Set 'groupadmin' perms for group admin pages
[platal.git] / modules / xnetgrp.php
... / ...
CommitLineData
1<?php
2/***************************************************************************
3 * Copyright (C) 2003-2007 Polytechnique.org *
4 * http://opensource.polytechnique.org/ *
5 * *
6 * This program is free software; you can redistribute it and/or modify *
7 * it under the terms of the GNU General Public License as published by *
8 * the Free Software Foundation; either version 2 of the License, or *
9 * (at your option) any later version. *
10 * *
11 * This program is distributed in the hope that it will be useful, *
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
14 * GNU General Public License for more details. *
15 * *
16 * You should have received a copy of the GNU General Public License *
17 * along with this program; if not, write to the Free Software *
18 * Foundation, Inc., *
19 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
20 ***************************************************************************/
21
22function get_infos($email)
23{
24 global $globals;
25 // look for uid instead of email if numeric
26 $field = is_numeric($email) ? 'uid' : 'email';
27
28 if ($field == 'email') {
29 $email = strtolower($email);
30 if (strpos($email, '@') === false) {
31 $email .= '@m4x.org';
32 }
33 list($mbox,$dom) = explode('@', $email);
34 }
35
36 $res = XDB::query(
37 "SELECT uid, nom, prenom, email, email AS email2, perms='admin', origine, sexe
38 FROM groupex.membres
39 WHERE $field = {?} AND asso_id = {?}", $email, $globals->asso('id'));
40
41 if ($res->numRows()) {
42 $user = $res->fetchOneAssoc();
43 if ($user['origine'] == 'X') {
44 $res = XDB::query("SELECT nom, prenom, promo, FIND_IN_SET(flags, 'femme') AS sexe
45 FROM auth_user_md5
46 WHERE user_id = {?}", $user['uid']);
47 $user = array_merge($user, $res->fetchOneAssoc());
48 }
49 return $user;
50 } elseif ($dom == 'polytechnique.org' || $dom == 'm4x.org') {
51 $res = XDB::query(
52 "SELECT user_id AS uid, u.promo,
53 IF(u.nom_usage<>'', u.nom_usage, u.nom) AS nom,
54 u.prenom, b.alias,
55 CONCAT(b.alias, '@m4x.org') AS email,
56 CONCAT(b.alias, '@polytechnique.org') AS email2,
57 m.perms='admin' AS perms, m.origine,
58 FIND_IN_SET(u.flags, 'femme') AS sexe
59 FROM auth_user_md5 AS u
60 INNER JOIN aliases AS a ON ( u.user_id = a.id AND a.type != 'homonyme' )
61 INNER JOIN aliases AS b ON ( u.user_id = b.id AND b.type = 'a_vie' )
62 INNER JOIN groupex.membres AS m ON ( m.uid = u.user_id AND asso_id={?})
63 WHERE a.alias = {?} AND u.user_id < 50000", $globals->asso('id'), $mbox);
64 return $res->fetchOneAssoc();
65 }
66
67 return null;
68}
69
70
71class XnetGrpModule extends PLModule
72{
73 function handlers()
74 {
75 return array(
76 '%grp' => $this->make_hook('index', AUTH_PUBLIC),
77 '%grp/asso.php' => $this->make_hook('index', AUTH_PUBLIC),
78 '%grp/logo' => $this->make_hook('logo', AUTH_PUBLIC),
79 '%grp/site' => $this->make_hook('site', AUTH_PUBLIC),
80 '%grp/edit' => $this->make_hook('edit', AUTH_MDP, 'groupadmin'),
81 '%grp/mail' => $this->make_hook('mail', AUTH_MDP, 'groupadmin'),
82 '%grp/forum' => $this->make_hook('forum', AUTH_MDP),
83 '%grp/annuaire' => $this->make_hook('annuaire', AUTH_MDP),
84 '%grp/annuaire/vcard' => $this->make_hook('vcard', AUTH_MDP),
85 '%grp/trombi' => $this->make_hook('trombi', AUTH_MDP),
86 '%grp/subscribe' => $this->make_hook('subscribe', AUTH_MDP),
87 '%grp/unsubscribe' => $this->make_hook('unsubscribe', AUTH_MDP),
88
89 '%grp/change_rights' => $this->make_hook('change_rights', AUTH_MDP),
90
91 '%grp/admin/annuaire'
92 => $this->make_hook('admin_annuaire', AUTH_MDP),
93
94 '%grp/member'
95 => $this->make_hook('admin_member', AUTH_MDP, 'groupadmin'),
96 '%grp/member/new'
97 => $this->make_hook('admin_member_new', AUTH_MDP, 'groupadmin'),
98 '%grp/member/new/ajax'
99 => $this->make_hook('admin_member_new_ajax', AUTH_MDP, 'user', NO_AUTH),
100 '%grp/member/del'
101 => $this->make_hook('admin_member_del', AUTH_MDP, 'groupadmin'),
102
103 '%grp/rss' => $this->make_hook('rss', AUTH_PUBLIC),
104 '%grp/announce/new' => $this->make_hook('edit_announce', AUTH_MDP, 'groupadmin'),
105 '%grp/announce/edit' => $this->make_hook('edit_announce', AUTH_MDP, 'groupadmin'),
106 '%grp/admin/announces' => $this->make_hook('admin_announce', AUTH_MDP, 'groupadmin'),
107 );
108 }
109
110 function handler_index(&$page, $arg = null)
111 {
112 global $globals, $platal;
113
114 if (!is_null($arg)) {
115 return PL_NOT_FOUND;
116 }
117
118 new_group_open_page('xnetgrp/asso.tpl');
119
120 if (S::logged()) {
121 if (Env::has('read')) {
122 XDB::query('DELETE r.*
123 FROM groupex.announces_read AS r
124 INNER JOIN groupex.announces AS a ON a.id = r.announce_id
125 WHERE peremption < CURRENT_DATE()');
126 XDB::query('INSERT INTO groupex.announces_read
127 VALUES ({?}, {?})',
128 Env::i('read'), S::i('uid'));
129 pl_redirect("");
130 }
131 if (Env::has('unread')) {
132 XDB::query('DELETE FROM groupex.announces_read
