@@ -1,13 +1,13 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | if( ! defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
3 | - die('<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly.'); |
|
3 | + die('<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly.'); |
|
4 | 4 | } |
5 | 5 | |
6 | 6 | unset($_SESSION['itemname']); // clear this, because it's only set for logging purposes |
7 | 7 | |
8 | 8 | if($modx->hasPermission('settings') && (!isset($settings_version) || $settings_version != $modx->getVersionData('version'))) { |
9 | - // seems to be a new install - send the user to the configuration page |
|
10 | - exit('<script type="text/javascript">document.location.href="index.php?a=17";</script>'); |
|
9 | + // seems to be a new install - send the user to the configuration page |
|
10 | + exit('<script type="text/javascript">document.location.href="index.php?a=17";</script>'); |
|
11 | 11 | } |
12 | 12 | |
13 | 13 | // set placeholders |
@@ -17,92 +17,92 @@ discard block |
||
17 | 17 | |
18 | 18 | // setup message info |
19 | 19 | if($modx->hasPermission('messages')) { |
20 | - include_once(MODX_MANAGER_PATH . 'includes/messageCount.inc.php'); |
|
21 | - $_SESSION['nrtotalmessages'] = $nrtotalmessages; |
|
22 | - $_SESSION['nrnewmessages'] = $nrnewmessages; |
|
23 | - |
|
24 | - $msg = array(); |
|
25 | - $msg[] = sprintf('<a href="index.php?a=10" target="main"><img src="%s" /></a>', $_style['icons_mail_large']); |
|
26 | - $nrnewmessages = $_SESSION['nrnewmessages'] > 0 ? ' (<span style="color:red">' . $_SESSION['nrnewmessages'] . '</span>)' : ''; |
|
27 | - $msg[] = sprintf('<span style="color:#909090;font-size:15px;font-weight:bold"> <a class="wm_messages_inbox_link" href="index.php?a=10" target="main">[%%inbox%%]</a>%s</span><br />', $nrnewmessages); |
|
28 | - $nrnewmessages = $_SESSION['nrnewmessages'] > 0 ? '<span style="color:red;">' . $_SESSION['nrnewmessages'] . '</span>' : '0'; |
|
29 | - $welcome_messages = sprintf($_lang['welcome_messages'], $_SESSION['nrtotalmessages'], $nrnewmessages); |
|
30 | - $msg[] = sprintf('<span class="comment">%s</span>', $welcome_messages); |
|
31 | - $ph['MessageInfo'] = implode("\n", $msg); |
|
20 | + include_once(MODX_MANAGER_PATH . 'includes/messageCount.inc.php'); |
|
21 | + $_SESSION['nrtotalmessages'] = $nrtotalmessages; |
|
22 | + $_SESSION['nrnewmessages'] = $nrnewmessages; |
|
23 | + |
|
24 | + $msg = array(); |
|
25 | + $msg[] = sprintf('<a href="index.php?a=10" target="main"><img src="%s" /></a>', $_style['icons_mail_large']); |
|
26 | + $nrnewmessages = $_SESSION['nrnewmessages'] > 0 ? ' (<span style="color:red">' . $_SESSION['nrnewmessages'] . '</span>)' : ''; |
|
27 | + $msg[] = sprintf('<span style="color:#909090;font-size:15px;font-weight:bold"> <a class="wm_messages_inbox_link" href="index.php?a=10" target="main">[%%inbox%%]</a>%s</span><br />', $nrnewmessages); |
|
28 | + $nrnewmessages = $_SESSION['nrnewmessages'] > 0 ? '<span style="color:red;">' . $_SESSION['nrnewmessages'] . '</span>' : '0'; |
|
29 | + $welcome_messages = sprintf($_lang['welcome_messages'], $_SESSION['nrtotalmessages'], $nrnewmessages); |
|
30 | + $msg[] = sprintf('<span class="comment">%s</span>', $welcome_messages); |
|
31 | + $ph['MessageInfo'] = implode("\n", $msg); |
|
32 | 32 | } |
33 | 33 | |
34 | 34 | // setup icons |
35 | 35 | if($modx->hasPermission('new_user') || $modx->hasPermission('edit_user')) { |
36 | - $icon = '<i class="[&icons_security_large&]" alt="[%user_management_title%]"> </i>[%user_management_title%]'; |
|
37 | - $ph['SecurityIcon'] = wrapIcon($icon, 75); |
|
36 | + $icon = '<i class="[&icons_security_large&]" alt="[%user_management_title%]"> </i>[%user_management_title%]'; |
|
37 | + $ph['SecurityIcon'] = wrapIcon($icon, 75); |
|
38 | 38 | } |
39 | 39 | if($modx->hasPermission('new_web_user') || $modx->hasPermission('edit_web_user')) { |
40 | - $icon = '<i class="[&icons_webusers_large&]" alt="[%web_user_management_title%]"> </i>[%web_user_management_title%]'; |
|
41 | - $ph['WebUserIcon'] = wrapIcon($icon, 99); |
|
40 | + $icon = '<i class="[&icons_webusers_large&]" alt="[%web_user_management_title%]"> </i>[%web_user_management_title%]'; |
|
41 | + $ph['WebUserIcon'] = wrapIcon($icon, 99); |
|
42 | 42 | } |
43 | 43 | if($modx->hasPermission('new_module') || $modx->hasPermission('edit_module')) { |
44 | - $icon = '<i class="[&icons_modules_large&]" alt="[%manage_modules%]"> </i>[%modules%]'; |
|
45 | - $ph['ModulesIcon'] = wrapIcon($icon, 106); |
|
44 | + $icon = '<i class="[&icons_modules_large&]" alt="[%manage_modules%]"> </i>[%modules%]'; |
|
45 | + $ph['ModulesIcon'] = wrapIcon($icon, 106); |
|
46 | 46 | } |
47 | 47 | if($modx->hasPermission('new_template') || $modx->hasPermission('edit_template') || $modx->hasPermission('new_snippet') || $modx->hasPermission('edit_snippet') || $modx->hasPermission('new_plugin') || $modx->hasPermission('edit_plugin') || $modx->hasPermission('manage_metatags')) { |
48 | - $icon = '<i class="[&icons_resources_large&]" alt="[%element_management%]"> </i>[%elements%]'; |
|
49 | - $ph['ResourcesIcon'] = wrapIcon($icon, 76); |
|
48 | + $icon = '<i class="[&icons_resources_large&]" alt="[%element_management%]"> </i>[%elements%]'; |
|
49 | + $ph['ResourcesIcon'] = wrapIcon($icon, 76); |
|
50 | 50 | } |
51 | 51 | if($modx->hasPermission('bk_manager')) { |
52 | - $icon = '<i class="[&icons_backup_large&]" alt="[%bk_manager%]"> </i>[%backup%]'; |
|
53 | - $ph['BackupIcon'] = wrapIcon($icon, 93); |
|
52 | + $icon = '<i class="[&icons_backup_large&]" alt="[%bk_manager%]"> </i>[%backup%]'; |
|
53 | + $ph['BackupIcon'] = wrapIcon($icon, 93); |
|
54 | 54 | } |
55 | 55 | if($modx->hasPermission('help')) { |
56 | - $icon = '<i class="[&icons_help_large&]" alt="[%help%]" /> </i>[%help%]'; |
|
57 | - $ph['HelpIcon'] = wrapIcon($icon, 9); |
|
56 | + $icon = '<i class="[&icons_help_large&]" alt="[%help%]" /> </i>[%help%]'; |
|
57 | + $ph['HelpIcon'] = wrapIcon($icon, 9); |
|
58 | 58 | } |
59 | 59 | |
60 | 60 | if($modx->hasPermission('new_document')) { |
61 | - $icon = '<i class="[&icons_resource_large&]"></i>[%add_resource%]'; |
|
62 | - $ph['ResourceIcon'] = wrapIcon($icon, 4); |
|
63 | - $icon = '<i class="[&icons_weblink_large&]"></i>[%add_weblink%]'; |
|
64 | - $ph['WeblinkIcon'] = wrapIcon($icon, 72); |
|
61 | + $icon = '<i class="[&icons_resource_large&]"></i>[%add_resource%]'; |
|
62 | + $ph['ResourceIcon'] = wrapIcon($icon, 4); |
|
63 | + $icon = '<i class="[&icons_weblink_large&]"></i>[%add_weblink%]'; |
|
64 | + $ph['WeblinkIcon'] = wrapIcon($icon, 72); |
|
65 | 65 | } |
66 | 66 | if($modx->hasPermission('assets_images')) { |
67 | - $icon = '<i class="[&icons_images_large&]"></i>[%images_management%]'; |
|
68 | - $ph['ImagesIcon'] = wrapIcon($icon, 72); |
|
67 | + $icon = '<i class="[&icons_images_large&]"></i>[%images_management%]'; |
|
68 | + $ph['ImagesIcon'] = wrapIcon($icon, 72); |
|
69 | 69 | } |
70 | 70 | if($modx->hasPermission('assets_files')) { |
71 | - $icon = '<i class="[&icons_files_large&]"></i>[%files_management%]'; |
|
72 | - $ph['FilesIcon'] = wrapIcon($icon, 72); |
|
71 | + $icon = '<i class="[&icons_files_large&]"></i>[%files_management%]'; |
|
72 | + $ph['FilesIcon'] = wrapIcon($icon, 72); |
|
73 | 73 | } |
74 | 74 | if($modx->hasPermission('change_password')) { |
75 | - $icon = '<i class="[&icons_password_large&]"></i>[%change_password%]'; |
|
76 | - $ph['PasswordIcon'] = wrapIcon($icon, 28); |
|
75 | + $icon = '<i class="[&icons_password_large&]"></i>[%change_password%]'; |
|
76 | + $ph['PasswordIcon'] = wrapIcon($icon, 28); |
|
77 | 77 | } |
78 | 78 | $icon = '<i class="[&icons_logout_large&]"></i>[%logout%]'; |
79 | 79 | $ph['LogoutIcon'] = wrapIcon($icon, 8); |
80 | 80 | |
81 | 81 | // do some config checks |
82 | 82 | if(($modx->config['warning_visibility'] == 0 && $_SESSION['mgrRole'] == 1) || $modx->config['warning_visibility'] == 1) { |
83 | - include_once(MODX_MANAGER_PATH . 'includes/config_check.inc.php'); |
|
84 | - if($config_check_results != $_lang['configcheck_ok']) { |
|
85 | - $ph['config_check_results'] = $config_check_results; |
|
86 | - $ph['config_display'] = 'block'; |
|
87 | - } else { |
|
88 | - $ph['config_display'] = 'none'; |
|
89 | - } |
|
83 | + include_once(MODX_MANAGER_PATH . 'includes/config_check.inc.php'); |
|
84 | + if($config_check_results != $_lang['configcheck_ok']) { |
|
85 | + $ph['config_check_results'] = $config_check_results; |
|
86 | + $ph['config_display'] = 'block'; |
|
87 | + } else { |
|
88 | + $ph['config_display'] = 'none'; |
|
89 | + } |
|
90 | 90 | } else { |
91 | - $ph['config_display'] = 'none'; |
|
91 | + $ph['config_display'] = 'none'; |
|
92 | 92 | } |
93 | 93 | |
94 | 94 | // Check logout-reminder |
95 | 95 | if(isset($_SESSION['show_logout_reminder'])) { |
96 | - switch($_SESSION['show_logout_reminder']['type']) { |
|
97 | - case 'logout_reminder': |
|
98 | - $date = $modx->toDateFormat($_SESSION['show_logout_reminder']['lastHit'], 'dateOnly'); |
|
99 | - $ph['logout_reminder_msg'] = str_replace('[+date+]', $date, $_lang['logout_reminder_msg']); |
|
100 | - break; |
|
101 | - } |
|
102 | - $ph['show_logout_reminder'] = 'block'; |
|
103 | - unset($_SESSION['show_logout_reminder']); |
|
96 | + switch($_SESSION['show_logout_reminder']['type']) { |
|
97 | + case 'logout_reminder': |
|
98 | + $date = $modx->toDateFormat($_SESSION['show_logout_reminder']['lastHit'], 'dateOnly'); |
|
99 | + $ph['logout_reminder_msg'] = str_replace('[+date+]', $date, $_lang['logout_reminder_msg']); |
|
100 | + break; |
|
101 | + } |
|
102 | + $ph['show_logout_reminder'] = 'block'; |
|
103 | + unset($_SESSION['show_logout_reminder']); |
|
104 | 104 | } else { |
105 | - $ph['show_logout_reminder'] = 'none'; |
|
105 | + $ph['show_logout_reminder'] = 'none'; |
|
106 | 106 | } |
107 | 107 | |
108 | 108 | // Check multiple sessions |
@@ -150,11 +150,11 @@ discard block |
||
150 | 150 | $nrnewmessages = '<span class="text-danger">' . $_SESSION['nrnewmessages'] . '</span>'; |
151 | 151 | |
152 | 152 | $ph['UserInfo'] = $modx->parseText($tpl, array( |
153 | - 'username' => $modx->getLoginUserName(), |
|
154 | - 'role' => $_SESSION['mgrPermissions']['name'], |
|
155 | - 'lastlogin' => $modx->toDateFormat($_SESSION['mgrLastlogin'] + $server_offset_time), |
|
156 | - 'logincount' => $_SESSION['mgrLogincount'] + 1, |
|
157 | - 'msginfo' => sprintf($_lang['welcome_messages'], $_SESSION['nrtotalmessages'], $nrnewmessages) |
|
153 | + 'username' => $modx->getLoginUserName(), |
|
154 | + 'role' => $_SESSION['mgrPermissions']['name'], |
|
155 | + 'lastlogin' => $modx->toDateFormat($_SESSION['mgrLastlogin'] + $server_offset_time), |
|
156 | + 'logincount' => $_SESSION['mgrLogincount'] + 1, |
|
157 | + 'msginfo' => sprintf($_lang['welcome_messages'], $_SESSION['nrtotalmessages'], $nrnewmessages) |
|
158 | 158 | )); |
159 | 159 | |
160 | 160 | $from = array(); |
@@ -163,13 +163,13 @@ discard block |
||
163 | 163 | $rs = $modx->db->select('*', $from, '', 'username ASC, au.sid ASC'); |
164 | 164 | |
165 | 165 | if($modx->db->getRecordCount($rs) < 1) { |
166 | - $html = '<p>[%no_active_users_found%]</p>'; |
|
166 | + $html = '<p>[%no_active_users_found%]</p>'; |
|
167 | 167 | } else { |
168 | - include_once(MODX_MANAGER_PATH . 'includes/actionlist.inc.php'); |
|
169 | - $now = $_SERVER['REQUEST_TIME'] + $server_offset_time; |
|
170 | - $ph['now'] = strftime('%H:%M:%S', $now); |
|
171 | - $timetocheck = ($now - (60 * 20)); //+$server_offset_time; |
|
172 | - $html = ' |
|
168 | + include_once(MODX_MANAGER_PATH . 'includes/actionlist.inc.php'); |
|
169 | + $now = $_SERVER['REQUEST_TIME'] + $server_offset_time; |
|
170 | + $ph['now'] = strftime('%H:%M:%S', $now); |
|
171 | + $timetocheck = ($now - (60 * 20)); //+$server_offset_time; |
|
172 | + $html = ' |
|
173 | 173 | <div class="card-body"> |
174 | 174 | [%onlineusers_message%] |
175 | 175 | <b>[+now+]</b>): |
@@ -187,33 +187,33 @@ discard block |
||
187 | 187 | </thead> |
188 | 188 | <tbody>'; |
189 | 189 | |
190 | - $userList = array(); |
|
191 | - $userCount = array(); |
|
192 | - // Create userlist with session-count first before output |
|
193 | - while($activeusers = $modx->db->getRow($rs)) { |
|
194 | - $userCount[$activeusers['internalKey']] = isset($userCount[$activeusers['internalKey']]) ? $userCount[$activeusers['internalKey']] + 1 : 1; |
|
195 | - |
|
196 | - $idle = $activeusers['lasthit'] < $timetocheck ? ' class="userIdle"' : ''; |
|
197 | - $webicon = $activeusers['internalKey'] < 0 ? '<img src="[&tree_globe&]" alt="Web user" /> ' : ''; |
|
198 | - $ip = $activeusers['ip'] === '::1' ? '127.0.0.1' : $activeusers['ip']; |
|
199 | - $currentaction = getAction($activeusers['action'], $activeusers['id']); |
|
200 | - $userList[] = array( |
|
201 | - $idle, |
|
202 | - '', |
|
203 | - $activeusers['username'], |
|
204 | - $webicon, |
|
205 | - abs($activeusers['internalKey']), |
|
206 | - $ip, |
|
207 | - strftime('%H:%M:%S', $activeusers['lasthit'] + $server_offset_time), |
|
208 | - $currentaction |
|
209 | - ); |
|
210 | - } |
|
211 | - foreach($userList as $params) { |
|
212 | - $params[1] = $userCount[$params[4]] > 1 ? ' class="userMultipleSessions"' : ''; |
|
213 | - $html .= "\n\t\t" . vsprintf('<tr%s><td><strong%s>%s</strong></td><td>%s%s</td><td>%s</td><td>%s</td><td>%s</td></tr>', $params); |
|
214 | - } |
|
215 | - |
|
216 | - $html .= ' |
|
190 | + $userList = array(); |
|
191 | + $userCount = array(); |
|
192 | + // Create userlist with session-count first before output |
|
193 | + while($activeusers = $modx->db->getRow($rs)) { |
|
194 | + $userCount[$activeusers['internalKey']] = isset($userCount[$activeusers['internalKey']]) ? $userCount[$activeusers['internalKey']] + 1 : 1; |
|
195 | + |
|
196 | + $idle = $activeusers['lasthit'] < $timetocheck ? ' class="userIdle"' : ''; |
|
197 | + $webicon = $activeusers['internalKey'] < 0 ? '<img src="[&tree_globe&]" alt="Web user" /> ' : ''; |
|
