Yoshi2889 /
SMF2.1
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | /** |
||
| 4 | * Show a list of members or a selection of members. |
||
| 5 | * |
||
| 6 | * Simple Machines Forum (SMF) |
||
| 7 | * |
||
| 8 | * @package SMF |
||
| 9 | * @author Simple Machines http://www.simplemachines.org |
||
| 10 | * @copyright 2017 Simple Machines and individual contributors |
||
| 11 | * @license http://www.simplemachines.org/about/smf/license.php BSD |
||
| 12 | * |
||
| 13 | * @version 2.1 Beta 4 |
||
| 14 | */ |
||
| 15 | |||
| 16 | if (!defined('SMF')) |
||
| 17 | die('No direct access...'); |
||
| 18 | |||
| 19 | /** |
||
| 20 | * The main entrance point for the Manage Members screen. |
||
| 21 | * As everyone else, it calls a function based on the given sub-action. |
||
| 22 | * Called by ?action=admin;area=viewmembers. |
||
| 23 | * Requires the moderate_forum permission. |
||
| 24 | * |
||
| 25 | * @uses ManageMembers template |
||
| 26 | * @uses ManageMembers language file. |
||
| 27 | */ |
||
| 28 | function ViewMembers() |
||
| 29 | { |
||
| 30 | global $txt, $scripturl, $context, $modSettings, $smcFunc; |
||
| 31 | |||
| 32 | $subActions = array( |
||
| 33 | 'all' => array('ViewMemberlist', 'moderate_forum'), |
||
| 34 | 'approve' => array('AdminApprove', 'moderate_forum'), |
||
| 35 | 'browse' => array('MembersAwaitingActivation', 'moderate_forum'), |
||
| 36 | 'search' => array('SearchMembers', 'moderate_forum'), |
||
| 37 | 'query' => array('ViewMemberlist', 'moderate_forum'), |
||
| 38 | ); |
||
| 39 | |||
| 40 | call_integration_hook('integrate_manage_members', array(&$subActions)); |
||
| 41 | |||
| 42 | // Default to sub action 'index' or 'settings' depending on permissions. |
||
| 43 | $_REQUEST['sa'] = isset($_REQUEST['sa']) && isset($subActions[$_REQUEST['sa']]) ? $_REQUEST['sa'] : 'all'; |
||
| 44 | |||
| 45 | // We know the sub action, now we know what you're allowed to do. |
||
| 46 | isAllowedTo($subActions[$_REQUEST['sa']][1]); |
||
| 47 | |||
| 48 | // Load the essentials. |
||
| 49 | loadLanguage('ManageMembers'); |
||
| 50 | loadTemplate('ManageMembers'); |
||
| 51 | |||
| 52 | // Get counts on every type of activation - for sections and filtering alike. |
||
| 53 | $request = $smcFunc['db_query']('', ' |
||
| 54 | SELECT COUNT(*) AS total_members, is_activated |
||
| 55 | FROM {db_prefix}members |
||
| 56 | WHERE is_activated != {int:is_activated} |
||
| 57 | GROUP BY is_activated', |
||
| 58 | array( |
||
| 59 | 'is_activated' => 1, |
||
| 60 | ) |
||
| 61 | ); |
||
| 62 | $context['activation_numbers'] = array(); |
||
| 63 | $context['awaiting_activation'] = 0; |
||
| 64 | $context['awaiting_approval'] = 0; |
||
| 65 | while ($row = $smcFunc['db_fetch_assoc']($request)) |
||
| 66 | $context['activation_numbers'][$row['is_activated']] = $row['total_members']; |
||
| 67 | $smcFunc['db_free_result']($request); |
||
| 68 | |||
| 69 | foreach ($context['activation_numbers'] as $activation_type => $total_members) |
||
| 70 | { |
||
| 71 | if (in_array($activation_type, array(0, 2))) |
||
| 72 | $context['awaiting_activation'] += $total_members; |
||
| 73 | elseif (in_array($activation_type, array(3, 4, 5))) |
||
| 74 | $context['awaiting_approval'] += $total_members; |
||
| 75 | } |
||
| 76 | |||
| 77 | // For the page header... do we show activation? |
||
| 78 | $context['show_activate'] = (!empty($modSettings['registration_method']) && $modSettings['registration_method'] == 1) || !empty($context['awaiting_activation']); |
||
| 79 | |||
| 80 | // What about approval? |
||
| 81 | $context['show_approve'] = (!empty($modSettings['registration_method']) && $modSettings['registration_method'] == 2) || !empty($context['awaiting_approval']) || !empty($modSettings['approveAccountDeletion']); |
||
| 82 | |||
| 83 | // Setup the admin tabs. |
||
| 84 | $context[$context['admin_menu_name']]['tab_data'] = array( |
||
| 85 | 'title' => $txt['admin_members'], |
||
| 86 | 'help' => 'view_members', |
||
| 87 | 'description' => $txt['admin_members_list'], |
||
| 88 | 'tabs' => array(), |
||
| 89 | ); |
||
| 90 | |||
| 91 | $context['tabs'] = array( |
||
| 92 | 'viewmembers' => array( |
||
| 93 | 'label' => $txt['view_all_members'], |
||
| 94 | 'description' => $txt['admin_members_list'], |
||
| 95 | 'url' => $scripturl . '?action=admin;area=viewmembers;sa=all', |
||
| 96 | 'is_selected' => $_REQUEST['sa'] == 'all', |
||
| 97 | ), |
||
| 98 | 'search' => array( |
||
| 99 | 'label' => $txt['mlist_search'], |
||
| 100 | 'description' => $txt['admin_members_list'], |
||
| 101 | 'url' => $scripturl . '?action=admin;area=viewmembers;sa=search', |
||
| 102 | 'is_selected' => $_REQUEST['sa'] == 'search' || $_REQUEST['sa'] == 'query', |
||
| 103 | ), |
||
| 104 | 'approve' => array( |
||
| 105 | 'label' => sprintf($txt['admin_browse_awaiting_approval'], $context['awaiting_approval']), |
||
| 106 | 'description' => $txt['admin_browse_approve_desc'], |
||
| 107 | 'url' => $scripturl . '?action=admin;area=viewmembers;sa=browse;type=approve', |
||
| 108 | 'is_selected' => false, |
||
| 109 | ), |
||
| 110 | 'activate' => array( |
||
| 111 | 'label' => sprintf($txt['admin_browse_awaiting_activate'], $context['awaiting_activation']), |
||
| 112 | 'description' => $txt['admin_browse_activate_desc'], |
||
| 113 | 'url' => $scripturl . '?action=admin;area=viewmembers;sa=browse;type=activate', |
||
| 114 | 'is_selected' => false, |
||
| 115 | 'is_last' => true, |
||
| 116 | ), |
||
| 117 | ); |
||
| 118 | |||
| 119 | // Sort out the tabs for the ones which may not exist! |
||
| 120 | if (!$context['show_activate'] && ($_REQUEST['sa'] != 'browse' || $_REQUEST['type'] != 'activate')) |
||
| 121 | { |
||
| 122 | $context['tabs']['approve']['is_last'] = true; |
||
| 123 | unset($context['tabs']['activate']); |
||
| 124 | } |
||
| 125 | if (!$context['show_approve'] && ($_REQUEST['sa'] != 'browse' || $_REQUEST['type'] != 'approve')) |
||
| 126 | { |
||
| 127 | if (!$context['show_activate'] && ($_REQUEST['sa'] != 'browse' || $_REQUEST['type'] != 'activate')) |
||
| 128 | $context['tabs']['search']['is_last'] = true; |
||
| 129 | unset($context['tabs']['approve']); |
||
| 130 | } |
||
| 131 | |||
| 132 | call_helper($subActions[$_REQUEST['sa']][0]); |
||
| 133 | } |
||
| 134 | |||
| 135 | /** |
||
| 136 | * View all members list. It allows sorting on several columns, and deletion of |
||
| 137 | * selected members. It also handles the search query sent by |
||
| 138 | * ?action=admin;area=viewmembers;sa=search. |
||
| 139 | * Called by ?action=admin;area=viewmembers;sa=all or ?action=admin;area=viewmembers;sa=query. |
||
| 140 | * Requires the moderate_forum permission. |
||
| 141 | * |
||
| 142 | * @uses the view_members sub template of the ManageMembers template. |
||
| 143 | */ |
||
| 144 | function ViewMemberlist() |
||
| 145 | { |
||
| 146 | global $txt, $scripturl, $context, $modSettings, $sourcedir, $smcFunc, $user_info; |
||
| 147 | |||
| 148 | // Set the current sub action. |
||
| 149 | $context['sub_action'] = $_REQUEST['sa']; |
||
| 150 | |||
| 151 | // Are we performing a delete? |
||
| 152 | if (isset($_POST['delete_members']) && !empty($_POST['delete']) && allowedTo('profile_remove_any')) |
||
| 153 | { |
||
| 154 | checkSession(); |
||
| 155 | |||
| 156 | // Clean the input. |
||
| 157 | foreach ($_POST['delete'] as $key => $value) |
