projects / platal.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
list installed icons, to see quickly the one you can insert in dynamic text or in...
[platal.git] / modules / admin.php
1 <?php
2 /***************************************************************************
3 * Copyright (C) 2003-2007 Polytechnique.org *
4 * http://opensource.polytechnique.org/ *
5 * *
6 * This program is free software; you can redistribute it and/or modify *
7 * it under the terms of the GNU General Public License as published by *
8 * the Free Software Foundation; either version 2 of the License, or *
9 * (at your option) any later version. *
10 * *
11 * This program is distributed in the hope that it will be useful, *
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
14 * GNU General Public License for more details. *
15 * *
16 * You should have received a copy of the GNU General Public License *
17 * along with this program; if not, write to the Free Software *
18 * Foundation, Inc., *
19 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
20 ***************************************************************************/
21
22 class AdminModule extends PLModule
23 {
24 function handlers()
25 {
26 return array(
27 'phpinfo' => $this->make_hook('phpinfo', AUTH_MDP, 'admin'),
28 'admin' => $this->make_hook('default', AUTH_MDP, 'admin'),
29 'admin/ax-xorg' => $this->make_hook('ax_xorg', AUTH_MDP, 'admin'),
30 'admin/deaths' => $this->make_hook('deaths', AUTH_MDP, 'admin'),
31 'admin/downtime' => $this->make_hook('downtime', AUTH_MDP, 'admin'),
32 'admin/homonyms' => $this->make_hook('homonyms', AUTH_MDP, 'admin'),
33 'admin/logger' => $this->make_hook('logger', AUTH_MDP, 'admin'),
34 'admin/logger/actions' => $this->make_hook('logger_actions', AUTH_MDP, 'admin'),
35 'admin/postfix/blacklist' => $this->make_hook('postfix_blacklist', AUTH_MDP, 'admin'),
36 'admin/postfix/delayed' => $this->make_hook('postfix_delayed', AUTH_MDP, 'admin'),
37 'admin/postfix/regexp_bounces' => $this->make_hook('postfix_regexpsbounces', AUTH_MDP, 'admin'),
38 'admin/postfix/whitelist' => $this->make_hook('postfix_whitelist', AUTH_MDP, 'admin'),
39 'admin/mx/broken' => $this->make_hook('mx_broken', AUTH_MDP, 'admin'),
40 'admin/skins' => $this->make_hook('skins', AUTH_MDP, 'admin'),
41 'admin/synchro_ax' => $this->make_hook('synchro_ax', AUTH_MDP, 'admin'),
42 'admin/user' => $this->make_hook('user', AUTH_MDP, 'admin'),
43 'admin/promo' => $this->make_hook('promo', AUTH_MDP, 'admin'),
44 'admin/validate' => $this->make_hook('validate', AUTH_MDP, 'admin'),
45 'admin/validate/answers' => $this->make_hook('validate_answers', AUTH_MDP, 'admin'),
46 'admin/wiki' => $this->make_hook('wiki', AUTH_MDP, 'admin'),
47 'admin/ipwatch' => $this->make_hook('ipwatch', AUTH_MDP, 'admin'),
48 'admin/icons' => $this->make_hook('icons', AUTH_MDP, 'admin'),
49 );
50 }
51
52 function handler_phpinfo(&$page)
53 {
54 phpinfo();
55 exit;
56 }
57
58 function handler_default(&$page)
59 {
60 $page->changeTpl('admin/index.tpl');
61 $page->assign('xorg_title','Polytechnique.org - Administration');
62 }
63
64 function handler_postfix_delayed(&$page)
65 {
66 $page->changeTpl('admin/postfix_delayed.tpl');
67 $page->assign('xorg_title','Polytechnique.org - Administration - Postfix : Retardés');
68
69 if (Env::has('del')) {
70 $crc = Env::v('crc');
71 XDB::execute("UPDATE postfix_mailseen SET release = 'del' WHERE crc = {?}", $crc);
72 $page->trig($crc." verra tous ses mails supprimés !");
73 } elseif (Env::has('ok')) {
74 $crc = Env::v('crc');
75 XDB::execute("UPDATE postfix_mailseen SET release = 'ok' WHERE crc = {?}", $crc);
76 $page->trig($crc." a le droit de passer !");
77 }
78
79 $sql = XDB::iterator(
80 "SELECT crc, nb, update_time, create_time,
81 FIND_IN_SET('del', release) AS del,
82 FIND_IN_SET('ok', release) AS ok
83 FROM postfix_mailseen
84 WHERE nb >= 30
85 ORDER BY release != ''");
86
87 $page->assign_by_ref('mails', $sql);
88 }
89
90 function handler_postfix_regexpsbounces(&$page, $new = null) {
91 $page->changeTpl('admin/emails_bounces_re.tpl');
92 $page->assign('xorg_title','Polytechnique.org - Administration - Postfix : Regexps Bounces');
93 $page->assign('new', $new);
94
95 if (Post::has('submit')) {
96 foreach (Env::v('lvl') as $id=>$val) {
97 XDB::query(
98 "REPLACE INTO emails_bounces_re (id,pos,lvl,re,text) VALUES ({?}, {?}, {?}, {?}, {?})",
99 $id, $_POST['pos'][$id], $_POST['lvl'][$id], $_POST['re'][$id], $_POST['text'][$id]
100 );
101 }
102 }
103
104 $page->assign('bre', XDB::iterator("SELECT * FROM emails_bounces_re ORDER BY pos"));
105 }
106
107 // {{{ logger view
108
109 /** Retrieves the available days for a given year and month.
110 * Obtain a list of days of the given month in the given year
111 * that are within the range of dates that we have log entries for.