198 | + $ip = $activeusers['ip'] === '::1' ? '127.0.0.1' : $activeusers['ip']; |
|
199 | + $currentaction = getAction($activeusers['action'], $activeusers['id']); |
|
200 | + $userList[] = array( |
|
201 | + $idle, |
|
202 | + '', |
|
203 | + $activeusers['username'], |
|
204 | + $webicon, |
|
205 | + abs($activeusers['internalKey']), |
|
206 | + $ip, |
|
207 | + strftime('%H:%M:%S', $activeusers['lasthit'] + $server_offset_time), |
|
208 | + $currentaction |
|
209 | + ); |
|
210 | + } |
|
211 | + foreach($userList as $params) { |
|
212 | + $params[1] = $userCount[$params[4]] > 1 ? ' class="userMultipleSessions"' : ''; |
|
213 | + $html .= "\n\t\t" . vsprintf('<tr%s><td><strong%s>%s</strong></td><td>%s%s</td><td>%s</td><td>%s</td><td>%s</td></tr>', $params); |
|
214 | + } |
|
215 | + |
|
216 | + $html .= ' |
|
217 | 217 | </tbody> |
218 | 218 | </table> |
219 | 219 | </div> |
@@ -254,17 +254,17 @@ discard block |
||
254 | 254 | // invoke event OnManagerWelcomePrerender |
255 | 255 | $evtOut = $modx->invokeEvent('OnManagerWelcomePrerender'); |
256 | 256 | if(is_array($evtOut)) { |
257 | - $output = implode('', $evtOut); |
|
258 | - $ph['OnManagerWelcomePrerender'] = $output; |
|
257 | + $output = implode('', $evtOut); |
|
258 | + $ph['OnManagerWelcomePrerender'] = $output; |
|
259 | 259 | } |
260 | 260 | |
261 | 261 | $widgets['welcome'] = array( |
262 | - 'menuindex' => '10', |
|
263 | - 'id' => 'welcome', |
|
264 | - 'cols' => 'col-lg-6', |
|
265 | - 'icon' => 'fa-home', |
|
266 | - 'title' => '[%welcome_title%]', |
|
267 | - 'body' => ' |
|
262 | + 'menuindex' => '10', |
|
263 | + 'id' => 'welcome', |
|
264 | + 'cols' => 'col-lg-6', |
|
265 | + 'icon' => 'fa-home', |
|
266 | + 'title' => '[%welcome_title%]', |
|
267 | + 'body' => ' |
|
268 | 268 | <div class="wm_buttons card-body"> |
269 | 269 | <!--@IF:[[#hasPermission?key=new_document]]--> |
270 | 270 | <span class="wm_button"> |
@@ -338,25 +338,25 @@ discard block |
||
338 | 338 | </table> |
339 | 339 | </div> |
340 | 340 | ', |
341 | - 'hide'=>'0' |
|
341 | + 'hide'=>'0' |
|
342 | 342 | ); |
343 | 343 | $widgets['onlineinfo'] = array( |
344 | - 'menuindex' => '20', |
|
345 | - 'id' => 'onlineinfo', |
|
346 | - 'cols' => 'col-lg-6', |
|
347 | - 'icon' => 'fa-user', |
|
348 | - 'title' => '[%onlineusers_title%]', |
|
349 | - 'body' => '<div class="userstable">[+OnlineInfo+]</div>', |
|
350 | - 'hide'=>'0' |
|
344 | + 'menuindex' => '20', |
|
345 | + 'id' => 'onlineinfo', |
|
346 | + 'cols' => 'col-lg-6', |
|
347 | + 'icon' => 'fa-user', |
|
348 | + 'title' => '[%onlineusers_title%]', |
|
349 | + 'body' => '<div class="userstable">[+OnlineInfo+]</div>', |
|
350 | + 'hide'=>'0' |
|
351 | 351 | ); |
352 | 352 | $widgets['recentinfo'] = array( |
353 | - 'menuindex' => '30', |
|
354 | - 'id' => 'modxrecent_widget', |
|
355 | - 'cols' => 'col-sm-12', |
|
356 | - 'icon' => 'fa-pencil-square-o', |
|
357 | - 'title' => '[%activity_title%]', |
|
358 | - 'body' => '<div class="widget-stage">[+RecentInfo+]</div>', |
|
359 | - 'hide'=>'0' |
|
353 | + 'menuindex' => '30', |
|
354 | + 'id' => 'modxrecent_widget', |
|
355 | + 'cols' => 'col-sm-12', |
|
356 | + 'icon' => 'fa-pencil-square-o', |
|
357 | + 'title' => '[%activity_title%]', |
|
358 | + 'body' => '<div class="widget-stage">[+RecentInfo+]</div>', |
|
359 | + 'hide'=>'0' |
|
360 | 360 | ); |
361 | 361 | if ($modx->config['rss_url_news']) { |
362 | 362 | $widgets['news'] = array( |
@@ -384,7 +384,7 @@ discard block |
||
384 | 384 | // invoke OnManagerWelcomeHome event |
385 | 385 | $sitewidgets = $modx->invokeEvent("OnManagerWelcomeHome", array('widgets' => $widgets)); |
386 | 386 | if(is_array($sitewidgets)) { |
387 | - $newwidgets = array(); |
|
387 | + $newwidgets = array(); |
|
388 | 388 | foreach($sitewidgets as $widget){ |
389 | 389 | $newwidgets = array_merge($newwidgets, unserialize($widget)); |
390 | 390 | } |
@@ -392,21 +392,21 @@ discard block |
||
392 | 392 | } |
393 | 393 | |
394 | 394 | usort($widgets, function ($a, $b) { |
395 | - return $a['menuindex'] - $b['menuindex']; |
|
395 | + return $a['menuindex'] - $b['menuindex']; |
|
396 | 396 | }); |
397 | 397 | |
398 | 398 | $tpl = getTplWidget(); |
399 | 399 | $output = ''; |
400 | 400 | foreach($widgets as $widget) { |
401 | - if ($widget['hide'] != '1'){ |
|
402 | - $output .= $modx->parseText($tpl, $widget); |
|
403 | - } |
|
401 | + if ($widget['hide'] != '1'){ |
|
402 | + $output .= $modx->parseText($tpl, $widget); |
|
403 | + } |
|
404 | 404 | } |
405 | 405 | $ph['widgets'] = $output; |
406 | 406 | |
407 | 407 | // load template |
408 | 408 | if(!isset($modx->config['manager_welcome_tpl']) || empty($modx->config['manager_welcome_tpl'])) { |
409 | - $modx->config['manager_welcome_tpl'] = MODX_MANAGER_PATH . 'media/style/common/welcome.tpl'; |
|
409 | + $modx->config['manager_welcome_tpl'] = MODX_MANAGER_PATH . 'media/style/common/welcome.tpl'; |
|
410 | 410 | } |
411 | 411 | |
412 | 412 | $target = $modx->config['manager_welcome_tpl']; |
@@ -414,27 +414,27 @@ discard block |
||
414 | 414 | $target = $modx->mergeSettingsContent($target); |
415 | 415 | |
416 | 416 | if(substr($target, 0, 1) === '@') { |
417 | - if(substr($target, 0, 6) === '@CHUNK') { |
|
418 | - $content = $modx->getChunk(trim(substr($target, 7))); |
|
419 | - } elseif(substr($target, 0, 5) === '@FILE') { |
|
420 | - $content = file_get_contents(trim(substr($target, 6))); |
|
421 | - } else { |
|
422 | - $content = ''; |
|
423 | - } |
|
417 | + if(substr($target, 0, 6) === '@CHUNK') { |
|
418 | + $content = $modx->getChunk(trim(substr($target, 7))); |
|
419 | + } elseif(substr($target, 0, 5) === '@FILE') { |
|
420 | + $content = file_get_contents(trim(substr($target, 6))); |
|
421 | + } else { |
|
422 | + $content = ''; |
|
423 | + } |
|
424 | 424 | } else { |
425 | - $chunk = $modx->getChunk($target); |
|
426 | - if($chunk !== false && !empty($chunk)) { |
|
427 | - $content = $chunk; |
|
428 | - } elseif(is_file(MODX_BASE_PATH . $target)) { |
|
429 | - $content = file_get_contents(MODX_BASE_PATH . $target); |
|
430 | - } elseif(is_file(MODX_MANAGER_PATH . 'media/style/' . $modx->config['manager_theme'] . '/welcome.tpl')) { |
|
431 | - $content = file_get_contents(MODX_MANAGER_PATH . 'media/style/' . $modx->config['manager_theme'] . '/welcome.tpl'); |
|
432 | - } elseif(is_file(MODX_MANAGER_PATH . 'media/style/' . $modx->config['manager_theme'] . '/html/welcome.html')) // ClipperCMS compatible |
|
433 | - { |
|
434 | - $content = file_get_contents(MODX_MANAGER_PATH . 'media/style/' . $modx->config['manager_theme'] . '/html/welcome.html'); |
|
435 | - } else { |
|
436 | - $content = file_get_contents(MODX_MANAGER_PATH . 'media/style/common/welcome.tpl'); |
|
437 | - } |
|
425 | + $chunk = $modx->getChunk($target); |
|
426 | + if($chunk !== false && !empty($chunk)) { |
|
427 | + $content = $chunk; |
|
428 | + } elseif(is_file(MODX_BASE_PATH . $target)) { |
|
429 | + $content = file_get_contents(MODX_BASE_PATH . $target); |
|
430 | + } elseif(is_file(MODX_MANAGER_PATH . 'media/style/' . $modx->config['manager_theme'] . '/welcome.tpl')) { |
|
431 | + $content = file_get_contents(MODX_MANAGER_PATH . 'media/style/' . $modx->config['manager_theme'] . '/welcome.tpl'); |
|
432 | + } elseif(is_file(MODX_MANAGER_PATH . 'media/style/' . $modx->config['manager_theme'] . '/html/welcome.html')) // ClipperCMS compatible |
|
433 | + { |
|
434 | + $content = file_get_contents(MODX_MANAGER_PATH . 'media/style/' . $modx->config['manager_theme'] . '/html/welcome.html'); |
|
435 | + } else { |
|
436 | + $content = file_get_contents(MODX_MANAGER_PATH . 'media/style/common/welcome.tpl'); |
|
437 | + } |
|
438 | 438 | } |
439 | 439 | |
440 | 440 | // merge placeholders |
@@ -442,8 +442,8 @@ discard block |
||
442 | 442 | $content = $modx->mergeSettingsContent($content); |
443 | 443 | $content = $modx->parseText($content, $ph); |
444 | 444 | if(strpos($content, '[+') !== false) { |
445 | - $modx->toPlaceholders($ph); |
|
446 | - $content = $modx->mergePlaceholderContent($content); |
|
445 | + $modx->toPlaceholders($ph); |
|
446 | + $content = $modx->mergePlaceholderContent($content); |
|
447 | 447 | } |
448 | 448 | $content = $modx->parseDocumentSource($content); |
449 | 449 | $content = $modx->parseText($content, $_lang, '[%', '%]'); |
@@ -451,7 +451,7 @@ discard block |
||
451 | 451 | $content = $modx->cleanUpMODXTags($content); //cleanup |
452 | 452 | |
453 | 453 | if($js = $modx->getRegisteredClientScripts()) { |
454 | - $content .= $js; |
|
454 | + $content .= $js; |
|
455 | 455 | } |
456 | 456 | |
457 | 457 | echo $content; |
@@ -1,21 +1,21 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | if( ! defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
3 | - die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | + die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
4 | 4 | } |
5 | 5 | |
6 | 6 | switch((int) $modx->manager->action) { |
7 | - case 35: |
|
8 | - if(!$modx->hasPermission('edit_role')) { |
|
9 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
10 | - } |
|
11 | - break; |
|
12 | - case 38: |
|
13 | - if(!$modx->hasPermission('new_role')) { |
|
14 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
15 | - } |
|
16 | - break; |
|
17 | - default: |
|
18 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
7 | + case 35: |
|
8 | + if(!$modx->hasPermission('edit_role')) { |
|
9 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
10 | + } |
|
11 | + break; |
|
12 | + case 38: |
|
13 | + if(!$modx->hasPermission('new_role')) { |
|
14 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
15 | + } |
|
16 | + break; |
|
17 | + default: |
|
18 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
19 | 19 | } |
20 | 20 | |
21 | 21 | $role = isset($_REQUEST['id']) ? (int)$_REQUEST['id'] : 0; |
@@ -24,7 +24,7 @@ discard block |
||
24 | 24 | |
25 | 25 | // check to see the snippet editor isn't locked |
26 | 26 | if($lockedEl = $modx->elementIsLocked(8, $role)) { |
27 | - $modx->webAlertAndQuit(sprintf($_lang['lock_msg'], $lockedEl['username'], $_lang['role'])); |
|
27 | + $modx->webAlertAndQuit(sprintf($_lang['lock_msg'], $lockedEl['username'], $_lang['role'])); |
|
28 | 28 | } |
29 | 29 | // end check for lock |
30 | 30 | |
@@ -32,15 +32,15 @@ discard block |
||
32 | 32 | $modx->lockElement(8, $role); |
33 | 33 | |
34 | 34 | if($modx->manager->action == '35') { |
35 | - $rs = $modx->db->select('*', $tbl_user_roles, "id='{$role}'"); |
|
36 | - $roledata = $modx->db->getRow($rs); |
|
37 | - if(!$roledata) { |
|
38 | - $modx->webAlertAndQuit("No role returned!"); |
|
39 | - } |
|
40 | - $_SESSION['itemname'] = $roledata['name']; |
|
35 | + $rs = $modx->db->select('*', $tbl_user_roles, "id='{$role}'"); |
|
36 | + $roledata = $modx->db->getRow($rs); |
|
37 | + if(!$roledata) { |
|
38 | + $modx->webAlertAndQuit("No role returned!"); |
|
39 | + } |
|
40 | + $_SESSION['itemname'] = $roledata['name']; |
|
41 | 41 | } else { |
42 | - $roledata = 0; |
|
43 | - $_SESSION['itemname'] = $_lang["new_role"]; |
|
42 | + $roledata = 0; |
|
43 | + $_SESSION['itemname'] = $_lang["new_role"]; |
|
44 | 44 | } |
45 | 45 | |
46 | 46 | // Add lock-element JS-Script |
@@ -107,63 +107,63 @@ discard block |
||
107 | 107 | <div class="form-group"> |
108 | 108 | <h3><?= $_lang['page_data_general'] ?></h3> |
109 | 109 | <?php |
110 | - echo render_form('frames', $_lang['role_frames'], 'disabled'); |
|
111 | - echo render_form('home', $_lang['role_home'], 'disabled'); |
|
112 | - echo render_form('messages', $_lang['role_messages']); |
|
113 | - echo render_form('logout', $_lang['role_logout'], 'disabled'); |
|
114 | - echo render_form('help', $_lang['role_help']); |
|
115 | - echo render_form('action_ok', $_lang['role_actionok'], 'disabled'); |
|
116 | - echo render_form('error_dialog', $_lang['role_errors'], 'disabled'); |
|
117 | - echo render_form('about', $_lang['role_about'], 'disabled'); |
|
118 | - echo render_form('credits', $_lang['role_credits'], 'disabled'); |
|
119 | - echo render_form('change_password', $_lang['role_change_password']); |
|
120 | - echo render_form('save_password', $_lang['role_save_password']); |
|
121 | - ?> |
|
110 | + echo render_form('frames', $_lang['role_frames'], 'disabled'); |
|
111 | + echo render_form('home', $_lang['role_home'], 'disabled'); |
|
112 | + echo render_form('messages', $_lang['role_messages']); |
|
113 | + echo render_form('logout', $_lang['role_logout'], 'disabled'); |
|
114 | + echo render_form('help', $_lang['role_help']); |
|
115 | + echo render_form('action_ok', $_lang['role_actionok'], 'disabled'); |
|
116 | + echo render_form('error_dialog', $_lang['role_errors'], 'disabled'); |
|
117 | + echo render_form('about', $_lang['role_about'], 'disabled'); |
|
118 | + echo render_form('credits', $_lang['role_credits'], 'disabled'); |
|
119 | + echo render_form('change_password', $_lang['role_change_password']); |
|
120 | + echo render_form('save_password', $_lang['role_save_password']); |
|
121 | + ?> |
|
122 | 122 | </div> |
123 | 123 | </div> |
124 | 124 | <div class="col-sm-6 col-lg-3"> |
125 | 125 | <div class="form-group"> |
126 | 126 | <h3><?= $_lang['role_content_management'] ?></h3> |
127 | 127 | <?php |
128 | - echo render_form('view_document', $_lang['role_view_docdata'], 'disabled'); |
|
129 | - echo render_form('new_document', $_lang['role_create_doc']); |
|
130 | - echo render_form('edit_document', $_lang['role_edit_doc']); |
|
131 | - echo render_form('change_resourcetype', $_lang['role_change_resourcetype']); |
|
132 | - echo render_form('save_document', $_lang['role_save_doc']); |
|
133 | - echo render_form('publish_document', $_lang['role_publish_doc']); |
|
134 | - echo render_form('delete_document', $_lang['role_delete_doc']); |
|
135 | - echo render_form('empty_trash', $_lang['role_empty_trash']); |
|
136 | - echo render_form('empty_cache', $_lang['role_cache_refresh']); |
|
137 | - echo render_form('view_unpublished', $_lang['role_view_unpublished']); |