||
| 158 | { |
||
| 159 | // Don't delete yourself, idiot. |
||
| 160 | if ($value != $user_info['id']) |
||
| 161 | $delete[$key] = (int) $value; |
||
| 162 | } |
||
| 163 | |||
| 164 | if (!empty($delete)) |
||
| 165 | { |
||
| 166 | // Delete all the selected members. |
||
| 167 | require_once($sourcedir . '/Subs-Members.php'); |
||
| 168 | deleteMembers($delete, true); |
||
| 169 | } |
||
| 170 | } |
||
| 171 | |||
| 172 | // Check input after a member search has been submitted. |
||
| 173 | if ($context['sub_action'] == 'query') |
||
| 174 | { |
||
| 175 | // Retrieving the membergroups and postgroups. |
||
| 176 | $context['membergroups'] = array( |
||
| 177 | array( |
||
| 178 | 'id' => 0, |
||
| 179 | 'name' => $txt['membergroups_members'], |
||
| 180 | 'can_be_additional' => false |
||
| 181 | ) |
||
| 182 | ); |
||
| 183 | $context['postgroups'] = array(); |
||
| 184 | |||
| 185 | $request = $smcFunc['db_query']('', ' |
||
| 186 | SELECT id_group, group_name, min_posts |
||
| 187 | FROM {db_prefix}membergroups |
||
| 188 | WHERE id_group != {int:moderator_group} |
||
| 189 | ORDER BY min_posts, CASE WHEN id_group < {int:newbie_group} THEN id_group ELSE 4 END, group_name', |
||
| 190 | array( |
||
| 191 | 'moderator_group' => 3, |
||
| 192 | 'newbie_group' => 4, |
||
| 193 | ) |
||
| 194 | ); |
||
| 195 | View Code Duplication | while ($row = $smcFunc['db_fetch_assoc']($request)) |
|
| 196 | { |
||
| 197 | if ($row['min_posts'] == -1) |
||
| 198 | $context['membergroups'][] = array( |
||
| 199 | 'id' => $row['id_group'], |
||
| 200 | 'name' => $row['group_name'], |
||
| 201 | 'can_be_additional' => true |
||
| 202 | ); |
||
| 203 | else |
||
| 204 | $context['postgroups'][] = array( |
||
| 205 | 'id' => $row['id_group'], |
||
| 206 | 'name' => $row['group_name'] |
||
| 207 | ); |
||
| 208 | } |
||
| 209 | $smcFunc['db_free_result']($request); |
||
| 210 | |||
| 211 | // Some data about the form fields and how they are linked to the database. |
||
| 212 | $params = array( |
||
| 213 | 'mem_id' => array( |
||
| 214 | 'db_fields' => array('id_member'), |
||
| 215 | 'type' => 'int', |
||
| 216 | 'range' => true |
||
| 217 | ), |
||
| 218 | 'age' => array( |
||
| 219 | 'db_fields' => array('birthdate'), |
||
| 220 | 'type' => 'age', |
||
| 221 | 'range' => true |
||
| 222 | ), |
||
| 223 | 'posts' => array( |
||
| 224 | 'db_fields' => array('posts'), |
||
| 225 | 'type' => 'int', |
||
| 226 | 'range' => true |
||
| 227 | ), |
||
| 228 | 'reg_date' => array( |
||
| 229 | 'db_fields' => array('date_registered'), |
||
| 230 | 'type' => 'date', |
||
| 231 | 'range' => true |
||
| 232 | ), |
||
| 233 | 'last_online' => array( |
||
| 234 | 'db_fields' => array('last_login'), |
||
| 235 | 'type' => 'date', |
||
| 236 | 'range' => true |
||
| 237 | ), |
||
| 238 | 'activated' => array( |
||
| 239 | 'db_fields' => array('CASE WHEN is_activated IN (1, 11) THEN 1 ELSE 0 END'), |
||
| 240 | 'type' => 'checkbox', |
||
| 241 | 'values' => array('0', '1'), |
||
| 242 | ), |
||
| 243 | 'membername' => array( |
||
| 244 | 'db_fields' => array('member_name', 'real_name'), |
||
| 245 | 'type' => 'string' |
||
| 246 | ), |
||
| 247 | 'email' => array( |
||
| 248 | 'db_fields' => array('email_address'), |
||
| 249 | 'type' => 'string' |
||
| 250 | ), |
||
| 251 | 'website' => array( |
||
| 252 | 'db_fields' => array('website_title', 'website_url'), |
||
| 253 | 'type' => 'string' |
||
| 254 | ), |
||
| 255 | 'ip' => array( |
||
| 256 | 'db_fields' => array('member_ip'), |
||
| 257 | 'type' => 'inet' |
||
| 258 | ) |
||
| 259 | ); |
||
| 260 | $range_trans = array( |
||
| 261 | '--' => '<', |
||
| 262 | '-' => '<=', |
||
| 263 | '=' => '=', |
||
| 264 | '+' => '>=', |
||
| 265 | '++' => '>' |
||
| 266 | ); |
||
| 267 | |||
| 268 | call_integration_hook('integrate_view_members_params', array(&$params)); |
||
| 269 | |||
| 270 | $search_params = array(); |
||
| 271 | if ($context['sub_action'] == 'query' && !empty($_REQUEST['params']) && empty($_POST['types'])) |
||
| 272 | $search_params = $smcFunc['json_decode'](base64_decode($_REQUEST['params']), true); |
||
| 273 | elseif (!empty($_POST)) |
||
| 274 | { |
||
| 275 | $search_params['types'] = $_POST['types']; |
||
| 276 | foreach ($params as $param_name => $param_info) |
||
| 277 | if (isset($_POST[$param_name])) |
||
| 278 | $search_params[$param_name] = $_POST[$param_name]; |
||
| 279 | } |
||
| 280 | |||
| 281 | $search_url_params = isset($search_params) ? base64_encode($smcFunc['json_encode']($search_params)) : null; |
||
| 282 | |||
| 283 | // @todo Validate a little more. |
||
| 284 | |||
| 285 | // Loop through every field of the form. |
||
| 286 | $query_parts = array(); |
||
| 287 | $where_params = array(); |
||
| 288 | foreach ($params as $param_name => $param_info) |
||
| 289 | { |
||
| 290 | // Not filled in? |
||
| 291 | if (!isset($search_params[$param_name]) || $search_params[$param_name] === '') |
||
| 292 | continue; |
||
| 293 | |||
| 294 | // Make sure numeric values are really numeric. |
||
| 295 | if (in_array($param_info['type'], array('int', 'age'))) |
||
| 296 | $search_params[$param_name] = (int) $search_params[$param_name]; |
||
| 297 | // Date values have to match the specified format. |
||
| 298 | elseif ($param_info['type'] == 'date') |
||
| 299 | { |
||
| 300 | // Check if this date format is valid. |
||
| 301 | if (preg_match('/^\d{4}-\d{1,2}-\d{1,2}$/', $search_params[$param_name]) == 0) |
||
| 302 | continue; |
||
| 303 | |||
| 304 | $search_params[$param_name] = strtotime($search_params[$param_name]); |
||
| 305 | } |
||
| 306 | |||
| 307 | // Those values that are in some kind of range (<, <=, =, >=, >). |
||
| 308 | if (!empty($param_info['range'])) |
||
| 309 | { |
||
| 310 | // Default to '=', just in case... |
||
| 311 | if (empty($range_trans[$search_params['types'][$param_name]])) |
||
| 312 | $search_params['types'][$param_name] = '='; |
||
| 313 | |||
| 314 | // Handle special case 'age'. |
||
| 315 | if ($param_info['type'] == 'age') |
||
| 316 | { |
||
| 317 | // All people that were born between $lowerlimit and $upperlimit are currently the specified age. |
||
| 318 | $datearray = getdate(forum_time()); |
||
| 319 | $upperlimit = sprintf('%04d-%02d-%02d', $datearray['year'] - $search_params[$param_name], $datearray['mon'], $datearray['mday']); |
||
| 320 | $lowerlimit = sprintf('%04d-%02d-%02d', $datearray['year'] - $search_params[$param_name] - 1, $datearray['mon'], $datearray['mday']); |
||
| 321 | if (in_array($search_params['types'][$param_name], array('-', '--', '='))) |
||
| 322 | { |
||
| 323 | $query_parts[] = ($param_info['db_fields'][0]) . ' > {string:' . $param_name . '_minlimit}'; |
||
| 324 | $where_params[$param_name . '_minlimit'] = ($search_params['types'][$param_name] == '--' ? $upperlimit : $lowerlimit); |
||
| 325 | } |
||
| 326 | if (in_array($search_params['types'][$param_name], array('+', '++', '='))) |
||
| 327 | { |
||
| 328 | $query_parts[] = ($param_info['db_fields'][0]) . ' <= {string:' . $param_name . '_pluslimit}'; |
||
| 329 | $where_params[$param_name . '_pluslimit'] = ($search_params['types'][$param_name] == '++' ? $lowerlimit : $upperlimit); |
||
| 330 | |||
| 331 | // Make sure that members that didn't set their birth year are not queried. |
||
| 332 | $query_parts[] = ($param_info['db_fields'][0]) . ' > {date:dec_zero_date}'; |