133 WHERE announce_id={?} AND user_id={?}',
134 Env::i('unread'), S::i('uid'));
135 pl_redirect("#art" . Env::i('unread'));
136 }
137 $arts = XDB::iterator("SELECT a.*, u.nom, u.prenom, u.promo, l.alias AS forlife
138 FROM groupex.announces AS a
139 INNER JOIN auth_user_md5 AS u USING(user_id)
140 INNER JOIN aliases AS l ON (u.user_id = l.id AND l.type = 'a_vie')
141 LEFT JOIN groupex.announces_read AS r ON (r.user_id = {?} AND r.announce_id = a.id)
142 WHERE asso_id = {?} AND peremption >= CURRENT_DATE()
143 AND (promo_min = 0 OR promo_min <= {?})
144 AND (promo_max = 0 OR promo_max >= {?})
145 AND r.announce_id IS NULL
146 ORDER BY a.peremption",
147 S::i('uid'), $globals->asso('id'), S::i('promo'), S::i('promo'));
148 $index = XDB::iterator("SELECT a.id, a.titre, r.user_id IS NULL AS nonlu
149 FROM groupex.announces AS a
150 LEFT JOIN groupex.announces_read AS r ON (a.id = r.announce_id AND r.user_id = {?})
151 WHERE asso_id = {?} AND peremption >= CURRENT_DATE()
152 AND (promo_min = 0 OR promo_min <= {?})
153 AND (promo_max = 0 OR promo_max >= {?})
154 ORDER BY a.peremption",
155 S::i('uid'), $globals->asso('id'), S::i('promo'), S::i('promo'));
156 $page->assign('article_index', $index);
157 } else {
158 $arts = XDB::iterator("SELECT a.*, u.nom, u.prenom, u.promo
159 FROM groupex.announces AS a
160 INNER JOIN auth_user_md5 AS u USING(user_id)
161 WHERE asso_id = {?} AND peremption >= CURRENT_DATE()
162 AND FIND_IN_SET(a.flags, 'public')",
163 $globals->asso('id'));
164 }
165
166 if (!S::has('core_rss_hash')) {
167 $page->setRssLink("Polytechnique.net :: {$globals->asso("nom")} :: News publiques",
168 "rss/rss.xml");
169 } else {
170 $page->setRssLink("Polytechnique.net :: {$globals->asso("nom")} :: News",
171 'rss/'.S::v('forlife') .'/'.S::v('core_rss_hash').'/rss.xml');
172 }
173
174 $page->register_modifier('url_catcher', array('MiniWiki','WikiToHTML'));
175 $page->assign('articles', $arts);
176
177 $page->assign('asso', $globals->asso());
178 }
179
180 function handler_logo(&$page)
181 {
182 global $globals;
183
184 $res = XDB::query("SELECT logo, logo_mime
185 FROM groupex.asso WHERE id = {?}",
186 $globals->asso('id'));
187 list($logo, $logo_mime) = $res->fetchOneRow();
188
189 if (!empty($logo)) {
190 header("Content-type: $mime");
191 header('Expires: Mon, 26 Jul 1997 05:00:00 GMT');
192 header('Last-Modified:' . gmdate('D, d M Y H:i:s') . ' GMT');
193 header('Cache-Control: no-cache, must-revalidate');
194 header('Pragma: no-cache');
195 echo $logo;
196 } else {
197 header('Content-type: image/jpeg');
198 header('Expires: Mon, 26 Jul 1997 05:00:00 GMT');
199 header('Last-Modified:' . gmdate('D, d M Y H:i:s') . ' GMT');
200 header('Cache-Control: no-cache, must-revalidate');
201 header('Pragma: no-cache');
202 readfile(dirname(__FILE__).'/../htdocs/images/dflt_carre.jpg');
203 }
204
205 exit;
206 }
207
208 function handler_site(&$page)
209 {
210 global $globals;
211 $site = $globals->asso('site');
212 if (!$site) {
213 $page->trig('Le groupe n\'a pas de site web');
214 return $this->handler_index($page);
215 }
216 http_redirect($site);
217 exit;
218 }
219
220 function handler_edit(&$page)
221 {
222 global $globals;
223
224 new_groupadmin_page('xnetgrp/edit.tpl');
225
226 if (Post::has('submit')) {
227 if (S::has_perms()) {
228 if (Post::v('mail_domain') && (strstr(Post::v('mail_domain'), '.') === false)) {
229 $page->trig("le domaine doit être un FQDN (aucune modif effectuée) !!!");
230 return;
231 }
232 XDB::execute(
233 "UPDATE groupex.asso
234 SET nom={?}, diminutif={?}, cat={?}, dom={?},
235 descr={?}, site={?}, mail={?}, resp={?},
236 forum={?}, mail_domain={?}, ax={?}, pub={?},
237 sub_url={?}, inscriptible={?}, unsub_url={?}
238 WHERE id={?}",
239 Post::v('nom'), Post::v('diminutif'),
240 Post::v('cat'), Post::i('dom'),
241 Post::v('descr'), Post::v('site'),
242 Post::v('mail'), Post::v('resp'),
243 Post::v('forum'), Post::v('mail_domain'),
244 Post::has('ax'), Post::has('pub')?'private':'public',
245 Post::v('sub_url'), Post::v('inscriptible'),
246 Post::v('unsub_url'),$globals->asso('id'));
247 if (Post::v('mail_domain')) {
248 XDB::execute('INSERT INTO virtual_domains (domain) VALUES({?})',
249 Post::v('mail_domain'));
250 }
251 } else {
252 XDB::execute(
253 "UPDATE groupex.asso
254 SET descr={?}, site={?}, mail={?}, resp={?},
255 forum={?}, ax={?}, pub= {?}, sub_url={?},
256 unsub_url={?}
257 WHERE id={?}",
258 Post::v('descr'), Post::v('site'),
259 Post::v('mail'), Post::v('resp'),
260 Post::v('forum'), Post::has('ax'),
261 Post::has('pub')?'private':'public',
262 Post::v('sub_url'), Post::v('unsub_url'),
263 $globals->asso('id'));
264 }
265
266 if ($_FILES['logo']['name']) {
267 $logo = file_get_contents($_FILES['logo']['tmp_name']);
268 $mime = $_FILES['logo']['type'];
269 XDB::execute('UPDATE groupex.asso
270 SET logo={?}, logo_mime={?}
271 WHERE id={?}', $logo, $mime,
272 $globals->asso('id'));
273 }
274
275 pl_redirect('../'.Post::v('diminutif', $globals->asso('diminutif')).'/edit');
276 }