|
138 | - ?> |
|
128 | + echo render_form('view_document', $_lang['role_view_docdata'], 'disabled'); |
|
129 | + echo render_form('new_document', $_lang['role_create_doc']); |
|
130 | + echo render_form('edit_document', $_lang['role_edit_doc']); |
|
131 | + echo render_form('change_resourcetype', $_lang['role_change_resourcetype']); |
|
132 | + echo render_form('save_document', $_lang['role_save_doc']); |
|
133 | + echo render_form('publish_document', $_lang['role_publish_doc']); |
|
134 | + echo render_form('delete_document', $_lang['role_delete_doc']); |
|
135 | + echo render_form('empty_trash', $_lang['role_empty_trash']); |
|
136 | + echo render_form('empty_cache', $_lang['role_cache_refresh']); |
|
137 | + echo render_form('view_unpublished', $_lang['role_view_unpublished']); |
|
138 | + ?> |
|
139 | 139 | </div> |
140 | 140 | </div> |
141 | 141 | <div class="col-sm-6 col-lg-3 form-group"> |
142 | 142 | <div class="form-group"> |
143 | 143 | <h3><?= $_lang['role_file_management'] ?></h3> |
144 | 144 | <?php |
145 | - echo render_form('file_manager', $_lang['role_file_manager']); |
|
146 | - echo render_form('assets_files', $_lang['role_assets_files']); |
|
147 | - echo render_form('assets_images', $_lang['role_assets_images']); |
|
148 | - ?> |
|
145 | + echo render_form('file_manager', $_lang['role_file_manager']); |
|
146 | + echo render_form('assets_files', $_lang['role_assets_files']); |
|
147 | + echo render_form('assets_images', $_lang['role_assets_images']); |
|
148 | + ?> |
|
149 | 149 | </div> |
150 | 150 | <div class="form-group"> |
151 | 151 | <h3><?= $_lang['category_management'] ?></h3> |
152 | 152 | <?php |
153 | - echo render_form('category_manager', $_lang['role_category_manager']); |
|
154 | - ?> |
|
153 | + echo render_form('category_manager', $_lang['role_category_manager']); |
|
154 | + ?> |
|
155 | 155 | </div> |
156 | 156 | </div> |
157 | 157 | <div class="col-sm-6 col-lg-3"> |
158 | 158 | <div class="form-group"> |
159 | 159 | <h3><?= $_lang['role_module_management'] ?></h3> |
160 | 160 | <?php |
161 | - echo render_form('new_module', $_lang['role_new_module']); |
|
162 | - echo render_form('edit_module', $_lang['role_edit_module']); |
|
163 | - echo render_form('save_module', $_lang['role_save_module']); |
|
164 | - echo render_form('delete_module', $_lang['role_delete_module']); |
|
165 | - echo render_form('exec_module', $_lang['role_run_module']); |
|
166 | - ?> |
|
161 | + echo render_form('new_module', $_lang['role_new_module']); |
|
162 | + echo render_form('edit_module', $_lang['role_edit_module']); |
|
163 | + echo render_form('save_module', $_lang['role_save_module']); |
|
164 | + echo render_form('delete_module', $_lang['role_delete_module']); |
|
165 | + echo render_form('exec_module', $_lang['role_run_module']); |
|
166 | + ?> |
|
167 | 167 | </div> |
168 | 168 | </div> |
169 | 169 | </div> |
@@ -173,44 +173,44 @@ discard block |
||
173 | 173 | <div class="form-group"> |
174 | 174 | <h3><?= $_lang['role_template_management'] ?></h3> |
175 | 175 | <?php |
176 | - echo render_form('new_template', $_lang['role_create_template']); |
|
177 | - echo render_form('edit_template', $_lang['role_edit_template']); |
|
178 | - echo render_form('save_template', $_lang['role_save_template']); |
|
179 | - echo render_form('delete_template', $_lang['role_delete_template']); |
|
180 | - ?> |
|
176 | + echo render_form('new_template', $_lang['role_create_template']); |
|
177 | + echo render_form('edit_template', $_lang['role_edit_template']); |
|
178 | + echo render_form('save_template', $_lang['role_save_template']); |
|
179 | + echo render_form('delete_template', $_lang['role_delete_template']); |
|
180 | + ?> |
|
181 | 181 | </div> |
182 | 182 | </div> |
183 | 183 | <div class="col-sm-6 col-lg-3"> |
184 | 184 | <div class="form-group"> |
185 | 185 | <h3><?= $_lang['role_snippet_management'] ?></h3> |
186 | 186 | <?php |
187 | - echo render_form('new_snippet', $_lang['role_create_snippet']); |
|
188 | - echo render_form('edit_snippet', $_lang['role_edit_snippet']); |
|
189 | - echo render_form('save_snippet', $_lang['role_save_snippet']); |
|
190 | - echo render_form('delete_snippet', $_lang['role_delete_snippet']); |
|
191 | - ?> |
|
187 | + echo render_form('new_snippet', $_lang['role_create_snippet']); |
|
188 | + echo render_form('edit_snippet', $_lang['role_edit_snippet']); |
|
189 | + echo render_form('save_snippet', $_lang['role_save_snippet']); |
|
190 | + echo render_form('delete_snippet', $_lang['role_delete_snippet']); |
|
191 | + ?> |
|
192 | 192 | </div> |
193 | 193 | </div> |
194 | 194 | <div class="col-sm-6 col-lg-3"> |
195 | 195 | <div class="form-group"> |
196 | 196 | <h3><?= $_lang['role_chunk_management'] ?></h3> |
197 | 197 | <?php |
198 | - echo render_form('new_chunk', $_lang['role_create_chunk']); |
|
199 | - echo render_form('edit_chunk', $_lang['role_edit_chunk']); |
|
200 | - echo render_form('save_chunk', $_lang['role_save_chunk']); |
|
201 | - echo render_form('delete_chunk', $_lang['role_delete_chunk']); |
|
202 | - ?> |
|
198 | + echo render_form('new_chunk', $_lang['role_create_chunk']); |
|
199 | + echo render_form('edit_chunk', $_lang['role_edit_chunk']); |
|
200 | + echo render_form('save_chunk', $_lang['role_save_chunk']); |
|
201 | + echo render_form('delete_chunk', $_lang['role_delete_chunk']); |
|
202 | + ?> |
|
203 | 203 | </div> |
204 | 204 | </div> |
205 | 205 | <div class="col-sm-6 col-lg-3"> |
206 | 206 | <div class="form-group"> |
207 | 207 | <h3><?= $_lang['role_plugin_management'] ?></h3> |
208 | 208 | <?php |
209 | - echo render_form('new_plugin', $_lang['role_create_plugin']); |
|
210 | - echo render_form('edit_plugin', $_lang['role_edit_plugin']); |
|
211 | - echo render_form('save_plugin', $_lang['role_save_plugin']); |
|
212 | - echo render_form('delete_plugin', $_lang['role_delete_plugin']); |
|
213 | - ?> |
|
209 | + echo render_form('new_plugin', $_lang['role_create_plugin']); |
|
210 | + echo render_form('edit_plugin', $_lang['role_edit_plugin']); |
|
211 | + echo render_form('save_plugin', $_lang['role_save_plugin']); |
|
212 | + echo render_form('delete_plugin', $_lang['role_delete_plugin']); |
|
213 | + ?> |
|
214 | 214 | </div> |
215 | 215 | </div> |
216 | 216 | </div> |
@@ -220,42 +220,42 @@ discard block |
||
220 | 220 | <div class="form-group"> |
221 | 221 | <h3><?= $_lang['role_user_management'] ?></h3> |
222 | 222 | <?php |
223 | - echo render_form('new_user', $_lang['role_new_user']); |
|
224 | - echo render_form('edit_user', $_lang['role_edit_user']); |
|
225 | - echo render_form('save_user', $_lang['role_save_user']); |
|
226 | - echo render_form('delete_user', $_lang['role_delete_user']); |
|
227 | - ?> |
|
223 | + echo render_form('new_user', $_lang['role_new_user']); |
|
224 | + echo render_form('edit_user', $_lang['role_edit_user']); |
|
225 | + echo render_form('save_user', $_lang['role_save_user']); |
|
226 | + echo render_form('delete_user', $_lang['role_delete_user']); |
|
227 | + ?> |
|
228 | 228 | </div> |
229 | 229 | </div> |
230 | 230 | <div class="col-sm-6 col-lg-3"> |
231 | 231 | <div class="form-group"> |
232 | 232 | <h3><?= $_lang['role_web_user_management'] ?></h3> |
233 | 233 | <?php |
234 | - echo render_form('new_web_user', $_lang['role_new_web_user']); |
|
235 | - echo render_form('edit_web_user', $_lang['role_edit_web_user']); |
|
236 | - echo render_form('save_web_user', $_lang['role_save_web_user']); |
|
237 | - echo render_form('delete_web_user', $_lang['role_delete_web_user']); |
|
238 | - ?> |
|
234 | + echo render_form('new_web_user', $_lang['role_new_web_user']); |
|
235 | + echo render_form('edit_web_user', $_lang['role_edit_web_user']); |
|
236 | + echo render_form('save_web_user', $_lang['role_save_web_user']); |
|
237 | + echo render_form('delete_web_user', $_lang['role_delete_web_user']); |
|
238 | + ?> |
|
239 | 239 | </div> |
240 | 240 | </div> |
241 | 241 | <div class="col-sm-6 col-lg-3"> |
242 | 242 | <div class="form-group"> |
243 | 243 | <h3><?= $_lang['role_udperms'] ?></h3> |
244 | 244 | <?php |
245 | - echo render_form('access_permissions', $_lang['role_access_persmissions']); |
|
246 | - echo render_form('web_access_permissions', $_lang['role_web_access_persmissions']); |
|
247 | - ?> |
|
245 | + echo render_form('access_permissions', $_lang['role_access_persmissions']); |
|
246 | + echo render_form('web_access_permissions', $_lang['role_web_access_persmissions']); |
|
247 | + ?> |
|
248 | 248 | </div> |
249 | 249 | </div> |
250 | 250 | <div class="col-sm-6 col-lg-3"> |
251 | 251 | <div class="form-group"> |
252 | 252 | <h3><?= $_lang['role_role_management'] ?></h3> |
253 | 253 | <?php |
254 | - echo render_form('new_role', $_lang['role_new_role']); |
|
255 | - echo render_form('edit_role', $_lang['role_edit_role']); |
|
256 | - echo render_form('save_role', $_lang['role_save_role']); |
|
257 | - echo render_form('delete_role', $_lang['role_delete_role']); |
|
258 | - ?> |
|
254 | + echo render_form('new_role', $_lang['role_new_role']); |
|
255 | + echo render_form('edit_role', $_lang['role_edit_role']); |
|
256 | + echo render_form('save_role', $_lang['role_save_role']); |
|
257 | + echo render_form('delete_role', $_lang['role_delete_role']); |
|
258 | + ?> |
|
259 | 259 | </div> |
260 | 260 | </div> |
261 | 261 | </div> |
@@ -265,23 +265,23 @@ discard block |
||
265 | 265 | <div class="form-group"> |
266 | 266 | <h3><?= $_lang['role_eventlog_management'] ?></h3> |
267 | 267 | <?php |
268 | - echo render_form('view_eventlog', $_lang['role_view_eventlog']); |
|
269 | - echo render_form('delete_eventlog', $_lang['role_delete_eventlog']); |
|
270 | - ?> |
|
268 | + echo render_form('view_eventlog', $_lang['role_view_eventlog']); |
|
269 | + echo render_form('delete_eventlog', $_lang['role_delete_eventlog']); |
|
270 | + ?> |
|
271 | 271 | </div> |
272 | 272 | </div> |
273 | 273 | <div class="col-sm-6 col-lg-3"> |
274 | 274 | <div class="form-group"> |
275 | 275 | <h3><?= $_lang['role_config_management'] ?></h3> |
276 | 276 | <?php |
277 | - echo render_form('logs', $_lang['role_view_logs']); |
|
278 | - echo render_form('settings', $_lang['role_edit_settings']); |
|
279 | - echo render_form('bk_manager', $_lang['role_bk_manager']); |
|
280 | - echo render_form('import_static', $_lang['role_import_static']); |
|
281 | - echo render_form('export_static', $_lang['role_export_static']); |
|
282 | - echo render_form('remove_locks', $_lang['role_remove_locks']); |
|
283 | - echo render_form('display_locks', $_lang['role_display_locks']); |
|
284 | - ?> |
|
277 | + echo render_form('logs', $_lang['role_view_logs']); |
|
278 | + echo render_form('settings', $_lang['role_edit_settings']); |
|
279 | + echo render_form('bk_manager', $_lang['role_bk_manager']); |
|
280 | + echo render_form('import_static', $_lang['role_import_static']); |
|
281 | + echo render_form('export_static', $_lang['role_export_static']); |
|
282 | + echo render_form('remove_locks', $_lang['role_remove_locks']); |
|
283 | + echo render_form('display_locks', $_lang['role_display_locks']); |
|
284 | + ?> |
|
285 | 285 | </div> |
286 | 286 | </div> |
287 | 287 | </div> |
@@ -3,51 +3,51 @@ discard block |
||
3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
4 | 4 | } |
5 | 5 | if(!$modx->hasPermission('exec_module')) { |
6 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
6 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
7 | 7 | } |
8 | 8 | |
9 | 9 | $id = isset($_GET['id'])? (int)$_GET['id'] : 0; |
10 | 10 | if($id==0) { |
11 | - $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
11 | + $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
12 | 12 | } |
13 | 13 | |
14 | 14 | // check if user has access permission, except admins |
15 | 15 | if($_SESSION['mgrRole']!=1){ |
16 | - $rs = $modx->db->select( |
|
17 | - 'sma.usergroup,mg.member', |
|
18 | - $modx->getFullTableName("site_module_access")." sma |
|
16 | + $rs = $modx->db->select( |
|
17 | + 'sma.usergroup,mg.member', |
|
18 | + $modx->getFullTableName("site_module_access")." sma |
|
19 | 19 | LEFT JOIN ".$modx->getFullTableName("member_groups")." mg ON mg.user_group = sma.usergroup AND member='".$modx->getLoginUserID()."'", |
20 | - "sma.module = '{$id}'" |
|
21 | - ); |
|
22 | - //initialize permission to -1, if it stays -1 no permissions |
|
23 | - //attached so permission granted |
|
24 | - $permissionAccessInt = -1; |
|
20 | + "sma.module = '{$id}'" |
|
21 | + ); |
|
22 | + //initialize permission to -1, if it stays -1 no permissions |
|
23 | + //attached so permission granted |
|
24 | + $permissionAccessInt = -1; |
|
25 | 25 | |
26 | - while ($row = $modx->db->getRow($rs)) { |
|
27 | - if($row["usergroup"] && $row["member"]) { |
|
28 | - //if there are permissions and this member has permission, ofcourse |
|
29 | - //this is granted |
|
30 | - $permissionAccessInt = 1; |
|
31 | - } elseif ($permissionAccessInt==-1) { |
|
32 | - //if there are permissions but this member has no permission and the |
|
33 | - //variable was still in init state we set permission to 0; no permissions |
|
34 | - $permissionAccessInt = 0; |
|
35 | - } |
|
36 | - } |
|
26 | + while ($row = $modx->db->getRow($rs)) { |
|
27 | + if($row["usergroup"] && $row["member"]) { |
|
28 | + //if there are permissions and this member has permission, ofcourse |
|
29 | + //this is granted |
|
30 | + $permissionAccessInt = 1; |
|
31 | + } elseif ($permissionAccessInt==-1) { |
|
32 | + //if there are permissions but this member has no permission and the |
|
33 | + //variable was still in init state we set permission to 0; no permissions |
|
34 | + $permissionAccessInt = 0; |
|
35 | + } |
|
36 | + } |
|
37 | 37 | |
38 | - if($permissionAccessInt==0) { |
|
39 | - $modx->webAlertAndQuit("You do not sufficient privileges to execute this module.", "index.php?a=106"); |
|
40 | - } |
|
38 | + if($permissionAccessInt==0) { |
|
