Do not export emails in members csv files (Closes #1508).
[platal.git] / modules / lists.php
CommitLineData
bc4ad6aa 1<?php
2/***************************************************************************
12262f13 3 * Copyright (C) 2003-2011 Polytechnique.org *
bc4ad6aa 4 * http://opensource.polytechnique.org/ *
5 * *
6 * This program is free software; you can redistribute it and/or modify *
7 * it under the terms of the GNU General Public License as published by *
8 * the Free Software Foundation; either version 2 of the License, or *
9 * (at your option) any later version. *
10 * *
11 * This program is distributed in the hope that it will be useful, *
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
14 * GNU General Public License for more details. *
15 * *
16 * You should have received a copy of the GNU General Public License *
17 * along with this program; if not, write to the Free Software *
18 * Foundation, Inc., *
19 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
20 ***************************************************************************/
21
22class ListsModule extends PLModule
23{
0baf0741 24 protected $client;
bc4ad6aa 25
26 function handlers()
27 {
28 return array(
5ae3e9a9
SJ
29 'lists' => $this->make_hook('lists', AUTH_MDP),
30 'lists/ajax' => $this->make_hook('ajax', AUTH_MDP, 'user', NO_AUTH),
31 'lists/create' => $this->make_hook('create', AUTH_MDP, 'lists'),
bc4ad6aa 32
5ae3e9a9
SJ
33 'lists/members' => $this->make_hook('members', AUTH_COOKIE),
34 'lists/csv' => $this->make_hook('csv', AUTH_COOKIE),
35 'lists/annu' => $this->make_hook('annu', AUTH_COOKIE),
36 'lists/archives' => $this->make_hook('archives', AUTH_COOKIE),
37 'lists/archives/rss' => $this->make_hook('rss', AUTH_PUBLIC, 'user', NO_HTTPS),
bc4ad6aa 38
5ae3e9a9
SJ
39 'lists/moderate' => $this->make_hook('moderate', AUTH_MDP),
40 'lists/admin' => $this->make_hook('admin', AUTH_MDP),
41 'lists/options' => $this->make_hook('options', AUTH_MDP),
42 'lists/delete' => $this->make_hook('delete', AUTH_MDP),
bc4ad6aa 43
5ae3e9a9
SJ
44 'lists/soptions' => $this->make_hook('soptions', AUTH_MDP),
45 'lists/check' => $this->make_hook('check', AUTH_MDP),
46 'admin/lists' => $this->make_hook('admin_all', AUTH_MDP, 'admin'),
2ed80014 47 'admin/aliases' => $this->make_hook('aaliases', AUTH_MDP, 'admin')
bc4ad6aa 48 );
49 }
50
26ba053e 51 function prepare_client($page, $user = null)
bc4ad6aa 52 {
0ec52d96 53 global $globals;
54
460d8f55 55 $this->load('lists.inc.php');
8c12f931
FB
56 if (is_null($user)) {
57 $user = S::user();
58 }
bc4ad6aa 59
7f1ff426 60 $this->client = new MMList($user);
092945b4 61 return $globals->mail->domain;
bc4ad6aa 62 }
63
834fd0f6 64 function get_pending_ops($domain, $list)
65 {
66 list($subs,$mails) = $this->client->get_pending_ops($list);
67 $res = XDB::query("SELECT mid
2235cd7f 68 FROM email_list_moderate
834fd0f6 69 WHERE ml = {?} AND domain = {?}",
70 $list, $domain);
71 $mids = $res->fetchColumn();
72 foreach ($mails as $key=>$mail) {
73 if (in_array($mail['id'], $mids)) {
74 unset($mails[$key]);
75 }
76 }
77 return array($subs, $mails);
78 }
79
26ba053e 80 function handler_lists($page)
bc4ad6aa 81 {
50c655ee 82 function filter_owner($list)
83 {
84 return $list['own'];
85 }
86
87 function filter_member($list)
88 {
da398501 89 return $list['sub'];
50c655ee 90 }
91
834fd0f6 92 $domain = $this->prepare_client($page);
bc4ad6aa 93
edc4367b 94 $page->changeTpl('lists/index.tpl');
46f272fe 95 $page->setTitle('Listes de diffusion');
bc4ad6aa 96
97
98 if (Get::has('del')) {
2669eb7d 99 S::assert_xsrf_token();
5e2307dc 100 $this->client->unsubscribe(Get::v('del'));
8b00e0e0 101 pl_redirect('lists');
bc4ad6aa 102 }
103 if (Get::has('add')) {
2669eb7d 104 S::assert_xsrf_token();
5e2307dc 105 $this->client->subscribe(Get::v('add'));
8b00e0e0 106 pl_redirect('lists');
bc4ad6aa 107 }
108 if (Post::has('promo_add')) {