112 *
113 * @param integer year
114 * @param integer month
115 * @return array days in that month we have log entries covering.
116 * @private
117 */
118 function _getDays($year, $month)
119 {
120 // give a 'no filter' option
121 $months[0] = "----";
122
123 if ($year && $month) {
124 $day_max = Array(-1, 31, checkdate(2, 29, $year) ? 29 : 28 , 31,
125 30, 31, 30, 31, 31, 30, 31, 30, 31);
126 $res = XDB::query("SELECT YEAR (MAX(start)), YEAR (MIN(start)),
127 MONTH(MAX(start)), MONTH(MIN(start)),
128 DAYOFMONTH(MAX(start)),
129 DAYOFMONTH(MIN(start))
130 FROM logger.sessions");
131 list($ymax, $ymin, $mmax, $mmin, $dmax, $dmin) = $res->fetchOneRow();
132
133 if (($year < $ymin) || ($year == $ymin && $month < $mmin)) {
134 return array();
135 }
136
137 if (($year > $ymax) || ($year == $ymax && $month > $mmax)) {
138 return array();
139 }
140
141 $min = ($year==$ymin && $month==$mmin) ? intval($dmin) : 1;
142 $max = ($year==$ymax && $month==$mmax) ? intval($dmax) : $day_max[$month];
143
144 for($i = $min; $i<=$max; $i++) {
145 $days[$i] = $i;
146 }
147 }
148 return $days;
149 }
150
151
152 /** Retrieves the available months for a given year.
153 * Obtains a list of month numbers that are within the timeframe that
154 * we have log entries for.
155 *
156 * @param integer year
157 * @return array List of month numbers we have log info for.
158 * @private
159 */
160 function _getMonths($year)
161 {
162 // give a 'no filter' option
163 $months[0] = "----";
164
165 if ($year) {
166 $res = XDB::query("SELECT YEAR (MAX(start)), YEAR (MIN(start)),
167 MONTH(MAX(start)), MONTH(MIN(start))
168 FROM logger.sessions");
169 list($ymax, $ymin, $mmax, $mmin) = $res->fetchOneRow();
170
171 if (($year < $ymin) || ($year > $ymax)) {
172 return array();
173 }
174
175 $min = $year == $ymin ? intval($mmin) : 1;
176 $max = $year == $ymax ? intval($mmax) : 12;
177
178 for($i = $min; $i<=$max; $i++) {
179 $months[$i] = $i;
180 }
181 }
182 return $months;
183 }
184
185
186 /** Retrieves the available years.
187 * Obtains a list of years that we have log entries covering.
188 *
189 * @return array years we have log entries for.
190 * @private
191 */
192 function _getYears()
193 {
194 // give a 'no filter' option
195 $years[0] = "----";
196
197 // retrieve available years
198 $res = XDB::query("select YEAR(MAX(start)), YEAR(MIN(start)) FROM logger.sessions");
199 list($max, $min) = $res->fetchOneRow();
200
201 for($i = intval($min); $i<=$max; $i++) {
202 $years[$i] = $i;
203 }
204 return $years;
205 }
206
207
208 /** Make a where clause to get a user's sessions.
209 * Prepare the where clause request that will retrieve the sessions.
210 *
211 * @param $year INTEGER Only get log entries made during the given year.
212 * @param $month INTEGER Only get log entries made during the given month.
213 * @param $day INTEGER Only get log entries made during the given day.
214 * @param $uid INTEGER Only get log entries referring to the given user ID.
215 *
216 * @return STRING the WHERE clause of a query, including the 'WHERE' keyword
217 * @private
218 */
219 function _makeWhere($year, $month, $day, $uid)
220 {
221 // start constructing the "where" clause
222 $where = array();
223
224 if ($uid)
225 array_push($where, "uid='$uid'");
226
227 // we were given at least a year
228 if ($year) {
229 if ($day) {
230 $dmin = mktime(0, 0, 0, $month, $day, $year);
231 $dmax = mktime(0, 0, 0, $month, $day+1, $year);
232 } elseif ($month) {
233 $dmin = mktime(0, 0, 0, $month, 1, $year);
234 $dmax = mktime(0, 0, 0, $month+1, 1, $year);
235 } else {
236 $dmin = mktime(0, 0, 0, 1, 1, $year);
237 $dmax = mktime(0, 0, 0, 1, 1, $year+1);
238 }
239 $where[] = "start >= " . date("Ymd000000", $dmin);
240 $where[] = "start < " . date("Ymd000000", $dmax);
241 }
242
243 if (!empty($where)) {
244 return ' WHERE ' . implode($where, " AND ");
245 } else {
246 return '';
247 }
248 // WE know it's totally reversed, so better use array_reverse than a SORT BY start DESC
249 }
250
251 // }}}
252
253 function handler_logger(&$page, $action = null, $arg = null) {
254 if ($action == 'session') {
255
256 // we are viewing a session
257 $res = XDB::query("SELECT ls.*, a.alias AS username, sa.alias AS suer
258 FROM logger.sessions AS ls
259 LEFT JOIN aliases AS a ON (a.id = ls.uid AND a.type='a_vie')
260 LEFT JOIN aliases AS sa ON (sa.id = ls.suid AND sa.type='a_vie')
261 WHERE ls.id = {?}", $arg);
262
263 $page->assign('session', $a = $res->fetchOneAssoc());
264
265 $res = XDB::iterator('SELECT a.text, e.data, e.stamp
266 FROM logger.events AS e
267 LEFT JOIN logger.actions AS a ON e.action=a.id
268 WHERE e.session={?}', $arg);