39 | + $modx->webAlertAndQuit("You do not sufficient privileges to execute this module.", "index.php?a=106"); |
|
40 | + } |
|
41 | 41 | } |
42 | 42 | |
43 | 43 | // get module data |
44 | 44 | $rs = $modx->db->select('*', $modx->getFullTableName("site_modules"), "id='{$id}'"); |
45 | 45 | $content = $modx->db->getRow($rs); |
46 | 46 | if(!$content) { |
47 | - $modx->webAlertAndQuit("No record found for id {$id}.", "index.php?a=106"); |
|
47 | + $modx->webAlertAndQuit("No record found for id {$id}.", "index.php?a=106"); |
|
48 | 48 | } |
49 | 49 | if($content['disabled']) { |
50 | - $modx->webAlertAndQuit("This module is disabled and cannot be executed.", "index.php?a=106"); |
|
50 | + $modx->webAlertAndQuit("This module is disabled and cannot be executed.", "index.php?a=106"); |
|
51 | 51 | } |
52 | 52 | |
53 | 53 | // Set the item name for logger |
@@ -62,7 +62,7 @@ discard block |
||
62 | 62 | |
63 | 63 | $output = evalModule($content["modulecode"],$parameter); |
64 | 64 | if (strpos(trim($output),'<')===0 && strpos(trim($output),'<?xml')!==0) { |
65 | - echo "<style>@supports (-webkit-overflow-scrolling: touch) {body,html {-webkit-overflow-scrolling: touch;overflow:auto!important;height:100%!important}}</style>"; // for iframe scroller |
|
65 | + echo "<style>@supports (-webkit-overflow-scrolling: touch) {body,html {-webkit-overflow-scrolling: touch;overflow:auto!important;height:100%!important}}</style>"; // for iframe scroller |
|
66 | 66 | } |
67 | 67 | echo $output; |
68 | 68 | include MODX_MANAGER_PATH."includes/sysalert.display.inc.php"; |
@@ -1,9 +1,9 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | if( ! defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
3 | - die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | + die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
4 | 4 | } |
5 | 5 | if(!$modx->hasPermission('save_user')) { |
6 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
6 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
7 | 7 | } |
8 | 8 | |
9 | 9 | $modx->loadExtension('phpass'); |
@@ -45,134 +45,134 @@ discard block |
||
45 | 45 | |
46 | 46 | // verify password |
47 | 47 | if($passwordgenmethod == "spec" && $input['specifiedpassword'] != $input['confirmpassword']) { |
48 | - webAlertAndQuit("Password typed is mismatched"); |
|
48 | + webAlertAndQuit("Password typed is mismatched"); |
|
49 | 49 | } |
50 | 50 | |
51 | 51 | // verify email |
52 | 52 | if($email == '' || !preg_match("/^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,24}$/i", $email)) { |
53 | - webAlertAndQuit("E-mail address doesn't seem to be valid!"); |
|
53 | + webAlertAndQuit("E-mail address doesn't seem to be valid!"); |
|
54 | 54 | } |
55 | 55 | |
56 | 56 | // verify admin security |
57 | 57 | if($_SESSION['mgrRole'] != 1) { |
58 | - // Check to see if user tried to spoof a "1" (admin) role |
|
59 | - if(!$modx->hasPermission('save_role')) { |
|
60 | - webAlertAndQuit("Illegal attempt to create/modify administrator by non-administrator!"); |
|
61 | - } |
|
62 | - // Verify that the user being edited wasn't an admin and the user ID got spoofed |
|
63 | - $rs = $modx->db->select('count(internalKey)', $tbl_user_attributes, "internalKey='{$id}' AND role=1"); |
|
64 | - $limit = $modx->db->getValue($rs); |
|
65 | - if($limit > 0) { |
|
66 | - webAlertAndQuit("You cannot alter an administrative user."); |
|
67 | - } |
|
58 | + // Check to see if user tried to spoof a "1" (admin) role |
|
59 | + if(!$modx->hasPermission('save_role')) { |
|
60 | + webAlertAndQuit("Illegal attempt to create/modify administrator by non-administrator!"); |
|
61 | + } |
|
62 | + // Verify that the user being edited wasn't an admin and the user ID got spoofed |
|
63 | + $rs = $modx->db->select('count(internalKey)', $tbl_user_attributes, "internalKey='{$id}' AND role=1"); |
|
64 | + $limit = $modx->db->getValue($rs); |
|
65 | + if($limit > 0) { |
|
66 | + webAlertAndQuit("You cannot alter an administrative user."); |
|
67 | + } |
|
68 | 68 | |
69 | 69 | } |
70 | 70 | |
71 | 71 | switch($input['mode']) { |
72 | - case '11' : // new user |
|
73 | - // check if this user name already exist |
|
74 | - $rs = $modx->db->select('count(id)', $tbl_manager_users, sprintf("username='%s'", $modx->db->escape($newusername))); |
|
75 | - $limit = $modx->db->getValue($rs); |
|
76 | - if($limit > 0) { |
|
77 | - webAlertAndQuit("User name is already in use!"); |
|
78 | - } |
|
79 | - |
|
80 | - // check if the email address already exist |
|
81 | - $rs = $modx->db->select('count(internalKey)', $tbl_user_attributes, sprintf("email='%s' AND id!='%s'", $modx->db->escape($email), $id)); |
|
82 | - $limit = $modx->db->getValue($rs); |
|
83 | - if($limit > 0) { |
|
84 | - webAlertAndQuit("Email is already in use!"); |
|
85 | - } |
|
86 | - |
|
87 | - // generate a new password for this user |
|
88 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
89 | - if(strlen($specifiedpassword) < 6) { |
|
90 | - webAlertAndQuit("Password is too short!"); |
|
91 | - } else { |
|
92 | - $newpassword = $specifiedpassword; |
|
93 | - } |
|
94 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
95 | - webAlertAndQuit("You didn't specify a password for this user!"); |
|
96 | - } elseif($passwordgenmethod == 'g') { |
|
97 | - $newpassword = generate_password(8); |
|
98 | - } else { |
|
99 | - webAlertAndQuit("No password generation method specified!"); |
|
100 | - } |
|
101 | - |
|
102 | - // invoke OnBeforeUserFormSave event |
|
103 | - $modx->invokeEvent("OnBeforeUserFormSave", array( |
|
104 | - "mode" => "new", |
|
105 | - )); |
|
106 | - |
|
107 | - // create the user account |
|
108 | - $internalKey = $modx->db->insert(array('username' => $modx->db->escape($newusername)), $tbl_manager_users); |
|
109 | - |
|
110 | - $field = array(); |
|
111 | - $field['password'] = $modx->phpass->HashPassword($newpassword); |
|
112 | - $modx->db->update($field, $tbl_manager_users, "id='{$internalKey}'"); |
|
113 | - |
|
114 | - $field = compact('internalKey', 'fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'blocked', 'blockeduntil', 'blockedafter'); |
|
115 | - $field = $modx->db->escape($field); |
|
116 | - $modx->db->insert($field, $tbl_user_attributes); |
|
117 | - |
|
118 | - // Save user settings |
|
119 | - saveUserSettings($internalKey); |
|
120 | - |
|
121 | - // invoke OnManagerSaveUser event |
|
122 | - $modx->invokeEvent("OnManagerSaveUser", array( |
|
123 | - "mode" => "new", |
|
124 | - "userid" => $internalKey, |
|
125 | - "username" => $newusername, |
|
126 | - "userpassword" => $newpassword, |
|
127 | - "useremail" => $email, |
|
128 | - "userfullname" => $fullname, |
|
129 | - "userroleid" => $role |
|
130 | - )); |
|
131 | - |
|
132 | - // invoke OnUserFormSave event |
|
133 | - $modx->invokeEvent("OnUserFormSave", array( |
|
134 | - "mode" => "new", |
|
135 | - "id" => $internalKey |
|
136 | - )); |
|
137 | - |
|
138 | - // Set the item name for logger |
|
139 | - $_SESSION['itemname'] = $newusername; |
|
140 | - |
|
141 | - /*******************************************************************************/ |
|
142 | - // put the user in the user_groups he/ she should be in |
|
143 | - // first, check that up_perms are switched on! |
|
144 | - if($use_udperms == 1) { |
|
145 | - if(!empty($user_groups)) { |
|
146 | - for($i = 0; $i < count($user_groups); $i++) { |
|
147 | - $f = array(); |
|
148 | - $f['user_group'] = (int)$user_groups[$i]; |
|
149 | - $f['member'] = $internalKey; |
|
150 | - $modx->db->insert($f, $tbl_member_groups); |
|
151 | - } |
|
152 | - } |
|
153 | - } |
|
154 | - // end of user_groups stuff! |
|
155 | - |
|
156 | - if($passwordnotifymethod == 'e') { |
|
157 | - sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
158 | - if($input['stay'] != '') { |
|
159 | - $a = ($input['stay'] == '2') ? "12&id={$internalKey}" : "11"; |
|
160 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
161 | - header($header); |
|
162 | - } else { |
|
163 | - $header = "Location: index.php?a=75&r=2"; |
|
164 | - header($header); |
|
165 | - } |
|
166 | - } else { |
|
167 | - if($input['stay'] != '') { |
|
168 | - $a = ($input['stay'] == '2') ? "12&id={$internalKey}" : "11"; |
|
169 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
170 | - } else { |
|
171 | - $stayUrl = "index.php?a=75&r=2"; |
|
172 | - } |
|
173 | - |
|
174 | - include_once "header.inc.php"; |
|
175 | - ?> |
|
72 | + case '11' : // new user |
|
73 | + // check if this user name already exist |
|
74 | + $rs = $modx->db->select('count(id)', $tbl_manager_users, sprintf("username='%s'", $modx->db->escape($newusername))); |
|
75 | + $limit = $modx->db->getValue($rs); |
|
76 | + if($limit > 0) { |
|
77 | + webAlertAndQuit("User name is already in use!"); |
|
78 | + } |
|
79 | + |
|
80 | + // check if the email address already exist |
|
81 | + $rs = $modx->db->select('count(internalKey)', $tbl_user_attributes, sprintf("email='%s' AND id!='%s'", $modx->db->escape($email), $id)); |
|
82 | + $limit = $modx->db->getValue($rs); |
|
83 | + if($limit > 0) { |
|
84 | + webAlertAndQuit("Email is already in use!"); |
|
85 | + } |
|
86 | + |
|
87 | + // generate a new password for this user |
|
88 | + if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
89 | + if(strlen($specifiedpassword) < 6) { |
|
90 | + webAlertAndQuit("Password is too short!"); |
|
91 | + } else { |
|
92 | + $newpassword = $specifiedpassword; |
|
93 | + } |
|
94 | + } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
95 | + webAlertAndQuit("You didn't specify a password for this user!"); |
|
96 | + } elseif($passwordgenmethod == 'g') { |
|
97 | + $newpassword = generate_password(8); |
|
98 | + } else { |
|
99 | + webAlertAndQuit("No password generation method specified!"); |
|
100 | + } |
|
101 | + |
|
102 | + // invoke OnBeforeUserFormSave event |
|
103 | + $modx->invokeEvent("OnBeforeUserFormSave", array( |
|
104 | + "mode" => "new", |
|
105 | + )); |
|
106 | + |
|
107 | + // create the user account |
|
108 | + $internalKey = $modx->db->insert(array('username' => $modx->db->escape($newusername)), $tbl_manager_users); |
|
109 | + |
|
110 | + $field = array(); |
|
111 | + $field['password'] = $modx->phpass->HashPassword($newpassword); |
|
112 | + $modx->db->update($field, $tbl_manager_users, "id='{$internalKey}'"); |
|
113 | + |
|
114 | + $field = compact('internalKey', 'fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'blocked', 'blockeduntil', 'blockedafter'); |
|
115 | + $field = $modx->db->escape($field); |
|
116 | + $modx->db->insert($field, $tbl_user_attributes); |
|
117 | + |
|
118 | + // Save user settings |
|
119 | + saveUserSettings($internalKey); |
|
120 | + |
|
121 | + // invoke OnManagerSaveUser event |
|
122 | + $modx->invokeEvent("OnManagerSaveUser", array( |
|
123 | + "mode" => "new", |
|
124 | + "userid" => $internalKey, |
|
125 | + "username" => $newusername, |
|
126 | + "userpassword" => $newpassword, |
|
127 | + "useremail" => $email, |
|
128 | + "userfullname" => $fullname, |
|
129 | + "userroleid" => $role |
|
130 | + )); |
|
131 | + |
|
132 | + // invoke OnUserFormSave event |
|
133 | + $modx->invokeEvent("OnUserFormSave", array( |
|
134 | + "mode" => "new", |
|
135 | + "id" => $internalKey |
|
136 | + )); |
|
137 | + |
|
138 | + // Set the item name for logger |
|
139 | + $_SESSION['itemname'] = $newusername; |
|
140 | + |
|
141 | + /*******************************************************************************/ |
|
142 | + // put the user in the user_groups he/ she should be in |
|
143 | + // first, check that up_perms are switched on! |
|
144 | + if($use_udperms == 1) { |
|
145 | + if(!empty($user_groups)) { |
|
146 | + for($i = 0; $i < count($user_groups); $i++) { |
|
147 | + $f = array(); |
|
148 | + $f['user_group'] = (int)$user_groups[$i]; |
|
149 | + $f['member'] = $internalKey; |
|
150 | + $modx->db->insert($f, $tbl_member_groups); |
|
151 | + } |
|
152 | + } |
|
153 | + } |
|
154 | + // end of user_groups stuff! |
|
155 | + |
|
156 | + if($passwordnotifymethod == 'e') { |
|
157 | + sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
158 | + if($input['stay'] != '') { |
|
159 | + $a = ($input['stay'] == '2') ? "12&id={$internalKey}" : "11"; |
|
160 | + $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
161 | + header($header); |
|
162 | + } else { |
|
163 | + $header = "Location: index.php?a=75&r=2"; |
|
164 | + header($header); |
|
165 | + } |
|
166 | + } else { |
|
167 | + if($input['stay'] != '') { |
|
168 | + $a = ($input['stay'] == '2') ? "12&id={$internalKey}" : "11"; |
|
169 | + $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
170 | + } else { |
|
171 | + $stayUrl = "index.php?a=75&r=2"; |
|
172 | + } |
|
173 | + |
|
174 | + include_once "header.inc.php"; |
|
175 | + ?> |
|
176 | 176 | |
177 | 177 | <h1><?php echo $_lang['user_title']; ?></h1> |
178 | 178 | |
@@ -194,125 +194,125 @@ discard block |
||
194 | 194 | </div> |
195 | 195 | <?php |
196 | 196 | |
197 | - include_once "footer.inc.php"; |
|
198 | - } |
|
199 | - break; |
|
200 | - case '12' : // edit user |
|
201 | - // generate a new password for this user |
|
202 | - if($genpassword == 1) { |
|
203 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
204 | - if(strlen($specifiedpassword) < 6) { |
|
205 | - webAlertAndQuit("Password is too short!"); |
|
206 | - } else { |
|
207 | - $newpassword = $specifiedpassword; |
|
208 | - } |
|
209 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
210 | - webAlertAndQuit("You didn't specify a password for this user!"); |
|
211 | - } elseif($passwordgenmethod == 'g') { |
|
212 | - $newpassword = generate_password(8); |
|
213 | - } else { |
|
214 | - webAlertAndQuit("No password generation method specified!"); |
|
215 | - } |
|
216 | - } |
|
217 | - if($passwordnotifymethod == 'e') { |
|
218 | - sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
219 | - } |
|
220 | - |
|
221 | - // check if the username already exist |
|
