<?php
/*************************
Coppermine Photo Gallery
************************
Copyright (c) 2003-2007 Coppermine Dev Team
v1.1 originally written by Gregory DEMAR
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License version 3
as published by the Free Software Foundation.
********************************************
Coppermine version: 1.4.14
$Source$
$Revision: 3966 $
$Author: gaugau $
$Date: 2007-09-17 08:53:13 +0200 (Mo, 17 Sep 2007) $
**********************************************/
define('IN_COPPERMINE', true);
define('DELETE_PHP', true);
require('include/init.inc.php');
/**
* Local functions definition
*/
$header_printed = false;
$need_caption = false;
function output_table_header()
{
global $header_printed, $need_caption, $lang_delete_php;
$header_printed = true;
$need_caption = true;
echo <<<EOT
<tr>
<td class="tableh2"><b>{$lang_delete_php['npic']}</b></td>
<td class="tableh2" align="center"><b>{$lang_delete_php['fs_pic']}</b></td>
<td class="tableh2" align="center"><b>{$lang_delete_php['ns_pic']}</b></td>
<td class="tableh2" align="center"><b>{$lang_delete_php['thumb_pic']}</b></td>
<td class="tableh2" align="center"><b>{$lang_delete_php['comment']}</b></td>
<td class="tableh2" align="center"><b>{$lang_delete_php['im_in_alb']}</b></td>
</tr>
EOT;
}
function output_caption()
{
global $lang_delete_php
?>
<tr><td colspan="6" class="tableb"> </td></tr>
<tr><td colspan="6" class="tableh2"><b><?php echo $lang_delete_php['caption'] ?></b></tr>
<tr><td colspan="6" class="tableb">
<table cellpadding="1" cellspacing="0">
<tr><td><b>F</b></td><td>:</td><td><?php echo $lang_delete_php['fs_pic'] ?></td><td width="20"> </td><td><img src="images/green.gif" border="0" width="12" height="12" align="absmiddle"></td><td>:</td><td><?php echo $lang_delete_php['del_success'] ?></td></tr>
<tr><td><b>N</b></td><td>:</td><td><?php echo $lang_delete_php['ns_pic'] ?></td><td width="20"> </td><td><img src="images/red.gif" border="0" width="12" height="12" align="absmiddle"></td><td>:</td><td><?php echo $lang_delete_php['err_del'] ?></td></tr>
<tr><td><b>T</b></td><td>:</td><td><?php echo $lang_delete_php['thumb_pic'] ?></td></tr>
<tr><td><b>C</b></td><td>:</td><td><?php echo $lang_delete_php['comment'] ?></td></tr>
<tr><td><b>D</b></td><td>:</td><td><?php echo $lang_delete_php['im_in_alb'] ?></td></tr>
</table>
</td>
</tr>
<?php
}
function delete_picture($pid)
{
global $CONFIG, $header_printed, $lang_errors;
if (!$header_printed)
output_table_header();
$green = "<img src=\"images/green.gif\" border=\"0\" width=\"12\" height=\"12\"><br />";
$red = "<img src=\"images/red.gif\" border=\"0\" width=\"12\" height=\"12\"><br />";
if (GALLERY_ADMIN_MODE) {
$query = "SELECT aid, filepath, filename FROM {$CONFIG['TABLE_PICTURES']} WHERE pid='$pid'";
$result = cpg_db_query($query);
if (!mysql_num_rows($result)) cpg_die(CRITICAL_ERROR, $lang_errors['non_exist_ap'], __FILE__, __LINE__);
$pic = mysql_fetch_array($result);
} else {
$query = "SELECT {$CONFIG['TABLE_PICTURES']}.aid as aid, category, filepath, filename, owner_id FROM {$CONFIG['TABLE_PICTURES']}, {$CONFIG['TABLE_ALBUMS']} WHERE {$CONFIG['TABLE_PICTURES']}.aid = {$CONFIG['TABLE_ALBUMS']}.aid AND pid='$pid'";
$result = cpg_db_query($query);
if (!mysql_num_rows($result)) cpg_die(CRITICAL_ERROR, $lang_errors['non_exist_ap'], __FILE__, __LINE__);