||
| 333 | $where_params['dec_zero_date'] = '0004-12-31'; |
||
| 334 | } |
||
| 335 | } |
||
| 336 | // Special case - equals a date. |
||
| 337 | elseif ($param_info['type'] == 'date' && $search_params['types'][$param_name] == '=') |
||
| 338 | { |
||
| 339 | $query_parts[] = $param_info['db_fields'][0] . ' > ' . $search_params[$param_name] . ' AND ' . $param_info['db_fields'][0] . ' < ' . ($search_params[$param_name] + 86400); |
||
| 340 | } |
||
| 341 | else |
||
| 342 | $query_parts[] = $param_info['db_fields'][0] . ' ' . $range_trans[$search_params['types'][$param_name]] . ' ' . $search_params[$param_name]; |
||
| 343 | } |
||
| 344 | // Checkboxes. |
||
| 345 | elseif ($param_info['type'] == 'checkbox') |
||
| 346 | { |
||
| 347 | // Each checkbox or no checkbox at all is checked -> ignore. |
||
| 348 | if (!is_array($search_params[$param_name]) || count($search_params[$param_name]) == 0 || count($search_params[$param_name]) == count($param_info['values'])) |
||
| 349 | continue; |
||
| 350 | |||
| 351 | $query_parts[] = ($param_info['db_fields'][0]) . ' IN ({array_string:' . $param_name . '_check})'; |
||
| 352 | $where_params[$param_name . '_check'] = $search_params[$param_name]; |
||
| 353 | } |
||
| 354 | else |
||
| 355 | { |
||
| 356 | // Replace the wildcard characters ('*' and '?') into MySQL ones. |
||
| 357 | $parameter = strtolower(strtr($smcFunc['htmlspecialchars']($search_params[$param_name], ENT_QUOTES), array('%' => '\%', '_' => '\_', '*' => '%', '?' => '_'))); |
||
| 358 | |||
| 359 | if ($smcFunc['db_case_sensitive']) |
||
| 360 | $query_parts[] = '(LOWER(' . implode(') LIKE {string:' . $param_name . '_normal} OR LOWER(', $param_info['db_fields']) . ') LIKE {string:' . $param_name . '_normal})'; |
||
| 361 | else |
||
| 362 | $query_parts[] = '(' . implode(' LIKE {string:' . $param_name . '_normal} OR ', $param_info['db_fields']) . ' LIKE {string:' . $param_name . '_normal})'; |
||
| 363 | $where_params[$param_name . '_normal'] = '%' . $parameter . '%'; |
||
| 364 | } |
||
| 365 | } |
||
| 366 | |||
| 367 | // Set up the membergroup query part. |
||
| 368 | $mg_query_parts = array(); |
||
| 369 | |||
| 370 | // Primary membergroups, but only if at least was was not selected. |
||
| 371 | if (!empty($search_params['membergroups'][1]) && count($context['membergroups']) != count($search_params['membergroups'][1])) |
||
| 372 | { |
||
| 373 | $mg_query_parts[] = 'mem.id_group IN ({array_int:group_check})'; |
||
| 374 | $where_params['group_check'] = $search_params['membergroups'][1]; |
||
| 375 | } |
||
| 376 | |||
| 377 | // Additional membergroups (these are only relevant if not all primary groups where selected!). |
||
| 378 | if (!empty($search_params['membergroups'][2]) && (empty($search_params['membergroups'][1]) || count($context['membergroups']) != count($search_params['membergroups'][1]))) |
||
| 379 | foreach ($search_params['membergroups'][2] as $mg) |
||
| 380 | { |
||
| 381 | $mg_query_parts[] = 'FIND_IN_SET({int:add_group_' . $mg . '}, mem.additional_groups) != 0'; |
||
| 382 | $where_params['add_group_' . $mg] = $mg; |
||
| 383 | } |
||
| 384 | |||
| 385 | // Combine the one or two membergroup parts into one query part linked with an OR. |
||
| 386 | if (!empty($mg_query_parts)) |
||
| 387 | $query_parts[] = '(' . implode(' OR ', $mg_query_parts) . ')'; |
||
| 388 | |||
| 389 | // Get all selected post count related membergroups. |
||
| 390 | if (!empty($search_params['postgroups']) && count($search_params['postgroups']) != count($context['postgroups'])) |
||
| 391 | { |
||
| 392 | $query_parts[] = 'id_post_group IN ({array_int:post_groups})'; |
||
| 393 | $where_params['post_groups'] = $search_params['postgroups']; |
||
| 394 | } |
||
| 395 | |||
| 396 | // Construct the where part of the query. |
||
| 397 | $where = empty($query_parts) ? '1=1' : implode(' |
||
| 398 | AND ', $query_parts); |
||
| 399 | } |
||
| 400 | else |
||
| 401 | $search_url_params = null; |
||
| 402 | |||
| 403 | // Construct the additional URL part with the query info in it. |
||
| 404 | $context['params_url'] = $context['sub_action'] == 'query' ? ';sa=query;params=' . $search_url_params : ''; |
||
| 405 | |||
| 406 | // Get the title and sub template ready.. |
||
| 407 | $context['page_title'] = $txt['admin_members']; |
||
| 408 | |||
| 409 | $listOptions = array( |
||
| 410 | 'id' => 'member_list', |
||
| 411 | 'title' => $txt['members_list'], |
||
| 412 | 'items_per_page' => $modSettings['defaultMaxMembers'], |
||
| 413 | 'base_href' => $scripturl . '?action=admin;area=viewmembers' . $context['params_url'], |
||
| 414 | 'default_sort_col' => 'user_name', |
||
| 415 | 'get_items' => array( |
||
| 416 | 'file' => $sourcedir . '/Subs-Members.php', |
||
| 417 | 'function' => 'list_getMembers', |
||
| 418 | 'params' => array( |
||
| 419 | isset($where) ? $where : '1=1', |
||
| 420 | isset($where_params) ? $where_params : array(), |
||
| 421 | ), |
||
| 422 | ), |
||
| 423 | 'get_count' => array( |
||
| 424 | 'file' => $sourcedir . '/Subs-Members.php', |
||
| 425 | 'function' => 'list_getNumMembers', |
||
| 426 | 'params' => array( |
||
| 427 | isset($where) ? $where : '1=1', |
||
| 428 | isset($where_params) ? $where_params : array(), |
||
| 429 | ), |
||
| 430 | ), |
||
| 431 | 'columns' => array( |
||
| 432 | 'id_member' => array( |
||
| 433 | 'header' => array( |
||
| 434 | 'value' => $txt['member_id'], |
||
| 435 | ), |
||
| 436 | 'data' => array( |
||
| 437 | 'db' => 'id_member', |
||
| 438 | ), |
||
| 439 | 'sort' => array( |
||
| 440 | 'default' => 'id_member', |
||
| 441 | 'reverse' => 'id_member DESC', |
||
| 442 | ), |
||
| 443 | ), |
||
| 444 | 'user_name' => array( |
||
| 445 | 'header' => array( |
||
| 446 | 'value' => $txt['username'], |
||
| 447 | ), |
||
| 448 | 'data' => array( |
||
| 449 | 'sprintf' => array( |
||
| 450 | 'format' => '<a href="' . strtr($scripturl, array('%' => '%%')) . '?action=profile;u=%1$d">%2$s</a>', |
||
| 451 | 'params' => array( |
||
| 452 | 'id_member' => false, |
||
| 453 | 'member_name' => false, |
||
| 454 | ), |
||
| 455 | ), |
||
| 456 | 'class' => 'hidden', |
||
| 457 | ), |
||
| 458 | 'sort' => array( |
||
| 459 | 'default' => 'member_name', |
||
| 460 | 'reverse' => 'member_name DESC', |
||
| 461 | ), |
||
| 462 | ), |
||
| 463 | 'display_name' => array( |
||
| 464 | 'header' => array( |
||
| 465 | 'value' => $txt['display_name'], |
||
| 466 | ), |
||
| 467 | 'data' => array( |
||
| 468 | 'sprintf' => array( |
||
| 469 | 'format' => '<a href="' . strtr($scripturl, array('%' => '%%')) . '?action=profile;u=%1$d">%2$s</a>', |
||
| 470 | 'params' => array( |
||
| 471 | 'id_member' => false, |
||
| 472 | 'real_name' => false, |
||
| 473 | ), |
||
| 474 | ), |
||
| 475 | ), |
||
| 476 | 'sort' => array( |
||
| 477 | 'default' => 'real_name', |
||
| 478 | 'reverse' => 'real_name DESC', |
||
| 479 | ), |
||
| 480 | ), |
||
| 481 | 'email' => array( |
||
| 482 | 'header' => array( |
||
| 483 | 'value' => $txt['email_address'], |
||
| 484 | ), |
||
| 485 | 'data' => array( |
||
| 486 | 'sprintf' => array( |
||
| 487 | 'format' => '<a href="mailto:%1$s">%1$s</a>', |
||
| 488 | 'params' => array( |
||
| 489 | 'email_address' => true, |
||
| 490 | ), |
||
| 491 | ), |
||
| 492 | ), |
||
| 493 | 'sort' => array( |
||
| 494 | 'default' => 'email_address', |