222 | - $rs = $modx->db->select('count(id)', $tbl_manager_users, sprintf("username='%s' AND id!='%s'", $modx->db->escape($newusername), $id)); |
|
223 | - $limit = $modx->db->getValue($rs); |
|
224 | - if($limit > 0) { |
|
225 | - webAlertAndQuit("User name is already in use!"); |
|
226 | - } |
|
227 | - |
|
228 | - // check if the email address already exists |
|
229 | - $rs = $modx->db->select('count(internalKey)', $tbl_user_attributes, sprintf("email='%s' AND internalKey!='%s'", $modx->db->escape($email), $id)); |
|
230 | - $limit = $modx->db->getValue($rs); |
|
231 | - if($limit > 0) { |
|
232 | - webAlertAndQuit("Email is already in use!"); |
|
233 | - } |
|
234 | - |
|
235 | - // invoke OnBeforeUserFormSave event |
|
236 | - $modx->invokeEvent("OnBeforeUserFormSave", array( |
|
237 | - "mode" => "upd", |
|
238 | - "id" => $id |
|
239 | - )); |
|
240 | - |
|
241 | - // update user name and password |
|
242 | - $field = array(); |
|
243 | - $field['username'] = $modx->db->escape($newusername); |
|
244 | - if($genpassword == 1) { |
|
245 | - $field['password'] = $modx->phpass->HashPassword($newpassword); |
|
246 | - } |
|
247 | - $modx->db->update($field, $tbl_manager_users, "id='{$id}'"); |
|
248 | - $field = compact('fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'failedlogincount', 'blocked', 'blockeduntil', 'blockedafter'); |
|
249 | - $field = $modx->db->escape($field); |
|
250 | - $modx->db->update($field, $tbl_user_attributes, "internalKey='{$id}'"); |
|
251 | - |
|
252 | - // Save user settings |
|
253 | - saveUserSettings($id); |
|
254 | - |
|
255 | - // Set the item name for logger |
|
256 | - $_SESSION['itemname'] = $newusername; |
|
257 | - |
|
258 | - // invoke OnManagerSaveUser event |
|
259 | - $modx->invokeEvent("OnManagerSaveUser", array( |
|
260 | - "mode" => "upd", |
|
261 | - "userid" => $id, |
|
262 | - "username" => $newusername, |
|
263 | - "userpassword" => $newpassword, |
|
264 | - "useremail" => $email, |
|
265 | - "userfullname" => $fullname, |
|
266 | - "userroleid" => $role, |
|
267 | - "oldusername" => (($oldusername != $newusername) ? $oldusername : ""), |
|
268 | - "olduseremail" => (($oldemail != $email) ? $oldemail : "") |
|
269 | - )); |
|
270 | - |
|
271 | - // invoke OnManagerChangePassword event |
|
272 | - if($genpassword == 1) { |
|
273 | - $modx->invokeEvent("OnManagerChangePassword", array( |
|
274 | - "userid" => $id, |
|
275 | - "username" => $newusername, |
|
276 | - "userpassword" => $newpassword |
|
277 | - )); |
|
278 | - } |
|
279 | - |
|
280 | - // invoke OnUserFormSave event |
|
281 | - $modx->invokeEvent("OnUserFormSave", array( |
|
282 | - "mode" => "upd", |
|
283 | - "id" => $id |
|
284 | - )); |
|
285 | - |
|
286 | - /*******************************************************************************/ |
|
287 | - // put the user in the user_groups he/ she should be in |
|
288 | - // first, check that up_perms are switched on! |
|
289 | - if($use_udperms == 1) { |
|
290 | - // as this is an existing user, delete his/ her entries in the groups before saving the new groups |
|
291 | - $modx->db->delete($tbl_member_groups, "member='{$id}'"); |
|
292 | - if(!empty($user_groups)) { |
|
293 | - for($i = 0; $i < count($user_groups); $i++) { |
|
294 | - $field = array(); |
|
295 | - $field['user_group'] = (int)$user_groups[$i]; |
|
296 | - $field['member'] = $id; |
|
297 | - $modx->db->insert($field, $tbl_member_groups); |
|
298 | - } |
|
299 | - } |
|
300 | - } |
|
301 | - // end of user_groups stuff! |
|
302 | - /*******************************************************************************/ |
|
303 | - if($id == $modx->getLoginUserID() && ($genpassword !== 1 && $passwordnotifymethod != 's')) { |
|
304 | - $modx->webAlertAndQuit($_lang["user_changeddata"], 'javascript:top.location.href="index.php?a=8";'); |
|
305 | - } |
|
306 | - if($genpassword == 1 && $passwordnotifymethod == 's') { |
|
307 | - if($input['stay'] != '') { |
|
308 | - $a = ($input['stay'] == '2') ? "12&id={$id}" : "11"; |
|
309 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
310 | - } else { |
|
311 | - $stayUrl = "index.php?a=75&r=2"; |
|
312 | - } |
|
313 | - |
|
314 | - include_once "header.inc.php"; |
|
315 | - ?> |
|
197 | + include_once "footer.inc.php"; |
|
198 | + } |
|
199 | + break; |
|
200 | + case '12' : // edit user |
|
201 | + // generate a new password for this user |
|
202 | + if($genpassword == 1) { |
|
203 | + if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
204 | + if(strlen($specifiedpassword) < 6) { |
|
205 | + webAlertAndQuit("Password is too short!"); |
|
206 | + } else { |
|
207 | + $newpassword = $specifiedpassword; |
|
208 | + } |
|
209 | + } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
210 | + webAlertAndQuit("You didn't specify a password for this user!"); |
|
211 | + } elseif($passwordgenmethod == 'g') { |
|
212 | + $newpassword = generate_password(8); |
|
213 | + } else { |
|
214 | + webAlertAndQuit("No password generation method specified!"); |
|
215 | + } |
|
216 | + } |
|
217 | + if($passwordnotifymethod == 'e') { |
|
218 | + sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
219 | + } |
|
220 | + |
|
221 | + // check if the username already exist |
|
222 | + $rs = $modx->db->select('count(id)', $tbl_manager_users, sprintf("username='%s' AND id!='%s'", $modx->db->escape($newusername), $id)); |
|
223 | + $limit = $modx->db->getValue($rs); |
|
224 | + if($limit > 0) { |
|
225 | + webAlertAndQuit("User name is already in use!"); |
|
226 | + } |
|
227 | + |
|
228 | + // check if the email address already exists |
|
229 | + $rs = $modx->db->select('count(internalKey)', $tbl_user_attributes, sprintf("email='%s' AND internalKey!='%s'", $modx->db->escape($email), $id)); |
|
230 | + $limit = $modx->db->getValue($rs); |
|
231 | + if($limit > 0) { |
|
232 | + webAlertAndQuit("Email is already in use!"); |
|
233 | + } |
|
234 | + |
|
235 | + // invoke OnBeforeUserFormSave event |
|
236 | + $modx->invokeEvent("OnBeforeUserFormSave", array( |
|
237 | + "mode" => "upd", |
|
238 | + "id" => $id |
|
239 | + )); |
|
240 | + |
|
241 | + // update user name and password |
|
242 | + $field = array(); |
|
243 | + $field['username'] = $modx->db->escape($newusername); |
|
244 | + if($genpassword == 1) { |
|
245 | + $field['password'] = $modx->phpass->HashPassword($newpassword); |
|
246 | + } |
|
247 | + $modx->db->update($field, $tbl_manager_users, "id='{$id}'"); |
|
248 | + $field = compact('fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'failedlogincount', 'blocked', 'blockeduntil', 'blockedafter'); |
|
249 | + $field = $modx->db->escape($field); |
|
250 | + $modx->db->update($field, $tbl_user_attributes, "internalKey='{$id}'"); |
|
251 | + |
|
252 | + // Save user settings |
|
253 | + saveUserSettings($id); |
|
254 | + |
|
255 | + // Set the item name for logger |
|
256 | + $_SESSION['itemname'] = $newusername; |
|
257 | + |
|
258 | + // invoke OnManagerSaveUser event |
|
259 | + $modx->invokeEvent("OnManagerSaveUser", array( |
|
260 | + "mode" => "upd", |
|
261 | + "userid" => $id, |
|
262 | + "username" => $newusername, |
|
263 | + "userpassword" => $newpassword, |
|
264 | + "useremail" => $email, |
|
265 | + "userfullname" => $fullname, |
|
266 | + "userroleid" => $role, |
|
267 | + "oldusername" => (($oldusername != $newusername) ? $oldusername : ""), |
|
268 | + "olduseremail" => (($oldemail != $email) ? $oldemail : "") |
|
269 | + )); |
|
270 | + |
|
271 | + // invoke OnManagerChangePassword event |
|
272 | + if($genpassword == 1) { |
|
273 | + $modx->invokeEvent("OnManagerChangePassword", array( |
|
274 | + "userid" => $id, |
|
275 | + "username" => $newusername, |
|
276 | + "userpassword" => $newpassword |
|
277 | + )); |
|
278 | + } |
|
279 | + |
|
280 | + // invoke OnUserFormSave event |
|
281 | + $modx->invokeEvent("OnUserFormSave", array( |
|
282 | + "mode" => "upd", |
|
283 | + "id" => $id |
|
284 | + )); |
|
285 | + |
|
286 | + /*******************************************************************************/ |
|
287 | + // put the user in the user_groups he/ she should be in |
|
288 | + // first, check that up_perms are switched on! |
|
289 | + if($use_udperms == 1) { |
|
290 | + // as this is an existing user, delete his/ her entries in the groups before saving the new groups |
|
291 | + $modx->db->delete($tbl_member_groups, "member='{$id}'"); |
|
292 | + if(!empty($user_groups)) { |
|
293 | + for($i = 0; $i < count($user_groups); $i++) { |
|
294 | + $field = array(); |
|
295 | + $field['user_group'] = (int)$user_groups[$i]; |
|
296 | + $field['member'] = $id; |
|
297 | + $modx->db->insert($field, $tbl_member_groups); |
|
298 | + } |
|
299 | + } |
|
300 | + } |
|
301 | + // end of user_groups stuff! |
|
302 | + /*******************************************************************************/ |
|
303 | + if($id == $modx->getLoginUserID() && ($genpassword !== 1 && $passwordnotifymethod != 's')) { |
|
304 | + $modx->webAlertAndQuit($_lang["user_changeddata"], 'javascript:top.location.href="index.php?a=8";'); |
|
305 | + } |
|
306 | + if($genpassword == 1 && $passwordnotifymethod == 's') { |
|
307 | + if($input['stay'] != '') { |
|
308 | + $a = ($input['stay'] == '2') ? "12&id={$id}" : "11"; |
|
309 | + $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
310 | + } else { |
|
311 | + $stayUrl = "index.php?a=75&r=2"; |
|
312 | + } |
|
313 | + |
|
314 | + include_once "header.inc.php"; |
|
315 | + ?> |
|
316 | 316 | |
317 | 317 | <h1><?php echo $_lang['user_title']; ?></h1> |
318 | 318 | |
@@ -332,20 +332,20 @@ discard block |
||
332 | 332 | </div> |
333 | 333 | <?php |
334 | 334 | |
335 | - include_once "footer.inc.php"; |
|
336 | - } else { |
|
337 | - if($input['stay'] != '') { |
|
338 | - $a = ($input['stay'] == '2') ? "12&id={$id}" : "11"; |
|
339 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
340 | - header($header); |
|
341 | - } else { |
|
342 | - $header = "Location: index.php?a=75&r=2"; |
|
343 | - header($header); |
|
344 | - } |
|
345 | - } |
|
346 | - break; |
|
347 | - default: |
|
348 | - webAlertAndQuit("No operation set in request."); |
|
335 | + include_once "footer.inc.php"; |
|
336 | + } else { |
|
337 | + if($input['stay'] != '') { |
|
338 | + $a = ($input['stay'] == '2') ? "12&id={$id}" : "11"; |
|
339 | + $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
340 | + header($header); |
|
341 | + } else { |
|
342 | + $header = "Location: index.php?a=75&r=2"; |
|
343 | + header($header); |
|
344 | + } |
|
345 | + } |
|
346 | + break; |
|
347 | + default: |
|
348 | + webAlertAndQuit("No operation set in request."); |
|
349 | 349 | } |
350 | 350 | |
351 | 351 | if(!function_exists('sendMailMessage')) { |
@@ -3,12 +3,12 @@ discard block |
||
3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
4 | 4 | } |
5 | 5 | if(!$modx->hasPermission('new_module')) { |
6 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
6 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
7 | 7 | } |
8 | 8 | |
9 | 9 | $id = isset($_GET['id'])? (int)$_GET['id'] : 0; |
10 | 10 | if($id==0) { |
11 | - $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
11 | + $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
12 | 12 | } |
13 | 13 | |
14 | 14 | if(!function_exists('createGUID')) { |
@@ -36,40 +36,40 @@ discard block |
||
36 | 36 | |
37 | 37 | // duplicate module |
38 | 38 | $newid = $modx->db->insert( |
39 | - array( |
|
40 | - 'name'=>'', |
|
41 | - 'description'=>'', |
|
42 | - 'disabled'=>'', |
|
43 | - 'category'=>'', |
|
44 | - 'wrap'=>'', |
|
45 | - 'icon'=>'', |
|
46 | - 'enable_resource'=>'', |
|
47 | - 'resourcefile'=>'', |
|
48 | - 'createdon'=>'', |
|
49 | - 'editedon'=>'', |
|
50 | - 'guid'=>'', |
|
51 | - 'enable_sharedparams'=>'', |
|
52 | - 'properties'=>'', |
|
53 | - 'modulecode'=>'', |
|
54 | - ), $modx->getFullTableName('site_modules'), // Insert into |
|
55 | - "CONCAT(name, ' {$_lang['duplicated_el_suffix']}{$count}') AS name, description, '1' AS disabled, category, wrap, icon, enable_resource, resourcefile, createdon, editedon, '".createGUID()."' AS guid, enable_sharedparams, properties, modulecode", $modx->getFullTableName('site_modules'), "id='{$id}'"); // Copy from |
|
39 | + array( |
|
40 | + 'name'=>'', |
|
41 | + 'description'=>'', |
|
42 | + 'disabled'=>'', |
|
43 | + 'category'=>'', |
|
44 | + 'wrap'=>'', |
|
45 | + 'icon'=>'', |
|
46 | + 'enable_resource'=>'', |
|
47 | + 'resourcefile'=>'', |
|
48 | + 'createdon'=>'', |
|
49 | + 'editedon'=>'', |
|
50 | + 'guid'=>'', |
|
51 | + 'enable_sharedparams'=>'', |
|
52 | + 'properties'=>'', |
|
53 | + 'modulecode'=>'', |
|
54 | + ), $modx->getFullTableName('site_modules'), // Insert into |
|
55 | + "CONCAT(name, ' {$_lang['duplicated_el_suffix']}{$count}') AS name, description, '1' AS disabled, category, wrap, icon, enable_resource, resourcefile, createdon, editedon, '".createGUID()."' AS guid, enable_sharedparams, properties, modulecode", $modx->getFullTableName('site_modules'), "id='{$id}'"); // Copy from |
|
56 | 56 | |
57 | 57 | // duplicate module dependencies |
58 | 58 | $modx->db->insert( |
59 | - array( |
|
60 | - 'module'=>'', |
|
61 | - 'resource'=>'', |
|
62 | - 'type'=>'', |
|
63 | - ), $modx->getFullTableName('site_module_depobj'), // Insert into |
|
64 | - "'{$newid}', resource, type", $modx->getFullTableName('site_module_depobj'), "module='{$id}'"); // Copy from |
|
59 | + array( |
|
60 | + 'module'=>'', |
|
61 | + 'resource'=>'', |
|
62 | + 'type'=>'', |
|
63 | + ), $modx->getFullTableName('site_module_depobj'), // Insert into |
|
64 | + "'{$newid}', resource, type", $modx->getFullTableName('site_module_depobj'), "module='{$id}'"); // Copy from |
|
65 | 65 | |
66 | 66 | // duplicate module user group access |
67 | 67 | $modx->db->insert( |
68 | - array( |
|
69 | - 'module'=>'', |
|
70 | - 'usergroup'=>'', |
|
71 | - ), $modx->getFullTableName('site_module_access'), // Insert into |
|
72 | - "'{$newid}', usergroup", $modx->getFullTableName('site_module_access'), "module='{$id}'"); // Copy from |
|
