7b97b378aaac94fc8a2e3a162d626352bd27c056
[platal.git] / modules / admin.php
1 <?php
2 /***************************************************************************
3 * Copyright (C) 2003-2007 Polytechnique.org *
4 * http://opensource.polytechnique.org/ *
5 * *
6 * This program is free software; you can redistribute it and/or modify *
7 * it under the terms of the GNU General Public License as published by *
8 * the Free Software Foundation; either version 2 of the License, or *
9 * (at your option) any later version. *
10 * *
11 * This program is distributed in the hope that it will be useful, *
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
14 * GNU General Public License for more details. *
15 * *
16 * You should have received a copy of the GNU General Public License *
17 * along with this program; if not, write to the Free Software *
18 * Foundation, Inc., *
19 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
20 ***************************************************************************/
21
22 class AdminModule extends PLModule
23 {
24 function handlers()
25 {
26 return array(
27 'phpinfo' => $this->make_hook('phpinfo', AUTH_MDP, 'admin'),
28 'admin' => $this->make_hook('default', AUTH_MDP, 'admin'),
29 'admin/ax-xorg' => $this->make_hook('ax_xorg', AUTH_MDP, 'admin'),
30 'admin/deaths' => $this->make_hook('deaths', AUTH_MDP, 'admin'),
31 'admin/downtime' => $this->make_hook('downtime', AUTH_MDP, 'admin'),
32 'admin/homonyms' => $this->make_hook('homonyms', AUTH_MDP, 'admin'),
33 'admin/logger' => $this->make_hook('logger', AUTH_MDP, 'admin'),
34 'admin/logger/actions' => $this->make_hook('logger_actions', AUTH_MDP, 'admin'),
35 'admin/postfix/blacklist' => $this->make_hook('postfix_blacklist', AUTH_MDP, 'admin'),
36 'admin/postfix/delayed' => $this->make_hook('postfix_delayed', AUTH_MDP, 'admin'),
37 'admin/postfix/regexp_bounces' => $this->make_hook('postfix_regexpsbounces', AUTH_MDP, 'admin'),
38 'admin/postfix/whitelist' => $this->make_hook('postfix_whitelist', AUTH_MDP, 'admin'),
39 'admin/mx/broken' => $this->make_hook('mx_broken', AUTH_MDP, 'admin'),
40 'admin/skins' => $this->make_hook('skins', AUTH_MDP, 'admin'),
41 'admin/synchro_ax' => $this->make_hook('synchro_ax', AUTH_MDP, 'admin'),
42 'admin/user' => $this->make_hook('user', AUTH_MDP, 'admin'),
43 'admin/promo' => $this->make_hook('promo', AUTH_MDP, 'admin'),
44 'admin/validate' => $this->make_hook('validate', AUTH_MDP, 'admin'),
45 'admin/validate/answers' => $this->make_hook('validate_answers', AUTH_MDP, 'admin'),
46 'admin/wiki' => $this->make_hook('wiki', AUTH_MDP, 'admin'),
47 'admin/ipwatch' => $this->make_hook('ipwatch', AUTH_MDP, 'admin'),
48 'admin/icons' => $this->make_hook('icons', AUTH_MDP, 'admin'),
49 );
50 }
51
52 function handler_phpinfo(&$page)
53 {
54 phpinfo();
55 exit;
56 }
57
58 function handler_default(&$page)
59 {
60 $page->changeTpl('admin/index.tpl');
61 $page->assign('xorg_title','Polytechnique.org - Administration');
62 }
63
64 function handler_postfix_delayed(&$page)
65 {
66 $page->changeTpl('admin/postfix_delayed.tpl');
67 $page->assign('xorg_title','Polytechnique.org - Administration - Postfix : Retardés');
68
69 if (Env::has('del')) {
70 $crc = Env::v('crc');
71 XDB::execute("UPDATE postfix_mailseen SET release = 'del' WHERE crc = {?}", $crc);
72 $page->trig($crc." verra tous ses mails supprimés !");
73 } elseif (Env::has('ok')) {
74 $crc = Env::v('crc');
75 XDB::execute("UPDATE postfix_mailseen SET release = 'ok' WHERE crc = {?}", $crc);
76 $page->trig($crc." a le droit de passer !");
77 }
78
79 $sql = XDB::iterator(
80 "SELECT crc, nb, update_time, create_time,
81 FIND_IN_SET('del', release) AS del,
82 FIND_IN_SET('ok', release) AS ok
83 FROM postfix_mailseen
84 WHERE nb >= 30
85 ORDER BY release != ''");
86
87 $page->assign_by_ref('mails', $sql);
88 }
89
90 function handler_postfix_regexpsbounces(&$page, $new = null) {
91 $page->changeTpl('admin/emails_bounces_re.tpl');
92 $page->assign('xorg_title','Polytechnique.org - Administration - Postfix : Regexps Bounces');
93 $page->assign('new', $new);
94
95 if (Post::has('submit')) {
96 foreach (Env::v('lvl') as $id=>$val) {
97 XDB::query(
98 "REPLACE INTO emails_bounces_re (id,pos,lvl,re,text) VALUES ({?}, {?}, {?}, {?}, {?})",
99 $id, $_POST['pos'][$id], $_POST['lvl'][$id], $_POST['re'][$id], $_POST['text'][$id]
100 );
101 }
102 }
103
104 $page->assign('bre', XDB::iterator("SELECT * FROM emails_bounces_re ORDER BY pos"));
105 }
106
107 // {{{ logger view
108
109 /** Retrieves the available days for a given year and month.
110 * Obtain a list of days of the given month in the given year
111 * that are within the range of dates that we have log entries for.
112 *
113 * @param integer year
114 * @param integer month
115 * @return array days in that month we have log entries covering.