277
278 if (S::has_perms()) {
279 $dom = XDB::iterator('SELECT * FROM groupex.dom ORDER BY nom');
280 $page->assign('dom', $dom);
281 $page->assign('super', true);
282 }
283 }
284
285 function handler_mail(&$page)
286 {
287 global $globals;
288
289 new_groupadmin_page('xnetgrp/mail.tpl');
290 $mmlist = new MMList(S::v('uid'), S::v('password'),
291 $globals->asso('mail_domain'));
292 $page->assign('listes', $mmlist->get_lists());
293
294 if (Post::has('send')) {
295 $from = Post::v('from');
296 $sujet = Post::v('sujet');
297 $body = Post::v('body');
298
299 $mls = array_keys(Env::v('ml', array()));
300 $mbr = array_keys(Env::v('membres', array()));
301
302 require_once dirname(__FILE__) . '/xnetgrp/mail.inc.php';
303 $tos = get_all_redirects($mbr, $mls, $mmlist);
304 send_xnet_mails($from, $sujet, $body, $tos, Post::v('replyto'), $_FILES['uploaded']);
305 $page->kill("Mail envoyé !");
306 $page->assign('sent', true);
307 }
308 }
309
310 function handler_forum(&$page, $group = null, $artid = null)
311 {
312 global $globals;
313 new_group_page('xnetgrp/forum.tpl');
314 if (!$globals->asso('forum')) {
315 return PL_NOT_FOUND;
316 }
317 require_once 'banana/forum.inc.php';
318 $get = array();
319 get_banana_params($get, $globals->asso('forum'), $group, $artid);
320 run_banana($page, 'ForumsBanana', $get);
321 }
322
323 function handler_annuaire(&$page)
324 {
325 global $globals;
326 new_annu_page('xnetgrp/annuaire.tpl');
327
328 $sort = Env::v('order');
329 switch (Env::v('order')) {
330 case 'promo' : $group = 'promo'; $tri = 'promo_o DESC, nom, prenom'; break;
331 case 'promo_inv': $group = 'promo'; $tri = 'promo_o, nom, prenom'; break;
332 case 'alpha_inv': $group = 'initiale'; $tri = 'nom DESC, prenom DESC, promo'; break;
333 default : $group = 'initiale'; $tri = 'nom, prenom, promo'; $sort = 'alpha';
334 }
335 $page->assign('sort', $sort);
336
337 if ($group == 'initiale') {
338 $res = XDB::iterRow(
339 'SELECT UPPER(SUBSTRING(
340 IF(m.origine="X", IF(u.nom_usage<>"", u.nom_usage, u.nom),m.nom),
341 1, 1)) as letter, COUNT(*)
342 FROM groupex.membres AS m
343 LEFT JOIN auth_user_md5 AS u ON ( u.user_id = m.uid)
344 WHERE asso_id = {?} and u.perms != \'pending\'
345 GROUP BY letter
346 ORDER BY letter', $globals->asso('id'));
347 } else {
348 $res = XDB::iterRow(
349 'SELECT IF(m.origine="X",u.promo,
350 IF(m.origine="ext", "extérieur", "personne morale")) AS promo,
351 COUNT(*), IF(m.origine="X",u.promo,"") AS promo_o
352 FROM groupex.membres AS m
353 LEFT JOIN auth_user_md5 AS u ON ( u.user_id = m.uid )
354 WHERE asso_id = {?}
355 GROUP BY promo
356 ORDER BY promo_o DESC', $globals->asso('id'));
357 }
358 $alphabet = array();
359 $nb_tot = 0;
360 while (list($char, $nb) = $res->next()) {
361 $alphabet[] = $char;
362 $nb_tot += $nb;
363 if (Env::has($group) && $char == strtoupper(Env::v($group))) {
364 $tot = $nb;
365 }
366 }
367 $page->assign('group', $group);
368 $page->assign('request_group', Env::v($group));
369 $page->assign('only_admin', Env::has('admin'));
370 $page->assign('alphabet', $alphabet);
371 $page->assign('nb_tot', $nb_tot);
372
373 $ofs = Env::i('offset');
374 $tot = Env::v($group) ? $tot : $nb_tot;
375 $nbp = intval(($tot-1)/NB_PER_PAGE);
376 $links = array();
377 if ($ofs) {
378 $links['précédent'] = $ofs-1;
379 }
380 for ($i = 0; $i <= $nbp; $i++) {
381 $links[(string)($i+1)] = $i;
382 }
383 if ($ofs < $nbp) {
384 $links['suivant'] = $ofs+1;
385 }
386 if (count($links)>1) {
387 $page->assign('links', $links);
388 }
389
390 $ini = '';
391 if (Env::has('initiale')) {
392 $ini = 'AND IF(m.origine="X",
393 IF(u.nom_usage<>"", u.nom_usage, u.nom),
394 m.nom) LIKE "'.addslashes(Env::v('initiale')).'%"';
395 } elseif (Env::has('promo')) {
396 $ini = 'AND IF(m.origine="X", u.promo, IF(m.origine="ext", "extérieur", "personne morale")) = "'
397 .addslashes(Env::v('promo')).'"';
398 } elseif (Env::has('admin')) {
399 $ini = 'AND m.perms = "admin"';
400 }
401
402 $ann = XDB::iterator(
403 "SELECT IF(m.origine='X',IF(u.nom_usage<>'', u.nom_usage, u.nom) ,m.nom) AS nom,
404 IF(m.origine='X',u.prenom,m.prenom) AS prenom,
405 IF(m.origine='X', u.promo, IF(m.origine='ext', 'extérieur', 'personne morale')) AS promo,
406 IF(m.origine='X',u.promo,'') AS promo_o,
407 IF(m.origine='X' AND u.perms != 'pending',a.alias,m.email) AS email,
408 IF(m.origine='X',FIND_IN_SET('femme', u.flags), m.sexe) AS femme,
409 m.perms='admin' AS admin,
410 m.origine='X' AS x,
411 u.perms!='pending' AS inscrit,
412 m.uid, e.email AS actif
413 FROM groupex.membres AS m
414 LEFT JOIN auth_user_md5 AS u ON ( u.user_id = m.uid )
415 LEFT JOIN aliases AS a ON ( a.id = m.uid AND a.type='a_vie' )
416 LEFT JOIN emails AS e ON ( e.flags = 'active' AND e.uid = m.uid)
417 WHERE m.asso_id = {?} $ini
418 AND (m.origine != 'X' OR u.perms != 'pending' OR m.email IS NOT NULL)
419 GROUP BY m.uid
420 ORDER BY $tri
421 LIMIT {?},{?}", $globals->asso('id'), $ofs*NB_PER_PAGE, NB_PER_PAGE);
422 $page->assign('ann', $ann);
423 }
424