2669eb7d
VZ
109 S::assert_xsrf_token();
110
5e2307dc 111 $promo = Post::i('promo_add');
bc4ad6aa 112 if ($promo >= 1900 and $promo < 2100) {
113 $this->client->subscribe("promo$promo");
114 } else {
7be6ecba 115 $page->trigError("promo incorrecte, il faut une promo sur 4 chiffres.");
bc4ad6aa 116 }
117 }
2669eb7d 118
81a9ae96
SJ
119 if (!is_null($listes = $this->client->get_lists())) {
120 $owner = array_filter($listes, 'filter_owner');
121 $listes = array_diff_key($listes, $owner);
122 $member = array_filter($listes, 'filter_member');
123 $listes = array_diff_key($listes, $member);
124 foreach ($owner as $key => $liste) {
125 list($subs, $mails) = $this->get_pending_ops($domain, $liste['list']);
126 $owner[$key]['subscriptions'] = $subs;
127 $owner[$key]['mails'] = $mails;
128 }
129 $page->register_modifier('hdc', 'list_header_decode');
130 $page->assign_by_ref('owner', $owner);
131 $page->assign_by_ref('member', $member);
132 $page->assign_by_ref('public', $listes);
50c655ee 133 }
50c655ee 134 }
135
26ba053e 136 function handler_ajax($page, $list = null)
50c655ee 137 {
3cb500d5 138 pl_content_headers("text/html");
5cbb1fad 139 $domain = $this->prepare_client($page);
edc4367b 140 $page->changeTpl('lists/liste.inc.tpl', NO_SKIN);
2669eb7d
VZ
141 S::assert_xsrf_token();
142
50c655ee 143 if (Get::has('unsubscribe')) {
144 $this->client->unsubscribe($list);
145 }
146 if (Get::has('subscribe')) {
147 $this->client->subscribe($list);
148 }
149 if (Get::has('sadd')) { /* 4 = SUBSCRIBE */
150 $this->client->handle_request($list, Get::v('sadd'), 4, '');
151 }
152 if (Get::has('mid')) {
5cbb1fad 153 $this->moderate_mail($domain, $list, Get::i('mid'));
50c655ee 154 }
155
156 list($liste, $members, $owners) = $this->client->get_members($list);
157 if ($liste['own']) {
834fd0f6 158 list($subs,$mails) = $this->get_pending_ops($domain, $list);
50c655ee 159 $liste['subscriptions'] = $subs;
160 $liste['mails'] = $mails;
161 }
162 $page->register_modifier('hdc', 'list_header_decode');
163 $page->assign_by_ref('liste', $liste);
bc4ad6aa 164 }
165
26ba053e 166 function handler_create($page)
bc4ad6aa 167 {
032b244e
SJ
168 global $globals;
169
edc4367b 170 $page->changeTpl('lists/create.tpl');
bc4ad6aa 171
18fb3c63 172 $user_promo = S::user()->profile()->yearPromo();
8ac67bda
SJ
173 $year = date('Y');
174 $month = date('m');
18fb3c63
PC
175 // scolar year starts in september
176 $scolarmonth = ($year - $user_promo) * 12 + ($month - 8);
8ac67bda 177 $young_promo = $very_young_promo = 0;
18fb3c63
PC
178 // binet are accessible only in april in the first year and until
179 // march of the 5th year
180 if ($scolarmonth >= 8 && $scolarmonth < 56) {
8ac67bda
SJ
181 $young_promo = 1;
182 }
18fb3c63
PC
183 // PSC aliases are accesible only between september and june of the second
184 // year of scolarity
185 if ($scolarmonth >= 12 && $scolarmonth < 22) {
8ac67bda
SJ
186 $very_young_promo = 1;
187 }
188 $page->assign('young_promo', $young_promo);
189 $page->assign('very_young_promo', $very_young_promo);
190
5e2307dc 191 $owners = preg_split("/[\s]+/", Post::v('owners'), -1, PREG_SPLIT_NO_EMPTY);
192 $members = preg_split("/[\s]+/", Post::v('members'), -1, PREG_SPLIT_NO_EMPTY);
bc4ad6aa 193
194 // click on validate button 'add_owner_sub' or type <enter>
195 if (Post::has('add_owner_sub') && Post::has('add_owner')) {
bc4ad6aa 196 // if we want to add an owner and then type <enter>, then both
197 // add_owner_sub and add_owner are filled.
7586ae0b
VZ
198 $oforlifes = User::getBulkForlifeEmails(Post::v('add_owner'), true);
199 $mforlifes = User::getBulkForlifeEmails(Post::v('add_member'), true);
e7545178 200 if (!is_null($oforlifes)) {
201 $owners = array_merge($owners, $oforlifes);
202 }
203 // if we want to add a member and then type <enter>, then
204 // add_owner_sub is filled, whereas add_owner is empty.