$pic = mysql_fetch_array($result);
if (!($pic['category'] == FIRST_USER_CAT + USER_ID || ($CONFIG['users_can_edit_pics'] && $pic['owner_id'] == USER_ID)) || !USER_ID) cpg_die(ERROR, $lang_errors['access_denied'], __FILE__, __LINE__);
}
$aid = $pic['aid'];
$dir = $CONFIG['fullpath'] . $pic['filepath'];
$file = $pic['filename'];
if (!is_writable($dir)) cpg_die(CRITICAL_ERROR, sprintf($lang_errors['directory_ro'], htmlspecialchars($dir)), __FILE__, __LINE__);
echo "<td class=\"tableb\">" . htmlspecialchars($file) . "</td>";
$files = array($dir . $file, $dir . $CONFIG['normal_pfx'] . $file, $dir . $CONFIG['thumb_pfx'] . $file);
foreach ($files as $currFile) {
echo "<td class=\"tableb\" align=\"center\">";
if (is_file($currFile)) {
if (@unlink($currFile))
echo $green;
else
echo $red;
} else
echo " ";
echo "</td>";
}
$query = "DELETE FROM {$CONFIG['TABLE_COMMENTS']} WHERE pid='$pid'";
$result = cpg_db_query($query);
echo "<td class=\"tableb\" align=\"center\">";
if (mysql_affected_rows() > 0)
echo $green;
else
echo " ";
echo "</td>";
$query = "DELETE FROM {$CONFIG['TABLE_EXIF']} WHERE filename='".addslashes($dir.$file)."' LIMIT 1";
$result = cpg_db_query($query);
$query = "DELETE FROM {$CONFIG['TABLE_PICTURES']} WHERE pid='$pid' LIMIT 1";
$result = cpg_db_query($query);
echo "<td class=\"tableb\" align=\"center\">";
if (mysql_affected_rows() > 0)
echo $green;
else
echo $red;
echo "</td>";
echo "</tr>\n";
return $aid;
}
function delete_album($aid)
{
global $CONFIG, $lang_errors, $lang_delete_php;
$query = "SELECT title, category FROM {$CONFIG['TABLE_ALBUMS']} WHERE aid ='$aid'";
$result = cpg_db_query($query);
if (!mysql_num_rows($result)) cpg_die(CRITICAL_ERROR, $lang_errors['non_exist_ap'], __FILE__, __LINE__);
$album_data = mysql_fetch_array($result);
if (!GALLERY_ADMIN_MODE) {
if ($album_data['category'] != FIRST_USER_CAT + USER_ID) cpg_die(ERROR, $lang_errors['perm_denied'], __FILE__, __LINE__);
}
$query = "SELECT pid FROM {$CONFIG['TABLE_PICTURES']} WHERE aid='$aid'";
$result = cpg_db_query($query);
// Delete all files
while ($pic = mysql_fetch_array($result)) {
delete_picture($pic['pid']);
}
// Delete album
$query = "DELETE from {$CONFIG['TABLE_ALBUMS']} WHERE aid='$aid'";
$result = cpg_db_query($query);
if (mysql_affected_rows() > 0)
echo "<tr><td colspan=\"6\" class=\"tableb\">" . sprintf($lang_delete_php['alb_del_success'], $album_data['title']) . "</td></tr>\n";
}
/**
* Album manager functions
*/
function parse_select_option($value)
{
global $HTML_SUBST;
if (!preg_match("/.+?no=(\d+),album_nm='(.+?)',album_sort=(\d+),action=(\d)/", $value, $matches))
return false;
return array('album_no' => (int)$matches[1],
'album_nm' => get_magic_quotes_gpc() ? strtr(stripslashes($matches[2]), $HTML_SUBST) : strtr($matches[2], $HTML_SUBST),
'album_sort' => (int)$matches[3],
'action' => (int)$matches[4]
);
}
function parse_orig_sort_order($value)
{
if (!preg_match("/(\d+)@(\d+)/", $value, $matches))
return false;
return array('aid' => (int)$matches[1],
'pos' => (int)$matches[2],
);
}
function parse_list($value)
{
return preg_split("/,/", $value, -1, PREG_SPLIT_NO_EMPTY);
}
/**************************************************************************
* Picture manager functions
**************************************************************************/
function parse_pic_select_option($value)