269 while ($myarr = $res->next()) {
270 $page->append('events', $myarr);
271 }
272
273 } else {
274 $loguser = $action == 'user' ? $arg : Env::v('loguser');
275
276 $res = XDB::query('SELECT id FROM aliases WHERE alias={?}',
277 $loguser);
278 $loguid = $res->fetchOneCell();
279
280 if ($loguid) {
281 $year = Env::i('year');
282 $month = Env::i('month');
283 $day = Env::i('day');
284 } else {
285 $year = Env::i('year', intval(date('Y')));
286 $month = Env::i('month', intval(date('m')));
287 $day = Env::i('day', intval(date('d')));
288 }
289
290 if (!$year)
291 $month = 0;
292 if (!$month)
293 $day = 0;
294
295 // smarty assignments
296 // retrieve available years
297 $page->assign('years', $this->_getYears());
298 $page->assign('year', $year);
299
300 // retrieve available months for the current year
301 $page->assign('months', $this->_getMonths($year));
302 $page->assign('month', $month);
303
304 // retrieve available days for the current year and month
305 $page->assign('days', $this->_getDays($year, $month));
306 $page->assign('day', $day);
307
308 $page->assign('loguser', $loguser);
309 // smarty assignments
310
311 if ($loguid || $year) {
312
313 // get the requested sessions
314 $where = $this->_makeWhere($year, $month, $day, $loguid);
315 $select = "SELECT s.id, s.start, s.uid,
316 a.alias as username
317 FROM logger.sessions AS s
318 LEFT JOIN aliases AS a ON (a.id = s.uid AND a.type='a_vie')
319 $where
320 ORDER BY start DESC";
321 $res = XDB::iterator($select);
322
323 $sessions = array();
324 while ($mysess = $res->next()) {
325 $mysess['events'] = array();
326 $sessions[$mysess['id']] = $mysess;
327 }
328 array_reverse($sessions);
329
330 // attach events
331 $sql = "SELECT s.id, a.text
332 FROM logger.sessions AS s
333 LEFT JOIN logger.events AS e ON(e.session=s.id)
334 INNER JOIN logger.actions AS a ON(a.id=e.action)
335 $where";
336
337 $res = XDB::iterator($sql);
338 while ($event = $res->next()) {
339 array_push($sessions[$event['id']]['events'], $event['text']);
340 }
341 $page->assign_by_ref('sessions', $sessions);
342 } else {
343 $page->assign('msg_nofilters', "Sélectionner une annuée et/ou un utilisateur");
344 }
345 }
346
347 $page->changeTpl('admin/logger-view.tpl');
348
349 $page->assign('xorg_title','Polytechnique.org - Administration - Logs des sessions');
350 }
351
352 function handler_user(&$page, $login = false)
353 {
354 $page->changeTpl('admin/utilisateurs.tpl');
355 $page->assign('xorg_title','Polytechnique.org - Administration - Edit/Su/Log');
356 require_once("emails.inc.php");
357 require_once("user.func.inc.php");
358
359 if (S::has('suid')) {
360 $page->kill("déjà en SUID !!!");
361 }
362
363 if (Env::has('user_id')) {
364 $login = get_user_forlife(Env::i('user_id'));
365 if (empty($login)) {
366 $login = Env::i('user_id');
367 }
368 } elseif (Env::has('login')) {
369 $login = get_user_forlife(Env::v('login'));
370 }
371
372 if(Env::has('logs_button') && $login) {
373 pl_redirect("admin/logger?loguser=$login&year=".date('Y')."&month=".date('m'));
374 }
375
376 if (Env::has('ax_button') && $login) {
377 pl_redirect("admin/synchro_ax/$login");
378 }
379
380 if(Env::has('suid_button') && $login) {
381 $_SESSION['log']->log("suid_start", "login by ".S::v('forlife'));
382 $_SESSION['suid'] = $_SESSION;
383 $r = XDB::query("SELECT id FROM aliases WHERE alias={?}", $login);
384 if($uid = $r->fetchOneCell()) {
385 start_connexion($uid,true);
386 pl_redirect("");
387 }
388 }
389
390 if ($login) {
391 if (is_numeric($login)) {
392 $r = XDB::query("SELECT *, a.alias AS forlife,
393 FIND_IN_SET('watch', u.flags) AS watch, FIND_IN_SET('femme', u.flags) AS sexe,
394 (year(naissance) > promo - 15 or year(naissance) < promo - 25) AS naiss_err
395 FROM auth_user_md5 AS u
396 LEFT JOIN aliases AS a ON (a.id = u.user_id AND type= 'a_vie')
397 WHERE u.user_id = {?}", $login);
398 } else {
399 $r = XDB::query("SELECT *, a.alias AS forlife,
400 FIND_IN_SET('watch', u.flags) AS watch, FIND_IN_SET('femme', u.flags) AS sexe,
401 (year(naissance) > promo - 15 or year(naissance) < promo - 25) AS naiss_err
402 FROM auth_user_md5 AS u
403 INNER JOIN aliases AS a ON ( a.id = u.user_id AND a.alias={?} AND type!='homonyme' )", $login);
404 }
405 $mr = $r->fetchOneAssoc();
406
407 if (!is_numeric($login)) { //user has a forlife
408 $redirect = new Redirect($mr['user_id']);
409 }
410
411 // Check if there was a submission
412 foreach($_POST as $key => $val) {
413 switch ($key) {
414 case "add_fwd":
415 $email = trim(Env::v('email'));
416 if (!isvalid_email_redirection($email)) {
417 $page->trig("invalid email $email");
418 } else {
419 $redirect->add_email($email);
