modules/lists.php

   1 <?php
   2 /***************************************************************************
   3  *  Copyright (C) 2003-2011 Polytechnique.org                              *
   4  *  http://opensource.polytechnique.org/                                   *
   5  *                                                                         *
   6  *  This program is free software; you can redistribute it and/or modify   *
   7  *  it under the terms of the GNU General Public License as published by   *
   8  *  the Free Software Foundation; either version 2 of the License, or      *
   9  *  (at your option) any later version.                                    *
  10  *                                                                         *
  11  *  This program is distributed in the hope that it will be useful,        *
  12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of         *
  13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the          *
  14  *  GNU General Public License for more details.                           *
  15  *                                                                         *
  16  *  You should have received a copy of the GNU General Public License      *
  17  *  along with this program; if not, write to the Free Software            *
  18  *  Foundation, Inc.,                                                      *
  19  *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA                *
  20  ***************************************************************************/
  21
  22 class ListsModule extends PLModule
  23 {
  24     function handlers()
  25     {
  26         return array(
  27             'lists'              => $this->make_hook('lists',     AUTH_PASSWD, 'user'),
  28             'lists/ajax'         => $this->make_hook('ajax',      AUTH_PASSWD, 'user', NO_AUTH),
  29             'lists/create'       => $this->make_hook('create',    AUTH_PASSWD, 'lists'),
  30
  31             'lists/members'      => $this->make_hook('members',   AUTH_COOKIE, 'user'),
  32             'lists/csv'          => $this->make_hook('csv',       AUTH_COOKIE, 'user'),
  33             'lists/annu'         => $this->make_hook('annu',      AUTH_COOKIE, 'user'),
  34             'lists/archives'     => $this->make_hook('archives',  AUTH_COOKIE, 'user'),
  35             'lists/archives/rss' => $this->make_hook('rss',       AUTH_PUBLIC, 'user', NO_HTTPS),
  36
  37             'lists/moderate'     => $this->make_hook('moderate',  AUTH_PASSWD, 'user'),
  38             'lists/admin'        => $this->make_hook('admin',     AUTH_PASSWD, 'user'),
  39             'lists/options'      => $this->make_hook('options',   AUTH_PASSWD, 'user'),
  40             'lists/delete'       => $this->make_hook('delete',    AUTH_PASSWD, 'user'),
  41
  42             'lists/soptions'     => $this->make_hook('soptions',  AUTH_PASSWD, 'user'),
  43             'lists/check'        => $this->make_hook('check',     AUTH_PASSWD, 'user'),
  44             'admin/lists'        => $this->make_hook('admin_all', AUTH_PASSWD, 'admin'),
  45             'admin/aliases'      => $this->make_hook('aaliases',  AUTH_PASSWD, 'admin')
  46         );
  47     }
  48
  49     protected function prepare_client($user = null)
  50     {
  51         if (is_null($user)) {
  52             $user = S::user();
  53         }
  54
  55         $domain = $this->get_lists_domain();
  56
  57         return new MMList($user, $domain);
  58     }
  59
  60     protected function get_lists_domain()
  61     {
  62         global $globals;
  63         return $globals->mail->domain;
  64     }
  65
  66     /** Prepare a MailingList from its mailbox
  67      */
  68     protected function prepare_list($mbox, $user=null)
  69     {
  70         // Required: modules/xnetlists.php uses it too.
  71         Platal::load('lists', 'lists.inc.php');
  72
  73         if (is_null($user)) {
  74             $user = S::user();
  75         }
  76         return new MailingList($mbox, $this->get_lists_domain(), $user);
  77     }
  78
  79     /** Ensure the current user is an administrator of the group.
  80      */
  81     protected function is_group_admin($page)
  82     {
  83         $force_rights = false;
  84         if ($GLOBALS['IS_XNET_SITE']) {
  85             $perms = S::v('perms');
  86             if (is_object($perms) && $perms->hasFlag('groupadmin')) {
  87                 $force_rights = true;
  88             }
  89         }
  90         $page->assign('group_admin', $force_rights);
  91
  92         return $force_rights;
  93     }
  94
  95     /** Ensure the current user owns the given MailingList.
  96      */
  97     protected function verify_list_owner($page, $mlist)
  98     {
  99         if (list(, , $owners) = $mlist->getMembers()) {
 100             if (!(in_array(S::user()->forlifeEmail(), $owners) || S::admin())) {
 101                 $page->kill("La liste n'existe pas ou tu n'as pas le droit de l'administrer.");
 102             }
 103         } else {
 104             $page->kill("La liste n'existe pas ou tu n'as pas le droit de l'administrer.<br />"
 105                       . " Si tu penses qu'il s'agit d'une erreur, "
 106                       . "<a href='mailto:support@polytechnique.org'>contact le support</a>.");
 107         }
 108     }
 109
 110     /** Fetch pending operations on a MailingList instance.