||
| 495 | 'reverse' => 'email_address DESC', |
||
| 496 | ), |
||
| 497 | ), |
||
| 498 | 'ip' => array( |
||
| 499 | 'header' => array( |
||
| 500 | 'value' => $txt['ip_address'], |
||
| 501 | ), |
||
| 502 | 'data' => array( |
||
| 503 | 'sprintf' => array( |
||
| 504 | 'format' => '<a href="' . strtr($scripturl, array('%' => '%%')) . '?action=trackip;searchip=%1$s">%1$s</a>', |
||
| 505 | 'params' => array( |
||
| 506 | 'member_ip' => false, |
||
| 507 | ), |
||
| 508 | ), |
||
| 509 | 'class' => 'hidden', |
||
| 510 | ), |
||
| 511 | 'sort' => array( |
||
| 512 | 'default' => 'member_ip', |
||
| 513 | 'reverse' => 'member_ip DESC', |
||
| 514 | ), |
||
| 515 | ), |
||
| 516 | 'last_active' => array( |
||
| 517 | 'header' => array( |
||
| 518 | 'value' => $txt['viewmembers_online'], |
||
| 519 | ), |
||
| 520 | 'data' => array( |
||
| 521 | 'function' => function($rowData) use ($txt) |
||
| 522 | { |
||
| 523 | // Calculate number of days since last online. |
||
| 524 | if (empty($rowData['last_login'])) |
||
| 525 | $difference = $txt['never']; |
||
| 526 | else |
||
| 527 | { |
||
| 528 | $num_days_difference = jeffsdatediff($rowData['last_login']); |
||
| 529 | |||
| 530 | // Today. |
||
| 531 | if (empty($num_days_difference)) |
||
| 532 | $difference = $txt['viewmembers_today']; |
||
| 533 | |||
| 534 | // Yesterday. |
||
| 535 | elseif ($num_days_difference == 1) |
||
| 536 | $difference = sprintf('1 %1$s', $txt['viewmembers_day_ago']); |
||
| 537 | |||
| 538 | // X days ago. |
||
| 539 | else |
||
| 540 | $difference = sprintf('%1$d %2$s', $num_days_difference, $txt['viewmembers_days_ago']); |
||
| 541 | } |
||
| 542 | |||
| 543 | // Show it in italics if they're not activated... |
||
| 544 | if ($rowData['is_activated'] % 10 != 1) |
||
| 545 | $difference = sprintf('<em title="%1$s">%2$s</em>', $txt['not_activated'], $difference); |
||
| 546 | |||
| 547 | return $difference; |
||
| 548 | }, |
||
| 549 | 'class' => 'hidden', |
||
| 550 | ), |
||
| 551 | 'sort' => array( |
||
| 552 | 'default' => 'last_login DESC', |
||
| 553 | 'reverse' => 'last_login', |
||
| 554 | ), |
||
| 555 | ), |
||
| 556 | 'posts' => array( |
||
| 557 | 'header' => array( |
||
| 558 | 'value' => $txt['member_postcount'], |
||
| 559 | ), |
||
| 560 | 'data' => array( |
||
| 561 | 'db' => 'posts', |
||
| 562 | 'class' => 'hidden', |
||
| 563 | ), |
||
| 564 | 'sort' => array( |
||
| 565 | 'default' => 'posts', |
||
| 566 | 'reverse' => 'posts DESC', |
||
| 567 | ), |
||
| 568 | ), |
||
| 569 | 'check' => array( |
||
| 570 | 'header' => array( |
||
| 571 | 'value' => '<input type="checkbox" onclick="invertAll(this, this.form);" class="input_check">', |
||
| 572 | 'class' => 'centercol', |
||
| 573 | ), |
||
| 574 | 'data' => array( |
||
| 575 | 'function' => function($rowData) use ($user_info) |
||
| 576 | { |
||
| 577 | return '<input type="checkbox" name="delete[]" value="' . $rowData['id_member'] . '" class="input_check"' . ($rowData['id_member'] == $user_info['id'] || $rowData['id_group'] == 1 || in_array(1, explode(',', $rowData['additional_groups'])) ? ' disabled' : '') . '>'; |
||
| 578 | }, |
||
| 579 | 'class' => 'centercol', |
||
| 580 | ), |
||
| 581 | ), |
||
| 582 | ), |
||
| 583 | 'form' => array( |
||
| 584 | 'href' => $scripturl . '?action=admin;area=viewmembers' . $context['params_url'], |
||
| 585 | 'include_start' => true, |
||
| 586 | 'include_sort' => true, |
||
| 587 | ), |
||
| 588 | 'additional_rows' => array( |
||
| 589 | array( |
||
| 590 | 'position' => 'below_table_data', |
||
| 591 | 'value' => '<input type="submit" name="delete_members" value="' . $txt['admin_delete_members'] . '" data-confirm="' . $txt['confirm_delete_members'] . '" class="button_submit you_sure">', |
||
| 592 | ), |
||
| 593 | ), |
||
| 594 | ); |
||
| 595 | |||
| 596 | // Without enough permissions, don't show 'delete members' checkboxes. |
||
| 597 | if (!allowedTo('profile_remove_any')) |
||
| 598 | unset($listOptions['cols']['check'], $listOptions['form'], $listOptions['additional_rows']); |
||
| 599 | |||
| 600 | require_once($sourcedir . '/Subs-List.php'); |
||
| 601 | createList($listOptions); |
||
| 602 | |||
| 603 | $context['sub_template'] = 'show_list'; |
||
| 604 | $context['default_list'] = 'member_list'; |
||
| 605 | } |
||
| 606 | |||
| 607 | /** |
||
| 608 | * Search the member list, using one or more criteria. |
||
| 609 | * Called by ?action=admin;area=viewmembers;sa=search. |
||
| 610 | * Requires the moderate_forum permission. |
||
| 611 | * form is submitted to action=admin;area=viewmembers;sa=query. |
||
| 612 | * |
||
| 613 | * @uses the search_members sub template of the ManageMembers template. |
||
| 614 | */ |
||
| 615 | function SearchMembers() |
||
| 616 | { |
||
| 617 | global $context, $txt, $smcFunc; |
||
| 618 | |||
| 619 | // Get a list of all the membergroups and postgroups that can be selected. |
||
| 620 | $context['membergroups'] = array( |
||
| 621 | array( |
||
| 622 | 'id' => 0, |
||
| 623 | 'name' => $txt['membergroups_members'], |
||
| 624 | 'can_be_additional' => false |
||
| 625 | ) |
||
| 626 | ); |
||
| 627 | $context['postgroups'] = array(); |
||
| 628 | |||
| 629 | $request = $smcFunc['db_query']('', ' |
||
| 630 | SELECT id_group, group_name, min_posts |
||
| 631 | FROM {db_prefix}membergroups |
||
| 632 | WHERE id_group != {int:moderator_group} |
||
| 633 | ORDER BY min_posts, CASE WHEN id_group < {int:newbie_group} THEN id_group ELSE 4 END, group_name', |
||
| 634 | array( |
||
| 635 | 'moderator_group' => 3, |
||
| 636 | 'newbie_group' => 4, |
||
| 637 | ) |
||
| 638 | ); |
||
| 639 | View Code Duplication | while ($row = $smcFunc['db_fetch_assoc']($request)) |
|
| 640 | { |
||
| 641 | if ($row['min_posts'] == -1) |
||
| 642 | $context['membergroups'][] = array( |
||
| 643 | 'id' => $row['id_group'], |
||
| 644 | 'name' => $row['group_name'], |
||
| 645 | 'can_be_additional' => true |
||
| 646 | ); |
||
| 647 | else |
||
| 648 | $context['postgroups'][] = array( |
||
| 649 | 'id' => $row['id_group'], |
||
| 650 | 'name' => $row['group_name'] |
||
| 651 | ); |
||
| 652 | } |
||
| 653 | $smcFunc['db_free_result']($request); |
||
| 654 | |||
| 655 | $context['page_title'] = $txt['admin_members']; |
||
| 656 | $context['sub_template'] = 'search_members'; |
||
| 657 | } |
||
| 658 | |||
| 659 | /** |
||
| 660 | * List all members who are awaiting approval / activation, sortable on different columns. |
||
| 661 | * It allows instant approval or activation of (a selection of) members. |
||
| 662 | * Called by ?action=admin;area=viewmembers;sa=browse;type=approve |
||
| 663 | * or ?action=admin;area=viewmembers;sa=browse;type=activate. |
||
| 664 | * The form submits to ?action=admin;area=viewmembers;sa=approve. |
||
| 665 | * Requires the moderate_forum permission. |
||
| 666 | * |
||
| 667 | * @uses the admin_browse sub template of the ManageMembers template. |
||
| 668 | */ |
||
| 669 | function MembersAwaitingActivation() |
||
| 670 | { |
||
| 671 | global $txt, $context, $scripturl, $modSettings; |
||
| 672 | global $sourcedir; |
||
| 673 | |||
| 674 | // Not a lot here! |
||
| 675 | $context['page_title'] = $txt['admin_members']; |
||
| 676 | $context['sub_template'] = 'admin_browse'; |
||
