sql_query($sql)) ) { message_die(GENERAL_ERROR, 'Could not obtain search results', '', __LINE__, __FILE__, $sql); } if ( $row = $db->sql_fetchrow($result) ) { do { $username_list .= ''; } while ( $row = $db->sql_fetchrow($result) ); } else { $username_list .= ''; } $db->sql_freeresult($result); } $page_title = $lang['Search']; include($phpbb_root_path . 'includes/page_header.'.$phpEx); $template->set_filenames(array( 'search_user_body' => 'search_username.tpl') ); $template->assign_vars(array( 'USERNAME' => ( !empty($search_match) ) ? strip_tags($search_match) : '', 'L_CLOSE_WINDOW' => $lang['Close_window'], 'L_SEARCH_USERNAME' => $lang['Find_username'], 'L_UPDATE_USERNAME' => $lang['Select_username'], 'L_SELECT' => $lang['Select'], 'L_SEARCH' => $lang['Search'], 'L_SEARCH_EXPLAIN' => $lang['Search_author_explain'], 'L_CLOSE_WINDOW' => $lang['Close_window'], 'S_USERNAME_OPTIONS' => $username_list, 'S_SEARCH_ACTION' => append_sid("search.$phpEx?mode=searchuser")) ); if ( $username_list != '' ) { $template->assign_block_vars('switch_select_name', array()); } $template->pparse('search_user_body'); include($phpbb_root_path . 'includes/page_tail.'.$phpEx); return; } if (isset($HTTP_POST_VARS['username']) || isset( $_POST['submit'] )) { //----------------------------------------------------- template initialization $template->set_filenames( array('user'=>'admin/user_perm.tpl') ); $error = array(); $tpl = array( 'permuser_authorized','permuser_forbidden','submit', 'permuser_parent_forbidden','permuser_info_message', 'adduser_info_back','permuser_only_private' ); //--------------------------------------------------------------------- updates if ( isset( $_POST['submit'] ) ) { // cleaning the user_access table for this user $query = 'DELETE FROM '.PREFIX_TABLE.'user_access'; $query.= ' WHERE user_id = '.$_GET['user_id']; $query.= ';'; pwg_query( $query ); // selecting all private categories $query = 'SELECT id'; $query.= ' FROM '.PREFIX_TABLE.'categories'; $query.= " WHERE status = 'private'"; $query.= ';'; $result = pwg_query( $query ); while ( $row = mysql_fetch_array( $result ) ) { $radioname = 'access-'.$row['id']; if ( $_POST[$radioname] == 0 ) { $query = 'INSERT INTO '.PREFIX_TABLE.'user_access'; $query.= ' (user_id,cat_id) VALUES'; $query.= ' ('.$_GET['user_id'].','.$row['id'].')'; $query.= ';'; pwg_query ( $query ); } } check_favorites( $_GET['user_id'] ); synchronize_user( $_GET['user_id'] ); $vtp->addSession( $sub, 'confirmation' ); $url = './admin.php?page=user_list'; $vtp->setVar( $sub, 'confirmation.back_url', add_session_id( $url ) ); $vtp->closeSession( $sub, 'confirmation' ); } //---------------------------------------------------------------- form display $restrictions = get_user_restrictions( $_GET['user_id'], $page['user_status'], false, false ); $action = './admin.php?page=user_perm&user_id='.$_GET['user_id']; $vtp->setVar( $sub, 'action', add_session_id( $action ) ); // Association of group_ids with group_names -> caching informations $query = 'SELECT id,name'; $query.= ' FROM '.PREFIX_TABLE.'groups'; $query.= ';'; $result = pwg_query( $query ); $groups = array(); while ( $row = mysql_fetch_array( $result ) ) { $groups[$row['id']] = $row['name']; } // Listing of groups the user belongs to $query = 'SELECT ug.group_id as groupid'; $query.= ' FROM '.PREFIX_TABLE.'user_group as ug'; $query.= ' WHERE user_id = '.$_GET['user_id']; $query.= ';'; $result = pwg_query( $query ); $usergroups = array(); while ( $row = mysql_fetch_array( $result ) ) { array_push( $usergroups, $row['groupid'] ); } // only private categories are listed $query = 'SELECT id'; $query.