Initial commit: Backup der Webseiten
- zoesch.de - blitzkiste.net - gruene-hassberge (norbert.zoesch.de) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
Felix Zösch
182
zoesch.de/galerie/admin/user_perm.php
Normal file
182
zoesch.de/galerie/admin/user_perm.php
Normal file
@@ -0,0 +1,182 @@
|
||||
<?php
|
||||
// +-----------------------------------------------------------------------+
|
||||
// | Piwigo - a PHP based photo gallery |
|
||||
// +-----------------------------------------------------------------------+
|
||||
// | Copyright(C) 2008-2016 Piwigo Team http://piwigo.org |
|
||||
// | Copyright(C) 2003-2008 PhpWebGallery Team http://phpwebgallery.net |
|
||||
// | Copyright(C) 2002-2003 Pierrick LE GALL http://le-gall.net/pierrick |
|
||||
// +-----------------------------------------------------------------------+
|
||||
// | This program is free software; you can redistribute it and/or modify |
|
||||
// | it under the terms of the GNU General Public License as published by |
|
||||
// | the Free Software Foundation |
|
||||
// | |
|
||||
// | This program is distributed in the hope that it will be useful, but |
|
||||
// | WITHOUT ANY WARRANTY; without even the implied warranty of |
|
||||
// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
|
||||
// | General Public License for more details. |
|
||||
// | |
|
||||
// | You should have received a copy of the GNU General Public License |
|
||||
// | along with this program; if not, write to the Free Software |
|
||||
// | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, |
|
||||
// | USA. |
|
||||
// +-----------------------------------------------------------------------+
|
||||
|
||||
if (!defined('IN_ADMIN'))
|
||||
{
|
||||
die('Hacking attempt!');
|
||||
}
|
||||
|
||||
include_once(PHPWG_ROOT_PATH.'admin/include/functions.php');
|
||||
|
||||
// +-----------------------------------------------------------------------+
|
||||
// | Check Access and exit when user status is not ok |
|
||||
// +-----------------------------------------------------------------------+
|
||||
check_status(ACCESS_ADMINISTRATOR);
|
||||
|
||||
// +-----------------------------------------------------------------------+
|
||||
// | variables init |
|
||||
// +-----------------------------------------------------------------------+
|
||||
|
||||
if (isset($_GET['user_id']) and is_numeric($_GET['user_id']))
|
||||
{
|
||||
$page['user'] = $_GET['user_id'];
|
||||
}
|
||||
else
|
||||
{
|
||||
die('user_id URL parameter is missing');
|
||||
}
|
||||
|
||||
// +-----------------------------------------------------------------------+
|
||||
// | updates |
|
||||
// +-----------------------------------------------------------------------+
|
||||
|
||||
if (isset($_POST['falsify'])
|
||||
and isset($_POST['cat_true'])
|
||||
and count($_POST['cat_true']) > 0)
|
||||
{
|
||||
// if you forbid access to a category, all sub-categories become
|
||||
// automatically forbidden
|
||||
$subcats = get_subcat_ids($_POST['cat_true']);
|
||||
$query = '
|
||||
DELETE FROM '.USER_ACCESS_TABLE.'
|
||||
WHERE user_id = '.$page['user'].'
|
||||
AND cat_id IN ('.implode(',', $subcats).')
|
||||
;';
|
||||
pwg_query($query);
|
||||
}
|
||||
elseif (isset($_POST['trueify'])
|
||||
and isset($_POST['cat_false'])
|
||||
and count($_POST['cat_false']) > 0)
|
||||
{
|
||||
add_permission_on_category($_POST['cat_false'], $page['user']);
|
||||
}
|
||||
|
||||
// +-----------------------------------------------------------------------+
|
||||
// | template init |
|
||||
// +-----------------------------------------------------------------------+
|
||||
|
||||
$template->set_filenames(
|
||||
array(
|
||||
'user_perm' => 'user_perm.tpl',
|
||||
'double_select' => 'double_select.tpl'
|
||||
)
|
||||
);
|
||||
|
||||
$template->assign(
|
||||
array(
|
||||
'TITLE' =>
|
||||
l10n(
|
||||
'Manage permissions for user "%s"',
|
||||
get_username($page['user'])
|
||||
),
|
||||
'L_CAT_OPTIONS_TRUE'=>l10n('Authorized'),
|
||||
'L_CAT_OPTIONS_FALSE'=>l10n('Forbidden'),
|
||||
|
||||
'F_ACTION' =>
|
||||
PHPWG_ROOT_PATH.