420 $page->trig("Ajout de $email effectué");
421 }
422 break;
423
424 case "del_fwd":
425 if (!empty($val)) {
426 $redirect->delete_email($val);
427 }
428 break;
429
430 case "del_alias":
431 if (!empty($val)) {
432 XDB::execute("DELETE FROM aliases
433 WHERE id={?} AND alias={?}
434 AND type!='a_vie' AND type!='homonyme'", $mr['user_id'], $val);
435 XDB::execute("UPDATE emails
436 SET rewrite = ''
437 WHERE uid = {?} AND rewrite LIKE CONCAT({?}, '@%')",
438 $mr['user_id'], $val);
439 fix_bestalias($mr['user_id']);
440 $page->trig($val." a été supprimé");
441 }
442 break;
443 case "activate_fwd":
444 if (!empty($val)) {
445 $redirect->modify_one_email($val, true);
446 }
447 break;
448 case "deactivate_fwd":
449 if (!empty($val)) {
450 $redirect->modify_one_email($val, false);
451 }
452 break;
453 case "add_alias":
454 XDB::execute("INSERT INTO aliases (id,alias,type) VALUES ({?}, {?}, 'alias')",
455 $mr['user_id'], Env::v('email'));
456 break;
457
458 case "best":
459 // 'bestalias' is the first bit of the set : 1
460 // 255 is the max for flags (8 sets max)
461 XDB::execute("UPDATE aliases SET flags= flags & (255 - 1) WHERE id={?}", $mr['user_id']);
462 XDB::execute("UPDATE aliases
463 SET flags= flags | 1
464 WHERE id={?} AND alias={?}", $mr['user_id'], $val);
465 break;
466
467
468 // Editer un profil
469 case "u_edit":
470 require_once('secure_hash.inc.php');
471 $pass_encrypted = Env::v('newpass_clair') != "********" ? hash_encrypt(Env::v('newpass_clair')) : Env::v('passw');
472 $naiss = Env::v('naissanceN');
473 $deces = Env::v('decesN');
474 $perms = Env::v('permsN');
475 $prenm = Env::v('prenomN');
476 $nom = Env::v('nomN');
477 $promo = Env::i('promoN');
478 $sexe = Env::v('sexeN');
479 $comm = trim(Env::v('commentN'));
480 $watch = Env::v('watchN');
481 $flags = '';
482 if ($sexe) {
483 $flags = 'femme';
484 }
485 if ($watch) {
486 if ($flags) {
487 $flags .= ',';
488 }
489 $flags .= 'watch';
490 }
491
492 if ($watch && !$comm) {
493 $page->trig("Il est nécessaire de mettre un commentaire pour surveiller un compte");
494 break;
495 }
496
497 $query = "UPDATE auth_user_md5 SET
498 naissance = '$naiss',
499 deces = '$deces',
500 password = '$pass_encrypted',
501 perms = '$perms',
502 prenom = '".addslashes($prenm)."',
503 nom = '".addslashes($nom)."',
504 flags = '$flags',
505 promo = $promo,
506 comment = '".addslashes($comm)."'
507 WHERE user_id = '{$mr['user_id']}'";
508 if (XDB::execute($query)) {
509 user_reindex($mr['user_id']);
510
511 $mailer = new PlMailer("admin/mail_intervention.tpl");
512 $mailer->assign("user", S::v('forlife'));
513 $mailer->assign("query", $query);
514 $mailer->send();
515
516 $page->trig("updaté correctement.");
517 }
518 if (Env::v('nomusageN') != $mr['nom_usage']) {
519 require_once "xorg.misc.inc.php";
520 set_new_usage($mr['user_id'], Env::v('nomusageN'), make_username(Env::v('prenomN'), Env::v('nomusageN')));
521 }
522 if (Env::v('decesN') != $mr['deces']) {
523 user_clear_all_subs($mr['user_id'], false);
524 }
525 $r = XDB::query("SELECT *, a.alias AS forlife,
526 FIND_IN_SET('watch', u.flags) AS watch, FIND_IN_SET('femme', u.flags) AS sexe
527 FROM auth_user_md5 AS u
528 LEFT JOIN aliases AS a ON (a.id = u.user_id AND type= 'a_vie')
529 WHERE u.user_id = {?}", $mr['user_id']);
530 $mr = $r->fetchOneAssoc();
531 break;
532
533 // DELETE FROM auth_user_md5
534 case "u_kill":
535 user_clear_all_subs($mr['user_id']);
536 $page->trig("'{$mr['user_id']}' a été désinscrit !");
537 $mailer = new PlMailer("admin/mail_intervention.tpl");
538 $mailer->assign("user", S::v('forlife'));
539 $mailer->assign("query", "\nUtilisateur $login désinscrit");
540 $mailer->send();
541 break;
542 }
543 }
544
545 $res = XDB::query("SELECT start, host
546 FROM logger.sessions
547 WHERE uid={?} AND suid=0
548 ORDER BY start DESC
549 LIMIT 1", $mr['user_id']);
550 list($lastlogin,$host) = $res->fetchOneRow();
551 $page->assign('lastlogin', $lastlogin);
552 $page->assign('host', $host);
553
554 $res = XDB::query("SELECT alias
555 FROM virtual
556 INNER JOIN virtual_redirect USING(vid)
557 WHERE type = 'user' AND redirect LIKE '" . $login . "@%'");
558 if ($res->numRows()) {
559 $page->assign('virtual', $res->fetchOneCell());
560 }
561
562 $page->assign('aliases', XDB::iterator(
563 "SELECT alias, type='a_vie' AS for_life,FIND_IN_SET('bestalias',flags) AS best,expire
564 FROM aliases
565 WHERE id = {?} AND type!='homonyme'
566 ORDER BY type!= 'a_vie'", $mr["user_id"]));
567 if ($mr['perms'] != 'pending') {
568 $page->assign('emails',$redirect->emails);
569 }
570
571 $page->assign('mr',$mr);
572 }
573 }
574
575 function getMatricule($line, $key)
576 {