205 if (!is_null($mforlifes)) {
206 $members = array_merge($members, $mforlifes);
bc4ad6aa 207 }
208 }
209
210 // click on validate button 'add_member_sub'
211 if (Post::has('add_member_sub') && Post::has('add_member')) {
7586ae0b 212 $forlifes = User::getBulkForlifeEmails(Post::v('add_member'), true);
e7545178 213 if (!is_null($forlifes)) {
214 $members = array_merge($members, $forlifes);
bc4ad6aa 215 }
216 }
45070158 217 if (Post::has('add_member_sub') && isset($_FILES['add_member_file']) && $_FILES['add_member_file']['tmp_name']) {
f3df6d38 218 $upload =& PlUpload::get($_FILES['add_member_file'], S::user()->login(), 'list.addmember', true);
45070158
FB
219 if (!$upload) {
220 $page->trigError('Une erreur s\'est produite lors du téléchargement du fichier');
221 } else {
7586ae0b 222 $forlifes = User::getBulkForlifeEmails($upload->getContents(), true);
45070158
FB
223 if (!is_null($forlifes)) {
224 $members = array_merge($members, $forlifes);
225 }
226 }
227 }
bc4ad6aa 228
e7545178 229 ksort($owners);
230 $owners = array_unique($owners);
231 ksort($members);
232 $members = array_unique($members);
bc4ad6aa 233
45070158
FB
234 $page->assign('owners', join("\n", $owners));
235 $page->assign('members', join("\n", $members));
bc4ad6aa 236
237 if (!Post::has('submit')) {
238 return;
2669eb7d
VZ
239 } else {
240 S::assert_xsrf_token();
bc4ad6aa 241 }
242
85ddf64f
SJ
243 $asso = Post::t('asso');
244 $list = strtolower(Post::t('liste'));
bc4ad6aa 245
85ddf64f 246 if (empty($list)) {
6bb2f79a 247 $page->trigError('Le champ «&nbsp;adresse souhaitée&nbsp;» est vide.');
bc4ad6aa 248 }
85ddf64f 249 if (!preg_match("/^[a-zA-Z0-9\-]*$/", $list)) {
59887c4a 250 $page->trigError('Le nom de la liste ne doit contenir que des lettres non accentuées, chiffres et tirets.');
bc4ad6aa 251 }
252
85ddf64f 253 if (($asso == 'binet') || ($asso == 'alias')) {
59887c4a 254 $promo = Post::i('promo');
032b244e 255 $domain = $promo . '.' . $globals->mail->domain;
59887c4a
SJ
256
257 if (($promo < 1921) || ($promo > date('Y'))) {
6bb2f79a 258 $page->trigError('La promotion est mal renseignée, elle doit être du type&nbsp;: 2004.');
59887c4a
SJ
259 }
260
85ddf64f
SJ
261 } elseif ($asso == 'groupex') {
262 $domain = XDB::fetchOneCell('SELECT mail_domain
263 FROM groups
264 WHERE nom = {?}',
265 Post::t('groupex_name'));
59887c4a
SJ
266
267 if (!$domain) {
268 $page->trigError('Il n\'y a aucun groupe de ce nom sur Polytechnique.net.');
269 }
85ddf64f
SJ
270 } else {
271 $domain = $globals->mail->domain;
bc4ad6aa 272 }
273
85ddf64f
SJ
274 require_once 'emails.inc.php';
275 if (list_exist($list, $domain)) {
6bb2f79a 276 $page->trigError("L'«&nbsp;adresse souhaitée&nbsp;» est déjà prise.");
bc4ad6aa 277 }
278
85ddf64f 279 if (!Post::t('desc')) {
59887c4a 280 $page->trigError('Le sujet est vide.');
bc4ad6aa 281 }
282
283 if (!count($owners)) {
59887c4a 284 $page->trigError('Il n\'y a pas de gestionnaire.');
bc4ad6aa 285 }
286
85ddf64f 287 if (count($members) < 4) {
59887c4a 288 $page->trigError('Il n\'y a pas assez de membres.');
bc4ad6aa 289 }
290
291 if (!$page->nb_errs()) {
562064b5 292 $page->trigSuccess('Demande de création envoyée&nbsp;!');
bc4ad6aa 293 $page->assign('created', true);
85ddf64f
SJ
294 $req = new ListeReq(S::user(), $asso, $list, $domain,
295 Post::t('desc'), Post::i('advertise'),
5e2307dc 296 Post::i('modlevel'), Post::i('inslevel'),
bc4ad6aa 297 $owners, $members);
298 $req->submit();
299 }
300 }
301
26ba053e 302 function handler_members($page, $liste = null)
bc4ad6aa 303 {
bc4ad6aa 304 if (is_null($liste)) {
305 return PL_NOT_FOUND;
306 }
307
7b9d64a8 308 $this->prepare_client($page);
bc4ad6aa 309
1490093c 310 $page->changeTpl('lists/members.tpl');
bc4ad6aa 311
312 if (Get::has('del')) {
2669eb7d 313 S::assert_xsrf_token();
bc4ad6aa 314 $this->client->unsubscribe($liste);
8b00e0e0 315 pl_redirect('lists/members/'.$liste);
bc4ad6aa 316 }
317
318 if (Get::has('add')) {
2669eb7d 319 S::assert_xsrf_token();
bc4ad6aa 320 $this->client->subscribe($liste);
8b00e0e0 321 pl_redirect('lists/members/'.$liste);
bc4ad6aa 322 }
323
324 $members = $this->client->get_members($liste);
325
5e2307dc 326 $tri_promo = !Env::b('alpha');
bc4ad6aa 327
328 if (list($det,$mem,$own) = $members) {
329 $membres = list_sort_members($mem, $tri_promo);
330 $moderos = list_sort_owners($own, $tri_promo);
331
332 $page->assign_by_ref('details', $det);