 111      */
 112     protected function get_pending_ops($mlist)
 113     {
 114         list($subs, $mails) = $mlist->getPendingOps();
 115         $res = XDB::query("SELECT  mid
 116                              FROM  email_list_moderate
 117                             WHERE  ml = {?} AND domain = {?}",
 118                           $mlist->mbox, $mlist->domain);
 119         $mids = $res->fetchColumn();
 120         foreach ($mails as $key => $mail) {
 121             if (in_array($mail['id'], $mids)) {
 122                 unset($mails[$key]);
 123             }
 124         }
 125         return array($subs, $mails);
 126     }
 127
 128     function handler_lists($page)
 129     {
 130
 131         function filter_owner($list)
 132         {
 133             return $list['own'];
 134         }
 135
 136         function filter_member($list)
 137         {
 138             return $list['sub'];
 139         }
 140
 141         $page->changeTpl('lists/index.tpl');
 142         $page->setTitle('Listes de diffusion');
 143
 144
 145         if (Get::has('del')) {
 146             S::assert_xsrf_token();
 147             $mlist = $this->prepare_list(Get::v('del'));
 148             $mlist->unsubscribe();
 149             pl_redirect('lists');
 150         }
 151         if (Get::has('add')) {
 152             S::assert_xsrf_token();
 153             $mlist = $this->prepare_list(Get::v('add'));
 154             $mlist->subscribe();
 155             pl_redirect('lists');
 156         }
 157         if (Post::has('promo_add')) {
 158             S::assert_xsrf_token();
 159
 160             $promo = Post::i('promo_add');
 161             if ($promo >= 1900 and $promo < 2100) {
 162                 $mlist = MailingList::promo($promo, S::user());
 163                 $mlist->subscribe();
 164             } else {
 165                 $page->trigError("promo incorrecte, il faut une promo sur 4 chiffres.");
 166             }
 167         }
 168
 169         $client = $this->prepare_client();
 170         if (!is_null($listes = $client->get_lists())) {
 171             $owner  = array_filter($listes, 'filter_owner');
 172             $listes = array_diff_key($listes, $owner);
 173             $member = array_filter($listes, 'filter_member');
 174             $listes = array_diff_key($listes, $member);
 175             foreach ($owner as $key => $liste) {
 176                 $mlist = $this->prepare_list($liste['list']);
 177                 list($subs, $mails) = $this->get_pending_ops($mlist);
 178                 $owner[$key]['subscriptions'] = $subs;
 179                 $owner[$key]['mails'] = $mails;
 180             }
 181             $page->register_modifier('hdc', 'list_header_decode');
 182             $page->assign_by_ref('owner',  $owner);
 183             $page->assign_by_ref('member', $member);
 184             $page->assign_by_ref('public', $listes);
 185         }
 186     }
 187
 188     function handler_ajax($page, $list = null)
 189     {
 190         pl_content_headers("text/html");
 191         $page->changeTpl('lists/liste.inc.tpl', NO_SKIN);
 192         S::assert_xsrf_token();
 193
 194         $mlist = $this->prepare_list($list);
 195         if (Get::has('unsubscribe')) {
 196             $mlist->unsubscribe();
 197         }
 198         if (Get::has('subscribe')) {
 199             $mlist->subscribe();
 200         }
 201         if (Get::has('sadd')) {
 202             $mlist->handleRequest(MailingList::REQ_SUBSCRIBE, Get::v('sadd'));
 203         }
 204         if (Get::has('mid')) {
 205             $this->moderate_mail($mlist, Get::i('mid'));
 206         }
 207
 208         list($liste, $members, $owners) = $mlist->getMembers();
 209         if ($liste['own']) {
 210             list($subs, $mails) = $this->get_pending_ops($mlist);
 211             $liste['subscriptions'] = $subs;
 212             $liste['mails'] = $mails;
 213         }
 214         $page->register_modifier('hdc', 'list_header_decode');
 215         $page->assign_by_ref('liste', $liste);
 216     }
 217
 218     function handler_create($page)
 219     {
 220         global $globals;
 221
 222         $page->changeTpl('lists/create.tpl');
 223
 224         $user_promo  = S::user()->profile()->yearPromo();
 225         $year        = date('Y');
 226         $month       = date('m');
 227         // scolar year starts in september
 228         $scolarmonth = ($year - $user_promo) * 12 + ($month - 8);
 229         $young_promo = $very_young_promo = 0;
 230         // binet are accessible only in april in the first year and until
 231         // march of the 5th year
 232         if ($scolarmonth >= 8 && $scolarmonth < 56) {
 233             $young_promo = 1;
 234         }
 235         // PSC aliases are accesible only between september and june of the second
 236         // year of scolarity
 237         if ($scolarmonth >= 12 && $scolarmonth < 22) {
 238             $very_young_promo = 1;
 239         }
 240         $page->assign('young_promo', $young_promo);
 241         $page->assign('very_young_promo', $very_young_promo);
 242
 243         $owners  = preg_split("/[\s]+/", Post::v('owners'), -1, PREG_SPLIT_NO_EMPTY);
 244         $members = preg_split("/[\s]+/", Post::v('members'), -1, PREG_SPLIT_NO_EMPTY);
 245
 246         // click on validate button 'add_owner_sub' or type <enter>
 247         if (Post::has('add_owner_sub') && Post::has('add_owner')) {
 248             // if we want to add an owner and then type <enter>, then both
 249             // add_owner_sub and add_owner are filled.
 250             $oforlifes = User::getBulkForlifeEmails(Post::v('add_owner'), true);
 251             $mforlifes = User::getBulkForlifeEmails(Post::v('add_member'), true);
 252             if (!is_null($oforlifes)) {
 253                 $owners = array_merge($owners, $oforlifes);
 254             }
 255             // if we want to add a member and then type <enter>, then
 256             // add_owner_sub is filled, whereas add_owner is empty.
