htdocs/admin/utilisateurs.php

   1 <?php
   2 /***************************************************************************
   3  *  Copyright (C) 2003-2006 Polytechnique.org                              *
   4  *  http://opensource.polytechnique.org/                                   *
   5  *                                                                         *
   6  *  This program is free software; you can redistribute it and/or modify   *
   7  *  it under the terms of the GNU General Public License as published by   *
   8  *  the Free Software Foundation; either version 2 of the License, or      *
   9  *  (at your option) any later version.                                    *
  10  *                                                                         *
  11  *  This program is distributed in the hope that it will be useful,        *
  12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of         *
  13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the          *
  14  *  GNU General Public License for more details.                           *
  15  *                                                                         *
  16  *  You should have received a copy of the GNU General Public License      *
  17  *  along with this program; if not, write to the Free Software            *
  18  *  Foundation, Inc.,                                                      *
  19  *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA                *
  20  ***************************************************************************/
  21
  22 require_once("xorg.inc.php");
  23 new_admin_page('admin/utilisateurs.tpl');
  24 $page->assign('xorg_title','Polytechnique.org - Administration - Edit/Su/Log');
  25 require_once("emails.inc.php");
  26 require_once("user.func.inc.php");
  27
  28 if (Session::has('suid')) {
  29     $page->kill("déjà en SUID !!!");
  30 }
  31
  32 if (Env::has('user_id')) {
  33     $login = get_user_login(Env::getInt('user_id'));
  34 } elseif (Env::has('login')) {
  35     $login = get_user_login(Env::get('login'));
  36 } else {
  37     $login = false;
  38 }
  39
  40 if(Env::has('logs_button') && $login) {
  41     redirect("logger.php?loguser=$login&year=".date('Y')."&month=".date('m'));
  42 }
  43
  44 if (Env::has('ax_button') && $login) {
  45     redirect("synchro_ax.php?user=$login");
  46 }
  47
  48 if(Env::has('suid_button') && $login) {
  49     $_SESSION['log']->log("suid_start", "login by ".Session::get('forlife'));
  50     $_SESSION['suid'] = $_SESSION;
  51     $r = $globals->xdb->query("SELECT id FROM aliases WHERE alias={?}", $login);
  52     if($uid = $r->fetchOneCell()) {
  53         start_connexion($uid,true);
  54         redirect("../");
  55     }
  56 }
  57
  58 if ($login) {
  59     $r  = $globals->xdb->query("SELECT  *, a.alias AS forlife, u.flags AS sexe
  60                                   FROM  auth_user_md5 AS u
  61                             INNER JOIN  aliases       AS a ON ( a.id = u.user_id AND a.alias={?} AND type!='homonyme' )", $login);
  62     $mr = $r->fetchOneAssoc();
  63
  64     $redirect = new Redirect($mr['user_id']);
  65
  66     // Check if there was a submission
  67     foreach($_POST as $key => $val) {
  68         switch ($key) {
  69             case "add_fwd":
  70                 $email = trim(Env::get('email'));
  71                 if (!isvalid_email_redirection($email)) {
  72                     $page->trig("invalid email $email");
  73                 } else {
  74                     $redirect->add_email($email);
  75                     $page->trig("Ajout de $email effectué");
  76                 }
  77                 break;
  78
  79             case "del_fwd":
  80                 if (!empty($val)) {
  81                     $redirect->delete_email($val);
  82                 }
  83                 break;
  84
  85             case "del_alias":
  86                 if (!empty($val)) {
  87                     $globals->xdb->execute("DELETE FROM aliases WHERE id={?} AND alias={?}
  88                             AND type!='a_vie' AND type!='homonyme'", $mr['user_id'], $val);
  89                     fix_bestalias($mr['user_id']);
  90                     $page->trig($val." a été supprimé");
  91                 }
  92                 break;
  93         case "activate_fwd":
  94         if (!empty($val)) {
  95             $redirect->modify_one_email($val, true);
  96         }
  97         break;
  98         case "deactivate_fwd":
  99         if (!empty($val)) {
 100             $redirect->modify_one_email($val, false);
 101         }
 102         break;
 103             case "add_alias":
 104                 $globals->xdb->execute("INSERT INTO  aliases (id,alias,type) VALUES  ({?}, {?}, 'alias')",
 105                         $mr['user_id'], Env::get('email'));
 106                 break;
 107
 108             case "best":
 109                 // 'bestalias' is the first bit of the set : 1
 110                 // 255 is the max for flags (8 sets max)
 111                 $globals->xdb->execute("UPDATE  aliases SET flags= flags & (255 - 1) WHERE id={?}", $mr['user_id']);
 112                 $globals->xdb->execute("UPDATE  aliases
 113                                            SET  flags= flags | 1
 114                                         WHERE  id={?} AND alias={?}", $mr['user_id'], $val);
 115                 break;
 116
 117
 118             // Editer un profil
 119             case "u_edit":
 120                 $pass_md5B = Env::get('newpass_clair') != "********" ? md5(Env::get('newpass_clair')) : Env::get('passw');
 121                 $naiss = Env::get('naissanceN');
 122                 $perms = Env::get('permsN');
 123                 $prenm = Env::get('prenomN');
 124                 $nom   = Env::get('nomN');
 125                 $promo = Env::getInt('promoN');
 126                 $sexe  = Env::get('sexeN');
 127                 $comm  = Env::get('commentN');
 128
 129                 $query = "UPDATE auth_user_md5 SET
 130                             naissance = '$naiss',
 131                             password  = '$pass_md5B',
 132                             perms     = '$perms',
 133                             prenom    = '".addslashes($prenm)."',
 134                             nom       = '".addslashes($nom)."',
 135                             flags     = '$sexe',
 136                             promo     = $promo,
 137                             comment   = '".addslashes($comm)."'
