Your IP : 172.28.240.42
<?php
/**
* @version $Id: user.php 5995 2006-12-13 02:52:43Z friesengeist $
* @package Joomla
* @subpackage Users
* @copyright Copyright (C) 2005 Open Source Matters. All rights reserved.
* @license http://www.gnu.org/copyleft/gpl.html GNU/GPL, see LICENSE.php
* Joomla! is free software. This version may have been modified pursuant
* to the GNU General Public License, and as distributed it includes or
* is derivative of works licensed under the GNU General Public License or
* other free or open source software licenses.
* See COPYRIGHT.php for copyright notices and details.
*/
// no direct access
defined( '_VALID_MOS' ) or die( 'Äîñòóï çàïðåùåí' );
// Editor usertype check
$access = new stdClass();
$access->canEdit = $acl->acl_check( 'action', 'edit', 'users', $my->usertype, 'content', 'all' );
$access->canEditOwn = $acl->acl_check( 'action', 'edit', 'users', $my->usertype, 'content', 'own' );
require_once ( $mainframe->getPath( 'front_html' ) );
switch( $task ) {
case 'UserDetails':
userEdit( $option, $my->id, _UPDATE );
break;
case 'saveUserEdit':
// check to see if functionality restricted for use as demo site
if ( $_VERSION->RESTRICT == 1 ) {
mosRedirect( 'index.php?mosmsg=Functionality Restricted' );
} else {
userSave( $option, $my->id );
}
break;
case 'CheckIn':
CheckIn( $my->id, $access, $option );
break;
case 'cancel':
mosRedirect( 'index.php' );
break;
default:
HTML_user::frontpage();
break;
}
function userEdit( $option, $uid, $submitvalue) {
global $database, $mainframe;
global $mosConfig_absolute_path;
// security check to see if link exists in a menu
$link = 'index.php?option=com_user&task=UserDetails';
$query = "SELECT id"
. "\n FROM #__menu"
. "\n WHERE link LIKE '%$link%'"
. "\n AND published = 1"
;
$database->setQuery( $query );
$exists = $database->loadResult();
if ( !$exists ) {
mosNotAuth();
return;
}
require_once( $mosConfig_absolute_path .'/administrator/components/com_users/users.class.php' );
if ($uid == 0) {
mosNotAuth();
return;
}
$row = new mosUser( $database );
$row->load( (int)$uid );
$row->orig_password = $row->password;
$row->name = trim( $row->name );
$row->email = trim( $row->email );
$row->username = trim( $row->username );
$file = $mainframe->getPath( 'com_xml', 'com_users' );
$params =& new mosUserParameters( $row->params, $file, 'component' );
HTML_user::userEdit( $row, $option, $submitvalue, $params );
}
function userSave( $option, $uid) {
global $database, $my, $mosConfig_frontend_userparams;
$user_id = intval( mosGetParam( $_POST, 'id', 0 ));
// do some security checks
if ($uid == 0 || $user_id == 0 || $user_id != $uid) {
mosNotAuth();
return;
}
// simple spoof check security
josSpoofCheck();
$row = new mosUser( $database );
$row->load( (int)$user_id );
$orig_password = $row->password;
$orig_username = $row->username;
if (!$row->bind( $_POST, 'gid usertype' )) {
echo "<script> alert('".$row->getError()."'); window.history.go(-1); </script>\n";
exit();
}
$row->name = trim($row->name);
$row->email = trim($row->email);
$row->username = trim($row->username);
mosMakeHtmlSafe($row);
if (isset($_POST['password']) && $_POST['password'] != '') {
if (isset($_POST['verifyPass']) && ($_POST['verifyPass'] == $_POST['password'])) {
$row->password = md5(trim($row->password));
} else {
echo "<script> alert(\"".addslashes( _PASS_MATCH )."\"); window.history.go(-1); </script>\n";
exit();
}
} else {