425 function handler_trombi(&$page, $num = 1)
426 {
427 global $globals;
428 new_annu_page('xnetgrp/trombi.tpl');
429
430 $page->assign('urlmainsite', "https://www.polytechnique.org/");
431 $trombi = new Trombi(array($this, '_trombi_getlist'));
432 $trombi->hidePromo();
433 $trombi->setAdmin();
434 $page->assign_by_ref('trombi', $trombi);
435 }
436
437 function _trombi_getlist($offset, $limit)
438 {
439 global $globals;
440 $where = "WHERE m.asso_id= '".addslashes($globals->asso('id'))."'";
441
442 $res = XDB::query(
443 "SELECT COUNT(*)
444 FROM auth_user_md5 AS u
445 RIGHT JOIN photo AS p ON u.user_id=p.uid
446 INNER JOIN groupex.membres AS m ON (m.uid = u.user_id)
447 $where");
448 $pnb = $res->fetchOneCell();
449
450 $res = XDB::query("SELECT promo, user_id, a.alias AS forlife,
451 IF (nom_usage='', u.nom, nom_usage) AS nom, u.prenom
452 FROM photo AS p
453 INNER JOIN auth_user_md5 AS u ON u.user_id=p.uid
454 INNER JOIN aliases AS a ON ( u.user_id=a.id AND a.type='a_vie' )
455 INNER JOIN groupex.membres AS m ON (m.uid = u.user_id)
456 $where
457 ORDER BY promo, u.nom, u.prenom LIMIT {?}, {?}", $offset*$limit, $limit);
458
459 return array($pnb, $res->fetchAllAssoc());
460 }
461
462 function handler_vcard(&$page, $photos = null)
463 {
464 global $globals;
465
466 if (($globals->asso('pub') == 'public' && is_member()) || may_update()) {
467 $res = XDB::query('SELECT uid
468 FROM groupex.membres
469 WHERE asso_id = {?}', $globals->asso('id'));
470 require_once('vcard.inc.php');
471 $vcard = new VCard($res->fetchColumn(), $photos == 'photos', 'Membre du groupe ' . $globals->asso('nom'));
472 $vcard->do_page($page);
473 } else {
474 return PL_FORBIDDEN;
475 }
476 }
477
478 function handler_subscribe(&$page, $u = null)
479 {
480 global $globals;
481
482 new_group_open_page('xnetgrp/inscrire.tpl');
483
484 if (!$globals->asso('inscriptible'))
485 $page->kill("Il n'est pas possible de s'inscire en ligne à ce "
486 ."groupe. Essaie de joindre le contact indiqué "
487 ."sur la page de présentation.");
488
489 if (!is_null($u) && may_update()) {
490 $page->assign('u', $u);
491 $res = XDB::query("SELECT nom, prenom, promo, user_id
492 FROM auth_user_md5 AS u
493 INNER JOIN aliases AS al ON (al.id = u.user_id
494 AND al.type != 'liste')
495 WHERE al.alias = {?}", $u);
496
497 if (list($nom, $prenom, $promo, $uid) = $res->fetchOneRow()) {
498 $res = XDB::query("SELECT COUNT(*)
499 FROM groupex.membres AS m
500 INNER JOIN aliases AS a ON (m.uid = a.id
501 AND a.type != 'homonyme')
502 WHERE a.alias = {?} AND m.asso_id = {?}",
503 $u, $globals->asso('id'));
504 $n = $res->fetchOneCell();
505 if ($n) {
506 $page->kill("$prenom $nom est déjà membre du groupe !");
507 return;
508 }
509 elseif (Env::has('accept'))
510 {
511 XDB::execute("INSERT INTO groupex.membres
512 VALUES ({?}, {?}, 'membre', 'X', NULL, NULL, NULL, NULL, NULL)",
513 $globals->asso('id'), $uid);
514 $mailer = new PlMailer();
515 $mailer->addTo("$u@polytechnique.org");
516 $mailer->setFrom('"'.S::v('prenom').' '.S::v('nom')
517 .'" <'.S::v('forlife').'@polytechnique.org>');
518 $mailer->setSubject('['.$globals->asso('nom').'] Demande d\'inscription');
519 $message = "Cher Camarade,\n"
520 . "\n"
521 . " Suite à ta demande d'adhésion à ".$globals->asso('nom').",\n"
522 . "j'ai le plaisir de t'annoncer que ton inscription a été validée !\n"
523 . "\n"
524 . "Bien cordialement,\n"
525 . "{$_SESSION["prenom"]} {$_SESSION["nom"]}.";
526 $mailer->setTxtBody($message);
527 $mailer->send();
528 $page->kill("$prenom $nom a bien été inscrit");
529 }
530 elseif (Env::has('refuse'))
531 {
532 $mailer = new PlMailer();
533 $mailer->addTo("$u@polytechnique.org");
534 $mailer->setFrom('"'.S::v('prenom').' '.S::v('nom')
535 .'" <'.S::v('forlife').'@polytechnique.org>');
536 $mailer->setSubject('['.$globals->asso('nom').'] Demande d\'inscription annulée');
537 $mailer->setTxtBody(Env::v('motif'));
538 $mailer->send();
539 $page->kill("la demande $prenom $nom a bien été refusée");
540 } else {
541 $page->assign('show_form', true);
542 $page->assign('prenom', $prenom);
543 $page->assign('nom', $nom);
544 $page->assign('promo', $promo);
545 $page->assign('uid', $uid);
546 }
547 return;
548 }
549 return PL_NOT_FOUND;
550 }
551
552 if (is_member()) {
553 $page->kill("tu es déjà membre !");
554 return;
555 }
556
557 if (Post::has('inscrire')) {
558 $res = XDB::query('SELECT IF(m.email IS NULL,
559 CONCAT(al.alias,"@polytechnique.org"),
560 m.email)
561 FROM groupex.membres AS m
562 INNER JOIN aliases AS al ON (al.type = "a_vie"
563 AND al.id = m.uid)
564 WHERE perms="admin" AND m.asso_id = {?}',
565 $globals->asso('id'));
566 $emails = $res->fetchColumn();
567 $to = implode(',', $emails);
568
569 $append = "\n"
570 . "-- \n"
571 . "Ce message a été envoyé suite à la demande d'inscription de\n"
572 . S::v('prenom').' '.S::v('nom').' (X'.S::v('promo').")\n"
573 . "Via le site www.polytechnique.net. Tu peux choisir de valider ou\n"
574 . "de refuser sa demande d'inscription depuis la page :\n"
575 .
