includes/SpecialUserlevels.php

   1 <?php
   2 /**
   3  * Provide an administration interface
   4  * DO NOT USE: INSECURE.
   5  */
   6
   7 /** */
   8 require_once('HTMLForm.php');
   9 require_once('Group.php');
  10
  11 /** Entry point */
  12 function wfSpecialUserlevels($par=null) {
  13         global $wgRequest;
  14 //      print_r($_POST);
  15         $form = new UserlevelsForm($wgRequest);
  16         $form->execute();
  17 }
  18
  19 /**
  20  * A class to manage user levels rights.
  21  */
  22 class UserlevelsForm extends HTMLForm {
  23         var $mPosted, $mRequest, $mSaveprefs;
  24         /** Escaped local url name*/
  25         var $action;
  26
  27         /** Constructor*/
  28         function UserlevelsForm ( &$request ) {
  29                 $this->mPosted = $request->wasPosted();
  30                 $this->mRequest = $request;
  31                 $this->mName = 'userlevels';
  32
  33                 $titleObj = Title::makeTitle( NS_SPECIAL, 'Userlevels' );
  34                 $this->action = $titleObj->escapeLocalURL();
  35         }
  36
  37         /**
  38          * Manage forms to be shown according to posted datas.
  39          * Depending on the submit button used : Call a form or a saving function.
  40          */
  41         function execute() {
  42                 // show the general form
  43                 $this->switchForm();
  44                 if ( $this->mPosted ) {
  45                         // show some more forms
  46                         if($this->mRequest->getCheck('seditgroup')) {
  47                                 $this->editGroupForm( $this->mRequest->getVal($this->mName.'-group-edit') ); }
  48                         if($this->mRequest->getCheck('saddgroup')) {
  49                                 $this->editGroupForm( ); }
  50                         if($this->mRequest->getCheck('ssearchuser')) {
  51                                 $this->editUserGroupsForm( $this->mRequest->getVal('user-editname')); }
  52
  53                         // save settings
  54                         if($this->mRequest->getCheck('savegroup')) {
  55                                 $this->saveGroup($this->mRequest->getVal('editgroup-name'),
  56                                                  $this->mRequest->getVal('editgroup-oldname'),
  57                                                  $this->mRequest->getVal('editgroup-description'));
  58
  59                         } elseif($this->mRequest->getCheck('saveusergroups')) {
  60                                 $this->saveUserGroups($this->mRequest->getVal('user-editname'),
  61                                                       $this->mRequest->getVal($this->mName.'-groupsmember'),
  62                                                       $this->mRequest->getVal($this->mName.'-groupsavailable'));
  63                         }
  64                 }
  65         }
  66
  67 // save things !!
  68         /**
  69          * Save a group
  70          * @param string $newname Group name.
  71          * @param string $oldname Old (current) group name.
  72          * @param string $description Group description.
  73          * @todo FIXME : doesnt validate anything.
  74          */
  75         function saveGroup($newname, $oldname, $description) {
  76                 $newame = trim($newname);
  77
  78                 if($oldname == '') {
  79                 // We create a new group
  80                         $g = new group();
  81                         $g->addToDatabase();
  82                 } else {
  83                         $g = Group::newFromName($oldname);
  84                 }
  85
  86                 // save stuff
  87                 $g->setName($newname);
  88                 $g->setDescription($description);
  89                 $g->save();
  90         }
  91
  92         /**
  93          * Save user groups changes in the database.
  94          * Datas comes from the editUserGroupsForm() form function
  95          *
  96          * @param string $username Username to apply changes to.
  97          * @param array $removegroup id of groups to be removed.
  98          * @param array $addgroup id of groups to be added.
  99          */
 100         function saveUserGroups($username,$removegroup,$addgroup) {
 101                 $u = User::NewFromName($username);
 102
 103                 if(is_null($u)) {
 104                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
 105                         return;
 106                 }
 107                 $id = $u->idForName();
 108                 if($id == 0) {
 109                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
 110                         return;
 111                 }
 112                 $u->setID( $id );
 113
 114                 $groups = $u->getGroups();
 115                 // remove then add groups
 116                 if(isset($removegroup)) { $groups = array_diff($groups, $removegroup); }
 117                 if(isset($addgroup)) { $groups = array_merge($groups, $addgroup); }
 118                 // save groups in user object and database
 119                 $u->setGroups($groups);
 120                 $u->saveSettings();
 121         }
 122
 123         /**
 124          * The entry form
 125          * It allow a user to select or eventually add a group as well as looking up
 126          * for a username.
 127          */
 128         function switchForm() {
 129                 global $wgOut;
 130
 131                 // group selection
 132                 $wgOut->addHTML( "<form name=\"ulgroup\" action=\"$this->action\" method=\"post\">" );
 133                 $wgOut->addHTML( $this->fieldset( 'lookup-group',
 134                                 $this->HTMLSelectGroups('group-edit', array(0 => $this->mRequest->getVal($this->mName.'-group-edit')) ) .
 135                                 ' <input type="submit" name="seditgroup" value="'.wfMsg('editgroup').'">' .