116 * @private
117 */
118 function _getDays($year, $month)
119 {
120 // give a 'no filter' option
121 $months[0] = "----";
122
123 if ($year && $month) {
124 $day_max = Array(-1, 31, checkdate(2, 29, $year) ? 29 : 28 , 31,
125 30, 31, 30, 31, 31, 30, 31, 30, 31);
126 $res = XDB::query("SELECT YEAR (MAX(start)), YEAR (MIN(start)),
127 MONTH(MAX(start)), MONTH(MIN(start)),
128 DAYOFMONTH(MAX(start)),
129 DAYOFMONTH(MIN(start))
130 FROM logger.sessions");
131 list($ymax, $ymin, $mmax, $mmin, $dmax, $dmin) = $res->fetchOneRow();
132
133 if (($year < $ymin) || ($year == $ymin && $month < $mmin)) {
134 return array();
135 }
136
137 if (($year > $ymax) || ($year == $ymax && $month > $mmax)) {
138 return array();
139 }
140
141 $min = ($year==$ymin && $month==$mmin) ? intval($dmin) : 1;
142 $max = ($year==$ymax && $month==$mmax) ? intval($dmax) : $day_max[$month];
143
144 for($i = $min; $i<=$max; $i++) {
145 $days[$i] = $i;
146 }
147 }
148 return $days;
149 }
150
151
152 /** Retrieves the available months for a given year.
153 * Obtains a list of month numbers that are within the timeframe that
154 * we have log entries for.
155 *
156 * @param integer year
157 * @return array List of month numbers we have log info for.
158 * @private
159 */
160 function _getMonths($year)
161 {
162 // give a 'no filter' option
163 $months[0] = "----";
164
165 if ($year) {
166 $res = XDB::query("SELECT YEAR (MAX(start)), YEAR (MIN(start)),
167 MONTH(MAX(start)), MONTH(MIN(start))
168 FROM logger.sessions");
169 list($ymax, $ymin, $mmax, $mmin) = $res->fetchOneRow();
170
171 if (($year < $ymin) || ($year > $ymax)) {
172 return array();
173 }
174
175 $min = $year == $ymin ? intval($mmin) : 1;
176 $max = $year == $ymax ? intval($mmax) : 12;
177
178 for($i = $min; $i<=$max; $i++) {
179 $months[$i] = $i;
180 }
181 }
182 return $months;
183 }
184
185
186 /** Retrieves the available years.
187 * Obtains a list of years that we have log entries covering.
188 *
189 * @return array years we have log entries for.
190 * @private
191 */
192 function _getYears()
193 {
194 // give a 'no filter' option
195 $years[0] = "----";
196
197 // retrieve available years
198 $res = XDB::query("select YEAR(MAX(start)), YEAR(MIN(start)) FROM logger.sessions");
199 list($max, $min) = $res->fetchOneRow();
200
201 for($i = intval($min); $i<=$max; $i++) {
202 $years[$i] = $i;
203 }
204 return $years;
205 }
206
207
208 /** Make a where clause to get a user's sessions.
209 * Prepare the where clause request that will retrieve the sessions.
210 *
211 * @param $year INTEGER Only get log entries made during the given year.
212 * @param $month INTEGER Only get log entries made during the given month.
213 * @param $day INTEGER Only get log entries made during the given day.
214 * @param $uid INTEGER Only get log entries referring to the given user ID.
215 *
216 * @return STRING the WHERE clause of a query, including the 'WHERE' keyword
217 * @private
218 */
219 function _makeWhere($year, $month, $day, $uid)
220 {
221 // start constructing the "where" clause
222 $where = array();
223
224 if ($uid)
225 array_push($where, "uid='$uid'");
226
227 // we were given at least a year
228 if ($year) {
229 if ($day) {
230 $dmin = mktime(0, 0, 0, $month, $day, $year);
231 $dmax = mktime(0, 0, 0, $month, $day+1, $year);
232 } elseif ($month) {
233 $dmin = mktime(0, 0, 0, $month, 1, $year);
234 $dmax = mktime(0, 0, 0, $month+1, 1, $year);
235 } else {
236 $dmin = mktime(0, 0, 0, 1, 1, $year);
237 $dmax = mktime(0, 0, 0, 1, 1, $year+1);
238 }
239 $where[] = "start >= " . date("Ymd000000", $dmin);
240 $where[] = "start < " . date("Ymd000000", $dmax);
241 }
242
243 if (!empty($where)) {
244 return ' WHERE ' . implode($where, " AND ");
245 } else {
246 return '';
247 }
248 // WE know it's totally reversed, so better use array_reverse than a SORT BY start DESC
249 }
250
251 // }}}
252
253 function handler_logger(&$page, $action = null, $arg = null) {
254 if ($action == 'session') {
255
256 // we are viewing a session
257 $res = XDB::query("SELECT ls.*, a.alias AS username, sa.alias AS suer
258 FROM logger.sessions AS ls
259 LEFT JOIN aliases AS a ON (a.id = ls.uid AND a.type='a_vie')
260 LEFT JOIN aliases AS sa ON (sa.id = ls.suid AND sa.type='a_vie')
261 WHERE ls.id = {?}", $arg);
262
263 $page->assign('session', $a = $res->fetchOneAssoc());
264
265 $res = XDB::iterator('SELECT a.text, e.data, e.stamp
266 FROM logger.events AS e
267 LEFT JOIN logger.actions AS a ON e.action=a.id
268 WHERE e.session={?}', $arg);
269 while ($myarr = $res->next()) {
270 $page->append('events', $myarr);
271 }
272
273 } else {
274 $loguser = $action == 'user' ? $arg : Env::v('loguser');
275
276 $res = XDB::query('SELECT id FROM aliases WHERE alias={?}',
277 $loguser);
278 $loguid = $res->fetchOneCell();
279
280 if ($loguid) {
281 $year = Env::i('year');
282 $month = Env::i('month');
283 $day = Env::i('day');
284 } else {