333 $page->assign_by_ref('members', $membres);
334 $page->assign_by_ref('owners', $moderos);
335 $page->assign('nb_m', count($mem));
336 } else {
6e828e47 337 $page->kill("La liste n'existe pas ou tu n'as pas le droit d'en voir les détails.");
bc4ad6aa 338 }
339 }
340
26ba053e 341 function handler_csv(PlPage $page, $liste = null)
b73bc04b
FB
342 {
343 if (is_null($liste)) {
344 return PL_NOT_FOUND;
345 }
346 $this->prepare_client($page);
347 $members = $this->client->get_members($liste);
b97ecb9d 348 $list = list_fetch_basic_info(list_extract_members($members[1]));
023c46fb 349 pl_cached_content_headers('text/x-csv', 1);
b73bc04b 350
889fbf00 351 echo "nom,promo\n";
b97ecb9d 352 echo implode("\n", $list);
b73bc04b
FB
353 exit;
354 }
355
26ba053e 356 function handler_annu($page, $liste = null, $action = null, $subaction = null)
bc4ad6aa 357 {
bc4ad6aa 358 if (is_null($liste)) {
359 return PL_NOT_FOUND;
360 }
361
7b9d64a8 362 $this->prepare_client($page);
bc4ad6aa 363
bc4ad6aa 364 if (Get::has('del')) {
2669eb7d 365 S::assert_xsrf_token();
bc4ad6aa 366 $this->client->unsubscribe($liste);
1cc0afe7 367 pl_redirect('lists/annu/'.$liste);
bc4ad6aa 368 }
369 if (Get::has('add')) {
2669eb7d 370 S::assert_xsrf_token();
bc4ad6aa 371 $this->client->subscribe($liste);
1cc0afe7 372 pl_redirect('lists/annu/'.$liste);
bc4ad6aa 373 }
374
375 $owners = $this->client->get_owners($liste);
1cc0afe7 376 if (!is_array($owners)) {
6e828e47 377 $page->kill("La liste n'existe pas ou tu n'as pas le droit d'en voir les détails.");
bc4ad6aa 378 }
1cc0afe7 379
1cc0afe7 380 list(,$members) = $this->client->get_members($liste);
ad3c767b
RB
381
382 if ($action == 'moderators') {
027b16e3 383 $users = $owners;
ad3c767b
RB
384 $show_moderators = true;
385 $action = $subaction;
386 $subaction = '';
387 } else {
388 $show_moderators = false;
027b16e3
RB
389 $users = array();
390 foreach ($members as $m) {
391 $users[] = $m[1];
392 }
1cc0afe7 393 }
ad3c767b 394
1cc0afe7 395 require_once 'userset.inc.php';
027b16e3 396 $view = new UserArraySet($users);
ad3c767b 397 $view->addMod('trombi', 'Trombinoscope', false, array('with_promo' => true));
ad3c767b 398 $view->addMod('listmember', 'Annuaire', true);
14f4068d
RB
399 if (empty($GLOBALS['IS_XNET_SITE'])) {
400 $view->addMod('minifiche', 'Mini-fiches', false);
401 }
0a928a2f 402 $view->addMod('map', 'Planisphère');
1cc0afe7 403 $view->apply("lists/annu/$liste", $page, $action, $subaction);
1cc0afe7 404
405 $page->changeTpl('lists/annu.tpl');
1cc0afe7 406 $page->assign_by_ref('details', $owners[0]);
ad3c767b 407 $page->assign('show_moderators', $show_moderators);
bc4ad6aa 408 }
409
26ba053e 410 function handler_archives($page, $liste = null, $action = null, $artid = null)
bc4ad6aa 411 {
412 global $globals;
413
414 if (is_null($liste)) {
415 return PL_NOT_FOUND;
416 }
417
092945b4 418 $domain = $this->prepare_client($page);
bc4ad6aa 419
1490093c 420 $page->changeTpl('lists/archives.tpl');
bc4ad6aa 421
bc4ad6aa 422 if (list($det) = $this->client->get_members($liste)) {
423 if (substr($liste,0,5) != 'promo' && ($det['ins'] || $det['priv'])
fa7d6c7b 424 && !$det['own'] && ($det['sub'] < 2)) {
38421eaa 425 $page->kill("La liste n'existe pas ou tu n'as pas le droit de la consulter.");
fa7d6c7b 426 }
427 $get = Array('listname' => $liste, 'domain' => $domain);
428 if (Post::has('updateall')) {
429 $get['updateall'] = Post::v('updateall');
430 }
4f355064 431 require_once 'banana/ml.inc.php';
432 get_banana_params($get, null, $action, $artid);
433 run_banana($page, 'MLBanana', $get);
bc4ad6aa 434 } else {
38421eaa 435 $page->kill("La liste n'existe pas ou tu n'as pas le droit de la consulter.");
bc4ad6aa 436 }
437 }
438
26ba053e 439 function handler_rss($page, $liste = null, $alias = null, $hash = null)
6544d0e1 440 {
8c12f931
FB
441 if (!$liste) {
442 return PL_NOT_FOUND;
443 }
444 $user = Platal::session()->tokenAuth($alias, $hash);
445 if (is_null($user)) {
446 return PL_FORBIDDEN;
6544d0e1 447 }
448
8c12f931 449 $domain = $this->prepare_client($page, $user);
6544d0e1 450 if (list($det) = $this->client->get_members($liste)) {
451 if (substr($liste,0,5) != 'promo' && ($det['ins'] || $det['priv'])
452 && !$det['own'] && ($det['sub'] < 2)) {
eaf30d86 453 exit;
6544d0e1 454 }
455 require_once('banana/ml.inc.php');
8c12f931 456 $banana = new MLBanana($user, Array('listname' => $liste, 'domain' => $domain, 'action' => 'rss2'));