 257             if (!is_null($mforlifes)) {
 258                 $members = array_merge($members, $mforlifes);
 259             }
 260         }
 261
 262         // click on validate button 'add_member_sub'
 263         if (Post::has('add_member_sub') && Post::has('add_member')) {
 264             $forlifes = User::getBulkForlifeEmails(Post::v('add_member'), true);
 265             if (!is_null($forlifes)) {
 266                 $members = array_merge($members, $forlifes);
 267             }
 268         }
 269         if (Post::has('add_member_sub') && isset($_FILES['add_member_file']) && $_FILES['add_member_file']['tmp_name']) {
 270             $upload =& PlUpload::get($_FILES['add_member_file'], S::user()->login(), 'list.addmember', true);
 271             if (!$upload) {
 272                 $page->trigError('Une erreur s\'est produite lors du téléchargement du fichier');
 273             } else {
 274                 $forlifes = User::getBulkForlifeEmails($upload->getContents(), true);
 275                 if (!is_null($forlifes)) {
 276                     $members = array_merge($members, $forlifes);
 277                 }
 278             }
 279         }
 280
 281         ksort($owners);
 282         $owners = array_unique($owners);
 283         ksort($members);
 284         $members = array_unique($members);
 285
 286         $page->assign('owners', join("\n", $owners));
 287         $page->assign('members', join("\n", $members));
 288
 289         if (!Post::has('submit')) {
 290             return;
 291         } else {
 292             S::assert_xsrf_token();
 293         }
 294
 295         $asso = Post::t('asso');
 296         $list = strtolower(Post::t('liste'));
 297
 298         if (empty($list)) {
 299             $page->trigError('Le champ «&nbsp;adresse souhaitée&nbsp;» est vide.');
 300         }
 301         if (!preg_match("/^[a-zA-Z0-9\-]*$/", $list)) {
 302             $page->trigError('Le nom de la liste ne doit contenir que des lettres non accentuées, chiffres et tirets.');
 303         }
 304
 305         if (($asso == 'binet') || ($asso == 'alias')) {
 306             $promo = Post::i('promo');
 307             $domain = $promo . '.' . $globals->mail->domain;
 308
 309             if (($promo < 1921) || ($promo > date('Y'))) {
 310                 $page->trigError('La promotion est mal renseignée, elle doit être du type&nbsp;: 2004.');
 311             }
 312
 313         } elseif ($asso == 'groupex') {
 314                 $domain = XDB::fetchOneCell('SELECT  mail_domain
 315                                                FROM  groups
 316                                               WHERE  nom = {?}',
 317                                             Post::t('groupex_name'));
 318
 319                 if (!$domain) {
 320                     $page->trigError('Il n\'y a aucun groupe de ce nom sur Polytechnique.net.');
 321                 }
 322         } else {
 323             $domain = $globals->mail->domain;
 324         }
 325
 326         require_once 'emails.inc.php';
 327         if (list_exist($list, $domain)) {
 328             $page->trigError("L'«&nbsp;adresse souhaitée&nbsp;» est déjà prise.");
 329         }
 330
 331         if (!Post::t('desc')) {
 332             $page->trigError('Le sujet est vide.');
 333         }
 334
 335         if (!count($owners)) {
 336             $page->trigError('Il n\'y a pas de gestionnaire.');
 337         }
 338
 339         if (count($members) < 4) {
 340             $page->trigError('Il n\'y a pas assez de membres.');
 341         }
 342
 343         if (!$page->nb_errs()) {
 344             $page->trigSuccess('Demande de création envoyée&nbsp;!');
 345             $page->assign('created', true);
 346             $req = new ListeReq(S::user(), $asso, $list, $domain,
 347                                 Post::t('desc'), Post::i('advertise'),
 348                                 Post::i('modlevel'), Post::i('inslevel'),
 349                                 $owners, $members);
 350             $req->submit();
 351         }
 352     }
 353
 354     function handler_members($page, $liste = null)
 355     {
 356         if (is_null($liste)) {
 357             return PL_NOT_FOUND;
 358         }
 359
 360         $mlist = $this->prepare_list($liste);
 361         $this->is_group_admin($page);
 362
 363         $page->changeTpl('lists/members.tpl');
 364
 365         if (Get::has('del')) {
 366             S::assert_xsrf_token();
 367             $mlist->unsubscribe();
 368             pl_redirect('lists/members/' . $liste);
 369         }
 370
 371         if (Get::has('add')) {
 372             S::assert_xsrf_token();
 373             $mlist->subscribe();
 374             pl_redirect('lists/members/' . $liste);
 375         }
 376
 377         $members = $mlist->getMembers();
 378
 379         $tri_promo = !Env::b('alpha');
 380
 381         if (list($det,$mem,$own) = $members) {
 382             $membres = list_sort_members($mem, $tri_promo);
 383             $moderos = list_sort_owners($own, $tri_promo);
 384
 385             $page->assign_by_ref('details', $det);
 386             $page->assign_by_ref('members', $membres);