285 $year = Env::i('year', intval(date('Y')));
286 $month = Env::i('month', intval(date('m')));
287 $day = Env::i('day', intval(date('d')));
288 }
289
290 if (!$year)
291 $month = 0;
292 if (!$month)
293 $day = 0;
294
295 // smarty assignments
296 // retrieve available years
297 $page->assign('years', $this->_getYears());
298 $page->assign('year', $year);
299
300 // retrieve available months for the current year
301 $page->assign('months', $this->_getMonths($year));
302 $page->assign('month', $month);
303
304 // retrieve available days for the current year and month
305 $page->assign('days', $this->_getDays($year, $month));
306 $page->assign('day', $day);
307
308 $page->assign('loguser', $loguser);
309 // smarty assignments
310
311 if ($loguid || $year) {
312
313 // get the requested sessions
314 $where = $this->_makeWhere($year, $month, $day, $loguid);
315 $select = "SELECT s.id, s.start, s.uid,
316 a.alias as username
317 FROM logger.sessions AS s
318 LEFT JOIN aliases AS a ON (a.id = s.uid AND a.type='a_vie')
319 $where
320 ORDER BY start DESC";
321 $res = XDB::iterator($select);
322
323 $sessions = array();
324 while ($mysess = $res->next()) {
325 $mysess['events'] = array();
326 $sessions[$mysess['id']] = $mysess;
327 }
328 array_reverse($sessions);
329
330 // attach events
331 $sql = "SELECT s.id, a.text
332 FROM logger.sessions AS s
333 LEFT JOIN logger.events AS e ON(e.session=s.id)
334 INNER JOIN logger.actions AS a ON(a.id=e.action)
335 $where";
336
337 $res = XDB::iterator($sql);
338 while ($event = $res->next()) {
339 array_push($sessions[$event['id']]['events'], $event['text']);
340 }
341 $page->assign_by_ref('sessions', $sessions);
342 } else {
343 $page->assign('msg_nofilters', "Sélectionner une annuée et/ou un utilisateur");
344 }
345 }
346
347 $page->changeTpl('admin/logger-view.tpl');
348
349 $page->assign('xorg_title','Polytechnique.org - Administration - Logs des sessions');
350 }
351
352 function handler_user(&$page, $login = false)
353 {
354 $page->changeTpl('admin/utilisateurs.tpl');
355 $page->assign('xorg_title','Polytechnique.org - Administration - Edit/Su/Log');
356 require_once("emails.inc.php");
357 require_once("user.func.inc.php");
358
359 if (S::has('suid')) {
360 $page->kill("Déjà en SUID !!!");
361 }
362
363 if (Env::has('user_id')) {
364 $login = get_user_forlife(Env::i('user_id'));
365 if (empty($login)) {
366 $login = Env::i('user_id');
367 }
368 } elseif (Env::has('login')) {
369 $login = get_user_forlife(Env::v('login'));
370 }
371
372 if(Env::has('logs_button') && $login) {
373 pl_redirect("admin/logger?loguser=$login&year=".date('Y')."&month=".date('m'));
374 }
375
376 if (Env::has('ax_button') && $login) {
377 pl_redirect("admin/synchro_ax/$login");
378 }
379
380 if(Env::has('suid_button') && $login) {
381 $_SESSION['log']->log("suid_start", "login by ".S::v('forlife'));
382 $_SESSION['suid'] = $_SESSION;
383 $r = XDB::query("SELECT id FROM aliases WHERE alias={?}", $login);
384 if($uid = $r->fetchOneCell()) {
385 start_connexion($uid,true);
386 pl_redirect("");
387 }
388 }
389
390 if ($login) {
391 if (is_numeric($login)) {
392 $r = XDB::query("SELECT *, a.alias AS forlife,
393 FIND_IN_SET('watch', u.flags) AS watch, FIND_IN_SET('femme', u.flags) AS sexe,
394 (year(naissance) > promo - 15 or year(naissance) < promo - 25) AS naiss_err
395 FROM auth_user_md5 AS u
396 LEFT JOIN aliases AS a ON (a.id = u.user_id AND type= 'a_vie')
397 WHERE u.user_id = {?}", $login);
398 } else {
399 $r = XDB::query("SELECT *, a.alias AS forlife,
400 FIND_IN_SET('watch', u.flags) AS watch, FIND_IN_SET('femme', u.flags) AS sexe,
401 (year(naissance) > promo - 15 or year(naissance) < promo - 25) AS naiss_err
402 FROM auth_user_md5 AS u
403 INNER JOIN aliases AS a ON ( a.id = u.user_id AND a.alias={?} AND type!='homonyme' )", $login);
404 }
405 $mr = $r->fetchOneAssoc();
406
407 if (!is_numeric($login)) { //user has a forlife
408 $redirect = new Redirect($mr['user_id']);
409 }
410
411 // Check if there was a submission
412 foreach($_POST as $key => $val) {
413 switch ($key) {
414 case "add_fwd":
415 $email = trim(Env::v('email'));
416 if (!isvalid_email_redirection($email)) {
417 $page->trig("invalid email $email");
418 } else {
419 $redirect->add_email($email);
420 $page->trig("Ajout de $email effectué");
421 }
422 break;
423
424 case "del_fwd":
425 if (!empty($val)) {
426 $redirect->delete_email($val);
427 }
428 break;
429
430 case "del_alias":
431 if (!empty($val)) {
432 XDB::execute("DELETE FROM aliases
433 WHERE id={?} AND alias={?}
434 AND type!='a_vie' AND type!='homonyme'", $mr['user_id'], $val);
435 XDB::execute("UPDATE emails
436 SET rewrite = ''
437 WHERE uid = {?} AND rewrite LIKE CONCAT({?}, '@%')",
438 $mr['user_id'], $val);
439 fix_bestalias($mr['user_id']);
440 $page->trig($val." a été supprimé");
441 }
442 break;
443 case "activate_fwd":
444 if (!empty($val)) {
445 $redirect->modify_one_email($val, true);
