users.php

在综合英文版XOOPS 2.09, 2.091, 2.092 的基础上正式发布XOOPS 2.09中文版 XOOPS 2.09x 版主要是PHP5升级、bug修正和安全补正： 1 全面兼容PHP 5.

<?php
// $Id: users.php,v 1.14 2004/12/26 19:12:06 onokazu Exp $
//  ------------------------------------------------------------------------ //
//                XOOPS - PHP Content Management System                      //
//                    Copyright (c) 2000 XOOPS.org                           //
//                       <http://www.xoops.org/>                             //
//  ------------------------------------------------------------------------ //
//  This program is free software; you can redistribute it and/or modify     //
//  it under the terms of the GNU General Public License as published by     //
//  the Free Software Foundation; either version 2 of the License, or        //
//  (at your option) any later version.                                      //
//                                                                           //
//  You may not change or alter any portion of this comment or credits       //
//  of supporting developers from this source code or any supporting         //
//  source code which is considered copyrighted (c) material of the          //
//  original comment or credit authors.                                      //
//                                                                           //
//  This program is distributed in the hope that it will be useful,          //
//  but WITHOUT ANY WARRANTY; without even the implied warranty of           //
//  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            //
//  GNU General Public License for more details.                             //
//                                                                           //
//  You should have received a copy of the GNU General Public License        //
//  along with this program; if not, write to the Free Software              //
//  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA //
//  ------------------------------------------------------------------------ //
// Author: Kazumi Ono (AKA onokazu)                                          //
// URL: http://www.myweb.ne.jp/, http://www.xoops.org/, http://jp.xoops.org/ //
// Project: The XOOPS Project                                                //
// ------------------------------------------------------------------------- //

if ( !is_object($xoopsUser) || !is_object($xoopsModule) || !$xoopsUser->isAdmin($xoopsModule->mid()) ) {
	exit("Access Denied");
}
/*********************************************************/
/* Users Functions                                       */
/*********************************************************/
include_once XOOPS_ROOT_PATH."/class/xoopslists.php";
include_once XOOPS_ROOT_PATH."/class/xoopsformloader.php";

function displayUsers()
{
	global $xoopsDB, $xoopsConfig, $xoopsModule;
	$userstart = isset($_GET['userstart']) ? intval($_GET['userstart']) : 0;
    xoops_cp_header();
	$member_handler =& xoops_gethandler('member');
	$usercount = $member_handler->getUserCount();
	$nav = new XoopsPageNav($usercount, 200, $userstart, "userstart", "fct=users");
	$editform = new XoopsThemeForm(_AM_EDEUSER, "edituser", "admin.php");
	$user_select = new XoopsFormSelect('', "uid");
	$criteria = new CriteriaCompo();
	$criteria->setSort('uname');
	$criteria->setOrder('ASC');
	$criteria->setLimit(200);
	$criteria->setStart($userstart);
	$user_select->addOptionArray($member_handler->getUserList($criteria));
	$user_select_tray = new XoopsFormElementTray(_AM_NICKNAME, "<br />");
	$user_select_tray->addElement($user_select);
	$user_select_nav = new XoopsFormLabel('', $nav->renderNav(4));
	$user_select_tray->addElement($user_select_nav);
	$op_select = new XoopsFormSelect("", "op");
	$op_select->addOptionArray(array("modifyUser"=>_AM_MODIFYUSER, "delUser"=>_AM_DELUSER));
	$submit_button = new XoopsFormButton("", "submit", _AM_GO, "submit");
	$fct_hidden = new XoopsFormHidden("fct", "users");
	$editform->addElement($user_select_tray);
	$editform->addElement($op_select);
	$editform->addElement($submit_button);
	$editform->addElement($fct_hidden);
	$editform->display();

	echo "<br />\n";
	$uid_value = "";
	$uname_value = "";
	$name_value = "";
	$email_value = "";
	$email_cbox_value = 0;
	$url_value = "";
//	$avatar_value = "blank.gif";
//	$theme_value = $xoopsConfig['default_theme'];
	$timezone_value = $xoopsConfig['default_TZ'];
	$icq_value = "";
	$aim_value = "";
	$yim_value = "";
	$msnm_value = "";
	$location_value = "";
	$occ_value = "";
	$interest_value = "";
	$sig_value = "";
	$sig_cbox_value = 0;
	$umode_value = $xoopsConfig['com_mode'];
	$uorder_value = $xoopsConfig['com_order'];
	// RMV-NOTIFY
	include_once XOOPS_ROOT_PATH . '/include/notification_constants.php';
	$notify_method_value = XOOPS_NOTIFICATION_METHOD_PM;
	$notify_mode_value = XOOPS_NOTIFICATION_MODE_SENDALWAYS;
	$bio_value = "";
	$rank_value = 0;
	$mailok_value = 0;
	$op_value = "addUser";
	$form_title = _AM_ADDUSER;
	$form_isedit = false;
	$groups = array(XOOPS_GROUP_USERS);
	include XOOPS_ROOT_PATH."/modules/system/admin/users/userform.php";
        xoops_cp_footer();
}