{
global $HTML_SUBST;
if (!preg_match("/.+?no=(\d+),picture_nm='(.+?)',picture_sort=(\d+),action=(\d)/", $value, $matches))
return false;
return array(
'picture_no' => (int)$matches[1],
'picture_nm' => get_magic_quotes_gpc() ? strtr(stripslashes($matches[2]), $HTML_SUBST) : strtr($matches[2], $HTML_SUBST),
'picture_sort' => (int)$matches[3],
'action' => (int)$matches[4]
);
}
function parse_pic_orig_sort_order($value)
{
if (!preg_match("/(\d+)@(\d+)/", $value, $matches))
return false;
return array(
'aid' => (int)$matches[1],
'pos' => (int)$matches[2],
);
}
function parse_pic_list($value)
{
return preg_split("/,/", $value, -1, PREG_SPLIT_NO_EMPTY);
}
/**
* Main code starts here
*/
if (!isset($_GET['what']) && !isset($_POST['what'])) {
cpg_die(CRITICAL_ERROR, $lang_errors['param_missing'], __FILE__, __LINE__);
}
$what = isset($_GET['what']) ? $_GET['what'] : $_POST['what'];
switch ($what) {
// Album manager (don't necessarily delete something ;-)
case 'albmgr':
if (!(GALLERY_ADMIN_MODE || USER_ADMIN_MODE)) cpg_die(ERROR, $lang_errors['access_denied'], __FILE__, __LINE__);
if (!GALLERY_ADMIN_MODE) {
$restrict = "AND category = '" . (FIRST_USER_CAT + USER_ID) . "'";
} else {
$restrict = '';
}
pageheader($lang_delete_php['alb_mgr']);
starttable("100%", $lang_delete_php['alb_mgr'], 6);
$orig_sort_order = parse_list($_POST['sort_order']);
foreach ($orig_sort_order as $album) {
$op = parse_orig_sort_order($album);
if (count ($op) == 2) {
$query = "UPDATE $CONFIG[TABLE_ALBUMS] SET pos='{$op['pos']}' WHERE aid='{$op['aid']}' $restrict LIMIT 1";
cpg_db_query($query);
} else {
cpg_die (sprintf(CRITICAL_ERROR, $lang_delete_php['err_invalid_data'], $_POST['sort_order']), __FILE__, __LINE__);
}
}
$to_delete = parse_list($_POST['delete_album']);
foreach ($to_delete as $album_id) {
delete_album((int)$album_id);
}
if (isset($_POST['to'])) foreach ($_POST['to'] as $option_value) {
$op = parse_select_option(stripslashes($option_value));
switch ($op['action']) {
case '0':
break;
case '1':
if (GALLERY_ADMIN_MODE) {
$category = (int)$_POST['cat'];
} else {
$category = FIRST_USER_CAT + USER_ID;
}
echo "<tr><td colspan=\"6\" class=\"tableb\">" . sprintf($lang_delete_php['create_alb'], $op['album_nm']) . "</td></tr>\n";
$query = "INSERT INTO {$CONFIG['TABLE_ALBUMS']} (category, title, uploads, pos, description) VALUES ('$category', '" . addslashes($op['album_nm']) . "', 'NO', '{$op['album_sort']}', '')";
cpg_db_query($query);
break;
case '2':
echo "<tr><td colspan=\"6\" class=\"tableb\">" . sprintf($lang_delete_php['update_alb'], $op['album_no'], $op['album_nm'], $op['album_sort']) . "</td></tr>\n";
$query = "UPDATE $CONFIG[TABLE_ALBUMS] SET title='" . addslashes($op['album_nm']) . "', pos='{$op['album_sort']}' WHERE aid='{$op['album_no']}' $restrict LIMIT 1";
cpg_db_query($query);
break;
default:
cpg_die (CRITICAL_ERROR, $lang_delete_php['err_invalid_data'], __FILE__, __LINE__);
}
}
if ($need_caption) output_caption();
echo "<tr><td colspan=\"6\" class=\"tablef\" align=\"center\">\n";
echo "<div class=\"admin_menu_thumb\"><a href=\"index.php\" class=\"adm_menu\">$lang_continue</a></div>\n";
echo "</td></tr>";
endtable();
pagefooter();
ob_end_flush();
break;
//
// Picture manager (don't necessarily delete something ;-)
//
case 'picmgr':
if (!(GALLERY_ADMIN_MODE || USER_ADMIN_MODE)) cpg_die(ERROR, $lang_errors['access_denied'], __FILE__, __LINE__);