446 }
447 break;
448 case "deactivate_fwd":
449 if (!empty($val)) {
450 $redirect->modify_one_email($val, false);
451 }
452 break;
453 case "disable_fwd":
454 $redirect->disable();
455 break;
456 case "enable_fwd":
457 $redirect->enable();
458 break;
459 case "clean_fwd":
460 if (!empty($val)) {
461 $redirect->cleanErrors($val);
462 }
463 break;
464 case "add_alias":
465 global $globals;
466 $alias = trim(Env::v('email'));
467 if (strpos($alias, '@') !== false) {
468 list($alias, $domain) = explode('@', $alias);
469 } else {
470 $domain = $globals->mail->domain;
471 }
472 if (!preg_match('/[-a-z0-9\.]+/s', $alias)) {
473 $page->trig("'$alias' n'est pas un alias valide");
474 }
475 if ($domain == $globals->mail->alias_dom || $domain == $globals->mail->alias_dom2) {
476 $req = new AliasReq($mr['user_id'], $alias, 'Admin request', false);
477 if ($req->commit()) {
478 $page->trig("Nouvel alias '$alias@$domain' attribué");
479 } else {
480 $page->trig("Impossible d'ajouter l'alias '$alias@$domain', il est probablement déjà attribué");
481 }
482 } elseif ($domain == $globals->mail->domain || $domain == $globals->mail->domain2) {
483 if (XDB::execute("INSERT INTO aliases (id,alias,type) VALUES ({?}, {?}, 'alias')",
484 $mr['user_id'], $alias)) {
485 $page->trig("Nouvel alias '$alias' ajouté");
486 } else {
487 $page->trig("Impossible d'ajouter l'alias '$alias', il est probablement déjà attribué");
488 }
489 } else {
490 $page->trig("Le domaine '$domain' n'est pas valide");
491 }
492 break;
493
494 case "best":
495 // 'bestalias' is the first bit of the set : 1
496 // 255 is the max for flags (8 sets max)
497 XDB::execute("UPDATE aliases SET flags= flags & (255 - 1) WHERE id={?}", $mr['user_id']);
498 XDB::execute("UPDATE aliases
499 SET flags= flags | 1
500 WHERE id={?} AND alias={?}", $mr['user_id'], $val);
501 break;
502
503
504 // Editer un profil
505 case "u_edit":
506 require_once('secure_hash.inc.php');
507 $pass_encrypted = Env::v('newpass_clair') != "********" ? hash_encrypt(Env::v('newpass_clair')) : Env::v('passw');
508 $naiss = Env::v('naissanceN');
509 $deces = Env::v('decesN');
510 $perms = Env::v('permsN');
511 $prenm = Env::v('prenomN');
512 $nom = Env::v('nomN');
513 $promo = Env::i('promoN');
514 $sexe = Env::v('sexeN');
515 $comm = trim(Env::v('commentN'));
516 $watch = Env::v('watchN');
517 $flags = '';
518 if ($sexe) {
519 $flags = 'femme';
520 }
521 if ($watch) {
522 if ($flags) {
523 $flags .= ',';
524 }
525 $flags .= 'watch';
526 }
527
528 if ($watch && !$comm) {
529 $page->trig("Il est nécessaire de mettre un commentaire pour surveiller un compte");
530 break;
531 }
532
533 $watch = 'SELECT naissance, deces, password, perms,
534 prenom, nom, flags, promo, comment
535 FROM auth_user_md5
536 WHERE user_id = ' . $mr['user_id'];
537 $res = XDB::query($watch);
538 $old_fields = $res->fetchOneAssoc();
539 $query = "UPDATE auth_user_md5 SET
540 naissance = '$naiss',
541 deces = '$deces',
542 password = '$pass_encrypted',
543 perms = '$perms',
544 prenom = '".addslashes($prenm)."',
545 nom = '".addslashes($nom)."',
546 flags = '$flags',
547 promo = $promo,
548 comment = '".addslashes($comm)."'
549 WHERE user_id = '{$mr['user_id']}'";
550 if (XDB::execute($query)) {
551 user_reindex($mr['user_id']);
552
553 $res = XDB::query($watch);
554 $new_fields = $res->fetchOneAssoc();
555
556 $mailer = new PlMailer("admin/mail_intervention.tpl");
557 $mailer->assign("user", S::v('forlife'));
558 $mailer->assign('old', $old_fields);
559 $mailer->assign('new', $new_fields);
560 $mailer->send();
561
562 $page->trig("updaté correctement.");
563 }
564 if (Env::v('nomusageN') != $mr['nom_usage']) {
565 require_once "xorg.misc.inc.php";
566 set_new_usage($mr['user_id'], Env::v('nomusageN'), make_username(Env::v('prenomN'), Env::v('nomusageN')));
567 }
568 if (Env::v('decesN') != $mr['deces']) {
569 require_once 'notifs.inc.php';
570 register_watch_op($mr['user_id'], WATCH_DEATH, $mr['deces']);
571 user_clear_all_subs($mr['user_id'], false);
572 }
573 $r = XDB::query("SELECT *, a.alias AS forlife,
574 FIND_IN_SET('watch', u.flags) AS watch, FIND_IN_SET('femme', u.flags) AS sexe
575 FROM auth_user_md5 AS u
576 LEFT JOIN aliases AS a ON (a.id = u.user_id AND type= 'a_vie')
577 WHERE u.user_id = {?}", $mr['user_id']);
578 $mr = $r->fetchOneAssoc();
579 break;
580
581 // DELETE FROM auth_user_md5
582 case "u_kill":
583 user_clear_all_subs($mr['user_id']);
584 $page->trig("'{$mr['user_id']}' a été désinscrit !");
585 $mailer = new PlMailer("admin/mail_intervention.tpl");
586 $mailer->assign("user", S::v('forlife'));
587 $mailer->assign("query", "\nUtilisateur $login désinscrit");
588 $mailer->send();
589 break;
590 }
591 }
592
593 $res = XDB::query("SELECT start, host
594 FROM logger.sessions
595 WHERE uid={?} AND suid=0
596 ORDER BY start DESC
597 LIMIT 1", $mr['user_id']);
598 list($lastlogin,$host) = $res->fetchOneRow();