 387             $page->assign_by_ref('owners',  $moderos);
 388             $page->assign('nb_m',  count($mem));
 389         } else {
 390             $page->kill("La liste n'existe pas ou tu n'as pas le droit d'en voir les détails.");
 391         }
 392     }
 393
 394     function handler_csv(PlPage $page, $liste = null)
 395     {
 396         if (is_null($liste)) {
 397             return PL_NOT_FOUND;
 398         }
 399         $this->is_group_admin($page);
 400
 401         $mlist = $this->prepare_list($liste);
 402         $members = $mlist->getMembers();
 403         $list = list_fetch_basic_info(list_extract_members($members[1]));
 404         pl_cached_content_headers('text/x-csv', 'iso-8859-1', 1);
 405
 406         echo utf8_decode("Nom;Prénom;Promotion\n");
 407         echo utf8_decode(implode("\n", $list));
 408         exit();
 409     }
 410
 411     function handler_annu($page, $liste = null, $action = null, $subaction = null)
 412     {
 413         if (is_null($liste)) {
 414             return PL_NOT_FOUND;
 415         }
 416
 417         $this->is_group_admin($page);
 418
 419         $mlist = $this->prepare_list($liste);
 420
 421         if (Get::has('del')) {
 422             S::assert_xsrf_token();
 423             $mlist->unsubscribe();
 424             pl_redirect('lists/annu/'.$liste);
 425         }
 426         if (Get::has('add')) {
 427             S::assert_xsrf_token();
 428             $mlist->subscribe();
 429             pl_redirect('lists/annu/'.$liste);
 430         }
 431
 432         $owners = $mlist->getOwners();
 433         if (!is_array($owners)) {
 434             $page->kill("La liste n'existe pas ou tu n'as pas le droit d'en voir les détails.");
 435         }
 436
 437         list(,$members) = $mlist->getMembers();
 438
 439         if ($action == 'moderators') {
 440             $users = $owners;
 441             $show_moderators = true;
 442             $action = $subaction;
 443             $subaction = '';
 444         } else {
 445             $show_moderators = false;
 446             $users = array();
 447             foreach ($members as $m) {
 448                 $users[] = $m[1];
 449             }
 450         }
 451
 452         require_once 'userset.inc.php';
 453         $view = new UserArraySet($users);
 454         $view->addMod('trombi', 'Trombinoscope', false, array('with_promo' => true));
 455         $view->addMod('listmember', 'Annuaire', true);
 456         if (empty($GLOBALS['IS_XNET_SITE'])) {
 457             $view->addMod('minifiche', 'Mini-fiches', false);
 458         }
 459         $view->addMod('map', 'Planisphère');
 460         $view->apply("lists/annu/$liste", $page, $action, $subaction);
 461
 462         $page->changeTpl('lists/annu.tpl');
 463         $page->assign_by_ref('details', $owners[0]);
 464         $page->assign('show_moderators', $show_moderators);
 465     }
 466
 467     function handler_archives($page, $liste = null, $action = null, $artid = null)
 468     {
 469         global $globals;
 470
 471         if (is_null($liste)) {
 472             return PL_NOT_FOUND;
 473         }
 474
 475         $this->is_group_admin($page);
 476
 477         $mlist = $this->prepare_list($liste);
 478
 479         $page->changeTpl('lists/archives.tpl');
 480
 481         if (list($det) = $mlist->getMembers()) {
 482             if (substr($liste,0,5) != 'promo' && ($det['ins'] || $det['priv'])
 483                     && !$det['own'] && ($det['sub'] < 2)) {
 484                 $page->kill("La liste n'existe pas ou tu n'as pas le droit de la consulter.");
 485             }
 486             $get = Array('listname' => $mlist->mbox, 'domain' => $mlist->domain);
 487             if (Post::has('updateall')) {
 488                 $get['updateall'] = Post::v('updateall');
 489             }
 490             require_once 'banana/ml.inc.php';
 491             get_banana_params($get, null, $action, $artid);
 492             run_banana($page, 'MLBanana', $get);
 493         } else {
 494             $page->kill("La liste n'existe pas ou tu n'as pas le droit de la consulter.");
 495         }
 496     }
 497
 498     function handler_rss($page, $liste = null, $alias = null, $hash = null)
 499     {
 500         if (!$liste) {
 501             return PL_NOT_FOUND;
 502         }
 503         $user = Platal::session()->tokenAuth($alias, $hash);
 504         if (is_null($user)) {
 505             return PL_FORBIDDEN;
 506         }
 507
 508         $mlist = $this->prepare_list($liste);
 509
 510         if (list($det) = $mlist->getMembers()) {
 511             if (substr($liste,0,5) != 'promo' && ($det['ins'] || $det['priv'])
 512                     && !$det['own'] && ($det['sub'] < 2)) {
 513                 exit;
 514             }
 515             require_once('banana/ml.inc.php');
 516             $banana = new MLBanana($user, Array(
 517                 'listname' => $mlist->mbox,
 518                 'domain' => $mlist->domain,
 519                 'action' => 'rss2'));
 520             $banana->run();
 521         }
 522         exit;
 523     }
 524
 525     /** Register a moderation decision.