if(!GALLERY_ADMIN_MODE){
//$restrict = "AND category = '".(FIRST_USER_CAT + USER_ID)."'";
$restrict = '';
} else {
$restrict = '';
}
pageheader($lang_delete_php['pic_mgr']);
starttable("100%", $lang_delete_php['pic_mgr'], 6);
$orig_sort_order = parse_pic_list($_POST['sort_order']);
foreach ($orig_sort_order as $picture){
$op = parse_pic_orig_sort_order($picture);
if (count ($op) == 2){
$query = "UPDATE $CONFIG[TABLE_PICTURES] SET position='{$op['pos']}' WHERE pid='{$op['aid']}' $restrict LIMIT 1";
cpg_db_query($query);
} else {
cpg_die (sprintf(CRITICAL_ERROR, $lang_delete_php['err_invalid_data'], $_POST['sort_order']), __FILE__, __LINE__);
}
}
$to_delete = parse_pic_list($_POST['delete_picture']);
foreach ($to_delete as $picture_id){
delete_picture((int)$picture_id);
}
if (isset($_POST['to'])) foreach ($_POST['to'] as $option_value){
$op = parse_pic_select_option(stripslashes($option_value));
switch ($op['action']){
case '0':
break;
case '1':
if(GALLERY_ADMIN_MODE){
$category = (int)$_POST['cat'];
} else {
$category = FIRST_USER_CAT + USER_ID;
}
echo "<tr><td colspan=\"6\" class=\"tableb\">".sprintf($lang_delete_php['create_alb'], $op['album_nm'])."</td></tr>\n";
if (GALLERY_ADMIN_MODE){
$query = "INSERT INTO {$CONFIG['TABLE_ALBUMS']} (category, title, uploads, pos, description, visibility) VALUES ('$category', '".addslashes($op['album_nm'])."', 'NO', '{$op['album_sort']}', '', " . (FIRST_USER_CAT + USER_ID) . ")";
} else {
$query = "INSERT INTO {$CONFIG['TABLE_ALBUMS']} (category, title, uploads, pos, description) VALUES ('$category', '".addslashes($op['album_nm'])."', 'NO', '{$op['album_sort']}', '')";
}
cpg_db_query($query);
break;
case '2':
echo "<tr><td colspan=\"6\" class=\"tableb\">".sprintf($lang_delete_php['update_pic'], $op['picture_no'], $op['picture_nm'], $op['picture_sort'])."</td></tr>\n";
$query = "UPDATE $CONFIG[TABLE_PICTURES] SET position='{$op['picture_sort']}' WHERE pid='{$op['picture_no']}' $restrict LIMIT 1";
cpg_db_query($query);
break;
default:
cpg_die (CRITICAL_ERROR, $lang_delete_php['err_invalid_data'], __FILE__, __LINE__);
}
}
if ($need_caption) output_caption();
echo "<tr><td colspan=\"6\" class=\"tablef\" align=\"center\">\n";
echo "<div class=\"admin_menu_thumb\"><a href=\"index.php\" class=\"adm_menu\">$lang_continue</a></div>\n";
echo "</td></tr>";
endtable();
pagefooter();
ob_end_flush();
break;
// Comment
case 'comment':
$msg_id = (int)$_GET['msg_id'];
$result = cpg_db_query("SELECT pid FROM {$CONFIG['TABLE_COMMENTS']} WHERE msg_id='$msg_id'");
if (!mysql_num_rows($result)) {
cpg_die(CRITICAL_ERROR, $lang_errors['non_exist_comment'], __FILE__, __LINE__);
} else {
$comment_data = mysql_fetch_array($result);
}
if (GALLERY_ADMIN_MODE) {
$query = "DELETE FROM {$CONFIG['TABLE_COMMENTS']} WHERE msg_id='$msg_id'";
} elseif (USER_ID) {
$query = "DELETE FROM {$CONFIG['TABLE_COMMENTS']} WHERE msg_id='$msg_id' AND author_id ='" . USER_ID . "' LIMIT 1";
} else {
$query = "DELETE FROM {$CONFIG['TABLE_COMMENTS']} WHERE msg_id='$msg_id' AND author_md5_id ='{$USER['ID']}' AND author_id = '0' LIMIT 1";
}
$result = cpg_db_query($query);
$header_location = (@preg_match('/Microsoft|WebSTAR|Xitami/', getenv('SERVER_SOFTWARE'))) ? 'Refresh: 0; URL=' : 'Location: ';
$redirect = "displayimage.php?pos=" . (- $comment_data['pid']);