577 $mat = $line['matricule'];
578 $year = intval(substr($mat, 0, 3));
579 $rang = intval(substr($mat, 3, 3));
580 if ($year > 200) { $year /= 10; };
581 if ($year < 96) {
582 return null;
583 } else {
584 return sprintf('%04u%04u', 1900+$year, $rang);
585 }
586 }
587
588 function handler_promo(&$page, $action = null, $promo = null)
589 {
590 if (Env::has('promo')) {
591 if(Env::i('promo') > 1900 && Env::i('promo') < 2050) {
592 $action = Env::v('valid_promo') == 'Ajouter des membres' ? 'add' : 'ax';
593 pl_redirect('admin/promo/' . $action . '/' . Env::i('promo'));
594 } else {
595 $page->trig('Promo non valide');
596 }
597 }
598
599 $page->changeTpl('admin/promo.tpl');
600 if ($promo > 1900 && $promo < 2050 && ($action == 'add' || $action == 'ax')) {
601 $page->assign('promo', $promo);
602 } else {
603 return;
604 }
605
606 $importer = new CSVImporter('auth_user_md5', 'matricule');
607 $importer->registerFunction('matricule', 'matricle Ecole vers X.org', array($this, 'getMatricule'));
608 switch ($action) {
609 case 'add':
610 $fields = array('nom', 'nom_ini', 'prenom',
611 'prenom_ini', 'promo', 'promo_sortie', 'flags',
612 'matricule', 'matricule_ax', 'perms');
613 $importer->forceValue('promo', $promo);
614 $importer->forceValue('promo_sortie', $promo + 3);
615 break;
616 case 'ax':
617 $fields = array('matricule', 'matricule_ax');
618 break;
619 }
620 $importer->apply($page, "admin/promo/$action/$promo", $fields);
621 }
622
623 function handler_homonyms(&$page, $op = 'list', $target = null) {
624 $page->changeTpl('admin/homonymes.tpl');
625 $page->assign('xorg_title','Polytechnique.org - Administration - Homonymes');
626 require_once("homonymes.inc.php");
627
628 if ($target) {
629 if (! list($prenom,$nom,$forlife,$loginbis) = select_if_homonyme($target)) {
630 $target=0;
631 } else {
632 $page->assign('nom',$nom);
633 $page->assign('prenom',$prenom);
634 $page->assign('forlife',$forlife);
635 $page->assign('loginbis',$loginbis);
636 }
637 }
638
639 $page->assign('op',$op);
640 $page->assign('target',$target);
641
642 // on a un $target valide, on prepare les mails
643 if ($target) {
644
645 // on examine l'op a effectuer
646 switch ($op) {
647 case 'mail':
648 send_warning_homonyme($prenom, $nom, $forlife, $loginbis);
649 switch_bestalias($target, $loginbis);
650 $op = 'list';
651 break;
652 case 'correct':
653 switch_bestalias($target, $loginbis);
654 XDB::execute("UPDATE aliases SET type='homonyme',expire=NOW() WHERE alias={?}", $loginbis);
655 XDB::execute("REPLACE INTO homonymes (homonyme_id,user_id) VALUES({?},{?})", $target, $target);
656 send_robot_homonyme($prenom, $nom, $forlife, $loginbis);
657 $op = 'list';
658 break;
659 }
660 }
661
662 if ($op == 'list') {
663 $res = XDB::iterator(
664 "SELECT a.alias AS homonyme,s.id AS user_id,s.alias AS forlife,
665 promo,prenom,nom,
666 IF(h.homonyme_id=s.id, a.expire, NULL) AS expire,
667 IF(h.homonyme_id=s.id, a.type, NULL) AS type
668 FROM aliases AS a
669 LEFT JOIN homonymes AS h ON (h.homonyme_id = a.id)
670 INNER JOIN aliases AS s ON (s.id = h.user_id AND s.type='a_vie')
671 INNER JOIN auth_user_md5 AS u ON (s.id=u.user_id)
672 WHERE a.type='homonyme' OR a.expire!=''
673 ORDER BY a.alias,promo");
674 $hnymes = Array();
675 while ($tab = $res->next()) {
676 $hnymes[$tab['homonyme']][] = $tab;
677 }
678 $page->assign_by_ref('hnymes',$hnymes);
679 }
680 }
681
682 function handler_ax_xorg(&$page) {
683 $page->changeTpl('admin/ax-xorg.tpl');
684 $page->assign('xorg_title','Polytechnique.org - Administration - AX/X.org');
685
686 // liste des différences
687 $res = XDB::query(
688 'SELECT u.promo,u.nom AS nom,u.prenom AS prenom,ia.nom AS nomax,ia.prenom AS prenomax,u.matricule AS mat,ia.matricule_ax AS matax
689 FROM auth_user_md5 AS u
690 INNER JOIN identification_ax AS ia ON u.matricule_ax = ia.matricule_ax
691 WHERE (SOUNDEX(u.nom) != SOUNDEX(ia.nom) AND SOUNDEX(CONCAT(ia.particule,u.nom)) != SOUNDEX(ia.nom)
692 AND SOUNDEX(u.nom) != SOUNDEX(ia.nom_patro) AND SOUNDEX(CONCAT(ia.particule,u.nom)) != SOUNDEX(ia.nom_patro))
693 OR u.prenom != ia.prenom OR (u.promo != ia.promo AND u.promo != ia.promo+1 AND u.promo != ia.promo-1)
694 ORDER BY u.promo,u.nom,u.prenom');
695 $page->assign('diffs', $res->fetchAllAssoc());
696
697 // gens à l'ax mais pas chez nous
698 $res = XDB::query(
699 'SELECT ia.promo,ia.nom,ia.nom_patro,ia.prenom
700 FROM identification_ax as ia
701 LEFT JOIN auth_user_md5 AS u ON u.matricule_ax = ia.matricule_ax
702 WHERE u.nom IS NULL');
703 $page->assign('mank', $res->fetchAllAssoc());
704
705 // gens chez nous et pas à l'ax
706 $res = XDB::query('SELECT promo,nom,prenom FROM auth_user_md5 WHERE matricule_ax IS NULL');