 526      * @param $mlist MailingList: the mailing list being moderated
 527      * @param $mid int: the message being moderated
 528      */
 529     protected function moderate_mail($mlist, $mid)
 530     {
 531         if (Env::has('mok')) {
 532             $action = 'accept';
 533         } elseif (Env::has('mno')) {
 534             $action = 'refuse';
 535         } elseif (Env::has('mdel')) {
 536             $action = 'delete';
 537         } else {
 538             return false;
 539         }
 540         Get::kill('mid');
 541         return XDB::execute("INSERT IGNORE INTO  email_list_moderate
 542                                          VALUES  ({?}, {?}, {?}, {?}, {?}, NOW(), {?}, NULL)",
 543                             $mlist->mbox, $mlist->domain, $mid, S::i('uid'), $action, Post::v('reason'));
 544     }
 545
 546     function handler_moderate($page, $liste = null)
 547     {
 548         if (is_null($liste)) {
 549              return PL_NOT_FOUND;
 550         }
 551
 552         $mlist = $this->prepare_list($liste);
 553         if (!$this->is_group_admin($page)) {
 554             $this->verify_list_owner($page, $mlist);
 555         }
 556
 557         $page->changeTpl('lists/moderate.tpl');
 558
 559         $page->register_modifier('hdc', 'list_header_decode');
 560
 561         if (Env::has('sadd') || Env::has('sdel')) {
 562             S::assert_xsrf_token();
 563
 564             if (Env::has('sadd')) {
 565                 // Ensure the moderated request is still active
 566                 $sub = $mlist->getPendingSub(Env::v('sadd'));
 567
 568                 $mlist->handleRequest(MailingList::REQ_SUBSCRIBE, Env::v('sadd'));
 569                 $info = "validée";
 570             }
 571             if (Post::has('sdel')) {
 572                 // Ensure the moderated request is still active
 573                 $sub = $mlist->getPendingSub(Env::v('sdel'));
 574
 575                 $mlist->handleRequest(MailingList::REQ_REJECT, Post::v('sdel'), Post::v('reason'));
 576                 $info = "refusée";
 577             }
 578             if ($sub) {
 579                 $mailer = new PlMailer();
 580                 $mailer->setFrom($mlist->getAddress(MailingList::KIND_BOUNCE));
 581                 $mailer->addTo($mlist->getAddress(MailingList::KIND_OWNER));
 582                 $mailer->addHeader('Reply-To', $mlist->getAddress(MailingList::KIND_OWNER));
 583                 $mailer->setSubject("L'inscription de {$sub['name']} a été $info");
 584                 $text = "L'inscription de {$sub['name']} à la liste " . $mlist->address ." a été $info par " . S::user()->fullName(true) . ".\n";
 585                 if (trim(Post::v('reason'))) {
 586                     $text .= "\nLa raison invoquée est :\n" . Post::v('reason');
 587                 }
 588                 $mailer->setTxtBody(wordwrap($text, 72));
 589                 $mailer->send();
 590             }
 591             if (Env::has('sadd')) {
 592                 pl_redirect('lists/moderate/'.$liste);
 593             }
 594         }
 595
 596         if (Post::has('moderate_mails') && Post::has('select_mails')) {
 597             S::assert_xsrf_token();
 598
 599             $mails = array_keys(Post::v('select_mails'));
 600             foreach($mails as $mail) {
 601                 $this->moderate_mail($mlist, $mail);
 602             }
 603         } elseif (Env::has('mid')) {
 604             if (Get::has('mid') && !Env::has('mok') && !Env::has('mdel')) {
 605                 require_once 'banana/moderate.inc.php';
 606
 607                 $page->changeTpl('lists/moderate_mail.tpl');
 608                 $params = array(
 609                     'listname' => $mlist->mbox,
 610                     'domain' => $mlist->domain,
 611                     'artid' => Get::i('mid'),
 612                     'part' => Get::v('part'),
 613                     'action' => Get::v('action'));
 614                 $params['client'] = $this->prepare_client();
 615                 run_banana($page, 'ModerationBanana', $params);
 616
 617                 $msg = file_get_contents('/etc/mailman/fr/refuse.txt');
 618                 $msg = str_replace("%(adminaddr)s", $mlist->getAddress(MailingList::KIND_OWNER), $msg);
 619                 $msg = str_replace("%(request)s",   "<< SUJET DU MAIL >>",    $msg);
 620                 $msg = str_replace("%(reason)s",    "<< TON EXPLICATION >>",  $msg);
 621                 $msg = str_replace("%(listname)s",  $liste, $msg);
 622                 $page->assign('msg', $msg);
 623                 return;
 624             }
 625
 626             $this->moderate_mail($mlist, Env::i('mid'));
 627         } elseif (Env::has('sid')) {
 628             if (list($subs,$mails) = $this->get_pending_ops($mlist)) {
 629                 foreach($subs as $user) {
 630                     if ($user['id'] == Env::v('sid')) {
 631                         $page->changeTpl('lists/moderate_sub.tpl');
 632                         $page->assign('del_user', $user);
 633                         return;
 634                     }
 635                 }
 636             }
 637
 638         }
 639
 640         if (list($subs,$mails) = $this->get_pending_ops($mlist)) {
 641             foreach ($mails as $key=>$mail) {
 642                 $mails[$key]['stamp'] = strftime("%Y%m%d%H%M%S", $mail['stamp']);
 643                 if ($mail['fromx']) {
 644                     $page->assign('with_fromx', true);
 645                 } else {
 646                     $page->assign('with_nonfromx', true);
 647                 }
 648             }
 649             $page->assign_by_ref('subs', $subs);
 650             $page->assign_by_ref('mails', $mails);
 651         } else {