header($header_location . $redirect);
pageheader($lang_info, "<META http-equiv=\"refresh\" content=\"1;url=$redirect\">");
msg_box($lang_info, $lang_delete_php['comment_deleted'], $lang_continue, $redirect);
pagefooter();
ob_end_flush();
break;
// Picture
case 'picture':
$pid = (int)$_GET['id'];
pageheader($lang_delete_php['del_pic']);
starttable("100%", $lang_delete_php['del_pic'], 6);
output_table_header();
$aid = delete_picture($pid);
output_caption();
echo "<tr><td colspan=\"6\" class=\"tablef\" align=\"center\">\n";
echo "<div class=\"admin_menu_thumb\"><a href=\"thumbnails.php?album=$aid\" class=\"adm_menu\">$lang_continue</a></div>\n";
echo "</td></tr>\n";
endtable();
pagefooter();
ob_end_flush();
break;
// Album
case 'album':
if (!(GALLERY_ADMIN_MODE || USER_ADMIN_MODE)) cpg_die(ERROR, $lang_errors['access_denied'], __FILE__, __LINE__);
$aid = (int)$_GET['id'];
pageheader($lang_delete_php['del_alb']);
starttable("100%", $lang_delete_php['del_alb'], 6);
delete_album($aid);
if ($need_caption) output_caption();
echo "<tr><td colspan=\"6\" class=\"tablef\" align=\"center\">\n";
echo "<div class=\"admin_menu_thumb\"><a href=\"index.php\" class=\"adm_menu\">$lang_continue</a></div>\n";
echo "</td></tr>";
endtable();
pagefooter();
ob_end_flush();
break;
// User
case 'user':
$user_id = str_replace('u', '', $_GET['id']);
$users_scheduled_for_action = explode(',', $user_id);
if (!(GALLERY_ADMIN_MODE) || ($user_id == USER_ID) || UDB_INTEGRATION != 'coppermine') cpg_die(ERROR, $lang_errors['perm_denied'], __FILE__, __LINE__);
switch ($_REQUEST['action']) {
case 'delete':
pageheader($lang_delete_php['del_user']);
starttable("100%", $lang_delete_php['del_user'], 6);
foreach($users_scheduled_for_action as $key) {
$result = cpg_db_query("SELECT user_name FROM {$CONFIG['TABLE_USERS']} WHERE user_id = '$key'");
print '<tr>';
if (!mysql_num_rows($result)) {
print '<td class="tableb">'.$lang_delete_php['err_unknown_user'].'</td>';
} else {
$user_data = mysql_fetch_array($result);
print '<td class="tableb">';
// First delete the albums
$result2 = cpg_db_query("SELECT aid FROM {$CONFIG['TABLE_ALBUMS']} WHERE category = '" . (FIRST_USER_CAT + $key) . "'");
$user_alb_counter = 0;
while ($album = mysql_fetch_array($result2)) {
starttable('100%');
delete_album($album['aid']);
endtable();
$user_alb_counter++;
} // while
mysql_free_result($result2);
starttable('100%');
print '<tr>';
// Then anonymize comments posted by the user
$comment_result = cpg_db_query("SELECT COUNT(*) FROM {$CONFIG['TABLE_COMMENTS']} WHERE author_id = '$key'");
$comment_counter = mysql_fetch_array($comment_result);
mysql_free_result($comment_result);
print '<td class="tableb" width="25%">';
if ($_REQUEST['delete_comments'] == 'yes') {
cpg_db_query("DELETE FROM {$CONFIG['TABLE_COMMENTS']} WHERE author_id = '$key'");
if ($comment_counter[0] > 0) {
print '<img src="images/green.gif" width="12" height="12" border="0" alt="" /> ';
}
printf($lang_delete_php['deleted_comments'], $comment_counter[0]);
} else {
cpg_db_query("UPDATE {$CONFIG['TABLE_COMMENTS']} SET author_id = '0' WHERE author_id = '$key'");
if ($comment_counter[0] > 0) {
print '<img src="images/green.gif" width="12" height="12" border="0" alt="" /> ';
}
printf($lang_delete_php['anonymized_comments'], $comment_counter[0]);
}
print '</td>';