| 677 | $context['browse_type'] = isset($_REQUEST['type']) ? $_REQUEST['type'] : (!empty($modSettings['registration_method']) && $modSettings['registration_method'] == 1 ? 'activate' : 'approve'); |
||
| 678 | if (isset($context['tabs'][$context['browse_type']])) |
||
| 679 | $context['tabs'][$context['browse_type']]['is_selected'] = true; |
||
| 680 | |||
| 681 | // Allowed filters are those we can have, in theory. |
||
| 682 | $context['allowed_filters'] = $context['browse_type'] == 'approve' ? array(3, 4, 5) : array(0, 2); |
||
| 683 | $context['current_filter'] = isset($_REQUEST['filter']) && in_array($_REQUEST['filter'], $context['allowed_filters']) && !empty($context['activation_numbers'][$_REQUEST['filter']]) ? (int) $_REQUEST['filter'] : -1; |
||
| 684 | |||
| 685 | // Sort out the different sub areas that we can actually filter by. |
||
| 686 | $context['available_filters'] = array(); |
||
| 687 | foreach ($context['activation_numbers'] as $type => $amount) |
||
| 688 | { |
||
| 689 | // We have some of these... |
||
| 690 | if (in_array($type, $context['allowed_filters']) && $amount > 0) |
||
| 691 | $context['available_filters'][] = array( |
||
| 692 | 'type' => $type, |
||
| 693 | 'amount' => $amount, |
||
| 694 | 'desc' => isset($txt['admin_browse_filter_type_' . $type]) ? $txt['admin_browse_filter_type_' . $type] : '?', |
||
| 695 | 'selected' => $type == $context['current_filter'] |
||
| 696 | ); |
||
| 697 | } |
||
| 698 | |||
| 699 | // If the filter was not sent, set it to whatever has people in it! |
||
| 700 | if ($context['current_filter'] == -1 && !empty($context['available_filters'][0]['amount'])) |
||
| 701 | $context['current_filter'] = $context['available_filters'][0]['type']; |
||
| 702 | |||
| 703 | // This little variable is used to determine if we should flag where we are looking. |
||
| 704 | $context['show_filter'] = ($context['current_filter'] != 0 && $context['current_filter'] != 3) || count($context['available_filters']) > 1; |
||
| 705 | |||
| 706 | // The columns that can be sorted. |
||
| 707 | $context['columns'] = array( |
||
| 708 | 'id_member' => array('label' => $txt['admin_browse_id']), |
||
| 709 | 'member_name' => array('label' => $txt['admin_browse_username']), |
||
| 710 | 'email_address' => array('label' => $txt['admin_browse_email']), |
||
| 711 | 'member_ip' => array('label' => $txt['admin_browse_ip']), |
||
| 712 | 'date_registered' => array('label' => $txt['admin_browse_registered']), |
||
| 713 | ); |
||
| 714 | |||
| 715 | // Are we showing duplicate information? |
||
| 716 | if (isset($_GET['showdupes'])) |
||
| 717 | $_SESSION['showdupes'] = (int) $_GET['showdupes']; |
||
| 718 | $context['show_duplicates'] = !empty($_SESSION['showdupes']); |
||
| 719 | |||
| 720 | // Determine which actions we should allow on this page. |
||
| 721 | if ($context['browse_type'] == 'approve') |
||
| 722 | { |
||
| 723 | // If we are approving deleted accounts we have a slightly different list... actually a mirror ;) |
||
| 724 | if ($context['current_filter'] == 4) |
||
| 725 | $context['allowed_actions'] = array( |
||
| 726 | 'reject' => $txt['admin_browse_w_approve_deletion'], |
||
| 727 | 'ok' => $txt['admin_browse_w_reject'], |
||
| 728 | ); |
||
| 729 | else |
||
| 730 | $context['allowed_actions'] = array( |
||
| 731 | 'ok' => $txt['admin_browse_w_approve'], |
||
| 732 | 'okemail' => $txt['admin_browse_w_approve'] . ' ' . $txt['admin_browse_w_email'], |
||
| 733 | 'require_activation' => $txt['admin_browse_w_approve_require_activate'], |
||
| 734 | 'reject' => $txt['admin_browse_w_reject'], |
||
| 735 | 'rejectemail' => $txt['admin_browse_w_reject'] . ' ' . $txt['admin_browse_w_email'], |
||
| 736 | ); |
||
| 737 | } |
||
| 738 | elseif ($context['browse_type'] == 'activate') |
||
| 739 | $context['allowed_actions'] = array( |
||
| 740 | 'ok' => $txt['admin_browse_w_activate'], |
||
| 741 | 'okemail' => $txt['admin_browse_w_activate'] . ' ' . $txt['admin_browse_w_email'], |
||
| 742 | 'delete' => $txt['admin_browse_w_delete'], |
||
| 743 | 'deleteemail' => $txt['admin_browse_w_delete'] . ' ' . $txt['admin_browse_w_email'], |
||
| 744 | 'remind' => $txt['admin_browse_w_remind'] . ' ' . $txt['admin_browse_w_email'], |
||
| 745 | ); |
||
| 746 | |||
| 747 | // Create an option list for actions allowed to be done with selected members. |
||
| 748 | $allowed_actions = ' |
||
| 749 | <option selected value="">' . $txt['admin_browse_with_selected'] . ':</option> |
||
| 750 | <option value="" disabled>-----------------------------</option>'; |
||
| 751 | foreach ($context['allowed_actions'] as $key => $desc) |
||
| 752 | $allowed_actions .= ' |
||
| 753 | <option value="' . $key . '">' . $desc . '</option>'; |
||
| 754 | |||
| 755 | // Setup the Javascript function for selecting an action for the list. |
||
| 756 | $javascript = ' |
||
| 757 | function onSelectChange() |
||
| 758 | { |
||
| 759 | if (document.forms.postForm.todo.value == "") |
||
| 760 | return; |
||
| 761 | |||
| 762 | var message = "";'; |
||
| 763 | |||
| 764 | // We have special messages for approving deletion of accounts - it's surprisingly logical - honest. |
||
| 765 | if ($context['current_filter'] == 4) |
||
| 766 | $javascript .= ' |
||
| 767 | if (document.forms.postForm.todo.value.indexOf("reject") != -1) |
||
| 768 | message = "' . $txt['admin_browse_w_delete'] . '"; |
||
| 769 | else |
||
| 770 | message = "' . $txt['admin_browse_w_reject'] . '";'; |
||
| 771 | // Otherwise a nice standard message. |
||
| 772 | else |
||
| 773 | $javascript .= ' |
||
| 774 | if (document.forms.postForm.todo.value.indexOf("delete") != -1) |
||
| 775 | message = "' . $txt['admin_browse_w_delete'] . '"; |
||
| 776 | else if (document.forms.postForm.todo.value.indexOf("reject") != -1) |
||
| 777 | message = "' . $txt['admin_browse_w_reject'] . '"; |
||
| 778 | else if (document.forms.postForm.todo.value == "remind") |
||
| 779 | message = "' . $txt['admin_browse_w_remind'] . '"; |
||
| 780 | else |
||
| 781 | message = "' . ($context['browse_type'] == 'approve' ? $txt['admin_browse_w_approve'] : $txt['admin_browse_w_activate']) . '";'; |
||
| 782 | $javascript .= ' |
||
| 783 | if (confirm(message + " ' . $txt['admin_browse_warn'] . '")) |
||
| 784 | document.forms.postForm.submit(); |
||
| 785 | }'; |
||
| 786 | |||
| 787 | $listOptions = array( |
||
| 788 | 'id' => 'approve_list', |
||
| 789 | // 'title' => $txt['members_approval_title'], |
||
| 790 | 'items_per_page' => $modSettings['defaultMaxMembers'], |
||
| 791 | 'base_href' => $scripturl . '?action=admin;area=viewmembers;sa=browse;type=' . $context['browse_type'] . (!empty($context['show_filter']) ? ';filter=' . $context['current_filter'] : ''), |
||
| 792 | 'default_sort_col' => 'date_registered', |
||
| 793 | 'get_items' => array( |
||
| 794 | 'file' => $sourcedir . '/Subs-Members.php', |
||
| 795 | 'function' => 'list_getMembers', |
||
| 796 | 'params' => array( |
||
| 797 | 'is_activated = {int:activated_status}', |
||
| 798 | array('activated_status' => $context['current_filter']), |
||
| 799 | $context['show_duplicates'], |
||
| 800 | ), |
||
| 801 | ), |
||
| 802 | 'get_count' => array( |
||
| 803 | 'file' => $sourcedir . '/Subs-Members.php', |
||
| 804 | 'function' => 'list_getNumMembers', |
||
| 805 | 'params' => array( |
||
| 806 | 'is_activated = {int:activated_status}', |
||
| 807 | array('activated_status' => $context['current_filter']), |
||
| 808 | ), |