707 $page->assign('plus', $res->fetchAllAssoc());
708 }
709
710 function handler_deaths(&$page, $promo = 0, $validate = false) {
711 $page->changeTpl('admin/deces_promo.tpl');
712 $page->assign('xorg_title','Polytechnique.org - Administration - Deces');
713
714 if (!$promo)
715 $promo = Env::i('promo');
716 if (Env::has('sub10')) $promo -= 10;
717 if (Env::has('sub01')) $promo -= 1;
718 if (Env::has('add01')) $promo += 1;
719 if (Env::has('add10')) $promo += 10;
720
721 $page->assign('promo',$promo);
722
723 if ($validate) {
724 $new_deces = array();
725 $res = XDB::iterRow("SELECT user_id,matricule,nom,prenom,deces FROM auth_user_md5 WHERE promo = {?}", $promo);
726 while (list($uid,$mat,$nom,$prenom,$deces) = $res->next()) {
727 $val = Env::v($mat);
728 if($val == $deces || empty($val)) continue;
729 XDB::execute('UPDATE auth_user_md5 SET deces={?} WHERE matricule = {?}', $val, $mat);
730 $new_deces[] = array('name' => "$prenom $nom", 'date' => "$val");
731 if($deces=='0000-00-00' or empty($deces)) {
732 require_once('notifs.inc.php');
733 register_watch_op($uid, WATCH_DEATH, $val);
734 require_once('user.func.inc.php');
735 user_clear_all_subs($uid, false); // by default, dead ppl do not loose their email
736 }
737 }
738 $page->assign('new_deces',$new_deces);
739 }
740
741 $res = XDB::iterator('SELECT matricule, nom, prenom, deces FROM auth_user_md5 WHERE promo = {?} ORDER BY nom,prenom', $promo);
742 $page->assign('decedes', $res);
743 }
744
745 function handler_synchro_ax(&$page, $user = null, $action = null) {
746 $page->changeTpl('admin/synchro_ax.tpl');
747 $page->assign('xorg_title','Polytechnique.org - Administration - Synchro AX');
748
749 require_once('synchro_ax.inc.php');
750
751 if (is_ax_key_missing()) {
752 $page->assign('no_private_key', true);
753 $page->run();
754 }
755
756 require_once('user.func.inc.php');
757
758 if ($user)
759 $login = get_user_forlife($user);
760
761 if (Env::has('user')) {
762 $login = get_user_forlife(Env::v('user'));
763 if ($login === false) {
764 return;
765 }
766 }
767
768 if (Env::has('mat')) {
769 $res = XDB::query(
770 "SELECT alias
771 FROM aliases AS a
772 INNER JOIN auth_user_md5 AS u ON (a.id=u.user_id AND a.type='a_vie')
773 WHERE matricule={?}", Env::i('mat'));
774 $login = $res->fetchOneCell();
775 }
776
777 if ($login) {
778 if ($action == 'import') {
779 ax_synchronize($login, S::v('uid'));
780 }
781 // get details from user, but looking only info that can be seen by ax
782 $user = get_user_details($login, S::v('uid'), 'ax');
783 $userax= get_user_ax($user['matricule_ax']);
784 require_once 'profil.func.inc.php';
785 $diff = diff_user_details($userax, $user, 'ax');
786
787 $page->assign('x', $user);
788 $page->assign('diff', $diff);
789 }
790 }
791
792 function handler_validate(&$page, $action = 'list', $id = null)
793 {
794 $page->changeTpl('admin/valider.tpl');
795 $page->assign('xorg_title','Polytechnique.org - Administration - Valider une demande');
796 $page->addCssLink('nl.css');
797 $page->addJsLink('ajax.js');
798 require_once("validations.inc.php");
799
800
801 if ($action == 'edit' and !is_null($id)) {
802 $page->assign('preview_id', $id);
803 }
804
805 if(Env::has('uid') && Env::has('type') && Env::has('stamp')) {
806 $req = Validate::get_typed_request(Env::v('uid'), Env::v('type'), Env::v('stamp'));
807 if($req) { $req->handle_formu(); }
808 }
809
810 $r = XDB::iterator('SHOW COLUMNS FROM requests_answers');
811 while (($a = $r->next()) && $a['Field'] != 'category');
812 $page->assign('categories', $categories = explode(',', str_replace("'", '', substr($a['Type'], 5, -1))));
813
814 $hidden = array();
815 if (Post::has('hide')) {
816 $hide = array();
817 foreach ($categories as $cat)
818 if (!Post::v($cat)) {
819 $hidden[$cat] = 1;
820 $hide[] = $cat;
821 }
822 setcookie('hide_requests', join(',',$hide), time()+(count($hide)?25920000:(-3600)), '/', '', 0);
823 } elseif (Env::has('hide_requests')) {
824 foreach (explode(',',Env::v('hide_requests')) as $hide_type)
825 $hidden[$hide_type] = true;
826 }
827 $page->assign('hide_requests', $hidden);
828
829 $page->assign('vit', new ValidateIterator());
830 }
831
832 function handler_validate_answers(&$page, $action = 'list', $id = null) {
833 $page->assign('xorg_title','Polytechnique.org - Administration - Réponses automatiques de validation');
834 $page->assign('title', 'Gestion des réponses automatiques');
835 $table_editor = new PLTableEditor('admin/validate/answers','requests_answers','id');
836 $table_editor->describe('category','catégorie',true);
837 $table_editor->describe('title','titre',true);
838 $table_editor->describe('answer','texte',false);