// Restore 'original password'
$row->password = $orig_password;
}
if ($mosConfig_frontend_userparams == '1' || $mosConfig_frontend_userparams == 1 || $mosConfig_frontend_userparams == NULL) {
// save params
$params = mosGetParam( $_POST, 'params', '' );
if (is_array( $params )) {
$txt = array();
foreach ( $params as $k=>$v) {
$txt[] = "$k=$v";
}
$row->params = implode( "\n", $txt );
}
}
if (!$row->check()) {
echo "<script> alert('".$row->getError()."'); window.history.go(-1); </script>\n";
exit();
}
if (!$row->store()) {
echo "<script> alert('".$row->getError()."'); window.history.go(-1); </script>\n";
exit();
}
// check if username has been changed
if ( $orig_username != $row->username ) {
// change username value in session table
$query = "UPDATE #__session"
. "\n SET username = " . $database->Quote($row->username)
. "\n WHERE username = " . $database->Quote( $orig_username )
. "\n AND userid = " . (int) $my->id
. "\n AND gid = " . (int) $my->gid
. "\n AND guest = 0"
;
$database->setQuery( $query );
$database->query();
}
mosRedirect( 'index.php', _USER_DETAILS_SAVE );
}
function CheckIn( $userid, $access, $option ){
global $database;
global $mosConfig_db;
$nullDate = $database->getNullDate();
if (!($access->canEdit || $access->canEditOwn || $userid > 0)) {
mosNotAuth();
return;
}
// security check to see if link exists in a menu
$link = 'index.php?option=com_user&task=CheckIn';
$query = "SELECT id"
. "\n FROM #__menu"
. "\n WHERE link LIKE '%$link%'"
. "\n AND published = 1"
;
$database->setQuery( $query );
$exists = $database->loadResult();
if ( !$exists ) {
mosNotAuth();
return;
}
$lt = mysql_list_tables($mosConfig_db);
$k = 0;
echo "<table cellpadding=\"0\" cellspacing=\"0\" border=\"0\">";
while (list($tn) = mysql_fetch_array($lt)) {
// only check in the jos_* tables
if (strpos( $tn, $database->_table_prefix ) !== 0) {
continue;
}
$lf = mysql_list_fields($mosConfig_db, "$tn");
$nf = mysql_num_fields($lf);
$checked_out = false;
$editor = false;
for ($i = 0; $i < $nf; $i++) {
$fname = mysql_field_name($lf, $i);
if ( $fname == "checked_out") {
$checked_out = true;
} else if ( $fname == "editor") {
$editor = true;
}
}
if ($checked_out) {
if ($editor) {
$query = "SELECT checked_out, editor"
. "\n FROM `$tn`"
. "\n WHERE checked_out > 0"
. "\n AND checked_out = " . (int) $userid
;
$database->setQuery( $query );
} else {
$query = "SELECT checked_out"
. "\n FROM `$tn`"
. "\n WHERE checked_out > 0"
. "\n AND checked_out = " . (int) $userid
;
$database->setQuery( $query );
}
$res = $database->query();
$num = $database->getNumRows( $res );
if ($editor) {
$query = "UPDATE `$tn`"
. "\n SET checked_out = 0, checked_out_time = " . $database->Quote( $nullDate ) . ", editor = NULL"
. "\n WHERE checked_out > 0"
. "\n AND checked_out = " . (int) $userid
;
$database->setQuery( $query );
} else {
$query = "UPDATE `$tn`"
. "\n SET checked_out = 0, checked_out_time = " . $database->Quote( $nullDate )
. "\n WHERE checked_out > 0"
. "\n AND checked_out = " . (int) $userid
;
$database->setQuery( $query );
}
$res = $database->query();
if ($res == 1) {
if ($num > 0) {
echo "\n<tr class=\"row$k\">";
echo "\n <td width=\"250\">";
echo _CHECK_TABLE;
echo " - $tn</td>";
echo "\n <td>";
echo _CHECKED_IN;
echo "<b>$num</b>";
echo _CHECKED_IN_ITEMS;
echo "</td>";
echo "\n</tr>";
}
$k = 1 - $k;
}
}
}
?>
<tr>
<td colspan="2">
<b><?php echo _CONF_CHECKED_IN; ?></b>
</td>
</tr>
</table>
<?php
}
?>