// Do the same for pictures uploaded in public albums
$publ_upload_result = cpg_db_query("SELECT COUNT(*) FROM {$CONFIG['TABLE_PICTURES']} WHERE owner_id = '$key'");
$publ_upload_counter = mysql_fetch_array($publ_upload_result);
mysql_free_result($publ_upload_result);
print '<td class="tableb" width="25%">';
if ($_REQUEST['delete_files'] == 'yes') {
cpg_db_query("DELETE FROM {$CONFIG['TABLE_PICTURES']} WHERE owner_id = '$key'");
if ($publ_upload_counter[0] > 0) {
print '<img src="images/green.gif" width="12" height="12" border="0" alt="" /> ';
}
printf($lang_delete_php['deleted_uploads'], $publ_upload_counter[0]);
} else {
cpg_db_query("UPDATE {$CONFIG['TABLE_PICTURES']} SET owner_id = '0' WHERE owner_id = '$key'");
if ($publ_upload_counter[0] > 0) {
print '<img src="images/green.gif" width="12" height="12" border="0" alt="" /> ';
}
printf($lang_delete_php['anonymized_uploads'], $publ_upload_counter[0]);
}
print '</td>';
// Finally delete the user
cpg_db_query("DELETE FROM {$CONFIG['TABLE_USERS']} WHERE user_id = '$key'");
print '<td class="tableb" width="50%">';
print '<b>';
print '<img src="images/green.gif" width="12" height="12" border="0" alt="" /> ';
printf($lang_delete_php['user_deleted'],'«'.$user_data['user_name'].'»');
print '</b>';
print '</td>';
print '</tr>';
endtable();
print '</td>';
}
mysql_free_result($result);
print '</tr>';
}
echo "<tr><td colspan=\"6\" class=\"tablef\" align=\"center\">\n";
echo "<a href=\"usermgr.php\" class=\"admin_menu\">$lang_continue</a>\n";
echo "</td></tr>";
endtable();
pagefooter();
break; // end case "delete"
case 'activate':
pageheader($lang_delete_php['activate_user']);
starttable("100%", $lang_delete_php['activate_user'], 2);
print "<tr>\n";
print "<td class=\"tableh2\"><b>{$lang_delete_php['username']}</b></td>\n";
print "<td class=\"tableh2\"><b>{$lang_delete_php['status']}</b></td>\n";
print "</tr>\n";
foreach($users_scheduled_for_action as $key) {
$result = cpg_db_query("SELECT user_name,user_active FROM {$CONFIG['TABLE_USERS']} WHERE user_id = '$key'");
if (!mysql_num_rows($result)) {
print '<tr><td class="tableb" colspan="2">'.$lang_delete_php['err_unknown_user'].'</td>';
} else {
$user_data = mysql_fetch_array($result);
print '<tr>';
print '<td class="tableb"><b>';
print $user_data['user_name'];
print '</b></td>';
print '<td class="tableb">';
if ($user_data['user_active'] == 'YES') {
// user is already active
print $lang_delete_php['user_already_active'];
} else {
// activate this user
cpg_db_query("UPDATE {$CONFIG['TABLE_USERS']} SET user_active = 'YES' WHERE user_id = '$key'");
print $lang_delete_php['activated'];
}
print '</b></td>';
}
mysql_free_result($result);
} // foreach --- end
echo "<tr><td colspan=\"2\" class=\"tablef\" align=\"center\">\n";
echo "<a href=\"usermgr.php\" class=\"admin_menu\">$lang_continue</a>\n";
echo "</td></tr>";
endtable();
pagefooter();
break; // end case "activate"
case 'deactivate':
pageheader($lang_delete_php['deactivate_user']);
starttable("100%", $lang_delete_php['deactivate_user'], 2);
print "<tr>\n";
print "<td class=\"tableh2\"><b>{$lang_delete_php['username']}</b></td>\n";
print "<td class=\"tableh2\"><b>{$lang_delete_php['status']}</b></td>\n";
print "</tr>\n";
foreach($users_scheduled_for_action as $key) {
$result = cpg_db_query("SELECT user_name,user_active FROM {$CONFIG['TABLE_USERS']} WHERE user_id = '$key'");
