diff --git a/op/op.GroupMgr.php b/op/op.GroupMgr.php index 7453b286d..61a9f4acd 100644 --- a/op/op.GroupMgr.php +++ b/op/op.GroupMgr.php @@ -1,220 +1,220 @@ -isAdmin()) { - UI::exitError(getMLText("admin_tools"),getMLText("access_denied")); +include("../inc/inc.Language.php"); +include("../inc/inc.ClassUI.php"); +include("../inc/inc.ClassEmail.php"); +include("../inc/inc.Authentication.php"); + +if (!$user->isAdmin()) { + UI::exitError(getMLText("admin_tools"),getMLText("access_denied")); } if (isset($_POST["action"])) $action = $_POST["action"]; else $action = null; - -//Neue Gruppe anlegen ----------------------------------------------------------------------------- -if ($action == "addgroup") { - + +// Create new group -------------------------------------------------------- +if ($action == "addgroup") { + /* Check if the form data comes for a trusted request */ if(!checkFormKey('addgroup')) { UI::exitError(getMLText("admin_tools"),getMLText("invalid_request_token")); } - $name = $_POST["name"]; - $comment = $_POST["comment"]; - + $name = $_POST["name"]; + $comment = $_POST["comment"]; + if (is_object($dms->getGroupByName($name))) { - UI::exitError(getMLText("admin_tools"),getMLText("group_exists")); - } - - $newGroup = $dms->addGroup($name, $comment); - if (!$newGroup) { - UI::exitError(getMLText("admin_tools"),getMLText("error_occured")); + UI::exitError(getMLText("admin_tools"),getMLText("group_exists")); + } + + $newGroup = $dms->addGroup($name, $comment); + if (!$newGroup) { + UI::exitError(getMLText("admin_tools"),getMLText("error_occured")); } $groupid=$newGroup->getID(); - + add_log_line(); -} - -//Gruppe löschen ---------------------------------------------------------------------------------- -else if ($action == "removegroup") { - +} + +// Delete group ------------------------------------------------------------- +else if ($action == "removegroup") { + /* Check if the form data comes for a trusted request */ if(!checkFormKey('removegroup')) { UI::exitError(getMLText("admin_tools"),getMLText("invalid_request_token")); } if (!isset($_POST["groupid"]) || !is_numeric($_POST["groupid"]) || intval($_POST["groupid"])<1) { - UI::exitError(getMLText("admin_tools"),getMLText("invalid_group_id")); + UI::exitError(getMLText("admin_tools"),getMLText("invalid_group_id")); } - - $group = $dms->getGroup($_POST["groupid"]); - if (!is_object($group)) { - UI::exitError(getMLText("admin_tools"),getMLText("invalid_group_id")); - } - - if (!$group->remove($user)) { - UI::exitError(getMLText("admin_tools"),getMLText("error_occured")); + + $group = $dms->getGroup($_POST["groupid"]); + if (!is_object($group)) { + UI::exitError(getMLText("admin_tools"),getMLText("invalid_group_id")); } - + + if (!$group->remove($user)) { + UI::exitError(getMLText("admin_tools"),getMLText("error_occured")); + } + $groupid = ''; add_log_line(".php?groupid=".$_POST["groupid"]."&action=removegroup"); -} - -//Gruppe bearbeiten ------------------------------------------------------------------------------- -else if ($action == "editgroup") { - +} + +// Modifiy group ------------------------------------------------------------ +else if ($action == "editgroup") { + /* Check if the form data comes for a trusted request */ if(!checkFormKey('editgroup')) { UI::exitError(getMLText("admin_tools"),getMLText("invalid_request_token")); } - if (!isset($_POST["groupid"]) || !is_numeric($_POST["groupid"]) || intval($_POST["groupid"])<1) { - UI::exitError(getMLText("admin_tools"),getMLText("invalid_group_id")); + if (!isset($_POST["groupid"]) || !is_numeric($_POST["groupid"]) || intval($_POST["groupid"])<1) { + UI::exitError(getMLText("admin_tools"),getMLText("invalid_group_id")); } - $groupid=$_POST["groupid"]; + $groupid=$_POST["groupid"]; $group = $dms->getGroup($groupid); - - if (!is_object($group)) { - UI::exitError(getMLText("admin_tools"),getMLText("invalid_group_id")); - } - - $name = $_POST["name"]; - $comment = $_POST["comment"]; - - if ($group->getName() != $name) - $group->setName($name); - if ($group->getComment() != $comment) + + if (!is_object($group)) { + UI::exitError(getMLText("admin_tools"),getMLText("invalid_group_id")); + } + + $name = $_POST["name"]; + $comment = $_POST["comment"]; + + if ($group->getName() != $name) + $group->setName($name); + if ($group->getComment() != $comment) $group->setComment($comment); - + add_log_line(); -} - -//Benutzer zu Gruppe hinzufügen ------------------------------------------------------------------- +} + +// Add user to group -------------------------------------------------------- else if ($action == "addmember") { - + /* Check if the form data comes for a trusted request */ if(!checkFormKey('addmember')) { UI::exitError(getMLText("admin_tools"),getMLText("invalid_request_token")); } - if (!isset($_POST["groupid"]) || !is_numeric($_POST["groupid"]) || intval($_POST["groupid"])<1) { + if (!isset($_POST["groupid"]) || !is_numeric($_POST["groupid"]) || intval($_POST["groupid"])<1) { UI::exitError(getMLText("admin_tools"),getMLText("invalid_group_id")); } - $groupid=$_POST["groupid"]; + $groupid=$_POST["groupid"]; $group = $dms->getGroup($groupid); - - if (!is_object($group)) { + + if (!is_object($group)) { UI::exitError(getMLText("admin_tools"),getMLText("invalid_group_id")); - } - - if (!isset($_POST["userid"]) || !is_numeric($_POST["userid"]) || intval($_POST["userid"])<1) { - UI::exitError(getMLText("admin_tools"),getMLText("invalid_user_id")); } - - $newMember = $dms->getUser($_POST["userid"]); - if (!is_object($newMember)) { - UI::exitError(getMLText("admin_tools"),getMLText("invalid_user_id")); - } + + if (!isset($_POST["userid"]) || !is_numeric($_POST["userid"]) || intval($_POST["userid"])<1) { + UI::exitError(getMLText("admin_tools"),getMLText("invalid_user_id")); + } + + $newMember = $dms->getUser($_POST["userid"]); + if (!is_object($newMember)) { + UI::exitError(getMLText("admin_tools"),getMLText("invalid_user_id")); + } if (!$group->isMember($newMember)){ $group->addUser($newMember); if (isset($_POST["manager"])) $group->toggleManager($newMember); } - add_log_line(".php?groupid=".$groupid."&userid=".$_POST["userid"]."&action=addmember"); -} - -//Benutzer aus Gruppe entfernen ------------------------------------------------------------------- -else if ($action == "rmmember") { - + add_log_line(".php?groupid=".$groupid."&userid=".$_POST["userid"]."&action=addmember"); +} + +// Remove user from group -------------------------------------------------- +else if ($action == "rmmember") { + /* Check if the form data comes for a trusted request */ if(!checkFormKey('rmmember')) { UI::exitError(getMLText("admin_tools"),getMLText("invalid_request_token")); } - if (!isset($_POST["groupid"]) || !is_numeric($_POST["groupid"]) || intval($_POST["groupid"])<1) { + if (!isset($_POST["groupid"]) || !is_numeric($_POST["groupid"]) || intval($_POST["groupid"])<1) { UI::exitError(getMLText("admin_tools"),getMLText("invalid_group_id")); } - - $groupid=$_POST["groupid"]; + + $groupid=$_POST["groupid"]; $group = $dms->getGroup($groupid); - - if (!is_object($group)) { + + if (!is_object($group)) { UI::exitError(getMLText("admin_tools"),getMLText("invalid_group_id")); - } - - if (!isset($_POST["userid"]) || !is_numeric($_POST["userid"]) || intval($_POST["userid"])<1) { - UI::exitError(getMLText("admin_tools"),getMLText("invalid_user_id")); } - - $oldMember = $dms->getUser($_POST["userid"]); - if (!is_object($oldMember)) { - UI::exitError(getMLText("admin_tools"),getMLText("invalid_user_id")); - } + + if (!isset($_POST["userid"]) || !is_numeric($_POST["userid"]) || intval($_POST["userid"])<1) { + UI::exitError(getMLText("admin_tools"),getMLText("invalid_user_id")); + } + + $oldMember = $dms->getUser($_POST["userid"]); + if (!is_object($oldMember)) { + UI::exitError(getMLText("admin_tools"),getMLText("invalid_user_id")); + } $group->removeUser($oldMember); - add_log_line(); + add_log_line(); } // toggle manager flag -else if ($action == "tmanager") { +else if ($action == "tmanager") { /* Check if the form data comes for a trusted request */ if(!checkFormKey('tmanager')) { UI::exitError(getMLText("admin_tools"),getMLText("invalid_request_token")); } - if (!isset($_POST["groupid"]) || !is_numeric($_POST["groupid"]) || intval($_POST["groupid"])<1) { + if (!isset($_POST["groupid"]) || !is_numeric($_POST["groupid"]) || intval($_POST["groupid"])<1) { UI::exitError(getMLText("admin_tools"),getMLText("invalid_group_id")); } - - $groupid=$_POST["groupid"]; + + $groupid=$_POST["groupid"]; $group = $dms->getGroup($groupid); - if (!is_object($group)) { + if (!is_object($group)) { UI::exitError(getMLText("admin_tools"),getMLText("invalid_group_id")); - } - - if (!isset($_POST["userid"]) || !is_numeric($_POST["userid"]) || intval($_POST["userid"])<1) { - UI::exitError(getMLText("admin_tools"),getMLText("invalid_user_id")); } - - $usertoedit = $dms->getUser($_POST["userid"]); - if (!is_object($usertoedit)) { - UI::exitError(getMLText("admin_tools"),getMLText("invalid_user_id")); - } + + if (!isset($_POST["userid"]) || !is_numeric($_POST["userid"]) || intval($_POST["userid"])<1) { + UI::exitError(getMLText("admin_tools"),getMLText("invalid_user_id")); + } + + $usertoedit = $dms->getUser($_POST["userid"]); + if (!is_object($usertoedit)) { + UI::exitError(getMLText("admin_tools"),getMLText("invalid_user_id")); + } $group->toggleManager($usertoedit); add_log_line(); } - + header("Location:../out/out.GroupMgr.php?groupid=".$groupid); - -?> + +?>