function modifyUser($user)
{
	global $xoopsDB, $xoopsConfig, $xoopsModule;
	xoops_cp_header();
	$member_handler =& xoops_gethandler('member');
	$user =& $member_handler->getUser($user);
	if (is_object($user)) {
		if (!$user->isActive()) {
			xoops_confirm(array('fct' => 'users', 'op' => 'reactivate', 'uid' => $user->getVar('uid')), 'admin.php', _AM_NOTACTIVE);
			xoops_cp_footer();
			exit();
		}
		$uid_value = $user->getVar("uid");
		$uname_value = $user->getVar("uname", "E");
		$name_value = $user->getVar("name", "E");
		$email_value = $user->getVar("email", "E");
		$email_cbox_value = $user->getVar("user_viewemail") ? 1 : 0;
		$url_value = $user->getVar("url", "E");
//		$avatar_value = $user->getVar("user_avatar");
		$temp = $user->getVar("theme");
//		$theme_value = empty($temp) ? $xoopsConfig['default_theme'] : $temp;
		$timezone_value = $user->getVar("timezone_offset");
		$icq_value = $user->getVar("user_icq", "E");
		$aim_value = $user->getVar("user_aim", "E");
		$yim_value = $user->getVar("user_yim", "E");
		$msnm_value = $user->getVar("user_msnm", "E");
		$location_value = $user->getVar("user_from", "E");
		$occ_value = $user->getVar("user_occ", "E");
		$interest_value = $user->getVar("user_intrest", "E");
		$sig_value = $user->getVar("user_sig", "E");
		$sig_cbox_value = ($user->getVar("attachsig") == 1) ? 1 : 0;
		$umode_value = $user->getVar("umode");
		$uorder_value = $user->getVar("uorder");
		// RMV-NOTIFY
		$notify_method_value = $user->getVar("notify_method");
		$notify_mode_value = $user->getVar("notify_mode");
		$bio_value = $user->getVar("bio", "E");
		$rank_value = $user->rank(false);
		$mailok_value = $user->getVar('user_mailok', 'E');
		$op_value = "updateUser";
		$form_title = _AM_UPDATEUSER.": ".$user->getVar("uname");
		$form_isedit = true;
		$groups = array_values($user->getGroups());
		include XOOPS_ROOT_PATH."/modules/system/admin/users/userform.php";
		echo "<br /><b>"._AM_USERPOST."</b><br /><br />\n";
		echo "<table>\n";
		echo "<tr><td>"._AM_COMMENTS."</td><td>".$user->getVar("posts")."</td></tr>\n";
		echo "</table>\n";
		echo "<br />"._AM_PTBBTSDIYT."<br />\n";
		echo "<form action=\"admin.php\" method=\"post\">\n";
		echo "<input type=\"hidden\" name=\"id\" value=\"".$user->getVar("uid")."\">";
		echo "<input type=\"hidden\" name=\"type\" value=\"user\">\n";
		echo "<input type=\"hidden\" name=\"fct\" value=\"users\">\n";
		echo "<input type=\"hidden\" name=\"op\" value=\"synchronize\">\n";
		echo "<input type=\"submit\" value=\""._AM_SYNCHRONIZE."\">\n";
		echo "</form>\n";
	} else {
		echo "<h4 style='text-align:left;'>";
		echo _AM_USERDONEXIT;
		echo "</h4>";
	}
	xoops_cp_footer();
}