if (!mysql_num_rows($result)) {
print '<tr><td class="tableb" colspan="2">'.$lang_delete_php['err_unknown_user'].'</td>';
} else {
$user_data = mysql_fetch_array($result);
print '<tr>';
print '<td class="tableb"><b>';
print $user_data['user_name'];
print '</b></td>';
print '<td class="tableb">';
if ($user_data['user_active'] == 'NO') {
// user is already inactive
print $lang_delete_php['user_already_inactive'];
} else {
// deactivate this user
cpg_db_query("UPDATE {$CONFIG['TABLE_USERS']} SET user_active = 'NO' WHERE user_id = '$key'");
print $lang_delete_php['deactivated'];
}
print '</b></td>';
}
mysql_free_result($result);
} // foreach --- end
echo "<tr><td colspan=\"2\" class=\"tablef\" align=\"center\">\n";
echo "<a href=\"usermgr.php\" class=\"admin_menu\">$lang_continue</a>\n";
echo "</td></tr>";
endtable();
pagefooter();
break; // end case "deactivate"
case 'reset_password':
pageheader($lang_delete_php['reset_password']);
starttable("100%", $lang_delete_php['reset_password'], 2);
print "<tr>\n";
print "<td class=\"tableh2\"><b>{$lang_delete_php['username']}</b></td>\n";
print "<td class=\"tableh2\"><b>{$lang_delete_php['status']}</b></td>\n";
print "</tr>\n";
foreach($users_scheduled_for_action as $key) {
$result = cpg_db_query("SELECT user_name FROM {$CONFIG['TABLE_USERS']} WHERE user_id = '$key'");
if (!mysql_num_rows($result)) {
print '<tr><td class="tableb" colspan="2">'.$lang_delete_php['err_unknown_user'].'</td>';
} else {
$user_data = mysql_fetch_array($result);
print '<tr>';
print '<td class="tableb"><b>';
print $user_data['user_name'];
print '</b></td>';
print '<td class="tableb">';
// set this user's password
$new_password = $CONFIG['enable_encrypted_passwords'] ? md5(addslashes($_REQUEST['new_password'])) : addslashes($_REQUEST['new_password']);
cpg_db_query("UPDATE {$CONFIG['TABLE_USERS']} SET user_password = '$new_password' WHERE user_id = '$key'");
printf($lang_delete_php['password_reset'], '«'.$_REQUEST['new_password'].'»');
print '</b></td>';
}
mysql_free_result($result);
} // foreach --- end
echo "<tr><td colspan=\"2\" class=\"tablef\" align=\"center\">\n";
echo "<a href=\"usermgr.php\" class=\"admin_menu\">$lang_continue</a>\n";
echo "</td></tr>";
endtable();
pagefooter();
break; // end case "reset_password"
case 'change_group':
pageheader($lang_delete_php['change_group']);
starttable("100%", $lang_delete_php['change_group'], 2);
print "<tr>\n";
print "<td class=\"tableh2\"><b>{$lang_delete_php['username']}</b></td>\n";
print "<td class=\"tableh2\"><b>{$lang_delete_php['status']}</b></td>\n";
print "</tr>\n";
$result_group = cpg_db_query("SELECT group_id,group_name FROM {$CONFIG['TABLE_USERGROUPS']}");
if (!mysql_num_rows($result_group)) {
cpg_die(CRITICAL_ERROR, $lang_delete_php['err_empty_groups'], __FILE__, __LINE__);
}
while ($row = mysql_fetch_array($result_group)) {
$group_label[$row['group_id']] = $row['group_name'];
} // while
foreach($users_scheduled_for_action as $key) {
$result = cpg_db_query("SELECT user_name,user_group FROM {$CONFIG['TABLE_USERS']} WHERE user_id = '$key'");
if (!mysql_num_rows($result)) {
print '<tr><td class="tableb" colspan="2">'.$lang_delete_php['err_unknown_user'].'</td>';
} else {
$user_data = mysql_fetch_array($result);
print '<tr>';
print '<td class="tableb"><b>';
print $user_data['user_name'];