576 "http://www.polytechnique.net/".$globals->asso("diminutif")."/subscribe/"
577 .S::v('forlife')."\n"
578 . "\n"
579 . "En cas de problème, contacter l'équipe de Polytechnique.org\n"
580 . "à l'adresse : support@polytechnique.org\n";
581
582 if (!$to) {
583 $to = $globals->asso("mail").", support@polytechnique.org";
584 $append = "\n-- \nLe groupe ".$globals->asso("nom")
585 ." n'a pas d'administrateur, l'équipe de"
586 ." Polytechnique.org a été prévenue et va rapidement"
587 ." résoudre ce problème.\n";
588 }
589
590 $mailer = new PlMailer();
591 $mailer->addTo($to);
592 $mailer->setFrom('"'.S::v('prenom').' '.S::v('nom')
593 .'" <'.S::v('forlife').'@polytechnique.org>');
594 $mailer->setSubject('['.$globals->asso('nom').'] Demande d\'inscription');
595 $mailer->setTxtBody(Post::v('message').$append);
596 $mailer->send();
597 }
598 }
599
600 function handler_change_rights(&$page)
601 {
602 if (Env::has('right') && (may_update() || S::has('suid'))) {
603 switch (Env::v('right')) {
604 case 'admin':
605 XnetSession::killSuid();
606 break;
607 case 'anim':
608 XnetSession::doSelfSuid();
609 may_update(true);
610 is_member(true);
611 break;
612 case 'member':
613 XnetSession::doSelfSuid();
614 may_update(false, true);
615 is_member(true);
616 break;
617 case 'logged':
618 XnetSession::doSelfSuid();
619 may_update(false, true);
620 is_member(false, true);
621 break;
622 }
623 }
624 pl_redirect("");
625 }
626
627 function handler_admin_annuaire(&$page)
628 {
629 global $globals;
630
631 require_once dirname(__FILE__) . '/xnetgrp/mail.inc.php';
632
633 new_groupadmin_page('xnetgrp/annuaire-admin.tpl');
634 $mmlist = new MMList(S::v('uid'), S::v('password'),
635 $globals->asso('mail_domain'));
636 $lists = $mmlist->get_lists();
637 if (!$lists) $lists = array();
638 $listes = array_map(create_function('$arr', 'return $arr["list"];'), $lists);
639
640 $subscribers = array();
641
642 foreach ($listes as $list) {
643 list(,$members) = $mmlist->get_members($list);
644 $mails = array_map(create_function('$arr', 'return $arr[1];'), $members);
645 $subscribers = array_unique(array_merge($subscribers, $mails));
646 }
647
648 $not_in_group_x = array();
649 $not_in_group_ext = array();
650
651 foreach ($subscribers as $mail) {
652 $res = XDB::query(
653 'SELECT COUNT(*)
654 FROM groupex.membres AS m
655 LEFT JOIN auth_user_md5 AS u ON (m.uid=u.user_id AND m.uid<50000)
656 LEFT JOIN aliases AS a ON (a.id=u.user_id and a.type="a_vie")
657 WHERE asso_id = {?} AND
658 (m.email = {?} OR CONCAT(a.alias, "@polytechnique.org") = {?})',
659 $globals->asso('id'), $mail, $mail);
660 if ($res->fetchOneCell() == 0) {
661 if (strstr($mail, '@polytechnique.org') === false) {
662 $not_in_group_ext[] = $mail;
663 } else {
664 $not_in_group_x[] = $mail;
665 }
666 }
667 }
668
669 $page->assign('not_in_group_ext', $not_in_group_ext);
670 $page->assign('not_in_group_x', $not_in_group_x);
671 $page->assign('lists', $lists);
672 }
673
674 function handler_admin_member_new(&$page, $email = null)
675 {
676 global $globals;
677
678 new_groupadmin_page('xnetgrp/membres-add.tpl');
679 $page->addJsLink('ajax.js');
680
681 if (is_null($email)) {
682 return;
683 }
684
685 if (strpos($email, '@') === false) {
686 $x = true;
687 } else {
688 list(,$fqdn) = explode('@', $email, 2);
689 $fqdn = strtolower($fqdn);
690 $x = ($fqdn == 'polytechnique.org' || $fqdn == 'melix.org' ||
691 $fqdn == 'm4x.org' || $fqdn == 'melix.net');
692 }
693 if ($x) {
694 require_once 'user.func.inc.php';
695 if ($forlife = get_user_forlife($email)) {
696 XDB::execute(
697 'INSERT INTO groupex.membres (uid,asso_id,origine)
698 SELECT user_id,{?},"X"
699 FROM auth_user_md5 AS u
700 INNER JOIN aliases AS a ON (u.user_id = a.id)
701 WHERE a.alias={?}', $globals->asso('id'), $forlife);
702 pl_redirect("member/$email");
703 } else {
704 $page->trig($email." n'est pas un alias polytechnique.org valide");
705 }
706 } else {
707 require_once 'xorg.misc.inc.php';
708 if (isvalid_email($email)) {
709 if (Env::v('x') && Env::has('userid') && Env::i('userid')) {
710 $uid = Env::i('userid');
711 $res = XDB::query("SELECT *
712 FROM auth_user_md5
713 WHERE user_id = {?} AND perms = 'pending'", $uid);
714 if ($res->numRows() == 1) {
715 XDB::execute('INSERT INTO groupex.membres (uid, asso_id, origine, email)
716 VALUES ({?}, {?}, "X", {?})',
717 $uid, $globals->asso('id'), $email);
718 if (Env::v('market')) {
719 $res = XDB::query('SELECT COUNT(*)
720 FROM register_marketing
721 WHERE uid={?} AND email={?}', $uid, $email);
722 if (!$res->fetchOneCell()) {
723 XDB::execute("INSERT INTO register_marketing (uid,sender,email,date,last,nb,type,hash)
724 VALUES ({?}, {?}, {?}, NOW(), 0, 0, {?}, '')",
725 $uid, S::v('uid'), $email, Env::v('market_from'));