68 | + array( |
|
69 | + 'module'=>'', |
|
70 | + 'usergroup'=>'', |
|
71 | + ), $modx->getFullTableName('site_module_access'), // Insert into |
|
72 | + "'{$newid}', usergroup", $modx->getFullTableName('site_module_access'), "module='{$id}'"); // Copy from |
|
73 | 73 | |
74 | 74 | // Set the item name for logger |
75 | 75 | $name = $modx->db->getValue($modx->db->select('name', $modx->getFullTableName('site_modules'), "id='{$newid}'")); |
@@ -3,7 +3,7 @@ discard block |
||
3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
4 | 4 | } |
5 | 5 | if(!$modx->hasPermission('edit_document')) { |
6 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
6 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
7 | 7 | } |
8 | 8 | |
9 | 9 | $newParentID = isset($_REQUEST['new_parent']) ? (int)$_REQUEST['new_parent'] : 0; |
@@ -25,16 +25,16 @@ discard block |
||
25 | 25 | // check user has permission to move document to chosen location |
26 | 26 | |
27 | 27 | if ($use_udperms == 1) { |
28 | - if ($oldparent != $newParentID) { |
|
29 | - $udperms = new EvolutionCMS\Legacy\Permissions(); |
|
30 | - $udperms->user = $modx->getLoginUserID(); |
|
31 | - $udperms->document = $newParentID; |
|
32 | - $udperms->role = $_SESSION['mgrRole']; |
|
33 | - |
|
34 | - if (!$udperms->checkPermissions()) { |
|
35 | - $modx->webAlertAndQuit($_lang["access_permission_parent_denied"]); |
|
36 | - } |
|
37 | - } |
|
28 | + if ($oldparent != $newParentID) { |
|
29 | + $udperms = new EvolutionCMS\Legacy\Permissions(); |
|
30 | + $udperms->user = $modx->getLoginUserID(); |
|
31 | + $udperms->document = $newParentID; |
|
32 | + $udperms->role = $_SESSION['mgrRole']; |
|
33 | + |
|
34 | + if (!$udperms->checkPermissions()) { |
|
35 | + $modx->webAlertAndQuit($_lang["access_permission_parent_denied"]); |
|
36 | + } |
|
37 | + } |
|
38 | 38 | } |
39 | 39 | |
40 | 40 | if(!function_exists('allChildren')) { |
@@ -58,55 +58,55 @@ discard block |
||
58 | 58 | } |
59 | 59 | |
60 | 60 | $evtOut = $modx->invokeEvent("onBeforeMoveDocument", array ( |
61 | - "id_document" => $documentID, |
|
62 | - "old_parent" => $oldparent, |
|
63 | - "new_parent" => $newParentID |
|
61 | + "id_document" => $documentID, |
|
62 | + "old_parent" => $oldparent, |
|
63 | + "new_parent" => $newParentID |
|
64 | 64 | )); |
65 | 65 | if (is_array($evtOut) && count($evtOut) > 0){ |
66 | - $newParent = array_pop($evtOut); |
|
67 | - if($newParent == $oldparent) { |
|
68 | - $modx->webAlertAndQuit($_lang["error_movedocument2"]); |
|
69 | - }else{ |
|
70 | - $newParentID = $newParent; |
|
71 | - } |
|
66 | + $newParent = array_pop($evtOut); |
|
67 | + if($newParent == $oldparent) { |
|
68 | + $modx->webAlertAndQuit($_lang["error_movedocument2"]); |
|
69 | + }else{ |
|
70 | + $newParentID = $newParent; |
|
71 | + } |
|
72 | 72 | } |
73 | 73 | |
74 | 74 | $children = allChildren($documentID); |
75 | 75 | if (!array_search($newParentID, $children)) { |
76 | - $modx->db->update(array( |
|
77 | - 'isfolder' => 1, |
|
78 | - ), $modx->getFullTableName('site_content'), "id='{$newParentID}'"); |
|
79 | - |
|
80 | - $modx->db->update(array( |
|
81 | - 'parent' => $newParentID, |
|
82 | - 'editedby' => $modx->getLoginUserID(), |
|
83 | - 'editedon' => time(), |
|
84 | - ), $modx->getFullTableName('site_content'), "id='{$documentID}'"); |
|
85 | - |
|
86 | - // finished moving the document, now check to see if the old_parent should no longer be a folder. |
|
87 | - $rs = $modx->db->select('COUNT(*)', $modx->getFullTableName('site_content'), "parent='{$oldparent}'"); |
|
88 | - $limit = $modx->db->getValue($rs); |
|
89 | - |
|
90 | - if(!$limit>0) { |
|
91 | - $modx->db->update(array( |
|
92 | - 'isfolder' => 0, |
|
93 | - ), $modx->getFullTableName('site_content'), "id='{$oldparent}'"); |
|
94 | - } |
|
95 | - // Set the item name for logger |
|
96 | - $pagetitle = $modx->db->getValue($modx->db->select('pagetitle', $modx->getFullTableName('site_content'), "id='{$documentID}'")); |
|
97 | - $_SESSION['itemname'] = $pagetitle; |
|
98 | - |
|
99 | - $modx->invokeEvent("onAfterMoveDocument", array ( |
|
100 | - "id_document" => $documentID, |
|
101 | - "old_parent" => $oldparent, |
|
102 | - "new_parent" => $newParentID |
|
103 | - )); |
|
104 | - |
|
105 | - // empty cache & sync site |
|
106 | - $modx->clearCache('full'); |
|
107 | - |
|
108 | - $header="Location: index.php?a=3&id={$documentID}&r=9"; |
|
109 | - header($header); |
|
76 | + $modx->db->update(array( |
|
77 | + 'isfolder' => 1, |
|
78 | + ), $modx->getFullTableName('site_content'), "id='{$newParentID}'"); |
|
79 | + |
|
80 | + $modx->db->update(array( |
|
81 | + 'parent' => $newParentID, |
|
82 | + 'editedby' => $modx->getLoginUserID(), |
|
83 | + 'editedon' => time(), |
|
84 | + ), $modx->getFullTableName('site_content'), "id='{$documentID}'"); |
|
85 | + |
|
86 | + // finished moving the document, now check to see if the old_parent should no longer be a folder. |
|
87 | + $rs = $modx->db->select('COUNT(*)', $modx->getFullTableName('site_content'), "parent='{$oldparent}'"); |
|
88 | + $limit = $modx->db->getValue($rs); |
|
89 | + |
|
90 | + if(!$limit>0) { |
|
91 | + $modx->db->update(array( |
|
92 | + 'isfolder' => 0, |
|
93 | + ), $modx->getFullTableName('site_content'), "id='{$oldparent}'"); |
|
94 | + } |
|
95 | + // Set the item name for logger |
|
96 | + $pagetitle = $modx->db->getValue($modx->db->select('pagetitle', $modx->getFullTableName('site_content'), "id='{$documentID}'")); |
|
97 | + $_SESSION['itemname'] = $pagetitle; |
|
98 | + |
|
99 | + $modx->invokeEvent("onAfterMoveDocument", array ( |
|
100 | + "id_document" => $documentID, |
|
101 | + "old_parent" => $oldparent, |
|
102 | + "new_parent" => $newParentID |
|
103 | + )); |
|
104 | + |
|
105 | + // empty cache & sync site |
|
106 | + $modx->clearCache('full'); |
|
107 | + |
|
108 | + $header="Location: index.php?a=3&id={$documentID}&r=9"; |
|
109 | + header($header); |
|
110 | 110 | } else { |
111 | - $modx->webAlertAndQuit("You cannot move a document to a child document!"); |
|
111 | + $modx->webAlertAndQuit("You cannot move a document to a child document!"); |
|
112 | 112 | } |
@@ -1,9 +1,9 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | if( ! defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
3 | - die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | + die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
4 | 4 | } |
5 | 5 | if(!$modx->hasPermission('save_web_user')) { |
6 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
6 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
7 | 7 | } |
8 | 8 | |
9 | 9 | $tbl_web_users = $modx->getFullTableName('web_users'); |
@@ -12,10 +12,10 @@ discard block |
||
12 | 12 | |
13 | 13 | $input = $_POST; |
14 | 14 | foreach($input as $k => $v) { |
15 | - if($k !== 'comment') { |
|
16 | - $v = sanitize($v); |
|
17 | - } |
|
18 | - $input[$k] = $v; |
|
15 | + if($k !== 'comment') { |
|
16 | + $v = sanitize($v); |
|
17 | + } |
|
18 | + $input[$k] = $v; |
|
19 | 19 | } |
20 | 20 | |
21 | 21 | $id = (int)$input['id']; |
@@ -51,82 +51,82 @@ discard block |
||
51 | 51 | |
52 | 52 | // verify password |
53 | 53 | if($passwordgenmethod == "spec" && $input['specifiedpassword'] != $input['confirmpassword']) { |
54 | - webAlertAndQuit("Password typed is mismatched"); |
|
54 | + webAlertAndQuit("Password typed is mismatched"); |
|
55 | 55 | } |
56 | 56 | |
57 | 57 | // verify email |
58 | 58 | if($email == '' || !preg_match("/^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,24}$/i", $email)) { |
59 | - webAlertAndQuit("E-mail address doesn't seem to be valid!"); |
|
59 | + webAlertAndQuit("E-mail address doesn't seem to be valid!"); |
|
60 | 60 | } |
61 | 61 | |
62 | 62 | switch($input['mode']) { |
63 | - case '87' : // new user |
|
64 | - // check if this user name already exist |
|
65 | - $rs = $modx->db->select('count(id)', $tbl_web_users, "username='{$esc_newusername}'"); |
|
66 | - $limit = $modx->db->getValue($rs); |
|
67 | - if($limit > 0) { |
|
68 | - webAlertAndQuit("User name is already in use!"); |
|
69 | - } |
|
70 | - |
|
71 | - // check if the email address already exist |
|
72 | - if ($modx->config['allow_multiple_emails'] != 1) { |
|
73 | - $rs = $modx->db->select('count(id)', $tbl_web_user_attributes, "email='{$esc_email}' AND id!='{$id}'"); |
|
74 | - $limit = $modx->db->getValue($rs); |
|
75 | - if($limit > 0) { |
|
76 | - webAlertAndQuit("Email is already in use!"); |
|
77 | - } |
|
78 | - } |
|
79 | - |
|
80 | - // generate a new password for this user |
|
81 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
82 | - if(strlen($specifiedpassword) < 6) { |
|
83 | - webAlertAndQuit("Password is too short!"); |
|
84 | - } else { |
|
85 | - $newpassword = $specifiedpassword; |
|
86 | - } |
|
87 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
88 | - webAlertAndQuit("You didn't specify a password for this user!"); |
|
89 | - } elseif($passwordgenmethod == 'g') { |
|
90 | - $newpassword = generate_password(8); |
|
91 | - } else { |
|
92 | - webAlertAndQuit("No password generation method specified!"); |
|
93 | - } |
|
94 | - |
|
95 | - // invoke OnBeforeWUsrFormSave event |
|
96 | - $modx->invokeEvent("OnBeforeWUsrFormSave", array( |
|
97 | - "mode" => "new", |
|
98 | - )); |
|
99 | - |
|
100 | - // create the user account |
|
101 | - $field = array(); |
|
102 | - $field['username'] = $esc_newusername; |
|
103 | - $field['password'] = md5($newpassword); |
|
104 | - $internalKey = $modx->db->insert($field, $tbl_web_users); |
|
105 | - |
|
106 | - $field = compact('internalKey', 'fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'blocked', 'blockeduntil', 'blockedafter'); |
|
107 | - $field = $modx->db->escape($field); |
|
108 | - $modx->db->insert($field, $tbl_web_user_attributes); |
|
109 | - |
|
110 | - // Save User Settings |
|
111 | - saveUserSettings($internalKey); |
|
112 | - |
|
113 | - // Set the item name for logger |
|
114 | - $_SESSION['itemname'] = $newusername; |
|
115 | - |
|
116 | - /*******************************************************************************/ |
|
117 | - // put the user in the user_groups he/ she should be in |
|
118 | - // first, check that up_perms are switched on! |
|
119 | - if($use_udperms == 1) { |
|
120 | - if(!empty($user_groups)) { |
|
121 | - for($i = 0; $i < count($user_groups); $i++) { |
|
122 | - $f = array(); |
|
123 | - $f['webgroup'] = (int)$user_groups[$i]; |
|
124 | - $f['webuser'] = $internalKey; |
|
125 | - $modx->db->insert($f, $tbl_web_groups); |
|
126 | - } |
|
127 | - } |
|
128 | - } |
|
129 | - // end of user_groups stuff! |
|
63 | + case '87' : // new user |
|
64 | + // check if this user name already exist |
|
65 | + $rs = $modx->db->select('count(id)', $tbl_web_users, "username='{$esc_newusername}'"); |
|
66 | + $limit = $modx->db->getValue($rs); |
|
67 | + if($limit > 0) { |
|
68 | + webAlertAndQuit("User name is already in use!"); |
|
69 | + } |
|
70 | + |
|
71 | + // check if the email address already exist |
|
72 | + if ($modx->config['allow_multiple_emails'] != 1) { |
|
73 | + $rs = $modx->db->select('count(id)', $tbl_web_user_attributes, "email='{$esc_email}' AND id!='{$id}'"); |
|
74 | + $limit = $modx->db->getValue($rs); |
|
75 | + if($limit > 0) { |
|
76 | + webAlertAndQuit("Email is already in use!"); |
|
77 | + } |
|
78 | + } |
|
79 | + |
|
80 | + // generate a new password for this user |
|
81 | + if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
82 | + if(strlen($specifiedpassword) < 6) { |
|
83 | + webAlertAndQuit("Password is too short!"); |
|
84 | + } else { |
|
85 | + $newpassword = $specifiedpassword; |
|
86 | + } |
|
87 | + } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
88 | + webAlertAndQuit("You didn't specify a password for this user!"); |
|
89 | + } elseif($passwordgenmethod == 'g') { |
|
90 | + $newpassword = generate_password(8); |
|
91 | + } else { |
|
92 | + webAlertAndQuit("No password generation method specified!"); |
|
93 | + } |
|
94 | + |
|
95 | + // invoke OnBeforeWUsrFormSave event |
|
96 | + $modx->invokeEvent("OnBeforeWUsrFormSave", array( |
|
97 | + "mode" => "new", |
|
98 | + )); |
|
99 | + |
|
100 | + // create the user account |
|
101 | + $field = array(); |
|
102 | + $field['username'] = $esc_newusername; |
|
103 | + $field['password'] = md5($newpassword); |
|
104 | + $internalKey = $modx->db->insert($field, $tbl_web_users); |
|
105 | + |
|
106 | + $field = compact('internalKey', 'fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'blocked', 'blockeduntil', 'blockedafter'); |
|
107 | + $field = $modx->db->escape($field); |
|
108 | + $modx->db->insert($field, $tbl_web_user_attributes); |
|
109 | + |
|
110 | + // Save User Settings |
|
111 | + saveUserSettings($internalKey); |
|
112 | + |
|
113 | + // Set the item name for logger |
|
114 | + $_SESSION['itemname'] = $newusername; |
|
115 | + |
|
116 | + /*******************************************************************************/ |
|
117 | + // put the user in the user_groups he/ she should be in |
|
118 | + // first, check that up_perms are switched on! |
|
119 | + if($use_udperms == 1) { |
|
120 | + if(!empty($user_groups)) { |
|
121 | + for($i = 0; $i < count($user_groups); $i++) { |
|
122 | + $f = array(); |
|
123 | + $f['webgroup'] = (int)$user_groups[$i]; |
|
124 | + $f['webuser'] = $internalKey; |
|
125 | + $modx->db->insert($f, $tbl_web_groups); |
|
126 | + } |
|
127 | + } |
|
128 | + } |
|
129 | + // end of user_groups stuff! |
|
130 | 130 | |
131 | 131 | // invoke OnWebSaveUser event |
132 | 132 | $modx->invokeEvent("OnWebSaveUser", array( |
@@ -144,26 +144,26 @@ discard block |
||
144 | 144 | "id" => $internalKey |
145 | 145 | )); |
146 | 146 | |
147 | - if($passwordnotifymethod == 'e') { |
|
148 | - sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
149 | - if($input['stay'] != '') { |
|
150 | - $a = ($input['stay'] == '2') ? "88&id={$internalKey}" : "87"; |
|
151 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