839 $table_editor->apply($page, $action, $id);
840 }
841 function handler_skins(&$page, $action = 'list', $id = null) {
842 $page->assign('xorg_title','Polytechnique.org - Administration - Skins');
843 $page->assign('title', 'Gestion des skins');
844 $table_editor = new PLTableEditor('admin/skins','skins','id');
845 $table_editor->describe('name','nom',true);
846 $table_editor->describe('skin_tpl','nom du template',true);
847 $table_editor->describe('auteur','auteur',false);
848 $table_editor->describe('comment','commentaire',true);
849 $table_editor->describe('date','date',false);
850 $table_editor->describe('ext','extension du screenshot',false);
851 $table_editor->apply($page, $action, $id);
852 }
853 function handler_postfix_blacklist(&$page, $action = 'list', $id = null) {
854 $page->assign('xorg_title','Polytechnique.org - Administration - Postfix : Blacklist');
855 $page->assign('title', 'Blacklist de postfix');
856 $table_editor = new PLTableEditor('admin/postfix/blacklist','postfix_blacklist','email', true);
857 $table_editor->describe('reject_text','Texte de rejet',true);
858 $table_editor->describe('email','email',true);
859 $table_editor->apply($page, $action, $id);
860 }
861 function handler_postfix_whitelist(&$page, $action = 'list', $id = null) {
862 $page->assign('xorg_title','Polytechnique.org - Administration - Postfix : Whitelist');
863 $page->assign('title', 'Whitelist de postfix');
864 $table_editor = new PLTableEditor('admin/postfix/whitelist','postfix_whitelist','email', true);
865 $table_editor->describe('email','email',true);
866 $table_editor->apply($page, $action, $id);
867 }
868 function handler_mx_broken(&$page, $action = 'list', $id = null) {
869 $page->assign('xorg_title', 'Polytechnique.org - Administration - MX Défaillants');
870 $page->assign('title', 'MX Défaillant');
871 $table_editor = new PLTableEditor('admin/mx/broken', 'mx_watch', 'host', true);
872 $table_editor->describe('host', 'Masque', true);
873 $table_editor->describe('state', 'Niveau', true);
874 $table_editor->describe('text', 'Description du problème', false);
875 $table_editor->apply($page, $action, $id);
876 }
877 function handler_logger_actions(&$page, $action = 'list', $id = null) {
878 $page->assign('xorg_title','Polytechnique.org - Administration - Actions');
879 $page->assign('title', 'Gestion des actions de logger');
880 $table_editor = new PLTableEditor('admin/logger/actions','logger.actions','id');
881 $table_editor->describe('text','intitulé',true);
882 $table_editor->describe('description','description',true);
883 $table_editor->apply($page, $action, $id);
884 }
885 function handler_downtime(&$page, $action = 'list', $id = null) {
886 $page->assign('xorg_title','Polytechnique.org - Administration - Coupures');
887 $page->assign('title', 'Gestion des coupures');
888 $table_editor = new PLTableEditor('admin/downtime','coupures','id');
889 $table_editor->describe('debut','date',true);
890 $table_editor->describe('duree','durée',false);
891 $table_editor->describe('resume','résumé',true);
892 $table_editor->describe('services','services affectés',true);
893 $table_editor->describe('description','description',false);
894 $table_editor->apply($page, $action, $id);
895 }
896
897 function handler_wiki(&$page, $action='list', $wikipage='', $wikipage2='')
898 {
899 require_once 'wiki.inc.php';
900
901 // update wiki perms
902 if ($action == 'update') {
903 $perms_read = Post::v('read');
904 $perms_edot = Post::v('edit');
905 if ($perms_read || $perms_edit) {
906 foreach ($_POST as $wiki_page => $val) if ($val == 'on') {
907 $wiki_page = str_replace('_', '/', $wiki_page);
908 if (!$perms_read || !$perms_edit)
909 list($perms0, $perms1) = wiki_get_perms($wiki_page);
910 if ($perms_read)
911 $perms0 = $perms_read;
912 if ($perms_edit)
913 $perms1 = $perms_edit;
914 wiki_set_perms($wiki_page, $perms0, $perms1);
915 }
916 }
917 }
918
919 if ($action == 'delete' && $wikipage != '') {
920 if (wiki_delete_page($wikipage)) {
921 $page->trig("La page ".$wikipage." a été supprimée.");
922 } else {
923 $page->trig("Impossible de supprimer la page ".$wikipage.".");
924 }
925 }
926
927 if ($action == 'rename' && $wikipage != '' && $wikipage2 != '' && $wikipage != $wikipage2) {
928 if ($changedLinks = wiki_rename_page($wikipage, $wikipage2)) {
929 $s = 'La page <em>'.$wikipage.'</em> a été déplacée en <em>'.$wikipage2.'</em>.';
930 if (is_numeric($changedLinks)) {
931 $s .= $changedLinks.' lien'.(($changedLinks>1)?'s ont été modifiés.':' a été modifié.');
932 }
933 $page->trig($s);
934 } else {
935 $page->trig("Impossible de déplacer la page ".$wikipage);
936 }
937 }