||
| 809 | ), |
||
| 810 | 'columns' => array( |
||
| 811 | 'id_member' => array( |
||
| 812 | 'header' => array( |
||
| 813 | 'value' => $txt['member_id'], |
||
| 814 | ), |
||
| 815 | 'data' => array( |
||
| 816 | 'db' => 'id_member', |
||
| 817 | ), |
||
| 818 | 'sort' => array( |
||
| 819 | 'default' => 'id_member', |
||
| 820 | 'reverse' => 'id_member DESC', |
||
| 821 | ), |
||
| 822 | ), |
||
| 823 | 'user_name' => array( |
||
| 824 | 'header' => array( |
||
| 825 | 'value' => $txt['username'], |
||
| 826 | ), |
||
| 827 | 'data' => array( |
||
| 828 | 'sprintf' => array( |
||
| 829 | 'format' => '<a href="' . strtr($scripturl, array('%' => '%%')) . '?action=profile;u=%1$d">%2$s</a>', |
||
| 830 | 'params' => array( |
||
| 831 | 'id_member' => false, |
||
| 832 | 'member_name' => false, |
||
| 833 | ), |
||
| 834 | ), |
||
| 835 | ), |
||
| 836 | 'sort' => array( |
||
| 837 | 'default' => 'member_name', |
||
| 838 | 'reverse' => 'member_name DESC', |
||
| 839 | ), |
||
| 840 | ), |
||
| 841 | 'email' => array( |
||
| 842 | 'header' => array( |
||
| 843 | 'value' => $txt['email_address'], |
||
| 844 | ), |
||
| 845 | 'data' => array( |
||
| 846 | 'sprintf' => array( |
||
| 847 | 'format' => '<a href="mailto:%1$s">%1$s</a>', |
||
| 848 | 'params' => array( |
||
| 849 | 'email_address' => true, |
||
| 850 | ), |
||
| 851 | ), |
||
| 852 | ), |
||
| 853 | 'sort' => array( |
||
| 854 | 'default' => 'email_address', |
||
| 855 | 'reverse' => 'email_address DESC', |
||
| 856 | ), |
||
| 857 | ), |
||
| 858 | 'ip' => array( |
||
| 859 | 'header' => array( |
||
| 860 | 'value' => $txt['ip_address'], |
||
| 861 | ), |
||
| 862 | 'data' => array( |
||
| 863 | 'sprintf' => array( |
||
| 864 | 'format' => '<a href="' . strtr($scripturl, array('%' => '%%')) . '?action=trackip;searchip=%1$s">%1$s</a>', |
||
| 865 | 'params' => array( |
||
| 866 | 'member_ip' => false, |
||
| 867 | ), |
||
| 868 | ), |
||
| 869 | ), |
||
| 870 | 'sort' => array( |
||
| 871 | 'default' => 'member_ip', |
||
| 872 | 'reverse' => 'member_ip DESC', |
||
| 873 | ), |
||
| 874 | ), |
||
| 875 | 'hostname' => array( |
||
| 876 | 'header' => array( |
||
| 877 | 'value' => $txt['hostname'], |
||
| 878 | ), |
||
| 879 | 'data' => array( |
||
| 880 | 'function' => function($rowData) |
||
| 881 | { |
||
| 882 | return host_from_ip(inet_dtop($rowData['member_ip'])); |
||
|
0 ignored issues
–
show
Security
Bug
introduced
by
Loading history...
|
|||
| 883 | }, |
||
| 884 | 'class' => 'smalltext', |
||
| 885 | ), |
||
| 886 | ), |
||
| 887 | 'date_registered' => array( |
||
| 888 | 'header' => array( |
||
| 889 | 'value' => $context['current_filter'] == 4 ? $txt['viewmembers_online'] : $txt['date_registered'], |
||
| 890 | ), |
||
| 891 | 'data' => array( |
||
| 892 | 'function' => function($rowData) use ($context) |
||
| 893 | { |
||
| 894 | return timeformat($rowData['' . ($context['current_filter'] == 4 ? 'last_login' : 'date_registered') . '']); |
||
| 895 | }, |
||
| 896 | ), |
||
| 897 | 'sort' => array( |
||
| 898 | 'default' => $context['current_filter'] == 4 ? 'mem.last_login DESC' : 'date_registered DESC', |
||
| 899 | 'reverse' => $context['current_filter'] == 4 ? 'mem.last_login' : 'date_registered', |
||
| 900 | ), |
||
| 901 | ), |
||
| 902 | 'duplicates' => array( |
||
| 903 | 'header' => array( |
||
| 904 | 'value' => $txt['duplicates'], |
||
| 905 | // Make sure it doesn't go too wide. |
||
| 906 | 'style' => 'width: 20%;', |
||
| 907 | ), |
||
| 908 | 'data' => array( |
||
| 909 | 'function' => function($rowData) use ($scripturl, $txt) |
||
| 910 | { |
||
| 911 | $member_links = array(); |
||
| 912 | foreach ($rowData['duplicate_members'] as $member) |
||
| 913 | { |
||
| 914 | if ($member['id']) |
||
| 915 | $member_links[] = '<a href="' . $scripturl . '?action=profile;u=' . $member['id'] . '" ' . (!empty($member['is_banned']) ? 'class="red"' : '') . '>' . $member['name'] . '</a>'; |
||
| 916 | else |
||
| 917 | $member_links[] = $member['name'] . ' (' . $txt['guest'] . ')'; |
||
| 918 | } |
||
| 919 | return implode(', ', $member_links); |
||
| 920 | }, |
||
| 921 | 'class' => 'smalltext', |
||
| 922 | ), |
||
| 923 | ), |
||
| 924 | 'check' => array( |
||
| 925 | 'header' => array( |
||
| 926 | 'value' => '<input type="checkbox" onclick="invertAll(this, this.form);" class="input_check">', |
||
| 927 | 'class' => 'centercol', |
||
| 928 | ), |
||
| 929 | 'data' => array( |
||
| 930 | 'sprintf' => array( |
||
| 931 | 'format' => '<input type="checkbox" name="todoAction[]" value="%1$d" class="input_check">', |
||
| 932 | 'params' => array( |
||
| 933 | 'id_member' => false, |
||
| 934 | ), |
||
| 935 | ), |
||
| 936 | 'class' => 'centercol', |
||
| 937 | ), |
||
| 938 | ), |
||
| 939 | ), |
||
| 940 | 'javascript' => $javascript, |
||
| 941 | 'form' => array( |
||
| 942 | 'href' => $scripturl . '?action=admin;area=viewmembers;sa=approve;type=' . $context['browse_type'], |
||
| 943 | 'name' => 'postForm', |
||
| 944 | 'include_start' => true, |
||
| 945 | 'include_sort' => true, |
||
| 946 | 'hidden_fields' => array( |
||
| 947 | 'orig_filter' => $context['current_filter'], |
||
| 948 | ), |
||
| 949 | ), |
||
| 950 | 'additional_rows' => array( |
||
| 951 | array( |
||
| 952 | 'position' => 'below_table_data', |
||
| 953 | 'value' => ' |
||
| 954 | [<a href="' . $scripturl . '?action=admin;area=viewmembers;sa=browse;showdupes=' . ($context['show_duplicates'] ? 0 : 1) . ';type=' . $context['browse_type'] . (!empty($context['show_filter']) ? ';filter=' . $context['current_filter'] : '') . ';' . $context['session_var'] . '=' . $context['session_id'] . '">' . ($context['show_duplicates'] ? $txt['dont_check_for_duplicate'] : $txt['check_for_duplicate']) . '</a>] |
||
| 955 | <select name="todo" onchange="onSelectChange();"> |
||
| 956 | ' . $allowed_actions . ' |
||
| 957 | </select> |
||
| 958 | <noscript><input type="submit" value="' . $txt['go'] . '" class="button_submit"><br class="clear_right"></noscript> |
||
| 959 | ', |
||
| 960 | 'class' => 'floatright', |
||
| 961 | ), |
||
| 962 | ), |
||
| 963 | ); |
||
| 964 | |||
| 965 | // Pick what column to actually include if we're showing duplicates. |
||
| 966 | if ($context['show_duplicates']) |
||
| 967 | unset($listOptions['columns']['email']); |
||
| 968 | else |
||
| 969 | unset($listOptions['columns']['duplicates']); |
||
| 970 | |||
| 971 | // Only show hostname on duplicates as it takes a lot of time. |
||
| 972 | if (!$context['show_duplicates'] || !empty($modSettings['disableHostnameLookup'])) |
||
| 973 | unset($listOptions['columns']['hostname']); |
||
| 974 | |||
| 975 | // Is there any need to show filters? |
||
| 976 | if (isset($context['available_filters']) && count($context['available_filters']) > 1) |
||
| 977 | { |
||
| 978 | $filterOptions = ' |
||
| 979 | <strong>' . $txt['admin_browse_filter_by'] . ':</strong> |
||
| 980 | <select name="filter" onchange="this.form.submit();">'; |
||
| 981 | foreach ($context['available_filters'] as $filter) |
||
| 982 | $filterOptions .= ' |
||
| 983 | <option value="' . $filter['type'] . '"' . ($filter['selected'] ? ' selected' : '') . '>' . $filter['desc'] . ' - ' . $filter['amount'] . ' ' . ($filter['amount'] == 1 ? $txt['user'] : $txt['users']) . '</option>'; |
||
| 984 | $filterOptions .= ' |
||
| 985 | </select> |
||