 138                           WHERE user_id = '{$mr['user_id']}'";
 139                 if ($globals->xdb->execute($query)) {
 140                     user_reindex($mr['user_id']);
 141
 142                     require_once("diogenes/diogenes.hermes.inc.php");
 143                     $mailer = new HermesMailer();
 144                     $mailer->setFrom("webmaster@polytechnique.org");
 145                     $mailer->addTo("web@polytechnique.org");
 146                     $mailer->setSubject("INTERVENTION de ".Session::get('forlife'));
 147                     $mailer->setTxtBody(preg_replace("/[ \t]+/", ' ', $query));
 148                     $mailer->send();
 149
 150                     $page->trig("updaté correctement.");
 151                 }
 152                 if (Env::get('nomusageN') != $mr['nom_usage']) {
 153                     require_once('nomusage.inc.php');
 154                     set_new_usage($mr['user_id'], Env::get('nomusageN'), make_username(Env::get('prenomN'), Env::get('nomusageN')));
 155                 }
 156                 $r  = $globals->xdb->query("SELECT  *, a.alias AS forlife, u.flags AS sexe
 157                                               FROM  auth_user_md5 AS u
 158                                         INNER JOIN  aliases       AS a ON (u.user_id=a.id)
 159                                              WHERE  user_id = {?}", $mr['user_id']);
 160                 $mr = $r->fetchOneAssoc();
 161                 break;
 162
 163             // DELETE FROM auth_user_md5
 164             case "u_kill":
 165                 user_clear_all_subs($mr['user_id']);
 166                 $page->trig("'{$mr['user_id']}' a été désinscrit !");
 167                 require_once("diogenes/diogenes.hermes.inc.php");
 168                 $mailer = new HermesMailer();
 169                 $mailer->setFrom("webmaster@polytechnique.org");
 170                 $mailer->addTo("web@polytechnique.org");
 171                 $mailer->setSubject("INTERVENTION de ".Session::get('forlife'));
 172                 $mailer->setTxtBody("\nUtilisateur $login effacé");
 173                 $mailer->send();
 174                 break;
 175         }
 176     }
 177
 178     $res = $globals->xdb->query("SELECT  UNIX_TIMESTAMP(start), host
 179                                    FROM  logger.sessions
 180                                   WHERE  uid={?} AND suid=0
 181                                ORDER BY  start DESC
 182                                   LIMIT  1", $mr['user_id']);
 183     list($lastlogin,$host) = $res->fetchOneRow();
 184     $page->assign('lastlogin', $lastlogin);
 185     $page->assign('host', $host);
 186
 187     $page->assign('aliases', $globals->xdb->iterator(
 188                 "SELECT  alias, type='a_vie' AS for_life,FIND_IN_SET('bestalias',flags) AS best,expire
 189                    FROM  aliases
 190                   WHERE  id = {?} AND type!='homonyme'
 191                ORDER BY  type!= 'a_vie'", $mr["user_id"]));
 192     $page->assign('xorgmails', $xorgmails);
 193     $page->assign('email_panne', $email_panne);
 194     $page->assign('emails',$redirect->emails);
 195
 196     $page->assign('mr',$mr);
 197 }
 198
 199 $page->run();
 200
 201 // vim:set et sws=4 sts=4 sw=4:
 202 ?>