938
939 $perms = wiki_perms_options();
940
941 // list wiki pages and their perms
942 $wiki_pages = array();
943 $dir = wiki_work_dir();
944 if (is_dir($dir)) {
945 if ($dh = opendir($dir)) {
946 while (($file = readdir($dh)) !== false) if (substr($file,0,1) >= 'A' && substr($file,0,1) <= 'Z') {
947 list($read,$edit) = wiki_get_perms($file);
948 $wiki_pages[$file] = array('read' => $perms[$read], 'edit' => $perms[$edit]);
949 if (is_file($dir . '/cache_' . wiki_filename($file) . '.tpl')) {
950 $wiki_pages[$file]['cached'] = true;
951 }
952 }
953 closedir($dh);
954 }
955 }
956 ksort($wiki_pages);
957 $wiki_tree = array();
958 foreach ($wiki_pages as $file => $desc) {
959 list($cat, $name) = explode('.', $file);
960 if (!isset($wiki_tree[$cat])) {
961 $wiki_tree[$cat] = array();
962 }
963 $wiki_tree[$cat][$name] = $desc;
964 }
965
966
967
968 $page->changeTpl('admin/wiki.tpl');
969 $page->addJsLink('jquery.js');
970 $page->assign('wiki_pages', $wiki_tree);
971 $page->assign('perms_opts', $perms);
972 }
973
974 function handler_ipwatch(&$page, $action = 'list', $ip = null)
975 {
976 $page->changeTpl('admin/ipwatcher.tpl');
977
978 $states = array('safe' => 'Ne pas surveiller',
979 'unsafe' => 'Surveiller les inscriptions',
980 'dangerous' => 'Surveiller tous les accès',
981 'ban' => 'Bannir cette adresse');
982 $page->assign('states', $states);
983
984 switch (Post::v('action')) {
985 case 'create':
986 if (trim(Post::v('ipN')) != '') {
987 Xdb::execute('INSERT IGNORE INTO ip_watch (ip, state, detection, last, uid, description)
988 VALUES ({?}, {?}, CURDATE(), NOW(), {?}, {?})',
989 trim(Post::v('ipN')), Post::v('stateN'), S::i('uid'), Post::v('descriptionN'));
990 };
991 break;
992
993 case 'edit':
994 Xdb::execute('UPDATE ip_watch
995 SET state = {?}, last = NOW(), uid = {?}, description = {?}
996 WHERE ip = {?}', Post::v('stateN'), S::i('uid'), Post::v('descriptionN'), Post::v('ipN'));
997 break;
998
999 default:
1000 if ($action == 'delete' && !is_null($ip)) {
1001 Xdb::execute('DELETE FROM emails_watch WHERE ip = {?}', $ip);
1002 }
1003 }
1004 if ($action != 'create' && $action != 'edit') {
1005 $action = 'list';
1006 }
1007 $page->assign('action', $action);
1008
1009 if ($action == 'list') {
1010 $sql = "SELECT w.ip, IF(w.ip = s.ip, s.host, s.forward_host), w.detection, w.state, a.alias AS forlife
1011 FROM ip_watch AS w
1012 LEFT JOIN logger.sessions AS s ON (s.ip = w.ip OR s.forward_ip = w.ip)
1013 LEFT JOIN aliases AS a ON (a.id = s.uid AND a.type = 'a_vie')
1014 GROUP BY w.ip, a.alias
1015 ORDER BY w.state, w.ip, a.alias";
1016 $it = Xdb::iterRow($sql);
1017
1018 $table = array();
1019 $props = array();
1020 while (list($ip, $host, $date, $state, $forlife) = $it->next()) {
1021 if (count($props) == 0 || $props['ip'] != $ip) {
1022 if (count($props) > 0) {
1023 $table[] = $props;
1024 }
1025 $props = array('ip' => $ip,
1026 'host' => $host,
1027 'detection' => $date,
1028 'state' => $state,
1029 'users' => array($forlife));
1030 } else {
1031 $props['users'][] = $forlife;
1032 }
1033 }
1034 if (count($props) > 0) {
1035 $table[] = $props;
1036 }
1037 $page->assign('table', $table);
1038 } elseif ($action == 'edit') {
1039 $sql = "SELECT w.detection, w.state, w.last, w.description,
1040 a1.alias AS edit, a2.alias AS forlife, s.host
1041 FROM ip_watch AS w
1042 LEFT JOIN aliases AS a1 ON (a1.id = w.uid AND a1.type = 'a_vie')
1043 LEFT JOIN logger.sessions AS s ON (w.ip = s.ip)
1044 LEFT JOIN aliases AS a2 ON (a2.id = s.uid AND a2.type = 'a_vie')
1045 WHERE w.ip = {?}
1046 GROUP BY a2.alias
1047 ORDER BY a2.alias";
1048 $it = Xdb::iterRow($sql, $ip);
1049
1050 $props = array();
1051 while (list($detection, $state, $last, $description, $edit, $forlife, $host) = $it->next()) {
1052 if (count($props) == 0) {
1053 $props = array('ip' => $ip,
1054 'host' => $host,
1055 'detection' => $detection,
1056 'state' => $state,
1057 'last' => $last,
1058 'description' => $description,
1059 'edit' => $edit,
1060 'users' => array($forlife));
1061 } else {
1062 $props['users'][] = $forlife;
1063 }
1064 }
1065 $page->assign('ip', $props);
1066 }
1067 }
1068
1069 function handler_icons(&$page)
1070 {
1071 $page->changeTpl('admin/icons.tpl');
1072 $dh = opendir('../htdocs/images/icons');
1073 if (!$dh) {
1074 $page->trig('Dossier des icones introuvables.');
1075 }
1076 $icons = array();
1077 while (($file = readdir($dh)) !== false) {
1078 if (strlen($file) > 4 && substr($file,-4) == '.gif') {
1079 array_push($icons, substr($file, 0, -4));
1080 }
1081 }
1082 $page->assign('icons', $icons);
1083 }
1084 }
1085
1086 // vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
1087 ?>
plat/al