includes/SpecialUserrights.php

   1 <?php
   2 /**
   3  * Provide an administration interface
   4  * DO NOT USE: INSECURE.
   5  *
   6  * TODO : remove everything related to group editing (SpecialGrouplevels.php)
   7  * @package MediaWiki
   8  * @subpackage SpecialPage
   9  */
  10
  11 /** */
  12 require_once('HTMLForm.php');
  13 require_once('Group.php');
  14
  15 /** Entry point */
  16 function wfSpecialUserrights($par=null) {
  17         global $wgRequest;
  18         # Debug statement
  19         // print_r($_POST);
  20         $form = new UserrightsForm($wgRequest);
  21         $form->execute();
  22 }
  23
  24 /**
  25  * A class to manage user levels rights.
  26  * @package MediaWiki
  27  * @subpackage SpecialPage
  28  */
  29 class UserrightsForm extends HTMLForm {
  30         var $mPosted, $mRequest, $mSaveprefs;
  31         /** Escaped local url name*/
  32         var $action;
  33
  34         /** Constructor*/
  35         function UserrightsForm ( &$request ) {
  36                 $this->mPosted = $request->wasPosted();
  37                 $this->mRequest = $request;
  38                 $this->mName = 'userrights';
  39
  40                 $titleObj = Title::makeTitle( NS_SPECIAL, 'Userrights' );
  41                 $this->action = $titleObj->escapeLocalURL();
  42         }
  43
  44         /**
  45          * Manage forms to be shown according to posted datas.
  46          * Depending on the submit button used : Call a form or a saving function.
  47          */
  48         function execute() {
  49                 // show the general form
  50                 $this->switchForm();
  51                 if ( $this->mPosted ) {
  52                         // show some more forms
  53                         if($this->mRequest->getCheck('ssearchuser')) {
  54                                 $this->editUserGroupsForm( $this->mRequest->getVal('user-editname')); }
  55
  56                         // save settings
  57                         if($this->mRequest->getCheck('saveusergroups')) {
  58                                 $this->saveUserGroups($this->mRequest->getVal('user-editname'),
  59                                                       $this->mRequest->getArray('member'),
  60                                                       $this->mRequest->getArray('available'));
  61                         }
  62                 }
  63         }
  64
  65 // save things !!
  66         /**
  67          * Save user groups changes in the database.
  68          * Datas comes from the editUserGroupsForm() form function
  69          *
  70          * @param string $username Username to apply changes to.
  71          * @param array $removegroup id of groups to be removed.
  72          * @param array $addgroup id of groups to be added.
  73          *
  74          * @todo Log groupname instead of group id.
  75          */
  76         function saveUserGroups($username,$removegroup,$addgroup) {
  77                 $u = User::NewFromName($username);
  78
  79                 if(is_null($u)) {
  80                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
  81                         return;
  82                 }
  83
  84                 if($u->getID() == 0) {
  85                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
  86                         return;
  87                 }
  88
  89                 $groups = $u->getGroups();
  90                 $logcomment = ' ';
  91                 // remove then add groups
  92                 if(isset($removegroup)) {
  93                         $groups = array_diff($groups, $removegroup);
  94                         $logcomment .= implode( ' -', $removegroup);
  95                         }
  96                 if(isset($addgroup)) {
  97                         $groups = array_merge($groups, $addgroup);
  98                         $logcomment .= implode( ' +', $addgroup );
  99                         }
 100                 // save groups in user object and database
 101                 $u->setGroups($groups);
 102                 $u->saveSettings();
 103
 104                 $log = new LogPage( 'rights' );
 105                 $log->addEntry( 'rights', Title::makeTitle( NS_USER, $u->getName() ), $logcomment );
 106         }
 107
 108         /**
 109          * The entry form
 110          * It allows a user to look for a username and edit its groups membership
 111          */
 112         function switchForm() {
 113                 global $wgOut;
 114
 115                 // user selection
 116                 $wgOut->addHTML( "<form name=\"uluser\" action=\"$this->action\" method=\"post\">\n" );
 117                 $wgOut->addHTML( $this->fieldset( 'lookup-user',
 118                                 $this->textbox( 'user-editname' ) .
 119                                 '<input type="submit" name="ssearchuser" value="'.wfMsg('editusergroup').'" />'
 120                 ));
 121                 $wgOut->addHTML( "</form>\n" );
 122         }
 123
 124         /**
 125          * Edit user groups membership
 126          * @param string $username Name of the user.
 127          */
 128         function editUserGroupsForm($username) {
 129                 global $wgOut;
 130
 131                 $user = User::newFromName($username);
 132                 if(is_null($user)) {
 133                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
 134                         return;
 135                 }
 136
 137                 if($user->getID() == 0) {
 138                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
 139                         return;
 140                 }
 141
 142                 $groups = $user->getGroups();
 143
 144                 $wgOut->addHTML( "<form name=\"editGroup\" action=\"$this->action\" method=\"post\">\n".
 145                                                  '<input type="hidden" name="user-editname" value="'.$username.'" />');
 146                 $wgOut->addHTML( $this->fieldset( 'editusergroup',
 147                         wfMsg('editing', $this->mRequest->getVal('user-editname')).".<br />\n" .
 148                         '<table border="0" align="center"><tr><td>'.
 149                         HTMLSelectGroups('member', $this->mName.'-groupsmember', $groups,true,6).
 150                         '</td><td>'.
 151                         HTMLSelectGroups('available', $this->mName.'-groupsavailable', $groups,true,6,true).
 152                         '</td></tr></table>'."\n".
 153                         '<p>'.wfMsg('userrights-groupshelp').'</p>'."\n".
 154                         '<input type="submit" name="saveusergroups" value="'.wfMsg('saveusergroups').'" />'
 155                         ));
 156                 $wgOut->addHTML( "</form>\n" );
 157         }
 158 } // end class UserrightsForm
 159 ?>