726 require_once('validations.inc.php');
727 $req = new MarkReq(S::v('uid'), $uid, $email, Env::v('market_from') == 'user');
728 $req->submit();
729 }
730 }
731 pl_redirect("member/$email");
732 }
733 $page->trig("Utilisateur invalide");
734 } else {
735 $res = XDB::query('SELECT MAX(uid)+1 FROM groupex.membres');
736 $uid = max(intval($res->fetchOneCell()), 50001);
737 XDB::execute('INSERT INTO groupex.membres (uid,asso_id,origine,email)
738 VALUES({?},{?},"ext",{?})', $uid,
739 $globals->asso('id'), $email);
740 pl_redirect("member/$email");
741 }
742 } else {
743 $page->trig("« <strong>$email</strong> » n'est pas une adresse mail valide");
744 }
745 }
746 }
747
748 function handler_admin_member_new_ajax(&$page)
749 {
750 header('Content-Type: text/html; charset="UTF-8"');
751 $page->changeTpl('xnetgrp/membres-new-search.tpl', NO_SKIN);
752 list($nom, $prenom) = str_replace(array('-', ' ', "'"), '%', array(Env::v('nom'), Env::v('prenom')));
753 $where = "perms = 'pending'";
754 if (!empty($nom)) {
755 $where .= " AND nom LIKE '%$nom%'";
756 }
757 if (!empty($prenom)) {
758 $where .= " AND prenom LIKE '%$prenom%'";
759 }
760 if (preg_match('/^[0-9]{4}$/', Env::v('promo'))) {
761 $where .= " AND promo = " . Env::i('promo');
762 } elseif (Env::has('promo')) {
763 return;
764 }
765 $res = XDB::iterator("SELECT user_id, nom, prenom, promo
766 FROM auth_user_md5
767 WHERE $where");
768 if ($res->total() < 30) {
769 $page->assign("choix", $res);
770 }
771 }
772
773 function unsubscribe(&$user)
774 {
775 global $globals, $page;
776 XDB::execute(
777 "DELETE FROM groupex.membres WHERE uid={?} AND asso_id={?}",
778 $user['uid'], $globals->asso('id'));
779
780 $user_same_email = get_infos($user['email']);
781 $domain = $globals->asso('mail_domain');
782
783 if (!$domain || !empty($user_same_email)) {
784 return true;
785 }
786
787 $mmlist = new MMList(S::v('uid'), S::v('password'), $domain);
788 $listes = $mmlist->get_lists($user['email2']);
789
790 $may_update = may_update();
791 $warning = false;
792 foreach ($listes as $liste) {
793 if ($liste['sub'] == 2) {
794 if ($may_update) {
795 $mmlist->mass_unsubscribe($liste['list'], Array($user['email2']));
796 } else {
797 $mmlist->unsubscribe($liste['list']);
798 }
799 } elseif ($liste['sub']) {
800 $page->trig("{$user['prenom']} {$user['nom']} a une"
801 ." demande d'inscription en cours sur la"
802 ." liste {$liste['list']}@ !");
803 $warning = true;
804 }
805 }
806
807 XDB::execute(
808 "DELETE FROM virtual_redirect
809 USING virtual_redirect
810 INNER JOIN virtual USING(vid)
811 WHERE redirect={?} AND alias LIKE {?}", $user['email'], '%@'.$domain);
812 return !$warning;
813 }
814
815 function handler_unsubscribe(&$page)
816 {
817 new_group_page('xnetgrp/membres-del.tpl');
818 $user = get_infos(S::v('forlife'));
819 if (empty($user)) {
820 return PL_NOT_FOUND;
821 }
822 $page->assign('self', true);
823 $page->assign('user', $user);
824
825 if (!Post::has('confirm')) {
826 return;
827 }
828
829 if ($this->unsubscribe($user)) {
830 $page->trig('Vous avez été désinscrit du groupe avec succès');
831 } else {
832 $page->trig('Vous avez été désinscrit du groupe, mais des erreurs se sont produites lors des désinscriptions des alias et des mailing-lists.');
833 }
834 $page->assign('is_member', is_member(true));
835 }
836
837 function handler_admin_member_del(&$page, $user = null)
838 {
839 new_groupadmin_page('xnetgrp/membres-del.tpl');
840 $user = get_infos($user);
841 if (empty($user)) {
842 return PL_NOT_FOUND;
843 }
844 $page->assign('user', $user);
845
846 if (!Post::has('confirm')) {
847 return;
848 }
849
850 if ($this->unsubscribe($user)) {
851 $page->trig("{$user['prenom']} {$user['nom']} a été désabonné du groupe !");
852 } else {
853 $page->trig("{$user['prenom']} {$user['nom']} a été désabonné du groupe, mais des erreurs subsistent !");
854 }
855 }
856
857 function handler_admin_member(&$page, $user)
858 {
859 global $globals;
860
861 new_groupadmin_page('xnetgrp/membres-edit.tpl');
862
863 $user = get_infos($user);
864 if (empty($user)) {
865 return PL_NOT_FOUND;
866 }
867
868 $mmlist = new MMList(S::v('uid'), S::v('password'),
869 $globals->asso('mail_domain'));
870
871 if (Post::has('change')) {
872 $email_changed = ($user['origine'] != 'X' && strtolower($user['email']) != strtolower(Post::v('email')));
873 $from_email = $user['email'];
874 if ($user['origine'] != 'X') {
875 $user['nom'] = Post::v('nom');
876 $user['prenom'] = (Post::v('origine') == 'ext') ? Post::v('prenom') : '';
877 $user['sexe'] = (Post::v('origine') == 'ext') ? Post::v('sexe') : 0;
878 $user['origine'] = Post::v('origine');
879 XDB::query('UPDATE groupex.membres
880 SET prenom={?}, nom={?}, email={?}, sexe={?}, origine={?}
881 WHERE uid={?} AND asso_id={?}',