 652             $page->kill("La liste n'existe pas ou tu n'as pas le droit de la modérer.");
 653         }
 654     }
 655
 656     static public function no_login_callback($login)
 657     {
 658         global $list_unregistered;
 659
 660         $users = User::getPendingAccounts($login, true);
 661         if ($users && $users->total()) {
 662             if (!isset($list_unregistered)) {
 663                 $list_unregistered = array();
 664             }
 665             $list_unregistered[$login] = $users;
 666         } else {
 667             list($name, $domain) = @explode('@', $login);
 668             if (User::isMainMailDomain($domain)) {
 669                 User::_default_user_callback($login);
 670             }
 671         }
 672     }
 673
 674     function handler_admin($page, $liste = null)
 675     {
 676         global $globals;
 677
 678         if (is_null($liste)) {
 679             return PL_NOT_FOUND;
 680         }
 681
 682         $mlist = $this->prepare_list($liste);
 683         $this->is_group_admin($page);
 684         if (!$this->is_group_admin($page)) {
 685             $this->verify_list_owner($page, $mlist);
 686         }
 687
 688         $page->changeTpl('lists/admin.tpl');
 689
 690         if (Env::has('send_mark')) {
 691             S::assert_xsrf_token();
 692
 693             $actions = Env::v('mk_action');
 694             $uids    = Env::v('mk_uid');
 695             $mails   = Env::v('mk_email');
 696             foreach ($actions as $key=>$action) {
 697                 switch ($action) {
 698                   case 'none':
 699                     break;
 700
 701                   case 'marketu': case 'markets':
 702                     require_once 'emails.inc.php';
 703                     $user = User::get($uids[$key]);
 704                     $mail = valide_email($mails[$key]);
 705                     if (isvalid_email_redirection($mail, $user)) {
 706                         $from = ($action == 'marketu') ? 'user' : 'staff';
 707                         $market = Marketing::get($uids[$key], $mail);
 708                         if (!$market) {
 709                             $market = new Marketing($uids[$key], $mail, 'list', $mlist->address, $from, S::v('uid'));
 710                             $market->add();
 711                             break;
 712                         }
 713                     }
 714
 715                   default:
 716                     XDB::execute('INSERT IGNORE INTO  register_subs (uid, type, sub, domain)
 717                                               VALUES  ({?}, \'list\', {?}, {?})',
 718                                   $uids[$key], $mlist->mbox, $mlist->domain);
 719                 }
 720             }
 721         }
 722
 723         if (Env::has('add_member') ||
 724             isset($_FILES['add_member_file']) && $_FILES['add_member_file']['tmp_name']) {
 725             S::assert_xsrf_token();
 726
 727             if (isset($_FILES['add_member_file']) && $_FILES['add_member_file']['tmp_name']) {
 728                 $upload =& PlUpload::get($_FILES['add_member_file'], S::user()->login(), 'list.addmember', true);
 729                 if (!$upload) {
 730                     $page->trigError("Une erreur s'est produite lors du téléchargement du fichier.");
 731                 } else {
 732                     $logins = $upload->getContents();
 733                 }
 734             } else {
 735                 $logins = Env::v('add_member');
 736             }
 737
 738             $logins = preg_split("/[; ,\r\n\|]+/", $logins);
 739             $members = User::getBulkForlifeEmails($logins,
 740                                                   true,
 741                                                   array('ListsModule', 'no_login_callback'));
 742             $unfound = array_diff_key($logins, $members);
 743
 744             // Make sure we send a list (array_values) of unique (array_unique)
 745             // emails.
 746             $members = array_values(array_unique($members));
 747
 748             $arr = $mlist->subscribeBulk($members);
 749
 750             $successes = array();
 751             if (is_array($arr)) {
 752                 foreach($arr as $addr) {
 753                     $successes[] = $addr[1];
 754                     $page->trigSuccess("{$addr[0]} inscrit.");
 755                 }
 756             }
 757
 758             $already = array_diff($members, $successes);
 759             if (is_array($already)) {
 760                 foreach ($already as $item) {
 761                     $page->trigWarning($item . ' est déjà inscrit.');
 762                 }
 763             }
 764
 765             if (is_array($unfound)) {
 766                 foreach ($unfound as $item) {
 767                     if (trim($item) != '') {
 768                         $page->trigError($item . " ne correspond pas à un compte existant et n'est pas une adresse email.");
 769                     }
 770                 }
 771             }
 772         }
 773
 774         if (Env::has('del_member')) {
 775             S::assert_xsrf_token();
 776
 777             if (strpos(Env::v('del_member'), '@') === false) {
 778                 if ($del_member = User::getSilent(Env::t('del_member'))) {
 779                     $mlist->unsubscribeBulk(array($del_member->forlifeEmail()));
 780                 }
 781             } else {
 782                 $mlist->unsubscribeBulk(array(Env::v('del_member')));
 783             }
 784             pl_redirect('lists/admin/'.$liste);
 785         }
 786
 787         if (Env::has('add_owner')) {
 788             S::assert_xsrf_token();
 789
 790             $owners = User::getBulkForlifeEmails(Env::v('add_owner'), false, array('ListsModule', 'no_login_callback'));