4f355064 457 $banana->run();
6544d0e1 458 }
459 exit;
460 }
461
5cbb1fad 462 function moderate_mail($domain, $liste, $mid)
50c655ee 463 {
50c655ee 464 if (Env::has('mok')) {
834fd0f6 465 $action = 'accept';
50c655ee 466 } elseif (Env::has('mno')) {
834fd0f6 467 $action = 'refuse';
50c655ee 468 } elseif (Env::has('mdel')) {
834fd0f6 469 $action = 'delete';
470 } else {
471 return false;
472 }
473 Get::kill('mid');
2235cd7f 474 return XDB::execute("INSERT IGNORE INTO email_list_moderate
834fd0f6 475 VALUES ({?}, {?}, {?}, {?}, {?}, NOW(), {?}, NULL)",
476 $liste, $domain, $mid, S::i('uid'), $action, Post::v('reason'));
50c655ee 477 }
478
26ba053e 479 function handler_moderate($page, $liste = null)
bc4ad6aa 480 {
bc4ad6aa 481 if (is_null($liste)) {
4b0d9ef3 482 return PL_NOT_FOUND;
bc4ad6aa 483 }
484
092945b4 485 $domain = $this->prepare_client($page);
bc4ad6aa 486
1490093c 487 $page->changeTpl('lists/moderate.tpl');
bc4ad6aa 488
c8529706 489 $page->register_modifier('hdc', 'list_header_decode');
bc4ad6aa 490
4b0d9ef3 491 if (Env::has('sadd') || Env::has('sdel')) {
2669eb7d
VZ
492 S::assert_xsrf_token();
493
4b0d9ef3 494 if (Env::has('sadd')) { /* 4 = SUBSCRIBE */
495 $sub = $this->client->get_pending_sub($liste, Env::v('sadd'));
496 $this->client->handle_request($liste,Env::v('sadd'),4,'');
497 $info = "validée";
498 }
499 if (Post::has('sdel')) { /* 2 = REJECT */
500 $sub = $this->client->get_pending_sub($liste, Env::v('sdel'));
a5878ac1 501 $this->client->handle_request($liste, Post::v('sdel'), 2, utf8_decode(Post::v('reason')));
4b0d9ef3 502 $info = "refusée";
503 }
504 if ($sub) {
505 $mailer = new PlMailer();
506 $mailer->setFrom("$liste-bounces@{$domain}");
507 $mailer->addTo("$liste-owner@{$domain}");
508 $mailer->addHeader('Reply-To', "$liste-owner@{$domain}");
509 $mailer->setSubject("L'inscription de {$sub['name']} a été $info");
4595d3e2 510 $text = "L'inscription de {$sub['name']} à la liste $liste@{$domain} a été $info par " . S::user()->fullName(true) . ".\n";
4b0d9ef3 511 if (trim(Post::v('reason'))) {
512 $text .= "\nLa raison invoquée est :\n" . Post::v('reason');
513 }
514 $mailer->setTxtBody(wordwrap($text, 72));
515 $mailer->send();
516 }
517 if (Env::has('sadd')) {
518 pl_redirect('lists/moderate/'.$liste);
eaf30d86 519 }
bc4ad6aa 520 }
521
e940f534 522 if (Post::has('moderate_mails') && Post::has('select_mails')) {
2669eb7d
VZ
523 S::assert_xsrf_token();
524
e940f534 525 $mails = array_keys(Post::v('select_mails'));
526 foreach($mails as $mail) {
527 $this->moderate_mail($domain, $liste, $mail);
528 }
529 } elseif (Env::has('mid')) {
d96379f6 530 if (Get::has('mid') && !Env::has('mok') && !Env::has('mdel')) {
ecc72a6d 531 require_once 'banana/moderate.inc.php';
bc4ad6aa 532
52d032a7 533 $page->changeTpl('lists/moderate_mail.tpl');
52d032a7
SJ
534 $params = array('listname' => $liste, 'domain' => $domain,
535 'artid' => Get::i('mid'), 'part' => Get::v('part'), 'action' => Get::v('action'));
536 $params['client'] = $this->client;
537 run_banana($page, 'ModerationBanana', $params);
538
ecc72a6d 539 $msg = file_get_contents('/etc/mailman/fr/refuse.txt');
52d032a7
SJ
540 $msg = str_replace("%(adminaddr)s", "$liste-owner@{$domain}", $msg);
541 $msg = str_replace("%(request)s", "<< SUJET DU MAIL >>", $msg);
542 $msg = str_replace("%(reason)s", "<< TON EXPLICATION >>", $msg);
543 $msg = str_replace("%(listname)s", $liste, $msg);
544 $page->assign('msg', $msg);
545 return;
ed03d07f 546 }
547
ecc72a6d 548 $this->moderate_mail($domain, $liste, Env::i('mid'));
bc4ad6aa 549 } elseif (Env::has('sid')) {
834fd0f6 550 if (list($subs,$mails) = $this->get_pending_ops($domain, $liste)) {
bc4ad6aa 551 foreach($subs as $user) {
5e2307dc 552 if ($user['id'] == Env::v('sid')) {
1490093c 553 $page->changeTpl('lists/moderate_sub.tpl');
6a20c6a3 554 $page->assign('del_user', $user);
555 return;
bc4ad6aa 556 }
557 }
558 }
559
560 }
561
834fd0f6 562 if (list($subs,$mails) = $this->get_pending_ops($domain, $liste)) {
46ab179a 563 foreach ($mails as $key=>$mail) {
564 $mails[$key]['stamp'] = strftime("%Y%m%d%H%M%S", $mail['stamp']);
717b9fa7
FB
565 if ($mail['fromx']) {
566 $page->assign('with_fromx', true);
567 } else {
568 $page->assign('with_nonfromx', true);
569 }
46ab179a 570 }
bc4ad6aa 571 $page->assign_by_ref('subs', $subs);
572 $page->assign_by_ref('mails', $mails);
573 } else {