152 | - header($header); |
|
153 | - } else { |
|
154 | - $header = "Location: index.php?a=99&r=2"; |
|
155 | - header($header); |
|
156 | - } |
|
157 | - } else { |
|
158 | - if($input['stay'] != '') { |
|
159 | - $a = ($input['stay'] == '2') ? "88&id={$internalKey}" : "87"; |
|
160 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
161 | - } else { |
|
162 | - $stayUrl = "index.php?a=99&r=2"; |
|
163 | - } |
|
164 | - |
|
165 | - include_once "header.inc.php"; |
|
166 | - ?> |
|
147 | + if($passwordnotifymethod == 'e') { |
|
148 | + sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
149 | + if($input['stay'] != '') { |
|
150 | + $a = ($input['stay'] == '2') ? "88&id={$internalKey}" : "87"; |
|
151 | + $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
152 | + header($header); |
|
153 | + } else { |
|
154 | + $header = "Location: index.php?a=99&r=2"; |
|
155 | + header($header); |
|
156 | + } |
|
157 | + } else { |
|
158 | + if($input['stay'] != '') { |
|
159 | + $a = ($input['stay'] == '2') ? "88&id={$internalKey}" : "87"; |
|
160 | + $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
161 | + } else { |
|
162 | + $stayUrl = "index.php?a=99&r=2"; |
|
163 | + } |
|
164 | + |
|
165 | + include_once "header.inc.php"; |
|
166 | + ?> |
|
167 | 167 | |
168 | 168 | <h1><?php echo $_lang['web_user_title']; ?></h1> |
169 | 169 | |
@@ -185,86 +185,86 @@ discard block |
||
185 | 185 | </div> |
186 | 186 | <?php |
187 | 187 | |
188 | - include_once "footer.inc.php"; |
|
189 | - } |
|
190 | - break; |
|
191 | - case '88' : // edit user |
|
192 | - // generate a new password for this user |
|
193 | - if($genpassword == 1) { |
|
194 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
195 | - if(strlen($specifiedpassword) < 6) { |
|
196 | - webAlertAndQuit("Password is too short!"); |
|
197 | - } else { |
|
198 | - $newpassword = $specifiedpassword; |
|
199 | - } |
|
200 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
201 | - webAlertAndQuit("You didn't specify a password for this user!"); |
|
202 | - } elseif($passwordgenmethod == 'g') { |
|
203 | - $newpassword = generate_password(8); |
|
204 | - } else { |
|
205 | - webAlertAndQuit("No password generation method specified!"); |
|
206 | - } |
|
207 | - } |
|
208 | - if($passwordnotifymethod == 'e') { |
|
209 | - sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
210 | - } |
|
211 | - |
|
212 | - // check if the username already exist |
|
213 | - $rs = $modx->db->select('count(id)', $tbl_web_users, "username='{$esc_newusername}' AND id!='{$id}'"); |
|
214 | - $limit = $modx->db->getValue($rs); |
|
215 | - if($limit > 0) { |
|
216 | - webAlertAndQuit("User name is already in use!"); |
|
217 | - } |
|
218 | - |
|
219 | - // check if the email address already exists |
|
220 | - if ($modx->config['allow_multiple_emails'] != 1) { |
|
221 | - $rs = $modx->db->select('count(internalKey)', $tbl_web_user_attributes, "email='{$esc_email}' AND internalKey!='{$id}'"); |
|
222 | - $limit = $modx->db->getValue($rs); |
|
223 | - if($limit > 0) { |
|
224 | - webAlertAndQuit("Email is already in use!"); |
|
225 | - } |
|
226 | - } |
|
227 | - |
|
228 | - // invoke OnBeforeWUsrFormSave event |
|
229 | - $modx->invokeEvent("OnBeforeWUsrFormSave", array( |
|
230 | - "mode" => "upd", |
|
231 | - "id" => $id |
|
232 | - )); |
|
233 | - |
|
234 | - // update user name and password |
|
235 | - $field = array(); |
|
236 | - $field['username'] = $esc_newusername; |
|
237 | - if($genpassword == 1) { |
|
238 | - $field['password'] = md5($newpassword); |
|
239 | - } |
|
240 | - $modx->db->update($field, $tbl_web_users, "id='{$id}'"); |
|
241 | - $field = compact('fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'failedlogincount', 'blocked', 'blockeduntil', 'blockedafter'); |
|
242 | - $field = $modx->db->escape($field); |
|
243 | - $modx->db->update($field, $tbl_web_user_attributes, "internalKey='{$id}'"); |
|
244 | - |
|
245 | - // Save User Settings |
|
246 | - saveUserSettings($id); |
|
247 | - |
|
248 | - // Set the item name for logger |
|
249 | - $_SESSION['itemname'] = $newusername; |
|
250 | - |
|
251 | - /*******************************************************************************/ |
|
252 | - // put the user in the user_groups he/ she should be in |
|
253 | - // first, check that up_perms are switched on! |
|
254 | - if($use_udperms == 1) { |
|
255 | - // as this is an existing user, delete his/ her entries in the groups before saving the new groups |
|
256 | - $modx->db->delete($tbl_web_groups, "webuser='{$id}'"); |
|
257 | - if(!empty($user_groups)) { |
|
258 | - for($i = 0; $i < count($user_groups); $i++) { |
|
259 | - $field = array(); |
|
260 | - $field['webgroup'] = (int)$user_groups[$i]; |
|
261 | - $field['webuser'] = $id; |
|
262 | - $modx->db->insert($field, $tbl_web_groups); |
|
263 | - } |
|
264 | - } |
|
265 | - } |
|
266 | - // end of user_groups stuff! |
|
267 | - /*******************************************************************************/ |
|
188 | + include_once "footer.inc.php"; |
|
189 | + } |
|
190 | + break; |
|
191 | + case '88' : // edit user |
|
192 | + // generate a new password for this user |
|
193 | + if($genpassword == 1) { |
|
194 | + if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
195 | + if(strlen($specifiedpassword) < 6) { |
|
196 | + webAlertAndQuit("Password is too short!"); |
|
197 | + } else { |
|
198 | + $newpassword = $specifiedpassword; |
|
199 | + } |
|
200 | + } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
201 | + webAlertAndQuit("You didn't specify a password for this user!"); |
|
202 | + } elseif($passwordgenmethod == 'g') { |
|
203 | + $newpassword = generate_password(8); |
|
204 | + } else { |
|
205 | + webAlertAndQuit("No password generation method specified!"); |
|
206 | + } |
|
207 | + } |
|
208 | + if($passwordnotifymethod == 'e') { |
|
209 | + sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
210 | + } |
|
211 | + |
|
212 | + // check if the username already exist |
|
213 | + $rs = $modx->db->select('count(id)', $tbl_web_users, "username='{$esc_newusername}' AND id!='{$id}'"); |
|
214 | + $limit = $modx->db->getValue($rs); |
|
215 | + if($limit > 0) { |
|
216 | + webAlertAndQuit("User name is already in use!"); |
|
217 | + } |
|
218 | + |
|
219 | + // check if the email address already exists |
|
220 | + if ($modx->config['allow_multiple_emails'] != 1) { |
|
221 | + $rs = $modx->db->select('count(internalKey)', $tbl_web_user_attributes, "email='{$esc_email}' AND internalKey!='{$id}'"); |
|
222 | + $limit = $modx->db->getValue($rs); |
|
223 | + if($limit > 0) { |
|
224 | + webAlertAndQuit("Email is already in use!"); |
|
225 | + } |
|
226 | + } |
|
227 | + |
|
228 | + // invoke OnBeforeWUsrFormSave event |
|
229 | + $modx->invokeEvent("OnBeforeWUsrFormSave", array( |
|
230 | + "mode" => "upd", |
|
231 | + "id" => $id |
|
232 | + )); |
|
233 | + |
|
234 | + // update user name and password |
|
235 | + $field = array(); |
|
236 | + $field['username'] = $esc_newusername; |
|
237 | + if($genpassword == 1) { |
|
238 | + $field['password'] = md5($newpassword); |
|
239 | + } |
|
240 | + $modx->db->update($field, $tbl_web_users, "id='{$id}'"); |
|
241 | + $field = compact('fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'failedlogincount', 'blocked', 'blockeduntil', 'blockedafter'); |
|
242 | + $field = $modx->db->escape($field); |
|
243 | + $modx->db->update($field, $tbl_web_user_attributes, "internalKey='{$id}'"); |
|
244 | + |
|
245 | + // Save User Settings |
|
246 | + saveUserSettings($id); |
|
247 | + |
|
248 | + // Set the item name for logger |
|
249 | + $_SESSION['itemname'] = $newusername; |
|
250 | + |
|
251 | + /*******************************************************************************/ |
|
252 | + // put the user in the user_groups he/ she should be in |
|
253 | + // first, check that up_perms are switched on! |
|
254 | + if($use_udperms == 1) { |
|
255 | + // as this is an existing user, delete his/ her entries in the groups before saving the new groups |
|
256 | + $modx->db->delete($tbl_web_groups, "webuser='{$id}'"); |
|
257 | + if(!empty($user_groups)) { |
|
258 | + for($i = 0; $i < count($user_groups); $i++) { |
|
259 | + $field = array(); |
|
260 | + $field['webgroup'] = (int)$user_groups[$i]; |
|
261 | + $field['webuser'] = $id; |
|
262 | + $modx->db->insert($field, $tbl_web_groups); |
|
263 | + } |
|
264 | + } |
|
265 | + } |
|
266 | + // end of user_groups stuff! |
|
267 | + /*******************************************************************************/ |
|
268 | 268 | |
269 | 269 | // invoke OnWebSaveUser event |
270 | 270 | $modx->invokeEvent("OnWebSaveUser", array( |
@@ -293,16 +293,16 @@ discard block |
||
293 | 293 | "id" => $id |
294 | 294 | )); |
295 | 295 | |
296 | - if($genpassword == 1 && $passwordnotifymethod == 's') { |
|
297 | - if($input['stay'] != '') { |
|
298 | - $a = ($input['stay'] == '2') ? "88&id={$id}" : "87"; |
|
299 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
300 | - } else { |
|
301 | - $stayUrl = "index.php?a=99&r=2"; |
|
302 | - } |
|
296 | + if($genpassword == 1 && $passwordnotifymethod == 's') { |
|
297 | + if($input['stay'] != '') { |
|
298 | + $a = ($input['stay'] == '2') ? "88&id={$id}" : "87"; |
|
299 | + $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
300 | + } else { |
|
301 | + $stayUrl = "index.php?a=99&r=2"; |
|
302 | + } |
|
303 | 303 | |
304 | - include_once "header.inc.php"; |
|
305 | - ?> |
|
304 | + include_once "header.inc.php"; |
|
305 | + ?> |
|
306 | 306 | |
307 | 307 | <h1><?php echo $_lang['web_user_title']; ?></h1> |
308 | 308 | |
@@ -322,20 +322,20 @@ discard block |
||
322 | 322 | </div> |
323 | 323 | <?php |
324 | 324 | |
325 | - include_once "footer.inc.php"; |
|
326 | - } else { |
|
327 | - if($input['stay'] != '') { |
|
328 | - $a = ($input['stay'] == '2') ? "88&id={$id}" : "87"; |
|
329 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
330 | - header($header); |
|
331 | - } else { |
|
332 | - $header = "Location: index.php?a=99&r=2"; |
|
333 | - header($header); |
|
334 | - } |
|
335 | - } |
|
336 | - break; |
|
337 | - default : |
|
338 | - webAlertAndQuit("No operation set in request."); |
|
325 | + include_once "footer.inc.php"; |
|
326 | + } else { |
|
327 | + if($input['stay'] != '') { |
|
328 | + $a = ($input['stay'] == '2') ? "88&id={$id}" : "87"; |
|
329 | + $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
330 | + header($header); |
|
331 | + } else { |
|
332 | + $header = "Location: index.php?a=99&r=2"; |
|
333 | + header($header); |
|
334 | + } |
|
335 | + } |
|
336 | + break; |
|
337 | + default : |
|
338 | + webAlertAndQuit("No operation set in request."); |
|
339 | 339 | } |
340 | 340 | |
341 | 341 | if(!function_exists('save_user_quoted_printable')) { |
@@ -3,12 +3,12 @@ discard block |
||
3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
4 | 4 | } |
5 | 5 | if(!$modx->hasPermission('new_document') || !$modx->hasPermission('save_document')) { |
6 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
6 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
7 | 7 | } |
8 | 8 | |
9 | 9 | $id = isset($_GET['id'])? (int)$_GET['id'] : 0; |
10 | 10 | if($id==0) { |
11 | - $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
11 | + $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
12 | 12 | } |
13 | 13 | |
14 | 14 | $children = array(); |
@@ -21,7 +21,7 @@ discard block |
||
21 | 21 | $udperms->duplicateDoc = true; |
22 | 22 | |
23 | 23 | if(!$udperms->checkPermissions()) { |
24 | - $modx->webAlertAndQuit($_lang["access_permission_denied"]); |
|
24 | + $modx->webAlertAndQuit($_lang["access_permission_denied"]); |
|
25 | 25 | } |
26 | 26 | |
27 | 27 | // Run the duplicator |
@@ -1,7 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | if(!isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])) { |
3 | - header('HTTP/1.0 404 Not Found'); |
|
4 | - exit('error'); |
|
3 | + header('HTTP/1.0 404 Not Found'); |
|
4 | + exit('error'); |
|
5 | 5 | } |
6 | 6 | define('IN_MANAGER_MODE', true); // we use this to make sure files are accessed through |
7 | 7 | define('MODX_API_MODE', true); |
@@ -18,12 +18,12 @@ discard block |
||
18 | 18 | include_once("{$core_path}lang/english.inc.php"); |
19 | 19 | |
20 | 20 | if($manager_language !== 'english' && is_file("{$core_path}lang/{$manager_language}.inc.php")) { |
21 | - include_once("{$core_path}lang/{$manager_language}.inc.php"); |
|
21 | + include_once("{$core_path}lang/{$manager_language}.inc.php"); |
|
22 | 22 | } |
23 | 23 | |
24 | 24 | // Initialize System Alert Message Queque |
25 | 25 | if(!isset($_SESSION['SystemAlertMsgQueque'])) { |
26 | - $_SESSION['SystemAlertMsgQueque'] = array(); |
|
26 | + $_SESSION['SystemAlertMsgQueque'] = array(); |
|
27 | 27 | } |
28 | 28 | $SystemAlertMsgQueque = &$_SESSION['SystemAlertMsgQueque']; |
29 | 29 | |
@@ -38,10 +38,10 @@ discard block |
||
38 | 38 | |
39 | 39 | // invoke OnBeforeManagerLogin event |
40 | 40 | $modx->invokeEvent('OnBeforeManagerLogin', array( |
41 | - 'username' => $username, |
|
42 | - 'userpassword' => $givenPassword, |
|
43 | - 'rememberme' => $rememberme |
|
44 | - )); |
|
41 | + 'username' => $username, |
|
42 | + 'userpassword' => $givenPassword, |
|
43 | + 'rememberme' => $rememberme |
|
44 | + )); |
|
45 | 45 | $fields = 'mu.*, ua.*'; |
46 | 46 | $from = '[+prefix+]manager_users AS mu, [+prefix+]user_attributes AS ua'; |
47 | 47 | $where = "BINARY mu.username='{$username}' and ua.internalKey=mu.id"; |
@@ -49,8 +49,8 @@ discard block |
||
49 | 49 | $limit = $modx->db->getRecordCount($rs); |
50 | 50 | |
51 | 51 | if($limit == 0 || $limit > 1) { |
52 | - jsAlert($_lang['login_processor_unknown_user']); |
|
53 | - return; |
|
52 | + jsAlert($_lang['login_processor_unknown_user']); |
|
53 | + return; |
|
54 | 54 | } |
55 | 55 | |
56 | 56 | $row = $modx->db->getRow($rs); |
@@ -71,127 +71,127 @@ discard block |
||