print '</b></td>';
print '<td class="tableb">';
// set this user's group
$group=addslashes($_REQUEST['group']);
cpg_db_query("UPDATE {$CONFIG['TABLE_USERS']} SET user_group = '$group' WHERE user_id = '$key'");
printf($lang_delete_php['change_group_to_group'], '«'.$group_label[$user_data['user_group']].'»', '«'.$group_label[$_REQUEST['group']].'»');
print '</b></td>';
}
mysql_free_result($result);
} // foreach --- end
echo "<tr><td colspan=\"2\" class=\"tablef\" align=\"center\">\n";
echo "<a href=\"usermgr.php\" class=\"admin_menu\">$lang_continue</a>\n";
echo "</td></tr>";
endtable();
pagefooter();
break; // end case "change_group"
case 'add_group':
pageheader($lang_delete_php['add_group']);
starttable("100%", $lang_delete_php['add_group'], 2);
print "<tr>\n";
print "<td class=\"tableh2\"><b>{$lang_delete_php['username']}</b></td>\n";
print "<td class=\"tableh2\"><b>{$lang_delete_php['status']}</b></td>\n";
print "</tr>\n";
$result_group = cpg_db_query("SELECT group_id,group_name FROM {$CONFIG['TABLE_USERGROUPS']} ORDER BY group_name");
if (!mysql_num_rows($result_group)) {
cpg_die(CRITICAL_ERROR, $lang_delete_php['err_empty_groups'], __FILE__, __LINE__);
}
while ($row = mysql_fetch_array($result_group)) {
$group_label[$row['group_id']] = $row['group_name'];
} // while
foreach($users_scheduled_for_action as $key) {
$result = cpg_db_query("SELECT user_name,user_group FROM {$CONFIG['TABLE_USERS']} WHERE user_id = '$key'");
if (!mysql_num_rows($result)) {
print '<tr><td class="tableb" colspan="2">'.$lang_delete_php['err_unknown_user'].'</td>';
} else {
$user_data = mysql_fetch_array($result);
print '<tr>';
print '<td class="tableb"><b>';
print $user_data['user_name'];
print '</b></td>';
print '<td class="tableb">';
// check group membership of this particular user
$sql = "SELECT * FROM {$CONFIG['TABLE_USERS']} WHERE user_id = '$key'";
$result_user = cpg_db_query($sql);
if (!mysql_num_rows($result)) { print 'unknown user';}
$user_data = mysql_fetch_array($result_user);
mysql_free_result($result_user);
$user_group = explode(',', $user_data['user_group_list']);
natcasesort($user_group);
if (!in_array($_REQUEST['group'], $user_group)){
$user_group[] = addslashes($_REQUEST['group']);
}
$group_output = '';
$new_group_query = '';
foreach($user_group as $group) {
if ($group !='') {
$group_output .= '«'.$group_label[$group].'», ';
$new_group_query .= $group.',';
}
}
$group_output = trim(trim($group_output), ',');
$new_group_query = trim($new_group_query, ',');
// set this user's group
cpg_db_query("UPDATE {$CONFIG['TABLE_USERS']} SET user_group_list = '$new_group_query' WHERE user_id = '$key'");
printf($lang_delete_php['add_group_to_group'], '«'.$user_data['user_name'].'»', '«'.$group_label[$_REQUEST['group']].'»', '«'.$group_label[$user_data['user_group']].'»', $group_output);
print '</b></td>';
}
mysql_free_result($result);
} // foreach --- end
echo "<tr><td colspan=\"2\" class=\"tablef\" align=\"center\">\n";
echo "<a href=\"usermgr.php\" class=\"admin_menu\">$lang_continue</a>\n";
echo "</td></tr>";
endtable();
pagefooter();
break; // end case "add_group"
default:
cpg_die(CRITICAL_ERROR, $lang_errors['param_missing'], __FILE__, __LINE__);
break;
}
ob_end_flush();
break;
// Unknow command
default:
cpg_die(CRITICAL_ERROR, $lang_errors['param_missing'], __FILE__, __LINE__);
}
?>