599 $page->assign('lastlogin', $lastlogin);
600 $page->assign('host', $host);
601
602 $res = XDB::iterator("SELECT alias
603 FROM virtual
604 INNER JOIN virtual_redirect USING(vid)
605 WHERE type = 'user' AND redirect LIKE '" . $mr['forlife'] . "@%'");
606 $page->assign('virtuals', $res);
607
608 $page->assign('aliases', XDB::iterator(
609 "SELECT alias, type='a_vie' AS for_life,FIND_IN_SET('bestalias',flags) AS best,expire
610 FROM aliases
611 WHERE id = {?} AND type!='homonyme'
612 ORDER BY type!= 'a_vie'", $mr["user_id"]));
613 if ($mr['perms'] != 'pending' && isset($redirect)) {
614 $page->assign('emails', $redirect->emails);
615 }
616
617 $page->assign('mr',$mr);
618 }
619 }
620
621 function getMatricule($line, $key)
622 {
623 $mat = $line['matricule'];
624 $year = intval(substr($mat, 0, 3));
625 $rang = intval(substr($mat, 3, 3));
626 if ($year > 200) { $year /= 10; };
627 if ($year < 96) {
628 return null;
629 } else {
630 return sprintf('%04u%04u', 1900+$year, $rang);
631 }
632 }
633
634 function handler_promo(&$page, $action = null, $promo = null)
635 {
636 if (Env::has('promo')) {
637 if(Env::i('promo') > 1900 && Env::i('promo') < 2050) {
638 $action = Env::v('valid_promo') == 'Ajouter des membres' ? 'add' : 'ax';
639 pl_redirect('admin/promo/' . $action . '/' . Env::i('promo'));
640 } else {
641 $page->trig('Promo non valide');
642 }
643 }
644
645 $page->changeTpl('admin/promo.tpl');
646 if ($promo > 1900 && $promo < 2050 && ($action == 'add' || $action == 'ax')) {
647 $page->assign('promo', $promo);
648 } else {
649 return;
650 }
651
652 $importer = new CSVImporter('auth_user_md5', 'matricule');
653 $importer->registerFunction('matricule', 'matricle Ecole vers X.org', array($this, 'getMatricule'));
654 switch ($action) {
655 case 'add':
656 $fields = array('nom', 'nom_ini', 'prenom', 'naissance_ini',
657 'prenom_ini', 'promo', 'promo_sortie', 'flags',
658 'matricule', 'matricule_ax', 'perms');
659 $importer->forceValue('promo', $promo);
660 $importer->forceValue('promo_sortie', $promo + 3);
661 break;
662 case 'ax':
663 $fields = array('matricule', 'matricule_ax');
664 break;
665 }
666 $importer->apply($page, "admin/promo/$action/$promo", $fields);
667 }
668
669 function handler_homonyms(&$page, $op = 'list', $target = null) {
670 $page->changeTpl('admin/homonymes.tpl');
671 $page->assign('xorg_title','Polytechnique.org - Administration - Homonymes');
672 require_once("homonymes.inc.php");
673
674 if ($target) {
675 if (! list($prenom,$nom,$forlife,$loginbis) = select_if_homonyme($target)) {
676 $target=0;
677 } else {
678 $page->assign('nom',$nom);
679 $page->assign('prenom',$prenom);
680 $page->assign('forlife',$forlife);
681 $page->assign('loginbis',$loginbis);
682 }
683 }
684
685 $page->assign('op',$op);
686 $page->assign('target',$target);
687
688 // on a un $target valide, on prepare les mails
689 if ($target) {
690
691 // on examine l'op a effectuer
692 switch ($op) {
693 case 'mail':
694 send_warning_homonyme($prenom, $nom, $forlife, $loginbis);
695 switch_bestalias($target, $loginbis);
696 $op = 'list';
697 break;
698 case 'correct':
699 switch_bestalias($target, $loginbis);
700 XDB::execute("UPDATE aliases SET type='homonyme',expire=NOW() WHERE alias={?}", $loginbis);
701 XDB::execute("REPLACE INTO homonymes (homonyme_id,user_id) VALUES({?},{?})", $target, $target);
702 send_robot_homonyme($prenom, $nom, $forlife, $loginbis);
703 $op = 'list';
704 break;
705 }
706 }
707
708 if ($op == 'list') {
709 $res = XDB::iterator(
710 "SELECT a.alias AS homonyme,s.id AS user_id,s.alias AS forlife,
711 promo,prenom,nom,
712 IF(h.homonyme_id=s.id, a.expire, NULL) AS expire,
713 IF(h.homonyme_id=s.id, a.type, NULL) AS type
714 FROM aliases AS a
715 LEFT JOIN homonymes AS h ON (h.homonyme_id = a.id)
716 INNER JOIN aliases AS s ON (s.id = h.user_id AND s.type='a_vie')
717 INNER JOIN auth_user_md5 AS u ON (s.id=u.user_id)
718 WHERE a.type='homonyme' OR a.expire!=''
719 ORDER BY a.alias,promo");
720 $hnymes = Array();
721 while ($tab = $res->next()) {
722 $hnymes[$tab['homonyme']][] = $tab;
723 }
724 $page->assign_by_ref('hnymes',$hnymes);
725 }
726 }
727
728 function handler_ax_xorg(&$page) {
729 $page->changeTpl('admin/ax-xorg.tpl');
730 $page->assign('xorg_title','Polytechnique.org - Administration - AX/X.org');
731
732 // liste des différences
733 $res = XDB::query(
734 'SELECT u.promo,u.nom AS nom,u.prenom AS prenom,ia.nom AS nomax,ia.prenom AS prenomax,u.matricule AS mat,ia.matricule_ax AS matax
735 FROM auth_user_md5 AS u
736 INNER JOIN identification_ax AS ia ON u.matricule_ax = ia.matricule_ax
737 WHERE (SOUNDEX(u.nom) != SOUNDEX(ia.nom) AND SOUNDEX(CONCAT(ia.particule,u.nom)) != SOUNDEX(ia.nom)
738 AND SOUNDEX(u.nom) != SOUNDEX(ia.nom_patro) AND SOUNDEX(CONCAT(ia.particule,u.nom)) != SOUNDEX(ia.nom_patro))
739 OR u.prenom != ia.prenom OR (u.promo != ia.promo AND u.promo != ia.promo+1 AND u.promo != ia.promo-1)
