin_groups['Default group subhead'] ?></legend>
    510. 

  510. 						<div class="infldset">
    511. 

  511. 							<table class="aligntop" cellspacing="0">
    512. 

  512. 								<tr>
    513. 

  513. 									<th scope="row"><?php echo $lang_admin_groups['Default group label'] ?><div><input type="submit" name="set_default_group" value="<?php echo $lang_admin_common['Save'] ?>" tabindex="4" /></div></th>
    514. 

  514. 									<td>
    515. 

  515. 										<select id="default_group" name="default_group" tabindex="3">
    516. 

  516. <?php
    517. 

  517. 

  518. $result = $db->query('SELECT g_id, g_title FROM '.$db->prefix.'groups WHERE g_id>'.PUN_GUEST.' AND g_moderator=0 ORDER BY g_title') or error('Unable to fetch user group list', __FILE__, __LINE__, $db->error());
    519. 

  519. 

  520. while ($cur_group = $db->fetch_assoc($result))
    521. 

  521. {
    522. 

  522. 	if ($cur_group['g_id'] == $pun_config['o_default_user_group'])
    523. 

  523. 		echo "\t\t\t\t\t\t\t\t\t\t\t".'<option value="'.$cur_group['g_id'].'" selected="selected">'.pun_htmlspecialchars($cur_group['g_title']).'</option>'."\n";
    524. 

  524. 	else
    525. 

  525. 		echo "\t\t\t\t\t\t\t\t\t\t\t".'<option value="'.$cur_group['g_id'].'">'.pun_htmlspecialchars($cur_group['g_title']).'</option>'."\n";
    526. 

  526. }
    527. 

  527. 

  528. ?>
    529. 

  529. 										</select>
    530. 

  530. 										<span><?php echo $lang_admin_groups['Default group help'] ?></span>
    531. 

  531. 									</td>
    532. 

  532. 								</tr>
    533. 

  533. 							</table>
    534. 

  534. 						</div>
    535. 

  535. 					</fieldset>
    536. 

  536. 				</div>
    537. 

  537. 			</form>
    538. 

  538. 		</div>
    539. 

  539. 

  540. 		<h2 class="block2"><span><?php echo $lang_admin_groups['Existing groups head'] ?></span></h2>
    541. 

  541. 		<div class="box">
    542. 

  542. 			<div class="fakeform">
    543. 

  543. 				<div class="inform">
    544. 

  544. 					<fieldset>
    545. 

  545. 						<legend><?php echo $lang_admin_groups['Edit groups subhead'] ?></legend>
    546. 

  546. 						<div class="infldset">
    547. 

  547. 							<p><?php echo $lang_admin_groups['Edit groups info'] ?></p>
    548. 

  548. 							<table cellspacing="0">
    549. 

  549. <?php
    550. 

  550. 

  551. $result = $db->query('SELECT g_id, g_title FROM '.$db->prefix.'groups ORDER BY g_id') or error('Unable to fetch user group list', __FILE__, __LINE__, $db->error());
    552. 

  552. 

  553. while ($cur_group = $db->fetch_assoc($result))
    554. 

  554. 	echo "\t\t\t\t\t\t\t\t".'<tr><th scope="row"><a href="admin_groups.php?edit_group='.$cur_group['g_id'].'">'.$lang_admin_groups['Edit link'].'</a>'.(($cur_group['g_id'] > PUN_MEMBER) ? ' | <a href="admin_groups.php?del_group='.$cur_group['g_id'].'">'.$lang_admin_groups['Delete link'].'</a>' : '').'</th><td>'.pun_htmlspecialchars($cur_group['g_title']).'</td></tr>'."\n";
    555. 

  555. 

  556. ?>
    557. 

  557. 							</table>
    558. 

  558. 						</div>
    559. 

  559. 					</fieldset>
    560. 

  560. 				</div>
    561. 

  561. 			</div>
    562. 

  562. 		</div>
    563. 

  563. 	</div>
    564. 

  564. 	<div class="clearer"></div>
    565. 

  565. </div>
    566. 

  566. <?php
    567. 

  567. 

  568. require PUN_ROOT.'footer.php';
    569. 

  569.