| 986 | <noscript><input type="submit" value="' . $txt['go'] . '" name="filter" class="button_submit"></noscript>'; |
||
| 987 | $listOptions['additional_rows'][] = array( |
||
| 988 | 'position' => 'top_of_list', |
||
| 989 | 'value' => $filterOptions, |
||
| 990 | 'class' => 'righttext', |
||
| 991 | ); |
||
| 992 | } |
||
| 993 | |||
| 994 | // What about if we only have one filter, but it's not the "standard" filter - show them what they are looking at. |
||
| 995 | if (!empty($context['show_filter']) && !empty($context['available_filters'])) |
||
| 996 | $listOptions['additional_rows'][] = array( |
||
| 997 | 'position' => 'above_column_headers', |
||
| 998 | 'value' => '<strong>' . $txt['admin_browse_filter_show'] . ':</strong> ' . $context['available_filters'][0]['desc'], |
||
| 999 | 'class' => 'smalltext floatright', |
||
| 1000 | ); |
||
| 1001 | |||
| 1002 | // Now that we have all the options, create the list. |
||
| 1003 | require_once($sourcedir . '/Subs-List.php'); |
||
| 1004 | createList($listOptions); |
||
| 1005 | } |
||
| 1006 | |||
| 1007 | /** |
||
| 1008 | * This function handles the approval, rejection, activation or deletion of members. |
||
| 1009 | * Called by ?action=admin;area=viewmembers;sa=approve. |
||
| 1010 | * Requires the moderate_forum permission. |
||
| 1011 | * Redirects to ?action=admin;area=viewmembers;sa=browse |
||
| 1012 | * with the same parameters as the calling page. |
||
| 1013 | */ |
||
| 1014 | function AdminApprove() |
||
| 1015 | { |
||
| 1016 | global $scripturl, $modSettings, $sourcedir, $language, $user_info, $smcFunc; |
||
| 1017 | |||
| 1018 | // First, check our session. |
||
| 1019 | checkSession(); |
||
| 1020 | |||
| 1021 | require_once($sourcedir . '/Subs-Post.php'); |
||
| 1022 | |||
| 1023 | // We also need to the login languages here - for emails. |
||
| 1024 | loadLanguage('Login'); |
||
| 1025 | |||
| 1026 | // Sort out where we are going... |
||
| 1027 | $current_filter = (int) $_REQUEST['orig_filter']; |
||
| 1028 | |||
| 1029 | // If we are applying a filter do just that - then redirect. |
||
| 1030 | if (isset($_REQUEST['filter']) && $_REQUEST['filter'] != $_REQUEST['orig_filter']) |
||
| 1031 | redirectexit('action=admin;area=viewmembers;sa=browse;type=' . $_REQUEST['type'] . ';sort=' . $_REQUEST['sort'] . ';filter=' . $_REQUEST['filter'] . ';start=' . $_REQUEST['start']); |
||
| 1032 | |||
| 1033 | // Nothing to do? |
||
| 1034 | if (!isset($_POST['todoAction']) && !isset($_POST['time_passed'])) |
||
| 1035 | redirectexit('action=admin;area=viewmembers;sa=browse;type=' . $_REQUEST['type'] . ';sort=' . $_REQUEST['sort'] . ';filter=' . $current_filter . ';start=' . $_REQUEST['start']); |
||
| 1036 | |||
| 1037 | // Are we dealing with members who have been waiting for > set amount of time? |
||
| 1038 | if (isset($_POST['time_passed'])) |
||
| 1039 | { |
||
| 1040 | $timeBefore = time() - 86400 * (int) $_POST['time_passed']; |
||
| 1041 | $condition = ' |
||
| 1042 | AND date_registered < {int:time_before}'; |
||
| 1043 | } |
||
| 1044 | // Coming from checkboxes - validate the members passed through to us. |
||
| 1045 | else |
||
| 1046 | { |
||
| 1047 | $members = array(); |
||
| 1048 | foreach ($_POST['todoAction'] as $id) |
||
| 1049 | $members[] = (int) $id; |
||
| 1050 | $condition = ' |
||
| 1051 | AND id_member IN ({array_int:members})'; |
||
| 1052 | } |
||
| 1053 | |||
| 1054 | // Get information on each of the members, things that are important to us, like email address... |
||
| 1055 | $request = $smcFunc['db_query']('', ' |
||
| 1056 | SELECT id_member, member_name, real_name, email_address, validation_code, lngfile |
||
| 1057 | FROM {db_prefix}members |
||
| 1058 | WHERE is_activated = {int:activated_status}' . $condition . ' |
||
| 1059 | ORDER BY lngfile', |
||
| 1060 | array( |
||
| 1061 | 'activated_status' => $current_filter, |
||
| 1062 | 'time_before' => empty($timeBefore) ? 0 : $timeBefore, |
||
| 1063 | 'members' => empty($members) ? array() : $members, |
||
| 1064 | ) |
||
| 1065 | ); |
||
| 1066 | |||
| 1067 | $member_count = $smcFunc['db_num_rows']($request); |
||
| 1068 | |||
| 1069 | // If no results then just return! |
||
| 1070 | if ($member_count == 0) |
||
| 1071 | redirectexit('action=admin;area=viewmembers;sa=browse;type=' . $_REQUEST['type'] . ';sort=' . $_REQUEST['sort'] . ';filter=' . $current_filter . ';start=' . $_REQUEST['start']); |
||
| 1072 | |||
| 1073 | $member_info = array(); |
||
| 1074 | $members = array(); |
||
| 1075 | // Fill the info array. |
||
| 1076 | while ($row = $smcFunc['db_fetch_assoc']($request)) |
||
| 1077 | { |
||
| 1078 | $members[] = $row['id_member']; |
||
| 1079 | $member_info[] = array( |
||
| 1080 | 'id' => $row['id_member'], |
||
| 1081 | 'username' => $row['member_name'], |
||
| 1082 | 'name' => $row['real_name'], |
||
| 1083 | 'email' => $row['email_address'], |
||
| 1084 | 'language' => empty($row['lngfile']) || empty($modSettings['userLanguage']) ? $language : $row['lngfile'], |
||
| 1085 | 'code' => $row['validation_code'] |
||
| 1086 | ); |
||
| 1087 | } |
||
| 1088 | $smcFunc['db_free_result']($request); |
||
| 1089 | |||
| 1090 | // Are we activating or approving the members? |
||
| 1091 | if ($_POST['todo'] == 'ok' || $_POST['todo'] == 'okemail') |
||
| 1092 | { |
||
| 1093 | // Approve/activate this member. |
||
| 1094 | $smcFunc['db_query']('', ' |
||
| 1095 | UPDATE {db_prefix}members |
||
| 1096 | SET validation_code = {string:blank_string}, is_activated = {int:is_activated} |
||
| 1097 | WHERE is_activated = {int:activated_status}' . $condition, |
||
| 1098 | array( |
||
| 1099 | 'is_activated' => 1, |
||
| 1100 | 'time_before' => empty($timeBefore) ? 0 : $timeBefore, |
||
| 1101 | 'members' => empty($members) ? array() : $members, |
||
| 1102 | 'activated_status' => $current_filter, |
||
| 1103 | 'blank_string' => '', |
||
| 1104 | ) |
||
| 1105 | ); |
||
| 1106 | |||
| 1107 | // Do we have to let the integration code know about the activations? |
||
| 1108 | if (!empty($modSettings['integrate_activate'])) |
||
| 1109 | { |
||
| 1110 | foreach ($member_info as $member) |
||
| 1111 | call_integration_hook('integrate_activate', array($member['username'])); |
||
| 1112 | } |
||
| 1113 | |||
| 1114 | // Check for email. |
||
| 1115 | if ($_POST['todo'] == 'okemail') |
||
| 1116 | { |
||
| 1117 | foreach ($member_info as $member) |
||
| 1118 | { |
||
| 1119 | $replacements = array( |
||
| 1120 | 'NAME' => $member['name'], |
||
| 1121 | 'USERNAME' => $member['username'], |
||
| 1122 | 'PROFILELINK' => $scripturl . '?action=profile;u=' . $member['id'], |
||
| 1123 | 'FORGOTPASSWORDLINK' => $scripturl . '?action=reminder', |
||
| 1124 | ); |
||
| 1125 | |||
| 1126 | $emaildata = loadEmailTemplate('admin_approve_accept', $replacements, $member['language']); |
||
| 1127 | sendmail($member['email'], $emaildata['subject'], $emaildata['body'], null, 'accapp' . $member['id'], $emaildata['is_html'], 0); |
||
| 1128 | } |
||
| 1129 | } |
||
| 1130 | } |
||
| 1131 | // Maybe we're sending it off for activation? |
||
| 1132 | elseif ($_POST['todo'] == 'require_activation') |
||
| 1133 | { |
||
| 1134 | require_once($sourcedir . '/Subs-Members.php'); |
||
| 1135 | |||
| 1136 | // We have to do this for each member I'm afraid. |
||
| 1137 | foreach ($member_info as $member) |
||
| 1138 | { |
||