6e828e47 574 $page->kill("La liste n'existe pas ou tu n'as pas le droit de la modérer.");
bc4ad6aa 575 }
576 }
577
0baf0741 578 static public function no_login_callback($login)
579 {
f036c896 580 global $list_unregistered;
0baf0741 581
61a7d279 582 $users = User::getPendingAccounts($login, true);
a58d8539 583 if ($users && $users->total()) {
0baf0741 584 if (!isset($list_unregistered)) {
585 $list_unregistered = array();
586 }
587 $list_unregistered[$login] = $users;
588 } else {
f036c896
SJ
589 list($name, $domain) = @explode('@', $login);
590 if (User::isMainMailDomain($domain)) {
750f63db 591 User::_default_user_callback($login);
be792642 592 }
0baf0741 593 }
594 }
595
26ba053e 596 function handler_admin($page, $liste = null)
bc4ad6aa 597 {
598 global $globals;
599
600 if (is_null($liste)) {
601 return PL_NOT_FOUND;
602 }
603
0baf0741 604 $domain = $this->prepare_client($page);
bc4ad6aa 605
1490093c 606 $page->changeTpl('lists/admin.tpl');
bc4ad6aa 607
0baf0741 608 if (Env::has('send_mark')) {
2669eb7d
VZ
609 S::assert_xsrf_token();
610
0baf0741 611 $actions = Env::v('mk_action');
612 $uids = Env::v('mk_uid');
613 $mails = Env::v('mk_email');
614 foreach ($actions as $key=>$action) {
615 switch ($action) {
616 case 'none':
617 break;
618
619 case 'marketu': case 'markets':
620 require_once 'emails.inc.php';
621 $mail = valide_email($mails[$key]);
622 if (isvalid_email_redirection($mail)) {
623 $from = ($action == 'marketu') ? 'user' : 'staff';
624 $market = Marketing::get($uids[$key], $mail);
625 if (!$market) {
626 $market = new Marketing($uids[$key], $mail, 'list', "$liste@$domain", $from, S::v('uid'));
627 $market->add();
628 break;
629 }
630 }
631
632 default:
633 XDB::execute('INSERT IGNORE INTO register_subs (uid, type, sub, domain)
634 VALUES ({?}, \'list\', {?}, {?})',
635 $uids[$key], $liste, $domain);
636 }
637 }
638 }
639
bc4ad6aa 640 if (Env::has('add_member')) {
2669eb7d
VZ
641 S::assert_xsrf_token();
642
7586ae0b 643 $members = User::getBulkForlifeEmails(Env::v('add_member'),
7129ea95 644 true,
7586ae0b 645 array('ListsModule', 'no_login_callback'));
bc4ad6aa 646 $arr = $this->client->mass_subscribe($liste, $members);
647 if (is_array($arr)) {
648 foreach($arr as $addr) {
a7d35093 649 $page->trigSuccess("{$addr[0]} inscrit.");
bc4ad6aa 650 }
651 }
652 }
653
108d1d90 654 if (isset($_FILES['add_member_file']) && $_FILES['add_member_file']['tmp_name']) {
2669eb7d
VZ
655 S::assert_xsrf_token();
656
f3df6d38 657 $upload =& PlUpload::get($_FILES['add_member_file'], S::user()->login(), 'list.addmember', true);
108d1d90
FB
658 if (!$upload) {
659 $page->trigError('Une erreur s\'est produite lors du téléchargement du fichier');
660 } else {
7586ae0b 661 $members = User::getBulkForlifeEmails($upload->getContents(),
7129ea95 662 true,
7586ae0b 663 array('ListsModule', 'no_login_callback'));
108d1d90
FB
664 $arr = $this->client->mass_subscribe($liste, $members);
665 if (is_array($arr)) {
666 foreach($arr as $addr) {
667 $page->trigSuccess("{$addr[0]} inscrit.");
668 }
669 }
670 }
671 }
672
bc4ad6aa 673 if (Env::has('del_member')) {
2669eb7d
VZ
674 S::assert_xsrf_token();
675
5e2307dc 676 if (strpos(Env::v('del_member'), '@') === false) {
f036c896
SJ
677 if ($del_member = User::getSilent(Env::t('del_member'))) {
678 $this->client->mass_unsubscribe($liste, array($del_member->forlifeEmail()));
679 }
bc4ad6aa 680 } else {
5e2307dc 681 $this->client->mass_unsubscribe($liste, array(Env::v('del_member')));
bc4ad6aa 682 }
8b00e0e0 683 pl_redirect('lists/admin/'.$liste);
bc4ad6aa 684 }
685
686 if (Env::has('add_owner')) {
2669eb7d
VZ
687 S::assert_xsrf_token();
688
7586ae0b 689 $owners = User::getBulkForlifeEmails(Env::v('add_owner'), false, array('ListsModule', 'no_login_callback'));
e7545178 690 if ($owners) {
691 foreach ($owners as $login) {
692 if ($this->client->add_owner($liste, $login)) {
7586ae0b 693 $page->trigSuccess($login ." ajouté aux modérateurs.");
e7545178 694 }
bc4ad6aa 695 }
696 }
697 }
698
699 if (Env::has('del_owner')) {
2669eb7d
VZ
700 S::assert_xsrf_token();
701
5e2307dc 702 if (strpos(Env::v('del_owner'), '@') === false) {
f036c896
SJ
703 if ($del_owner = User::getSilent(Env::t('del_owner'))) {
704 $this->client->mass_unsubscribe($liste, array($del_owner->forlifeEmail()));
705 }
bc4ad6aa 706 } else {
5e2307dc 707 $this->client->del_owner($liste, Env::v('del_owner'));
bc4ad6aa 708 }