71 | 71 | // get the user settings from the database |
72 | 72 | $rs = $modx->db->select('setting_name, setting_value', '[+prefix+]user_settings', "user='{$internalKey}' AND setting_value!=''"); |
73 | 73 | while($row = $modx->db->getRow($rs)) { |
74 | - extract($row); |
|
75 | - ${$setting_name} = $setting_value; |
|
74 | + extract($row); |
|
75 | + ${$setting_name} = $setting_value; |
|
76 | 76 | } |
77 | 77 | |
78 | 78 | // blocked due to number of login errors. |
79 | 79 | if($failedlogins >= $failed_allowed && $blockeduntildate > time()) { |
80 | - @session_destroy(); |
|
81 | - session_unset(); |
|
82 | - if($cip = getenv("HTTP_CLIENT_IP")) { |
|
83 | - $ip = $cip; |
|
84 | - } elseif($cip = getenv("HTTP_X_FORWARDED_FOR")) { |
|
85 | - $ip = $cip; |
|
86 | - } elseif($cip = getenv("REMOTE_ADDR")) { |
|
87 | - $ip = $cip; |
|
88 | - } else { |
|
89 | - $ip = "UNKNOWN"; |
|
90 | - } |
|
91 | - $log = new EvolutionCMS\Legacy\LogHandler(); |
|
92 | - $log->initAndWriteLog("Login Fail (Temporary Block)", $internalKey, $username, "119", $internalKey, "IP: " . $ip); |
|
93 | - jsAlert($_lang['login_processor_many_failed_logins']); |
|
94 | - return; |
|
80 | + @session_destroy(); |
|
81 | + session_unset(); |
|
82 | + if($cip = getenv("HTTP_CLIENT_IP")) { |
|
83 | + $ip = $cip; |
|
84 | + } elseif($cip = getenv("HTTP_X_FORWARDED_FOR")) { |
|
85 | + $ip = $cip; |
|
86 | + } elseif($cip = getenv("REMOTE_ADDR")) { |
|
87 | + $ip = $cip; |
|
88 | + } else { |
|
89 | + $ip = "UNKNOWN"; |
|
90 | + } |
|
91 | + $log = new EvolutionCMS\Legacy\LogHandler(); |
|
92 | + $log->initAndWriteLog("Login Fail (Temporary Block)", $internalKey, $username, "119", $internalKey, "IP: " . $ip); |
|
93 | + jsAlert($_lang['login_processor_many_failed_logins']); |
|
94 | + return; |
|
95 | 95 | } |
96 | 96 | |
97 | 97 | // blocked due to number of login errors, but get to try again |
98 | 98 | if($failedlogins >= $failed_allowed && $blockeduntildate < time()) { |
99 | - $fields = array(); |
|
100 | - $fields['failedlogincount'] = '0'; |
|
101 | - $fields['blockeduntil'] = time() - 1; |
|
102 | - $modx->db->update($fields, '[+prefix+]user_attributes', "internalKey='{$internalKey}'"); |
|
99 | + $fields = array(); |
|
100 | + $fields['failedlogincount'] = '0'; |
|
101 | + $fields['blockeduntil'] = time() - 1; |
|
102 | + $modx->db->update($fields, '[+prefix+]user_attributes', "internalKey='{$internalKey}'"); |
|
103 | 103 | } |
104 | 104 | |
105 | 105 | // this user has been blocked by an admin, so no way he's loggin in! |
106 | 106 | if($blocked == '1') { |
107 | - @session_destroy(); |
|
108 | - session_unset(); |
|
109 | - jsAlert($_lang['login_processor_blocked1']); |
|
110 | - return; |
|
107 | + @session_destroy(); |
|
108 | + session_unset(); |
|
109 | + jsAlert($_lang['login_processor_blocked1']); |
|
110 | + return; |
|
111 | 111 | } |
112 | 112 | |
113 | 113 | // blockuntil: this user has a block until date |
114 | 114 | if($blockeduntildate > time()) { |
115 | - @session_destroy(); |
|
116 | - session_unset(); |
|
117 | - jsAlert($_lang['login_processor_blocked2']); |
|
118 | - return; |
|
115 | + @session_destroy(); |
|
116 | + session_unset(); |
|
117 | + jsAlert($_lang['login_processor_blocked2']); |
|
118 | + return; |
|
119 | 119 | } |
120 | 120 | |
121 | 121 | // blockafter: this user has a block after date |
122 | 122 | if($blockedafterdate > 0 && $blockedafterdate < time()) { |
123 | - @session_destroy(); |
|
124 | - session_unset(); |
|
125 | - jsAlert($_lang['login_processor_blocked3']); |
|
126 | - return; |
|
123 | + @session_destroy(); |
|
124 | + session_unset(); |
|
125 | + jsAlert($_lang['login_processor_blocked3']); |
|
126 | + return; |
|
127 | 127 | } |
128 | 128 | |
129 | 129 | // allowed ip |
130 | 130 | if($allowed_ip) { |
131 | - if(($hostname = gethostbyaddr($_SERVER['REMOTE_ADDR'])) && ($hostname != $_SERVER['REMOTE_ADDR'])) { |
|
132 | - if(gethostbyname($hostname) != $_SERVER['REMOTE_ADDR']) { |
|
133 | - jsAlert($_lang['login_processor_remotehost_ip']); |
|
134 | - return; |
|
135 | - } |
|
136 | - } |
|
137 | - if(!in_array($_SERVER['REMOTE_ADDR'], array_filter(array_map('trim', explode(',', $allowed_ip))))) { |
|
138 | - jsAlert($_lang['login_processor_remote_ip']); |
|
139 | - return; |
|
140 | - } |
|
131 | + if(($hostname = gethostbyaddr($_SERVER['REMOTE_ADDR'])) && ($hostname != $_SERVER['REMOTE_ADDR'])) { |
|
132 | + if(gethostbyname($hostname) != $_SERVER['REMOTE_ADDR']) { |
|
133 | + jsAlert($_lang['login_processor_remotehost_ip']); |
|
134 | + return; |
|
135 | + } |
|
136 | + } |
|
137 | + if(!in_array($_SERVER['REMOTE_ADDR'], array_filter(array_map('trim', explode(',', $allowed_ip))))) { |
|
138 | + jsAlert($_lang['login_processor_remote_ip']); |
|
139 | + return; |
|
140 | + } |
|
141 | 141 | } |
142 | 142 | |
143 | 143 | // allowed days |
144 | 144 | if($allowed_days) { |
145 | - $date = getdate(); |
|
146 | - $day = $date['wday'] + 1; |
|
147 | - if(!in_array($day,explode(',',$allowed_days))) { |
|
148 | - jsAlert($_lang['login_processor_date']); |
|
149 | - return; |
|
150 | - } |
|
145 | + $date = getdate(); |
|
146 | + $day = $date['wday'] + 1; |
|
147 | + if(!in_array($day,explode(',',$allowed_days))) { |
|
148 | + jsAlert($_lang['login_processor_date']); |
|
149 | + return; |
|
150 | + } |
|
151 | 151 | } |
152 | 152 | |
153 | 153 | // invoke OnManagerAuthentication event |
154 | 154 | $rt = $modx->invokeEvent('OnManagerAuthentication', array( |
155 | - 'userid' => $internalKey, |
|
156 | - 'username' => $username, |
|
157 | - 'userpassword' => $givenPassword, |
|
158 | - 'savedpassword' => $dbasePassword, |
|
159 | - 'rememberme' => $rememberme |
|
160 | - )); |
|
155 | + 'userid' => $internalKey, |
|
156 | + 'username' => $username, |
|
157 | + 'userpassword' => $givenPassword, |
|
158 | + 'savedpassword' => $dbasePassword, |
|
159 | + 'rememberme' => $rememberme |
|
160 | + )); |
|
161 | 161 | |
162 | 162 | // check if plugin authenticated the user |
163 | 163 | $matchPassword = false; |
164 | 164 | if(!isset($rt) || !$rt || (is_array($rt) && !in_array(true, $rt))) { |
165 | - // check user password - local authentication |
|
166 | - $hashType = $modx->manager->getHashType($dbasePassword); |
|
167 | - if($hashType == 'phpass') { |
|
168 | - $matchPassword = login($username, $_REQUEST['password'], $dbasePassword); |
|
169 | - } elseif($hashType == 'md5') { |
|
170 | - $matchPassword = loginMD5($internalKey, $_REQUEST['password'], $dbasePassword, $username); |
|
171 | - } elseif($hashType == 'v1') { |
|
172 | - $matchPassword = loginV1($internalKey, $_REQUEST['password'], $dbasePassword, $username); |
|
173 | - } else { |
|
174 | - $matchPassword = false; |
|
175 | - } |
|
165 | + // check user password - local authentication |
|
166 | + $hashType = $modx->manager->getHashType($dbasePassword); |
|
167 | + if($hashType == 'phpass') { |
|
168 | + $matchPassword = login($username, $_REQUEST['password'], $dbasePassword); |
|
169 | + } elseif($hashType == 'md5') { |
|
170 | + $matchPassword = loginMD5($internalKey, $_REQUEST['password'], $dbasePassword, $username); |
|
171 | + } elseif($hashType == 'v1') { |
|
172 | + $matchPassword = loginV1($internalKey, $_REQUEST['password'], $dbasePassword, $username); |
|
173 | + } else { |
|
174 | + $matchPassword = false; |
|
175 | + } |
|
176 | 176 | } else if($rt === true || (is_array($rt) && in_array(true, $rt))) { |
177 | - $matchPassword = true; |
|
177 | + $matchPassword = true; |
|
178 | 178 | } |
179 | 179 | |
180 | 180 | if(!$matchPassword) { |
181 | - jsAlert($_lang['login_processor_wrong_password']); |
|
182 | - incrementFailedLoginCount($internalKey, $failedlogins, $failed_allowed, $blocked_minutes); |
|
183 | - return; |
|
181 | + jsAlert($_lang['login_processor_wrong_password']); |
|
182 | + incrementFailedLoginCount($internalKey, $failedlogins, $failed_allowed, $blocked_minutes); |
|
183 | + return; |
|
184 | 184 | } |
185 | 185 | |
186 | 186 | if($modx->config['use_captcha'] == 1) { |
187 | - if(!isset ($_SESSION['veriword'])) { |
|
188 | - jsAlert($_lang['login_processor_captcha_config']); |
|
189 | - return; |
|
190 | - } elseif($_SESSION['veriword'] != $captcha_code) { |
|
191 | - jsAlert($_lang['login_processor_bad_code']); |
|
192 | - incrementFailedLoginCount($internalKey, $failedlogins, $failed_allowed, $blocked_minutes); |
|
193 | - return; |
|
194 | - } |
|
187 | + if(!isset ($_SESSION['veriword'])) { |
|
188 | + jsAlert($_lang['login_processor_captcha_config']); |
|
189 | + return; |
|
190 | + } elseif($_SESSION['veriword'] != $captcha_code) { |
|
191 | + jsAlert($_lang['login_processor_bad_code']); |
|
192 | + incrementFailedLoginCount($internalKey, $failedlogins, $failed_allowed, $blocked_minutes); |
|
193 | + return; |
|
194 | + } |
|
195 | 195 | } |
196 | 196 | |
197 | 197 | $modx->cleanupExpiredLocks(); |
@@ -226,36 +226,36 @@ discard block |
||
226 | 226 | $_SESSION['mgrToken'] = md5($currentsessionid); |
227 | 227 | |
228 | 228 | if($rememberme == '1') { |
229 | - $_SESSION['modx.mgr.session.cookie.lifetime'] = (int)$modx->config['session.cookie.lifetime']; |
|
230 | - |
|
231 | - // Set a cookie separate from the session cookie with the username in it. |
|
232 | - // Are we using secure connection? If so, make sure the cookie is secure |
|
233 | - global $https_port; |
|
234 | - |
|
235 | - $secure = ((isset ($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on') || $_SERVER['SERVER_PORT'] == $https_port); |
|
236 | - if(version_compare(PHP_VERSION, '5.2', '<')) { |
|
237 | - setcookie('modx_remember_manager', $_SESSION['mgrShortname'], time() + 60 * 60 * 24 * 365, MODX_BASE_URL, '; HttpOnly', $secure); |
|
238 | - } else { |
|
239 | - setcookie('modx_remember_manager', $_SESSION['mgrShortname'], time() + 60 * 60 * 24 * 365, MODX_BASE_URL, NULL, $secure, true); |
|
240 | - } |
|
229 | + $_SESSION['modx.mgr.session.cookie.lifetime'] = (int)$modx->config['session.cookie.lifetime']; |
|
230 | + |
|
231 | + // Set a cookie separate from the session cookie with the username in it. |
|
232 | + // Are we using secure connection? If so, make sure the cookie is secure |
|
233 | + global $https_port; |
|
234 | + |
|
235 | + $secure = ((isset ($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on') || $_SERVER['SERVER_PORT'] == $https_port); |
|
236 | + if(version_compare(PHP_VERSION, '5.2', '<')) { |
|
237 | + setcookie('modx_remember_manager', $_SESSION['mgrShortname'], time() + 60 * 60 * 24 * 365, MODX_BASE_URL, '; HttpOnly', $secure); |
|
238 | + } else { |
|
239 | + setcookie('modx_remember_manager', $_SESSION['mgrShortname'], time() + 60 * 60 * 24 * 365, MODX_BASE_URL, NULL, $secure, true); |
|
240 | + } |
|
241 | 241 | } else { |
242 | - $_SESSION['modx.mgr.session.cookie.lifetime'] = 0; |
|
242 | + $_SESSION['modx.mgr.session.cookie.lifetime'] = 0; |
|
243 | 243 | |
244 | - // Remove the Remember Me cookie |
|
245 | - setcookie('modx_remember_manager', '', time() - 3600, MODX_BASE_URL); |
|
244 | + // Remove the Remember Me cookie |
|
245 | + setcookie('modx_remember_manager', '', time() - 3600, MODX_BASE_URL); |
|
246 | 246 | } |
247 | 247 | |
248 | 248 | // Check if user already has an active session, if not check if user pressed logout end of last session |
249 | 249 | $rs = $modx->db->select('lasthit', $modx->getFullTableName('active_user_sessions'), "internalKey='{$internalKey}'"); |
250 | 250 | $activeSession = $modx->db->getValue($rs); |
251 | 251 | if(!$activeSession) { |
252 | - $rs = $modx->db->select('lasthit', $modx->getFullTableName('active_users'), "internalKey='{$internalKey}' AND action != 8"); |
|
253 | - if($lastHit = $modx->db->getValue($rs)) { |
|
254 | - $_SESSION['show_logout_reminder'] = array( |
|
255 | - 'type' => 'logout_reminder', |
|
256 | - 'lastHit' => $lastHit |
|
257 | - ); |
|
258 | - } |
|
252 | + $rs = $modx->db->select('lasthit', $modx->getFullTableName('active_users'), "internalKey='{$internalKey}' AND action != 8"); |
|
253 | + if($lastHit = $modx->db->getValue($rs)) { |
|
254 | + $_SESSION['show_logout_reminder'] = array( |
|
255 | + 'type' => 'logout_reminder', |
|
256 | + 'lastHit' => $lastHit |
|
257 | + ); |
|
258 | + } |
|
259 | 259 | } |
260 | 260 | |
261 | 261 | $log = new EvolutionCMS\Legacy\LogHandler(); |
@@ -263,29 +263,29 @@ discard block |
||
263 | 263 | |
264 | 264 | // invoke OnManagerLogin event |
265 | 265 | $modx->invokeEvent('OnManagerLogin', array( |
266 | - 'userid' => $internalKey, |
|
267 | - 'username' => $username, |
|
268 | - 'userpassword' => $givenPassword, |
|
269 | - 'rememberme' => $rememberme |
|
270 | - )); |
|
266 | + 'userid' => $internalKey, |
|
267 | + 'username' => $username, |
|
268 | + 'userpassword' => $givenPassword, |
|
269 | + 'rememberme' => $rememberme |
|
270 | + )); |
|
271 | 271 | |
272 | 272 | // check if we should redirect user to a web page |
273 | 273 | $rs = $modx->db->select('setting_value', '[+prefix+]user_settings', "user='{$internalKey}' AND setting_name='manager_login_startup'"); |
274 | 274 | $id = (int)$modx->db->getValue($rs); |
275 | 275 | if($id > 0) { |
276 | - $header = 'Location: ' . $modx->makeUrl($id, '', '', 'full'); |
|
277 | - if($_POST['ajax'] == 1) { |
|
278 | - echo $header; |
|
279 | - } else { |
|
280 | - header($header); |
|
281 | - } |
|
276 | + $header = 'Location: ' . $modx->makeUrl($id, '', '', 'full'); |
|
277 | + if($_POST['ajax'] == 1) { |
|
278 | + echo $header; |
|
279 | + } else { |
|
280 | + header($header); |
|
281 | + } |
|
282 | 282 | } else { |
283 | - $header = 'Location: ' . MODX_MANAGER_URL; |
|
284 | - if($_POST['ajax'] == 1) { |
|
285 | - echo $header; |
|
286 | - } else { |
|
287 | - header($header); |
|
288 | - } |
|
283 | + $header = 'Location: ' . MODX_MANAGER_URL; |
|
284 | + if($_POST['ajax'] == 1) { |
|
285 | + echo $header; |
|
286 | + } else { |
|
287 | + header($header); |
|
288 | + } |
|
289 | 289 | } |
290 | 290 | |
291 | 291 | if(!function_exists('jsAlert')) { |