740 ORDER BY u.promo,u.nom,u.prenom');
741 $page->assign('diffs', $res->fetchAllAssoc());
742
743 // gens à l'ax mais pas chez nous
744 $res = XDB::query(
745 'SELECT ia.promo,ia.nom,ia.nom_patro,ia.prenom
746 FROM identification_ax as ia
747 LEFT JOIN auth_user_md5 AS u ON u.matricule_ax = ia.matricule_ax
748 WHERE u.nom IS NULL');
749 $page->assign('mank', $res->fetchAllAssoc());
750
751 // gens chez nous et pas à l'ax
752 $res = XDB::query('SELECT promo,nom,prenom FROM auth_user_md5 WHERE matricule_ax IS NULL');
753 $page->assign('plus', $res->fetchAllAssoc());
754 }
755
756 function handler_deaths(&$page, $promo = 0, $validate = false) {
757 $page->changeTpl('admin/deces_promo.tpl');
758 $page->assign('xorg_title','Polytechnique.org - Administration - Deces');
759
760 if (!$promo)
761 $promo = Env::i('promo');
762 if (Env::has('sub10')) $promo -= 10;
763 if (Env::has('sub01')) $promo -= 1;
764 if (Env::has('add01')) $promo += 1;
765 if (Env::has('add10')) $promo += 10;
766
767 $page->assign('promo',$promo);
768
769 if ($validate) {
770 $new_deces = array();
771 $res = XDB::iterRow("SELECT user_id,matricule,nom,prenom,deces FROM auth_user_md5 WHERE promo = {?}", $promo);
772 while (list($uid,$mat,$nom,$prenom,$deces) = $res->next()) {
773 $val = Env::v($mat);
774 if($val == $deces || empty($val)) continue;
775 XDB::execute('UPDATE auth_user_md5 SET deces={?} WHERE matricule = {?}', $val, $mat);
776 $new_deces[] = array('name' => "$prenom $nom", 'date' => "$val");
777 if($deces=='0000-00-00' or empty($deces)) {
778 require_once('notifs.inc.php');
779 register_watch_op($uid, WATCH_DEATH, $val);
780 require_once('user.func.inc.php');
781 user_clear_all_subs($uid, false); // by default, dead ppl do not loose their email
782 }
783 }
784 $page->assign('new_deces',$new_deces);
785 }
786
787 $res = XDB::iterator('SELECT matricule, nom, prenom, deces FROM auth_user_md5 WHERE promo = {?} ORDER BY nom,prenom', $promo);
788 $page->assign('decedes', $res);
789 }
790
791 function handler_synchro_ax(&$page, $user = null, $action = null) {
792 $page->changeTpl('admin/synchro_ax.tpl');
793 $page->assign('xorg_title','Polytechnique.org - Administration - Synchro AX');
794
795 require_once('synchro_ax.inc.php');
796
797 if (is_ax_key_missing()) {
798 $page->assign('no_private_key', true);
799 $page->run();
800 }
801
802 require_once('user.func.inc.php');
803
804 if ($user)
805 $login = get_user_forlife($user);
806
807 if (Env::has('user')) {
808 $login = get_user_forlife(Env::v('user'));
809 if ($login === false) {
810 return;
811 }
812 }
813
814 if (Env::has('mat')) {
815 $res = XDB::query(
816 "SELECT alias
817 FROM aliases AS a
818 INNER JOIN auth_user_md5 AS u ON (a.id=u.user_id AND a.type='a_vie')
819 WHERE matricule={?}", Env::i('mat'));
820 $login = $res->fetchOneCell();
821 }
822
823 if ($login) {
824 if ($action == 'import') {
825 ax_synchronize($login, S::v('uid'));
826 }
827 // get details from user, but looking only info that can be seen by ax
828 $user = get_user_details($login, S::v('uid'), 'ax');
829 $userax= get_user_ax($user['matricule_ax']);
830 require_once 'profil.func.inc.php';
831 $diff = diff_user_details($userax, $user, 'ax');
832
833 $page->assign('x', $user);
834 $page->assign('diff', $diff);
835 }
836 }
837
838 function handler_validate(&$page, $action = 'list', $id = null)
839 {
840 $page->changeTpl('admin/valider.tpl');
841 $page->assign('xorg_title','Polytechnique.org - Administration - Valider une demande');
842 $page->addCssLink('nl.css');
843 $page->addJsLink('ajax.js');
844 require_once("validations.inc.php");
845
846
847 if ($action == 'edit' and !is_null($id)) {
848 $page->assign('preview_id', $id);
849 }
850
851 if(Env::has('uid') && Env::has('type') && Env::has('stamp')) {
852 $req = Validate::get_typed_request(Env::v('uid'), Env::v('type'), Env::v('stamp'));
853 if($req) { $req->handle_formu(); }
854 }
855
856 $r = XDB::iterator('SHOW COLUMNS FROM requests_answers');
857 while (($a = $r->next()) && $a['Field'] != 'category');
858 $page->assign('categories', $categories = explode(',', str_replace("'", '', substr($a['Type'], 5, -1))));
859
860 $hidden = array();
861 if (Post::has('hide')) {
862 $hide = array();
863 foreach ($categories as $cat)
864 if (!Post::v($cat)) {
865 $hidden[$cat] = 1;
866 $hide[] = $cat;
867 }
868 setcookie('hide_requests', join(',',$hide), time()+(count($hide)?25920000:(-3600)), '/', '', 0);
869 } elseif (Env::has('hide_requests')) {
870 foreach (explode(',',Env::v('hide_requests')) as $hide_type)
871 $hidden[$hide_type] = true;
872 }
873 $page->assign('hide_requests', $hidden);
874
875 $page->assign('vit', new ValidateIterator());
876 }
877
878 function handler_validate_answers(&$page, $action = 'list', $id = null) {
879 $page->assign('xorg_title','Polytechnique.org - Administration - Réponses automatiques de validation');