8b00e0e0 709 pl_redirect('lists/admin/'.$liste);
bc4ad6aa 710 }
711
712 if (list($det,$mem,$own) = $this->client->get_members($liste)) {
0baf0741 713 global $list_unregistered;
714 if ($list_unregistered) {
715 $page->assign_by_ref('unregistered', $list_unregistered);
716 }
30fc8ee7 717 $membres = list_sort_members($mem, @$tri_promo);
718 $moderos = list_sort_owners($own, @$tri_promo);
bc4ad6aa 719
720 $page->assign_by_ref('details', $det);
721 $page->assign_by_ref('members', $membres);
722 $page->assign_by_ref('owners', $moderos);
723 $page->assign('np_m', count($mem));
724
725 } else {
383eaddd 726 $page->kill("La liste n'existe pas ou tu n'as pas le droit de l'administrer.<br />"
6e828e47
SJ
727 . " Si tu penses qu'il s'agit d'une erreur, "
728 . "<a href='mailto:support@polytechnique.org'>contact le support</a>.");
bc4ad6aa 729 }
730 }
731
26ba053e 732 function handler_options($page, $liste = null)
bc4ad6aa 733 {
bc4ad6aa 734 if (is_null($liste)) {
735 return PL_NOT_FOUND;
736 }
737
7b9d64a8 738 $this->prepare_client($page);
bc4ad6aa 739
1490093c 740 $page->changeTpl('lists/options.tpl');
bc4ad6aa 741
742 if (Post::has('submit')) {
2669eb7d
VZ
743 S::assert_xsrf_token();
744
bc4ad6aa 745 $values = $_POST;
5fb22b39 746 $values = array_map('utf8_decode', $values);
c638d8c8
FB
747 $spamlevel = intval($values['bogo_level']);
748 $unsurelevel = intval($values['unsure_level']);
749 if ($spamlevel == 0) {
750 $unsurelevel = 0;
751 }
752 if ($spamlevel > 3 || $spamlevel < 0 || $unsurelevel < 0 || $unsurelevel > 1) {
753 $page->trigError("Réglage de l'antispam non valide");
754 } else {
755 $this->client->set_bogo_level($liste, ($spamlevel << 1) + $unsurelevel);
756 }
bc4ad6aa 757 switch($values['moderate']) {
758 case '0':
759 $values['generic_nonmember_action'] = 0;
760 $values['default_member_moderation'] = 0;
761 break;
762 case '1':
763 $values['generic_nonmember_action'] = 1;
764 $values['default_member_moderation'] = 0;
765 break;
766 case '2':
767 $values['generic_nonmember_action'] = 1;
768 $values['default_member_moderation'] = 1;
769 break;
770 }
771 unset($values['submit'], $values['bogo_level'], $values['moderate']);
772 $values['send_goodbye_msg'] = !empty($values['send_goodbye_msg']);
773 $values['admin_notify_mchanges'] = !empty($values['admin_notify_mchanges']);
774 $values['subscribe_policy'] = empty($values['subscribe_policy']) ? 0 : 2;
775 if (isset($values['subject_prefix'])) {
776 $values['subject_prefix'] = trim($values['subject_prefix']).' ';
777 }
778 $this->client->set_owner_options($liste, $values);
5e2307dc 779 } elseif (isvalid_email(Post::v('atn_add'))) {
2669eb7d 780 S::assert_xsrf_token();
5e2307dc 781 $this->client->add_to_wl($liste, Post::v('atn_add'));
bc4ad6aa 782 } elseif (Get::has('atn_del')) {
2669eb7d 783 S::assert_xsrf_token();
5e2307dc 784 $this->client->del_from_wl($liste, Get::v('atn_del'));
8b00e0e0 785 pl_redirect('lists/options/'.$liste);
bc4ad6aa 786 }
787
788 if (list($details,$options) = $this->client->get_owner_options($liste)) {
789 $page->assign_by_ref('details', $details);
790 $page->assign_by_ref('options', $options);
c638d8c8
FB
791 $bogo_level = intval($this->client->get_bogo_level($liste));
792 $page->assign('unsure_level', $bogo_level & 1);
793 $page->assign('bogo_level', $bogo_level >> 1);
bc4ad6aa 794 } else {
795 $page->kill("La liste n'existe pas ou tu n'as pas le droit de l'administrer");
796 }
797 }
798
26ba053e 799 function handler_delete($page, $liste = null)
bc4ad6aa 800 {
7c5842f3 801 global $globals;
bc4ad6aa 802 if (is_null($liste)) {
803 return PL_NOT_FOUND;
804 }
805
7c5842f3 806 $domain = $this->prepare_client($page);
1490093c 807 $page->changeTpl('lists/delete.tpl');
7c5842f3 808 if (Post::v('valid') == 'OUI') {
2669eb7d
VZ
809 S::assert_xsrf_token();
810
7c5842f3 811 if ($this->client->delete_list($liste, Post::b('del_archive'))) {
85ddf64f
SJ
812 require_once 'emails.inc.php';
813
814 delete_list($liste, $domain);
7c5842f3 815 $page->assign('deleted', true);
6bb2f79a 816 $page->trigSuccess('La liste a été détruite&nbsp;!');
7c5842f3 817 } else {
818 $page->kill('Une erreur est survenue lors de la suppression de la liste.<br />'
a7de4ef7 819 . 'Contact les administrateurs du site pour régler le problème : '
6e828e47 820 . '<a href="mailto:support@polytechnique.org">support@polytechnique.org</a>.');
bc4ad6aa 821 }