|
||||
'admin.php?page=user_perm'.
|
||||
'&user_id='.$page['user']
|
||||
)
|
||||
);
|
||||
|
||||
|
||||
// retrieve category ids authorized to the groups the user belongs to
|
||||
$group_authorized = array();
|
||||
|
||||
$query = '
|
||||
SELECT DISTINCT cat_id, c.uppercats, c.global_rank
|
||||
FROM '.USER_GROUP_TABLE.' AS ug
|
||||
INNER JOIN '.GROUP_ACCESS_TABLE.' AS ga
|
||||
ON ug.group_id = ga.group_id
|
||||
INNER JOIN '.CATEGORIES_TABLE.' AS c
|
||||
ON c.id = ga.cat_id
|
||||
WHERE ug.user_id = '.$page['user'].'
|
||||
;';
|
||||
$result = pwg_query($query);
|
||||
|
||||
if (pwg_db_num_rows($result) > 0)
|
||||
{
|
||||
$cats = array();
|
||||
while ($row = pwg_db_fetch_assoc($result))
|
||||
{
|
||||
$cats[] = $row;
|
||||
$group_authorized[] = $row['cat_id'];
|
||||
}
|
||||
usort($cats, 'global_rank_compare');
|
||||
|
||||
foreach ($cats as $category)
|
||||
{
|
||||
$template->append(
|
||||
'categories_because_of_groups',
|
||||
get_cat_display_name_cache($category['uppercats'], null)
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
// only private categories are listed
|
||||
$query_true = '
|
||||
SELECT id,name,uppercats,global_rank
|
||||
FROM '.CATEGORIES_TABLE.' INNER JOIN '.USER_ACCESS_TABLE.' ON cat_id = id
|
||||
WHERE status = \'private\'
|
||||
AND user_id = '.$page['user'];
|
||||
if (count($group_authorized) > 0)
|
||||
{
|
||||
$query_true.= '
|
||||
AND cat_id NOT IN ('.implode(',', $group_authorized).')';
|
||||
}
|
||||
$query_true.= '
|
||||
;';
|
||||
display_select_cat_wrapper($query_true,array(),'category_option_true');
|
||||
|
||||
$result = pwg_query($query_true);
|
||||
$authorized_ids = array();
|
||||
while ($row = pwg_db_fetch_assoc($result))
|
||||
{
|
||||
$authorized_ids[] = $row['id'];
|
||||
}
|
||||
|
||||
$query_false = '
|
||||
SELECT id,name,uppercats,global_rank
|
||||
FROM '.CATEGORIES_TABLE.'
|
||||
WHERE status = \'private\'';
|
||||
if (count($authorized_ids) > 0)
|
||||
{
|
||||
$query_false.= '
|
||||
AND id NOT IN ('.implode(',', $authorized_ids).')';
|
||||
}
|
||||
if (count($group_authorized) > 0)
|
||||
{
|
||||
$query_false.= '
|
||||
AND id NOT IN ('.implode(',', $group_authorized).')';
|
||||
}
|
||||
$query_false.= '
|
||||
;';
|
||||
display_select_cat_wrapper($query_false,array(),'category_option_false');
|
||||
|
||||
// +-----------------------------------------------------------------------+
|
||||
// | sending html code |
|
||||
// +-----------------------------------------------------------------------+
|
||||
|
||||
$template->assign_var_from_handle('DOUBLE_SELECT', 'double_select');
|
||||
$template->assign_var_from_handle('ADMIN_CONTENT', 'user_perm');
|
||||
?>
|
||||
Reference in New Issue
Block a user