880 $page->assign('title', 'Gestion des réponses automatiques');
881 $table_editor = new PLTableEditor('admin/validate/answers','requests_answers','id');
882 $table_editor->describe('category','catégorie',true);
883 $table_editor->describe('title','titre',true);
884 $table_editor->describe('answer','texte',false);
885 $table_editor->apply($page, $action, $id);
886 }
887 function handler_skins(&$page, $action = 'list', $id = null) {
888 $page->assign('xorg_title','Polytechnique.org - Administration - Skins');
889 $page->assign('title', 'Gestion des skins');
890 $table_editor = new PLTableEditor('admin/skins','skins','id');
891 $table_editor->describe('name','nom',true);
892 $table_editor->describe('skin_tpl','nom du template',true);
893 $table_editor->describe('auteur','auteur',false);
894 $table_editor->describe('comment','commentaire',true);
895 $table_editor->describe('date','date',false);
896 $table_editor->describe('ext','extension du screenshot',false);
897 $table_editor->apply($page, $action, $id);
898 }
899 function handler_postfix_blacklist(&$page, $action = 'list', $id = null) {
900 $page->assign('xorg_title','Polytechnique.org - Administration - Postfix : Blacklist');
901 $page->assign('title', 'Blacklist de postfix');
902 $table_editor = new PLTableEditor('admin/postfix/blacklist','postfix_blacklist','email', true);
903 $table_editor->describe('reject_text','Texte de rejet',true);
904 $table_editor->describe('email','email',true);
905 $table_editor->apply($page, $action, $id);
906 }
907 function handler_postfix_whitelist(&$page, $action = 'list', $id = null) {
908 $page->assign('xorg_title','Polytechnique.org - Administration - Postfix : Whitelist');
909 $page->assign('title', 'Whitelist de postfix');
910 $table_editor = new PLTableEditor('admin/postfix/whitelist','postfix_whitelist','email', true);
911 $table_editor->describe('email','email',true);
912 $table_editor->apply($page, $action, $id);
913 }
914 function handler_mx_broken(&$page, $action = 'list', $id = null) {
915 $page->assign('xorg_title', 'Polytechnique.org - Administration - MX Défaillants');
916 $page->assign('title', 'MX Défaillant');
917 $table_editor = new PLTableEditor('admin/mx/broken', 'mx_watch', 'host', true);
918 $table_editor->describe('host', 'Masque', true);
919 $table_editor->describe('state', 'Niveau', true);
920 $table_editor->describe('text', 'Description du problème', false);
921 $table_editor->apply($page, $action, $id);
922 }
923 function handler_logger_actions(&$page, $action = 'list', $id = null) {
924 $page->assign('xorg_title','Polytechnique.org - Administration - Actions');
925 $page->assign('title', 'Gestion des actions de logger');
926 $table_editor = new PLTableEditor('admin/logger/actions','logger.actions','id');
927 $table_editor->describe('text','intitulé',true);
928 $table_editor->describe('description','description',true);
929 $table_editor->apply($page, $action, $id);
930 }
931 function handler_downtime(&$page, $action = 'list', $id = null) {
932 $page->assign('xorg_title','Polytechnique.org - Administration - Coupures');
933 $page->assign('title', 'Gestion des coupures');
934 $table_editor = new PLTableEditor('admin/downtime','coupures','id');
935 $table_editor->describe('debut','date',true);
936 $table_editor->describe('duree','durée',false);
937 $table_editor->describe('resume','résumé',true);
938 $table_editor->describe('services','services affectés',true);
939 $table_editor->describe('description','description',false);
940 $table_editor->apply($page, $action, $id);
941 }
942
943 function handler_wiki(&$page, $action='list', $wikipage='', $wikipage2='')
944 {
945 require_once 'wiki.inc.php';
946
947 if (S::v('core_rss_hash')) {
948 $page->setRssLink('Changement Récents',
949 '/Site/AllRecentChanges?action=rss&user=' . S::v('forlife') . '&hash=' . S::v('core_rss_hash'));
950 }
951 // update wiki perms
952 if ($action == 'update') {
953 $perms_read = Post::v('read');
954 $perms_edot = Post::v('edit');
955 if ($perms_read || $perms_edit) {
956 foreach ($_POST as $wiki_page => $val) if ($val == 'on') {
957 $wiki_page = str_replace('_', '/', $wiki_page);
958 if (!$perms_read || !$perms_edit)
959 list($perms0, $perms1) = wiki_get_perms($wiki_page);
960 if ($perms_read)
961 $perms0 = $perms_read;
962 if ($perms_edit)
963 $perms1 = $perms_edit;
964 wiki_set_perms($wiki_page, $perms0, $perms1);
965 }
966 }
967 }
968
969 if ($action == 'delete' && $wikipage != '') {
970 if (wiki_delete_page($wikipage)) {
971 $page->trig("La page ".$wikipage." a été supprimée.");
972 } else {
973 $page->trig("Impossible de supprimer la page ".$wikipage.".");
974 }
975 }
976
977 if ($action == 'rename' && $wikipage != '' && $wikipage2 != '' && $wikipage != $wikipage2) {
978 if ($changedLinks = wiki_rename_page($wikipage, $wikipage2)) {
979 $s = 'La page <em>'.$wikipage.'</em> a été déplacée en <em>'.$wikipage2.'</em>.';
980 if (is_numeric($changedLinks)) {