| 1139 | // Generate a random activation code. |
||
| 1140 | $validation_code = generateValidationCode(); |
||
| 1141 | |||
| 1142 | // Set these members for activation - I know this includes two id_member checks but it's safer than bodging $condition ;). |
||
| 1143 | $smcFunc['db_query']('', ' |
||
| 1144 | UPDATE {db_prefix}members |
||
| 1145 | SET validation_code = {string:validation_code}, is_activated = {int:not_activated} |
||
| 1146 | WHERE is_activated = {int:activated_status} |
||
| 1147 | ' . $condition . ' |
||
| 1148 | AND id_member = {int:selected_member}', |
||
| 1149 | array( |
||
| 1150 | 'not_activated' => 0, |
||
| 1151 | 'activated_status' => $current_filter, |
||
| 1152 | 'selected_member' => $member['id'], |
||
| 1153 | 'validation_code' => $validation_code, |
||
| 1154 | 'time_before' => empty($timeBefore) ? 0 : $timeBefore, |
||
| 1155 | 'members' => empty($members) ? array() : $members, |
||
| 1156 | ) |
||
| 1157 | ); |
||
| 1158 | |||
| 1159 | $replacements = array( |
||
| 1160 | 'USERNAME' => $member['name'], |
||
| 1161 | 'ACTIVATIONLINK' => $scripturl . '?action=activate;u=' . $member['id'] . ';code=' . $validation_code, |
||
| 1162 | 'ACTIVATIONLINKWITHOUTCODE' => $scripturl . '?action=activate;u=' . $member['id'], |
||
| 1163 | 'ACTIVATIONCODE' => $validation_code, |
||
| 1164 | ); |
||
| 1165 | |||
| 1166 | $emaildata = loadEmailTemplate('admin_approve_activation', $replacements, $member['language']); |
||
| 1167 | sendmail($member['email'], $emaildata['subject'], $emaildata['body'], null, 'accact' . $member['id'], $emaildata['is_html'], 0); |
||
| 1168 | } |
||
| 1169 | } |
||
| 1170 | // Are we rejecting them? |
||
| 1171 | View Code Duplication | elseif ($_POST['todo'] == 'reject' || $_POST['todo'] == 'rejectemail') |
|
| 1172 | { |
||
| 1173 | require_once($sourcedir . '/Subs-Members.php'); |
||
| 1174 | deleteMembers($members); |
||
| 1175 | |||
| 1176 | // Send email telling them they aren't welcome? |
||
| 1177 | if ($_POST['todo'] == 'rejectemail') |
||
| 1178 | { |
||
| 1179 | foreach ($member_info as $member) |
||
| 1180 | { |
||
| 1181 | $replacements = array( |
||
| 1182 | 'USERNAME' => $member['name'], |
||
| 1183 | ); |
||
| 1184 | |||
| 1185 | $emaildata = loadEmailTemplate('admin_approve_reject', $replacements, $member['language']); |
||
| 1186 | sendmail($member['email'], $emaildata['subject'], $emaildata['body'], null, 'accrej', $emaildata['is_html'], 1); |
||
| 1187 | } |
||
| 1188 | } |
||
| 1189 | } |
||
| 1190 | // A simple delete? |
||
| 1191 | View Code Duplication | elseif ($_POST['todo'] == 'delete' || $_POST['todo'] == 'deleteemail') |
|
| 1192 | { |
||
| 1193 | require_once($sourcedir . '/Subs-Members.php'); |
||
| 1194 | deleteMembers($members); |
||
| 1195 | |||
| 1196 | // Send email telling them they aren't welcome? |
||
| 1197 | if ($_POST['todo'] == 'deleteemail') |
||
| 1198 | { |
||
| 1199 | foreach ($member_info as $member) |
||
| 1200 | { |
||
| 1201 | $replacements = array( |
||
| 1202 | 'USERNAME' => $member['name'], |
||
| 1203 | ); |
||
| 1204 | |||
| 1205 | $emaildata = loadEmailTemplate('admin_approve_delete', $replacements, $member['language']); |
||
| 1206 | sendmail($member['email'], $emaildata['subject'], $emaildata['body'], null, 'accdel', $emaildata['is_html'], 1); |
||
| 1207 | } |
||
| 1208 | } |
||
| 1209 | } |
||
| 1210 | // Remind them to activate their account? |
||
| 1211 | elseif ($_POST['todo'] == 'remind') |
||
| 1212 | { |
||
| 1213 | foreach ($member_info as $member) |
||
| 1214 | { |
||
| 1215 | $replacements = array( |
||
| 1216 | 'USERNAME' => $member['name'], |
||
| 1217 | 'ACTIVATIONLINK' => $scripturl . '?action=activate;u=' . $member['id'] . ';code=' . $member['code'], |
||
| 1218 | 'ACTIVATIONLINKWITHOUTCODE' => $scripturl . '?action=activate;u=' . $member['id'], |
||
| 1219 | 'ACTIVATIONCODE' => $member['code'], |
||
| 1220 | ); |
||
| 1221 | |||
| 1222 | $emaildata = loadEmailTemplate('admin_approve_remind', $replacements, $member['language']); |
||
| 1223 | sendmail($member['email'], $emaildata['subject'], $emaildata['body'], null, 'accrem' . $member['id'], $emaildata['is_html'], 1); |
||
| 1224 | } |
||
| 1225 | } |
||
| 1226 | |||
| 1227 | // @todo current_language is never set, no idea what this is for. Remove? |
||
| 1228 | // Back to the user's language! |
||
| 1229 | if (isset($current_language) && $current_language != $user_info['language']) |
||
| 1230 | { |
||
| 1231 | loadLanguage('index'); |
||
| 1232 | loadLanguage('ManageMembers'); |
||
| 1233 | } |
||
| 1234 | |||
| 1235 | // Log what we did? |
||
| 1236 | if (!empty($modSettings['modlog_enabled']) && in_array($_POST['todo'], array('ok', 'okemail', 'require_activation', 'remind'))) |
||
| 1237 | { |
||
| 1238 | $log_action = $_POST['todo'] == 'remind' ? 'remind_member' : 'approve_member'; |
||
| 1239 | |||
| 1240 | require_once($sourcedir . '/Logging.php'); |
||
| 1241 | foreach ($member_info as $member) |
||
| 1242 | logAction($log_action, array('member' => $member['id']), 'admin'); |
||
| 1243 | } |
||
| 1244 | |||
| 1245 | // Although updateStats *may* catch this, best to do it manually just in case (Doesn't always sort out unapprovedMembers). |
||
| 1246 | if (in_array($current_filter, array(3, 4, 5))) |
||
| 1247 | updateSettings(array('unapprovedMembers' => ($modSettings['unapprovedMembers'] > $member_count ? $modSettings['unapprovedMembers'] - $member_count : 0))); |
||
| 1248 | |||
| 1249 | // Update the member's stats. (but, we know the member didn't change their name.) |
||
| 1250 | updateStats('member', false); |
||
| 1251 | |||
| 1252 | // If they haven't been deleted, update the post group statistics on them... |
||
| 1253 | if (!in_array($_POST['todo'], array('delete', 'deleteemail', 'reject', 'rejectemail', 'remind'))) |
||
| 1254 | updateStats('postgroups', $members); |
||
| 1255 | |||
| 1256 | redirectexit('action=admin;area=viewmembers;sa=browse;type=' . $_REQUEST['type'] . ';sort=' . $_REQUEST['sort'] . ';filter=' . $current_filter . ';start=' . $_REQUEST['start']); |
||
| 1257 | } |
||
| 1258 | |||
| 1259 | /** |
||
| 1260 | * Nifty function to calculate the number of days ago a given date was. |
||
| 1261 | * Requires a unix timestamp as input, returns an integer. |
||
| 1262 | * Named in honour of Jeff Lewis, the original creator of...this function. |
||
| 1263 | * |
||
| 1264 | * @param int $old The timestamp of the old date |
||
| 1265 | * @return int The number of days since $old, based on the forum time |
||
| 1266 | */ |
||
| 1267 | function jeffsdatediff($old) |
||
| 1268 | { |
||
| 1269 | // Get the current time as the user would see it... |
||
| 1270 | $forumTime = forum_time(); |
||
| 1271 | |||
| 1272 | // Calculate the seconds that have passed since midnight. |
||
| 1273 | $sinceMidnight = date('H', $forumTime) * 60 * 60 + date('i', $forumTime) * 60 + date('s', $forumTime); |
||
| 1274 | |||
| 1275 | // Take the difference between the two times. |
||
| 1276 | $dis = time() - $old; |
||
| 1277 | |||
| 1278 | // Before midnight? |
||
| 1279 | if ($dis < $sinceMidnight) |
||
| 1280 | return 0; |
||
| 1281 | else |
||
| 1282 | $dis -= $sinceMidnight; |
||
| 1283 | |||
| 1284 | // Divide out the seconds in a day to get the number of days. |
||
| 1285 | return ceil($dis / (24 * 60 * 60)); |
||
| 1286 | } |
||
| 1287 | |||
| 1288 | ?> |