 136                                 '<br /><input type="submit" name="saddgroup" value="'.wfMsg('addgroup').'">'
 137                         ));
 138                 $wgOut->addHTML( "</form>" );
 139
 140                 // user selection
 141                 $wgOut->addHTML( "<form name=\"uluser\" action=\"$this->action\" method=\"post\">" );
 142                 $wgOut->addHTML( $this->fieldset( 'lookup-user',
 143                                 $this->textbox( 'user-editname' ) .
 144                                 '<input type="submit" name="ssearchuser" value="'.wfMsg('editusergroup').'">'
 145                 ));
 146                 $wgOut->addHTML( "</form>" );
 147         }
 148
 149         /**
 150          * Edit a group properties and rights.
 151          * @param string $groupname Name of a group to be edited.
 152          */
 153         function editGroupForm($groupID = 0) {
 154                 global $wgOut;
 155
 156                 if($this->mRequest->getVal('seditgroup')) {
 157                 // fetch data if we edit a group
 158                         $g = Group::newFromID($groupID);
 159                         $gName = $g->getName();
 160                         $gDescription = $g->getDescription();
 161                         $fieldname = 'editgroup';
 162                 } else {
 163                 // default datas when we add a group
 164                         $gName = '';
 165                         $gDescription = '';
 166                         $fieldname = 'addgroup';
 167                 }
 168
 169                 $wgOut->addHTML( "<form name=\"editGroup\" action=\"$this->action\" method=\"post\">".
 170                                 '<input type="hidden" name="editgroup-oldname" value="'.$gName.'">');
 171                 $wgOut->addHTML( $this->fieldset( $fieldname,
 172                         $this->textbox( 'editgroup-name', $gName ) .
 173                         $this->textareabox( 'editgroup-description', $gDescription ) .
 174                         '<input type="submit" name="savegroup" value="'.wfMsg('savegroup').'">'
 175                         ));
 176                 $wgOut->addHTML( "</form>" );
 177         }
 178
 179         /**
 180          * Edit user groups membership
 181          * @param string $username Name of the user.
 182          */
 183         function editUserGroupsForm($username) {
 184                 global $wgOut;
 185
 186                 $user = User::newFromName($username);
 187                 if(is_null($user)) {
 188                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
 189                         return;
 190                 }
 191                 $id = $user->idForName();
 192                 if($id == 0) {
 193                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
 194                         return;
 195                 }
 196                 $user->setID( $id );
 197
 198                 $groups = $user->getGroups();
 199
 200                 $wgOut->addHTML( "<form name=\"editGroup\" action=\"$this->action\" method=\"post\">".
 201                                                  '<input type="hidden" name="user-editname" value="'.$username.'">');
 202                 $wgOut->addHTML( $this->fieldset( 'editusergroup',
 203                         wfMsg('editing', $this->mRequest->getVal('user-editname')).'.<br />' .
 204                         '<table border="0"><tr><td>'.
 205                         $this->HTMLSelectGroups('groupsmember', $groups,true,6).
 206                         '</td><td>'.
 207                         $this->HTMLSelectGroups('groupsavailable', $groups,true,6,true).
 208                         '</td></tr></table>'.
 209                         '<p>'.wfMsg('userlevels-groupshelp').'</p>'.
 210                         '<input type="submit" name="saveusergroups" value="'.wfMsg('saveusergroups').'">'
 211                         ));
 212                 $wgOut->addHTML( "</form>" );
 213         }
 214
 215
 216         /** Build a select with all existent groups
 217          * @param string $selectname Name of this element. Name of form is automaticly prefixed.
 218          * @param array $selected Array of element selected when posted. Multiples will only show them.
 219          * @param boolean $multiple A multiple elements select.
 220          * @param integer $size Number of element to be shown ignored for non multiple (default 6).
 221          * @param boolean $reverse If true, multiple select will hide selected elements (default false).
 222         */
 223         function HTMLSelectGroups($selectname, $selected=array(), $multiple=false, $size=6, $reverse=false) {
 224                 $selectname = $this->mName.'-'.$selectname;
 225                 $dbr =& wfGetDB( DB_SLAVE );
 226                 $sql = 'SELECT group_id, group_name FROM `group`';
 227                 $res = $dbr->query($sql,'wfSpecialAdmin');
 228
 229                 $out = wfMsg($selectname);
 230                 $out .= '<select name="'.$selectname;
 231                 if($multiple) { $out.='[]" multiple size="'.$size; }
 232                 $out.='">';
 233
 234                 while($g = $dbr->fetchObject( $res ) ) {
 235                         if($multiple) {
 236                                 // for multiple will only show the things we want
 237                                 if(in_array($g->group_id, $selected) xor $reverse) {
 238                                         $out .= '<option value="'.$g->group_id.'">'.$g->group_name.'</option>';
 239                                 }
 240                         } else {
 241                                 $out .= '<option ';
 242                                 if(in_array($g->group_id, $selected)) { $out .= 'selected '; }
 243                                 $out .= 'value="'.$g->group_id.'">'.$g->group_name.'</option>';
 244                         }
 245                 }
 246
 247                 $out .= '</select>';
 248                 return $out;
 249         }
 250
 251 }
 252 ?>