882 $user['prenom'], $user['nom'], Post::v('email'),
883 $user['sexe'], $user['origine'], $user['uid'],
884 $globals->asso('id'));
885 $user['email'] = Post::v('email');
886 $user['email2'] = Post::v('email');
887 }
888
889 $perms = Post::i('is_admin');
890 if ($user['perms'] != $perms) {
891 XDB::query('UPDATE groupex.membres SET perms={?}
892 WHERE uid={?} AND asso_id={?}',
893 $perms ? 'admin' : 'membre',
894 $user['uid'], $globals->asso('id'));
895 $user['perms'] = $perms;
896 $page->trig('permissions modifiées');
897 }
898
899 foreach (Env::v('ml1', array()) as $ml => $state) {
900 $ask = empty($_REQUEST['ml2'][$ml]) ? 0 : 2;
901 if ($ask == $state) {
902 if ($state && $email_changed) {
903 $mmlist->replace_email($ml, $from_email, $user['email2']);
904 $page->trig("L'abonnement de {$user['prenom']} {$user['nom']} à $ml@ a été mis à jour");
905 }
906 continue;
907 }
908 if ($state == '1') {
909 $page->trig("{$user['prenom']} {$user['nom']} a "
910 ."actuellement une demande d'inscription en "
911 ."cours sur <strong>$ml@</strong> !!!");
912 } elseif ($ask) {
913 $mmlist->mass_subscribe($ml, Array($user['email2']));
914 $page->trig("{$user['prenom']} {$user['nom']} a été abonné à $ml@");
915 } else {
916 if ($email_changed) {
917 $mmlist->mass_unsubscribe($ml, Array($from_email));
918 } else {
919 $mmlist->mass_unsubscribe($ml, Array($user['email2']));
920 }
921 $page->trig("{$user['prenom']} {$user['nom']} a été désabonné de $ml@");
922 }
923 }
924
925 foreach (Env::v('ml3', array()) as $ml => $state) {
926 $ask = !empty($_REQUEST['ml4'][$ml]);
927 if($state == $ask) continue;
928 if($ask) {
929 XDB::query("INSERT INTO virtual_redirect (vid,redirect)
930 SELECT vid,{?} FROM virtual WHERE alias={?}",
931 $user['email'], $ml);
932 $page->trig("{$user['prenom']} {$user['nom']} a été abonné à $ml");
933 } else {
934 XDB::query("DELETE FROM virtual_redirect
935 USING virtual_redirect
936 INNER JOIN virtual USING(vid)
937 WHERE redirect={?} AND alias={?}",
938 $user['email'], $ml);
939 $page->trig("{$user['prenom']} {$user['nom']} a été désabonné de $ml");
940 }
941 }
942 }
943
944 $page->assign('user', $user);
945 $listes = $mmlist->get_lists($user['email2']);
946 $page->assign('listes', $listes);
947
948 $res = XDB::query(
949 'SELECT alias, redirect IS NOT NULL as sub
950 FROM virtual AS v
951 LEFT JOIN virtual_redirect AS vr ON(v.vid=vr.vid AND redirect={?})
952 WHERE alias LIKE {?} AND type="user"',
953 $user['email'], '%@'.$globals->asso('mail_domain'));
954 $page->assign('alias', $res->fetchAllAssoc());
955 }
956
957 function handler_rss(&$page, $user = null, $hash = null)
958 {
959 global $globals;
960 require_once('rss.inc.php');
961 $uid = init_rss('xnetgrp/announce-rss.tpl', $user, $hash, false);
962 $page->register_modifier('url_catcher', array('MiniWiki', 'WikiToHTML'));
963
964 if ($uid) {
965 $rss = XDB::iterator("SELECT a.id, a.titre, a.texte, a.contacts, a.create_date,
966 IF(u2.nom_usage != '', u2.nom_usage, u2.nom) AS nom, u2.prenom, u2.promo
967 FROM auth_user_md5 AS u
968 INNER JOIN groupex.announces AS a ON ( (a.promo_min = 0 OR a.promo_min <= u.promo)
969 AND (a.promo_max = 0 OR a.promo_max <= u.promo))
970 INNER JOIN auth_user_md5 AS u2 ON (u2.user_id = a.user_id)
971 WHERE u.user_id = {?} AND peremption >= NOW() AND a.asso_id = {?}",
972 $uid, $globals->asso('id'));
973 } else {
974 $rss = XDB::iterator("SELECT a.id, a.titre, a.texte, a.create_date,
975 IF(u.nom_usage != '', u.nom_usage, u.nom) AS nom, u.prenom, u.promo
976 FROM groupex.announces AS a
977 INNER JOIN auth_user_md5 AS u USING(user_id)
978 WHERE FIND_IN_SET(a.flags, 'public') AND peremption >= NOW() AND a.asso_id = {?}",
979 $globals->asso('id'));
980 }
981 $page->assign('asso', $globals->asso());
982 $page->assign('rss', $rss);
983 }
984
985 function handler_edit_announce(&$page, $aid = null)
986 {
987 global $globals, $platal;
988 new_groupadmin_page('xnetgrp/announce-edit.tpl');
989 $page->register_modifier('url_catcher', array('MiniWiki','WikiToHTML'));
990 $page->assign('new', is_null($aid));
991 $art = array();
992
993 if (Post::v('valid') == 'Visualiser' || Post::v('valid') == 'Enregistrer') {
994 if (!is_null($aid)) {
995 $art['id'] = $aid;
996 }
997 $art['titre'] = Post::v('titre');
998 $art['texte'] = Post::v('texte');
999 $art['contacts'] = Post::v('contacts');
1000 $art['promo_min'] = Post::i('promo_min');
1001 $art['promo_max'] = Post::i('promo_max');
1002 $art['nom'] = S::v('nom');
1003 $art['prenom'] = S::v('prenom');
1004 $art['promo'] = S::v('promo');
1005 $art['forlife'] = S::v('forlife');
1006 $art['peremption'] = Post::v('peremption');
1007 $art['public'] = Post::has('public');
1008 $art['xorg'] = Post::has('xorg');
1009 $art['nl'] = Post::has('nl');
1010 $art['event'] = Post::v('event');
1011