// RMV-NOTIFY
function updateUser($uid, $uname, $name, $url, $email, $user_icq, $user_aim, $user_yim, $user_msnm, $user_from, $user_occ, $user_intrest, $user_viewemail, $user_avatar, $user_sig, $attachsig, $theme, $pass, $pass2, $rank, $bio, $uorder, $umode, $notify_method, $notify_mode, $timezone_offset, $user_mailok, $groups = array())
{
	global $xoopsConfig, $xoopsDB, $xoopsModule;
	$member_handler =& xoops_gethandler('member');
	$edituser =& $member_handler->getUser($uid);
	if ($edituser->getVar('uname') != $uname && $member_handler->getUserCount(new Criteria('uname', $uname)) > 0) {
		xoops_cp_header();
		echo 'User name '.$uname.' already exists';
		xoops_cp_footer();
	} else {
		$edituser->setVar("name", $name);
		$edituser->setVar("uname", $uname);
		$edituser->setVar("email", $email);
		if (isset($url) && $url != "") {
			$edituser->setVar("url", formatURL($url));
		}
	//	$edituser->setVar("user_avatar", $user_avatar);
		$edituser->setVar("user_icq", $user_icq);
		$edituser->setVar("user_from", $user_from);
		$edituser->setVar("user_sig", $user_sig);
		$user_viewemail = (isset($user_viewemail) && $user_viewemail == 1) ? 1 : 0;
		$edituser->setVar("user_viewemail", $user_viewemail);
		$edituser->setVar("user_aim", $user_aim);
		$edituser->setVar("user_yim", $user_yim);
		$edituser->setVar("user_msnm", $user_msnm);
		$edituser->setVar("attachsig", $attachsig);
		$edituser->setVar("timezone_offset", $timezone_offset);
	//	$edituser->setVar("theme", $theme);
		$edituser->setVar("uorder", $uorder);
		$edituser->setVar("umode", $umode);
		// RMV-NOTIFY
		$edituser->setVar("notify_method", $notify_method);
		$edituser->setVar("notify_mode", $notify_mode);
		$edituser->setVar("bio", $bio);
		$edituser->setVar("rank", $rank);
		$edituser->setVar("user_occ", $user_occ);
		$edituser->setVar("user_intrest", $user_intrest);
		$edituser->setVar('user_mailok', $user_mailok);
		if ($pass2 != "") {
			if ( $pass != $pass2 ) {
				xoops_cp_header();
				echo "
				<b>"._AM_STNPDNM."</b>";
				xoops_cp_footer();
				exit();
			}
			$edituser->setVar("pass", md5($pass));
		}
		if (!$member_handler->insertUser($edituser)) {
			xoops_cp_header();
			echo $edituser->getHtmlErrors();
			xoops_cp_footer();
		} else {
		    if ($groups != array()) {
		        global $xoopsUser;
		        $oldgroups = $edituser->getGroups();
		        //If the edited user is the current user and the current user WAS in the webmaster's group and is NOT in the new groups array
		        if ($edituser->getVar('uid') == $xoopsUser->getVar('uid') && (in_array(XOOPS_GROUP_ADMIN, $oldgroups)) && !(in_array(XOOPS_GROUP_ADMIN, $groups))) {
		            //Add the webmaster's group to the groups array to prevent accidentally removing oneself from the webmaster's group
		            array_push($groups, XOOPS_GROUP_ADMIN);
		        }		        
		        $member_handler =& xoops_gethandler('member');
		        foreach ($oldgroups as $groupid) {
		            $member_handler->removeUsersFromGroup($groupid, array($edituser->getVar('uid')));
		        }
		        foreach ($groups as $groupid) {
		            $member_handler->addUserToGroup($groupid, $edituser->getVar('uid'));
		        }
		    }
			redirect_header("admin.php?fct=users",1,_AM_DBUPDATED);
		}
	}
	exit();
}

function synchronize($id, $type)
{
	global $xoopsDB;
   	switch($type) {
   	case 'user':
		// Array of tables from which to count 'posts'
		$tables = array();
		// Count comments (approved only: com_status == XOOPS_COMMENT_ACTIVE)
		include_once XOOPS_ROOT_PATH . '/include/comment_constants.php';
		$tables[] = array ('table_name' => 'xoopscomments', 'uid_column' => 'com_uid', 'criteria' => new Criteria('com_status', XOOPS_COMMENT_ACTIVE));
		// Count forum posts
		$tables[] = array ('table_name' => 'bb_posts', 'uid_column' => 'uid');

		$total_posts = 0;
		foreach ($tables as $table) {
			$criteria = new CriteriaCompo();
			$criteria->add (new Criteria($table['uid_column'], $id));
			if (!empty($table['criteria'])) {
				$criteria->add ($table['criteria']);
			}
   			$sql = "SELECT COUNT(*) AS total FROM ".$xoopsDB->prefix($table['table_name']) . ' ' . $criteria->renderWhere();
   			if ( $result = $xoopsDB->query($sql) ) {
				if ($row = $xoopsDB->fetchArray($result)) {
					$total_posts = $total_posts + $row['total'];
   				}
   			}
		}
		$sql = "UPDATE ".$xoopsDB->prefix("users")." SET posts = $total_posts WHERE uid = $id";
   		if ( !$result = $xoopsDB->query($sql) ) {
   			exit(sprintf(_AM_CNUUSER %s ,$id));
   		}
   		break;
   	case 'all users':
   		$sql = "SELECT uid FROM ".$xoopsDB->prefix("users")."";
   		if ( !$result = $xoopsDB->query($sql) ) {
   			exit(_AM_CNGUSERID);
   		}
   		while ($row = $xoopsDB->fetchArray($result)) {
   			$id = $row['uid'];
   			synchronize($id, "user");
   		}
   		break;
   	default:
		break;
   	}
   	redirect_header("admin.php?fct=users&amp;op=modifyUser&amp;uid=".$id,1,_AM_DBUPDATED);
	exit();
}
?>