 791             if ($owners) {
 792                 foreach ($owners as $forlife_email) {
 793                     if ($mlist->addOwner($forlife_email)) {
 794                         $page->trigSuccess($login ." ajouté aux modérateurs.");
 795                     }
 796                 }
 797             }
 798         }
 799
 800         if (Env::has('del_owner')) {
 801             S::assert_xsrf_token();
 802
 803             if (strpos(Env::v('del_owner'), '@') === false) {
 804                 if ($del_owner = User::getSilent(Env::t('del_owner'))) {
 805                     $mlist->unsubscribeBulk(array($del_owner->forlifeEmail()));
 806                 }
 807             } else {
 808                 $mlist->removeOwner(Env::v('del_owner'));
 809             }
 810             pl_redirect('lists/admin/'.$liste);
 811         }
 812
 813         if (list($det,$mem,$own) = $mlist->getMembers()) {
 814             global $list_unregistered;
 815             if ($list_unregistered) {
 816                 $page->assign_by_ref('unregistered', $list_unregistered);
 817             }
 818             $membres = list_sort_members($mem, @$tri_promo);
 819             $moderos = list_sort_owners($own, @$tri_promo);
 820
 821             $page->assign_by_ref('details', $det);
 822             $page->assign_by_ref('members', $membres);
 823             $page->assign_by_ref('owners',  $moderos);
 824             $page->assign('np_m', count($mem));
 825         } else {
 826             $page->kill("La liste n'existe pas ou tu n'as pas le droit de l'administrer.<br />"
 827                       . " Si tu penses qu'il s'agit d'une erreur, "
 828                       . "<a href='mailto:support@polytechnique.org'>contact le support</a>.");
 829         }
 830     }
 831
 832     function handler_options($page, $liste = null)
 833     {
 834         if (is_null($liste)) {
 835             return PL_NOT_FOUND;
 836         }
 837
 838         $mlist = $this->prepare_list($liste);
 839         if (!$this->is_group_admin($page)) {
 840             $this->verify_list_owner($page, $mlist);
 841         }
 842
 843         $page->changeTpl('lists/options.tpl');
 844
 845         if (Post::has('submit')) {
 846             S::assert_xsrf_token();
 847
 848             $values = $_POST;
 849             $values = array_map('utf8_decode', $values);
 850             $spamlevel = intval($values['bogo_level']);
 851             $unsurelevel = intval($values['unsure_level']);
 852             if ($spamlevel == 0) {
 853                 $unsurelevel = 0;
 854             }
 855             if ($spamlevel > 3 || $spamlevel < 0 || $unsurelevel < 0 || $unsurelevel > 1) {
 856                 $page->trigError("Réglage de l'antispam non valide");
 857             } else {
 858                 $mlist->setBogoLevel(($spamlevel << 1) + $unsurelevel);
 859             }
 860             switch($values['moderate']) {
 861                 case '0':
 862                     $values['generic_nonmember_action']  = 0;
 863                     $values['default_member_moderation'] = 0;
 864                     break;
 865                 case '1':
 866                     $values['generic_nonmember_action']  = 1;
 867                     $values['default_member_moderation'] = 0;
 868                     break;
 869                 case '2':
 870                     $values['generic_nonmember_action']  = 1;
 871                     $values['default_member_moderation'] = 1;
 872                     break;
 873             }
 874             unset($values['submit'], $values['bogo_level'], $values['moderate']);
 875             $values['send_goodbye_msg']      = !empty($values['send_goodbye_msg']);
 876             $values['admin_notify_mchanges'] = !empty($values['admin_notify_mchanges']);
 877             $values['subscribe_policy']      = empty($values['subscribe_policy']) ? 0 : 2;
 878             if (isset($values['subject_prefix'])) {
 879                 $values['subject_prefix'] = trim($values['subject_prefix']).' ';
 880             }
 881             $mlist->setOwnerOptions($values);
 882         } elseif (isvalid_email(Post::v('atn_add'))) {
 883             S::assert_xsrf_token();
 884             $mlist->whitelistAdd(Post::v('atn_add'));
 885         } elseif (Get::has('atn_del')) {
 886             S::assert_xsrf_token();
 887             $mlist->whitelistRemove(Post::v('atn_del'));
 888             pl_redirect('lists/options/'.$liste);
 889         }
 890
 891         if (list($details, $options) = $mlist->getOwnerOptions()) {
 892             $page->assign_by_ref('details', $details);
 893             $page->assign_by_ref('options', $options);
 894             $bogo_level = intval($mlist->getBogoLevel());
 895             $page->assign('unsure_level', $bogo_level & 1);
 896             $page->assign('bogo_level', $bogo_level >> 1);
 897         } else {
 898             $page->kill("La liste n'existe pas ou tu n'as pas le droit de l'administrer");
 899         }
 900     }
 901
 902     function handler_delete($page, $liste = null)
 903     {
 904         global $globals;
 905         if (is_null($liste)) {
 906             return PL_NOT_FOUND;
 907         }
 908
 909         $mlist = $this->prepare_list($liste);
 910         if (!$this->is_group_admin($page)) {
 911             $this->verify_list_owner($page, $mlist);
 912         }
 913
 914         $page->changeTpl('lists/delete.tpl');
 915         if (Post::v('valid') == 'OUI') {
 916             S::assert_xsrf_token();
 917
 918             if ($mlist->delete(Post::b('del_archive'))) {
 919                 require_once 'emails.inc.php';
 920
 921                 delete_list($mlist->mbox, $mlist->domain);