= ' FROM '.PREFIX_TABLE.'categories'; $query.= " WHERE status = 'private'"; $query.= ';'; $result = pwg_query( $query ); while ( $row = mysql_fetch_array( $result ) ) { $vtp->addSession( $sub, 'category' ); $vtp->setVar( $sub, 'category.id', $row['id'] ); // we have to know whether the user is authorized to access this // category. The category can be accessible for this user thanks to his // personnal access rights OR thanks to the access rights of a group he // belongs to. // 1. group access : // retrieving all authorized groups for this category and for this user $query = 'SELECT ga.group_id as groupid'; $query.= ' FROM '.PREFIX_TABLE.'group_access as ga'; $query.= ', '.PREFIX_TABLE.'user_group as ug'; $query.= ' WHERE ga.group_id = ug.group_id'; $query.= ' AND ug.user_id = '.$_GET['user_id']; $query.= ' AND cat_id = '.$row['id']; $query.= ';'; $subresult = pwg_query( $query ); $authorized_groups = array(); while ( $subrow = mysql_fetch_array( $subresult ) ) { array_push( $authorized_groups, $subrow['groupid'] ); } // 2. personnal access $is_user_allowed = is_user_allowed( $row['id'], $restrictions ); // link to the category permission management $url = './admin.php?page=cat_perm&cat_id='.$row['id']; $vtp->setVar( $sub, 'category.cat_perm_link', add_session_id( $url ) ); // color of the category : green if the user is allowed by himself or // thanks to a group he belongs to if ( $is_user_allowed == 0 or count( $authorized_groups ) > 0 ) { $vtp->setVar( $sub, 'category.color', 'green' ); } else { $vtp->setVar( $sub, 'category.color', 'red' ); } // category name $cat_infos = get_cat_info( $row['id'] ); $name = get_cat_display_name( $cat_infos['name'],' > ', 'font-weight:bold;' ); $vtp->setVar( $sub, 'category.name', $name ); // usergroups if ( count( $usergroups ) > 0 ) { $vtp->addSession( $sub, 'usergroups' ); foreach ( $usergroups as $i => $usergroup ) { $vtp->addSession( $sub, 'usergroup' ); $vtp->setVar( $sub, 'usergroup.name', $groups[$usergroup] ); $url = './admin.php?page=group_perm&group_id='.$usergroup; $vtp->setVar( $sub, 'usergroup.url', add_session_id( $url ) ); if ( in_array( $usergroup, $authorized_groups ) ) { $vtp->setVar( $sub, 'usergroup.color', 'green' ); } else { $vtp->setVar( $sub, 'usergroup.color', 'red' ); } if ( $i < count( $usergroups ) - 1 ) { $vtp->setVar( $sub, 'usergroup.separation', ',' ); } $vtp->closeSession( $sub, 'usergroup' ); } $vtp->closeSession( $sub, 'usergroups' ); } // any subcat forbidden for this user ? if ( $is_user_allowed == 2 ) { $vtp->addSession( $sub, 'parent_forbidden' ); $vtp->closeSession( $sub, 'parent_forbidden' ); } // personnal forbidden or authorized access ? if ( $is_user_allowed == 0 ) { $vtp->setVar( $sub, 'category.authorized_checked', ' checked="checked"' ); } else { $vtp->setVar( $sub, 'category.forbidden_checked', ' checked="checked"' ); } $vtp->closeSession( $sub, 'category' ); } //----------------------------------------------------------- default code else { $sub = $vtp->Open( '../template/'.$user['template'].'/admin/user_select_body.vtp' ); $tpl = array( 'Look_up_user', 'Find_username', 'Select_username' ); templatize_array( $tpl, 'lang', $sub ); $vtp->addSession( $sub, 'user' ); $vtp->setVarTab( $sub, array( 'user.S_USER_ACTION' => append_sid("./admin.php?page=user_search"), 'user.U_SEARCH_USER' => append_sid("./search.php")) ); $vtp->closeSession( $sub, 'user' ); } //----------------------------------------------------------- sending html code $vtp->Parse( $handle , 'sub', $sub ); ?>