1012 $art['contact_html'] = $art['contacts'];
1013 if ($art['event']) {
1014 $art['contact_html'] .= "\n{$globals->baseurl}/{$platal->ns}events/sub/{$art['event']}";
1015 }
1016
1017 if (!$art['public'] &&
1018 (($art['promo_min'] > $art['promo_max'] && $art['promo_max'] != 0) ||
1019 ($art['promo_min'] != 0 && ($art['promo_min'] <= 1900 || $art['promo_min'] >= 2020)) ||
1020 ($art['promo_max'] != 0 && ($art['promo_max'] <= 1900 || $art['promo_max'] >= 2020))))
1021 {
1022 $page->trig("L'intervalle de promotions est invalide");
1023 Post::kill('valid');
1024 }
1025
1026 if (!trim($art['titre']) || !trim($art['texte'])) {
1027 $page->trig("L'article doit avoir un titre et un contenu");
1028 Post::kill('valid');
1029 }
1030 }
1031
1032 if (Post::v('valid') == 'Enregistrer') {
1033 $promo_min = ($art['public'] ? 0 : $art['promo_min']);
1034 $promo_max = ($art['public'] ? 0 : $art['promo_max']);
1035 if (is_null($aid)) {
1036 XDB::query("INSERT INTO groupex.announces
1037 (user_id, asso_id, create_date, titre, texte, contacts,
1038 peremption, promo_min, promo_max, flags)
1039 VALUES ({?}, {?}, NOW(), {?}, {?}, {?}, {?}, {?}, {?}, {?})",
1040 S::i('uid'), $globals->asso('id'), $art['titre'], $art['texte'], $art['contact_html'],
1041 $art['peremption'], $promo_min, $promo_max, $art['public'] ? 'public' : '');
1042 $aid = XDB::insertId();
1043 if ($art['xorg']) {
1044 require_once('validations.inc.php');
1045 $article = new EvtReq("[{$globals->asso('nom')}] " . $art['titre'],
1046 MiniWiki::WikiToHTML($art['texte'] . (!empty($art['contact_html']) ? "\n\nContacts :\n" . $art['contact_html'] : "")),
1047 $art['promo_min'], $art['promo_max'], $art['peremption'], "", S::v('uid'));
1048 $article->submit();
1049 $page->trig("L'affichage sur la page d'accueil de Polytechnique.org est en attente de validation");
1050 }
1051 if ($art['nl']) {
1052 require_once('validations.inc.php');
1053 $article = new NLReq(S::v('uid'), $globals->asso('nom') . " : " .$art['titre'],
1054 $art['texte'], $art['contact_html']);
1055 $article->submit();
1056 $page->trig("La parution dans la Lettre Mensuelle est en attente de validation");
1057 }
1058 } else {
1059 XDB::query("UPDATE groupex.announces
1060 SET titre={?}, texte={?}, contacts={?}, peremption={?},
1061 promo_min={?}, promo_max={?}, flags={?}
1062 WHERE id={?} AND asso_id={?}",
1063 $art['titre'], $art['texte'], $art['contacts'], $art['peremption'],
1064 $promo_min, $promo_max, $art['public'] ? 'public' : '',
1065 $art['id'], $globals->asso('id'));
1066 }
1067 }
1068 if (Post::v('valid') == 'Enregistrer' || Post::v('valid') == 'Annuler') {
1069 pl_redirect("");
1070 }
1071
1072 if (empty($art) && !is_null($aid)) {
1073 $res = XDB::query("SELECT a.*, u.nom, u.prenom, u.promo, l.alias AS forlife,
1074 FIND_IN_SET(a.flags, 'public') AS public
1075 FROM groupex.announces AS a
1076 INNER JOIN auth_user_md5 AS u USING(user_id)
1077 INNER JOIN aliases AS l ON (l.id = u.user_id AND l.type = 'a_vie')
1078 WHERE asso_id = {?} AND a.id = {?}",
1079 $globals->asso('id'), $aid);
1080 if ($res->numRows()) {
1081 $art = $res->fetchOneAssoc();
1082 $art['contact_html'] = $art['contacts'];
1083 } else {
1084 $page->kill("Aucun article correspond à l'identifiant indiqué");
1085 }
1086 }
1087
1088 $select = '';
1089 for ($i = 1 ; $i < 30 ; $i++) {
1090 $time = time() + 3600 * 24 * $i;
1091 $p_stamp = date('Ymd', $time);
1092 $year = date('Y', $time);
1093 $month = date('m', $time);
1094 $day = date('d', $time);
1095
1096 $select .= "<option value=\"$p_stamp\"";
1097 if ($p_stamp == strtr(@$art['peremption'], array("-" => ""))) {
1098 $select .= " selected='selected'";
1099 }
1100 $select .= "> $day / $month / $year</option>\n";
1101 }
1102 $page->assign('select', $select);
1103
1104 if (is_null($aid)) {
1105 $events = XDB::iterator("SELECT *
1106 FROM groupex.evenements
1107 WHERE asso_id = {?} AND archive = 0",
1108 $globals->asso('id'));
1109 if ($events->total()) {
1110 $page->assign('events', $events);
1111 }
1112 }
1113
1114 $art['contact_html'] = MiniWiki::WikiToHTML($art['contact_html']);
1115 $page->assign('art', $art);
1116 }
1117
1118 function handler_admin_announce(&$page)
1119 {
1120 global $globals;
1121 new_groupadmin_page('xnetgrp/announce-admin.tpl');
1122
1123 if (Env::has('del')) {
1124 XDB::execute("DELETE FROM groupex.announces
1125 WHERE id = {?} AND asso_id = {?}",
1126 Env::i('del'), $globals->asso('id'));
1127 }
1128 $res = XDB::iterator("SELECT a.id, a.titre, a.peremption, a.peremption < CURRENT_DATE() AS perime
1129 FROM groupex.announces AS a
1130 WHERE a.asso_id = {?}
1131 ORDER BY a.peremption DESC",
1132 $globals->asso('id'));
1133 $page->assign('articles', $res);
1134 }
1135}
1136
1137// vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
1138?>