981 $s .= $changedLinks.' lien'.(($changedLinks>1)?'s ont été modifiés.':' a été modifié.');
982 }
983 $page->trig($s);
984 } else {
985 $page->trig("Impossible de déplacer la page ".$wikipage);
986 }
987 }
988
989 $perms = wiki_perms_options();
990
991 // list wiki pages and their perms
992 $wiki_pages = array();
993 $dir = wiki_work_dir();
994 if (is_dir($dir)) {
995 if ($dh = opendir($dir)) {
996 while (($file = readdir($dh)) !== false) if (substr($file,0,1) >= 'A' && substr($file,0,1) <= 'Z') {
997 list($read,$edit) = wiki_get_perms($file);
998 $wiki_pages[$file] = array('read' => $perms[$read], 'edit' => $perms[$edit]);
999 if (is_file($dir . '/cache_' . wiki_filename($file) . '.tpl')) {
1000 $wiki_pages[$file]['cached'] = true;
1001 }
1002 }
1003 closedir($dh);
1004 }
1005 }
1006 ksort($wiki_pages);
1007 $wiki_tree = array();
1008 foreach ($wiki_pages as $file => $desc) {
1009 list($cat, $name) = explode('.', $file);
1010 if (!isset($wiki_tree[$cat])) {
1011 $wiki_tree[$cat] = array();
1012 }
1013 $wiki_tree[$cat][$name] = $desc;
1014 }
1015
1016 $page->changeTpl('admin/wiki.tpl');
1017 $page->addJsLink('jquery.js');
1018 $page->assign('wiki_pages', $wiki_tree);
1019 $page->assign('perms_opts', $perms);
1020 }
1021
1022 function handler_ipwatch(&$page, $action = 'list', $ip = null)
1023 {
1024 $page->changeTpl('admin/ipwatcher.tpl');
1025
1026 $states = array('safe' => 'Ne pas surveiller',
1027 'unsafe' => 'Surveiller les inscriptions',
1028 'dangerous' => 'Surveiller tous les accès',
1029 'ban' => 'Bannir cette adresse');
1030 $page->assign('states', $states);
1031
1032 switch (Post::v('action')) {
1033 case 'create':
1034 if (trim(Post::v('ipN')) != '') {
1035 Xdb::execute('INSERT IGNORE INTO ip_watch (ip, state, detection, last, uid, description)
1036 VALUES ({?}, {?}, CURDATE(), NOW(), {?}, {?})',
1037 trim(Post::v('ipN')), Post::v('stateN'), S::i('uid'), Post::v('descriptionN'));
1038 };
1039 break;
1040
1041 case 'edit':
1042 Xdb::execute('UPDATE ip_watch
1043 SET state = {?}, last = NOW(), uid = {?}, description = {?}
1044 WHERE ip = {?}', Post::v('stateN'), S::i('uid'), Post::v('descriptionN'), Post::v('ipN'));
1045 break;
1046
1047 default:
1048 if ($action == 'delete' && !is_null($ip)) {
1049 Xdb::execute('DELETE FROM emails_watch WHERE ip = {?}', $ip);
1050 }
1051 }
1052 if ($action != 'create' && $action != 'edit') {
1053 $action = 'list';
1054 }
1055 $page->assign('action', $action);
1056
1057 if ($action == 'list') {
1058 $sql = "SELECT w.ip, IF(w.ip = s.ip, s.host, s.forward_host), w.detection, w.state, a.alias AS forlife
1059 FROM ip_watch AS w
1060 LEFT JOIN logger.sessions AS s ON (s.ip = w.ip OR s.forward_ip = w.ip)
1061 LEFT JOIN aliases AS a ON (a.id = s.uid AND a.type = 'a_vie')
1062 GROUP BY w.ip, a.alias
1063 ORDER BY w.state, w.ip, a.alias";
1064 $it = Xdb::iterRow($sql);
1065
1066 $table = array();
1067 $props = array();
1068 while (list($ip, $host, $date, $state, $forlife) = $it->next()) {
1069 if (count($props) == 0 || $props['ip'] != $ip) {
1070 if (count($props) > 0) {
1071 $table[] = $props;
1072 }
1073 $props = array('ip' => $ip,
1074 'host' => $host,
1075 'detection' => $date,
1076 'state' => $state,
1077 'users' => array($forlife));
1078 } else {
1079 $props['users'][] = $forlife;
1080 }
1081 }
1082 if (count($props) > 0) {
1083 $table[] = $props;
1084 }
1085 $page->assign('table', $table);
1086 } elseif ($action == 'edit') {
1087 $sql = "SELECT w.detection, w.state, w.last, w.description,
1088 a1.alias AS edit, a2.alias AS forlife, s.host
1089 FROM ip_watch AS w
1090 LEFT JOIN aliases AS a1 ON (a1.id = w.uid AND a1.type = 'a_vie')
1091 LEFT JOIN logger.sessions AS s ON (w.ip = s.ip)
1092 LEFT JOIN aliases AS a2 ON (a2.id = s.uid AND a2.type = 'a_vie')
1093 WHERE w.ip = {?}
1094 GROUP BY a2.alias
1095 ORDER BY a2.alias";
1096 $it = Xdb::iterRow($sql, $ip);
1097
1098 $props = array();
1099 while (list($detection, $state, $last, $description, $edit, $forlife, $host) = $it->next()) {
1100 if (count($props) == 0) {
1101 $props = array('ip' => $ip,
1102 'host' => $host,
1103 'detection' => $detection,
1104 'state' => $state,
1105 'last' => $last,
1106 'description' => $description,
1107 'edit' => $edit,
1108 'users' => array($forlife));
1109 } else {
1110 $props['users'][] = $forlife;
1111 }
1112 }
1113 $page->assign('ip', $props);
1114 }
1115 }
1116
1117 function handler_icons(&$page)
1118 {
1119 $page->changeTpl('admin/icons.tpl');
1120 $dh = opendir('../htdocs/images/icons');
1121 if (!$dh) {
1122 $page->trig('Dossier des icones introuvables.');
1123 }
1124 $icons = array();
1125 while (($file = readdir($dh)) !== false) {
1126 if (strlen($file) > 4 && substr($file,-4) == '.gif') {
1127 array_push($icons, substr($file, 0, -4));
1128 }
1129 }
1130 sort($icons);
1131 $page->assign('icons', $icons);
1132 }
1133 }
1134
1135 // vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
1136 ?>