 922                 $page->assign('deleted', true);
 923                 $page->trigSuccess('La liste a été détruite&nbsp;!');
 924             } else {
 925                 $page->kill('Une erreur est survenue lors de la suppression de la liste.<br />'
 926                          . 'Contact les administrateurs du site pour régler le problème : '
 927                          . '<a href="mailto:support@polytechnique.org">support@polytechnique.org</a>.');
 928             }
 929         } elseif (list($details, $options) = $mlist->getOwnerOptions()) {
 930             if (!$details['own']) {
 931                 $page->trigWarning('Tu n\'es pas administrateur de la liste, mais du site.');
 932             }
 933             $page->assign_by_ref('details', $details);
 934             $page->assign_by_ref('options', $options);
 935             $page->assign('bogo_level', $mlist->getBogoLevel());
 936         } else {
 937             $page->kill("La liste n'existe pas ou tu n'as pas le droit de l'administrer.");
 938         }
 939     }
 940
 941     function handler_soptions($page, $liste = null)
 942     {
 943         if (is_null($liste)) {
 944             return PL_NOT_FOUND;
 945         }
 946
 947         $mlist = $this->prepare_list($liste);
 948         if (!$this->is_group_admin($page)) {
 949             $this->verify_list_owner($page, $mlist);
 950         }
 951
 952         $page->changeTpl('lists/soptions.tpl');
 953
 954         if (Post::has('submit')) {
 955             S::assert_xsrf_token();
 956
 957             $values = $_POST;
 958             $values = array_map('utf8_decode', $values);
 959             unset($values['submit']);
 960             $values['advertised'] = empty($values['advertised']) ? false : true;
 961             $values['archive'] = empty($values['archive']) ? false : true;
 962             $mlist->setAdminOptions($values);
 963         }
 964
 965         if (list($details, $options) = $mlist->getAdminOptions()) {
 966             $page->assign_by_ref('details', $details);
 967             $page->assign_by_ref('options', $options);
 968         } else {
 969             $page->kill("La liste n'existe pas.");
 970         }
 971     }
 972
 973     function handler_check($page, $liste = null)
 974     {
 975         if (is_null($liste)) {
 976             return PL_NOT_FOUND;
 977         }
 978
 979         $mlist = $this->prepare_list($liste);
 980         if (!$this->is_group_admin($page)) {
 981             $this->verify_list_owner($page, $mlist);
 982         }
 983
 984         $page->changeTpl('lists/check.tpl');
 985
 986         if (Post::has('correct')) {
 987             S::assert_xsrf_token();
 988             $mlist->checkOptions(true);
 989         }
 990
 991         if (list($details, $options) = $mlist->checkOptions()) {
 992             $page->assign_by_ref('details', $details);
 993             $page->assign_by_ref('options', $options);
 994         } else {
 995             $page->kill("La liste n'existe pas.");
 996         }
 997     }
 998
 999     function handler_admin_all($page)
1000     {
1001         $page->changeTpl('lists/admin_all.tpl');
1002         $page->setTitle('Administration - Mailing lists');
1003
1004         $client = $this->prepare_client();
1005         $listes = $client->get_all_lists();
1006         $page->assign_by_ref('listes', $listes);
1007     }
1008
1009     function handler_aaliases($page, $alias = null)
1010     {
1011         global $globals;
1012         require_once 'emails.inc.php';
1013         $page->setTitle('Administration - Aliases');
1014
1015         if (Post::has('new_alias')) {
1016             pl_redirect('admin/aliases/' . Post::t('new_alias') . '@' . $globals->mail->domain);
1017         }
1018
1019         // If no alias, list them all.
1020         if (is_null($alias)) {
1021             $page->changeTpl('lists/admin_aliases.tpl');
1022             $page->assign('aliases', array_merge(iterate_list_alias($globals->mail->domain), iterate_list_alias($globals->mail->domain2)));
1023             return;
1024         }
1025
1026         list($local_part, $domain) = explode('@', $alias);
1027         if (!($globals->mail->domain == $domain || $globals->mail->domain2 == $domain)
1028               || !preg_match("/^[a-zA-Z0-9\-\.]*$/", $local_part)) {
1029             $page->trigErrorRedirect('Le nom de l\'alias est erroné.', $globals->asso('diminutif') . 'admin/aliases');
1030         }
1031
1032         // Now we can perform the action.
1033         if (Post::has('del_alias')) {
1034             S::assert_xsrf_token();
1035
1036             delete_list_alias($local_part, $domain);
1037             $page->trigSuccessRedirect($alias . ' supprimé.', 'admin/aliases');
1038         }
1039
1040         if (Post::has('add_member')) {
1041             S::assert_xsrf_token();
1042
1043             if (add_to_list_alias(Post::t('add_member'), $local_part, $domain)) {
1044                 $page->trigSuccess('Ajout réussit.');
1045             } else {
1046                 $page->trigError('Ajout infructueux.');
1047             }
1048         }
1049
1050         if (Get::has('del_member')) {
1051             S::assert_xsrf_token();
1052
1053             if (delete_from_list_alias(Get::t('del_member'), $local_part, $domain)) {
1054                 $page->trigSuccess('Suppression réussie.');
1055             } else {
1056                 $page->trigError('Suppression infructueuse.');
1057             }
1058         }
1059
1060         $page->changeTpl('lists/admin_edit_alias.tpl');
1061         $page->assign('members', list_alias_members($local_part, $domain));
1062         $page->assign('alias', $alias);
1063     }
1064 }
1065
1066 // vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
1067 ?>