bc4ad6aa 822 } elseif (list($details,$options) = $this->client->get_owner_options($liste)) {
44b071c2
SJ
823 if (!$details['own']) {
824 $page->trigWarning('Tu n\'es pas administrateur de la liste, mais du site.');
825 }
bc4ad6aa 826 $page->assign_by_ref('details', $details);
827 $page->assign_by_ref('options', $options);
828 $page->assign('bogo_level', $this->client->get_bogo_level($liste));
829 } else {
6e828e47 830 $page->kill("La liste n'existe pas ou tu n'as pas le droit de l'administrer.");
bc4ad6aa 831 }
832 }
833
26ba053e 834 function handler_soptions($page, $liste = null)
bc4ad6aa 835 {
bc4ad6aa 836 if (is_null($liste)) {
837 return PL_NOT_FOUND;
838 }
839
7b9d64a8 840 $this->prepare_client($page);
bc4ad6aa 841
1490093c 842 $page->changeTpl('lists/soptions.tpl');
bc4ad6aa 843
844 if (Post::has('submit')) {
2669eb7d
VZ
845 S::assert_xsrf_token();
846
bc4ad6aa 847 $values = $_POST;
5fb22b39 848 $values = array_map('utf8_decode', $values);
bc4ad6aa 849 unset($values['submit']);
850 $values['advertised'] = empty($values['advertised']) ? false : true;
851 $values['archive'] = empty($values['archive']) ? false : true;
852 $this->client->set_admin_options($liste, $values);
853 }
854
855 if (list($details,$options) = $this->client->get_admin_options($liste)) {
856 $page->assign_by_ref('details', $details);
857 $page->assign_by_ref('options', $options);
858 } else {
6e828e47 859 $page->kill("La liste n'existe pas.");
bc4ad6aa 860 }
861 }
862
26ba053e 863 function handler_check($page, $liste = null)
bc4ad6aa 864 {
bc4ad6aa 865 if (is_null($liste)) {
866 return PL_NOT_FOUND;
867 }
868
7b9d64a8 869 $this->prepare_client($page);
bc4ad6aa 870
1490093c 871 $page->changeTpl('lists/check.tpl');
bc4ad6aa 872
873 if (Post::has('correct')) {
2669eb7d 874 S::assert_xsrf_token();
bc4ad6aa 875 $this->client->check_options($liste, true);
876 }
877
878 if (list($details,$options) = $this->client->check_options($liste)) {
879 $page->assign_by_ref('details', $details);
880 $page->assign_by_ref('options', $options);
881 } else {
6e828e47 882 $page->kill("La liste n'existe pas.");
bc4ad6aa 883 }
884 }
92423144 885
26ba053e 886 function handler_admin_all($page)
7f1ff426 887 {
1490093c 888 $page->changeTpl('lists/admin_all.tpl');
46f272fe 889 $page->setTitle('Administration - Mailing lists');
9bb8bf21 890
7f1ff426
FB
891 $this->prepare_client($page);
892 $listes = $this->client->get_all_lists();
9bb8bf21 893 $page->assign_by_ref('listes', $listes);
92423144 894 }
2ed80014
SJ
895
896 function handler_aaliases($page, $alias = null)
897 {
898 global $globals;
899 require_once 'emails.inc.php';
900 $page->setTitle('Administration - Aliases');
901
902 if (Post::has('new_alias')) {
903 pl_redirect('admin/aliases/' . Post::t('new_alias') . '@' . $globals->mail->domain);
904 }
905
906 // If no alias, list them all.
907 if (is_null($alias)) {
908 $page->changeTpl('lists/admin_aliases.tpl');
909 $page->assign('aliases', array_merge(iterate_list_alias($globals->mail->domain), iterate_list_alias($globals->mail->domain2)));
910 return;
911 }
912
913 list($local_part, $domain) = explode('@', $alias);
914 if (!($globals->mail->domain == $domain || $globals->mail->domain2 == $domain)
915 || !preg_match("/^[a-zA-Z0-9\-\.]*$/", $local_part)) {
916 $page->trigErrorRedirect('Le nom de l\'alias est erroné.', $globals->asso('diminutif') . 'admin/aliases');
917 }
918
919 // Now we can perform the action.
920 if (Post::has('del_alias')) {
921 S::assert_xsrf_token();
922
923 delete_list_alias($local_part, $domain);
924 $page->trigSuccessRedirect($alias . ' supprimé.', 'admin/aliases');
925 }
926
927 if (Post::has('add_member')) {
928 S::assert_xsrf_token();
929
930 if (add_to_list_alias(Post::t('add_member'), $local_part, $domain)) {
931 $page->trigSuccess('Ajout réussit.');
932 } else {
933 $page->trigError('Ajout infructueux.');
934 }
935 }
936
937 if (Get::has('del_member')) {
938 S::assert_xsrf_token();
939
940 if (delete_from_list_alias(Get::t('del_member'), $local_part, $domain)) {
941 $page->trigSuccess('Suppression réussie.');
942 } else {
943 $page->trigError('Suppression infructueuse.');
944 }
945 }
946
947 $page->changeTpl('lists/admin_edit_alias.tpl');
948 $page->assign('members', list_alias_members($local_part, $domain));
949 $page->assign('alias', $alias);
950 }
bc4ad6aa 951}
952
a7de4ef7 953// vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
bc4ad6aa 954?>