@@ -1,12 +1,12 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | -if( ! defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 2 | +if (!defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 3 | 3 | die('<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly.'); |
| 4 | 4 | } |
| 5 | 5 | if (!$modx->hasPermission('save_plugin')) { |
| 6 | 6 | $modx->webAlertAndQuit($_lang['error_no_privileges']); |
| 7 | 7 | } |
| 8 | 8 | |
| 9 | -$id = (int)$_POST['id']; |
|
| 9 | +$id = (int) $_POST['id']; |
|
| 10 | 10 | $name = $modx->getDatabase()->escape(trim($_POST['name'])); |
| 11 | 11 | $description = $modx->getDatabase()->escape($_POST['description']); |
| 12 | 12 | $locked = $_POST['locked'] == 'on' ? '1' : '0'; |
@@ -20,11 +20,11 @@ discard block |
||
| 20 | 20 | |
| 21 | 21 | //Kyle Jaebker - added category support |
| 22 | 22 | if (empty($_POST['newcategory']) && $_POST['categoryid'] > 0) { |
| 23 | - $categoryid = (int)$_POST['categoryid']; |
|
| 23 | + $categoryid = (int) $_POST['categoryid']; |
|
| 24 | 24 | } elseif (empty($_POST['newcategory']) && $_POST['categoryid'] <= 0) { |
| 25 | 25 | $categoryid = 0; |
| 26 | 26 | } else { |
| 27 | - include_once(MODX_MANAGER_PATH . 'includes/categories.inc.php'); |
|
| 27 | + include_once(MODX_MANAGER_PATH.'includes/categories.inc.php'); |
|
| 28 | 28 | $categoryid = getCategory($_POST['newcategory']); |
| 29 | 29 | } |
| 30 | 30 | |
@@ -40,12 +40,12 @@ discard block |
||
| 40 | 40 | $moduleguid = isset($parsed['guid']) ? $parsed['guid'] : $moduleguid; |
| 41 | 41 | |
| 42 | 42 | $description = isset($parsed['description']) ? $parsed['description'] : $description; |
| 43 | - $version = isset($parsed['version']) ? '<b>' . $parsed['version'] . '</b> ' : ''; |
|
| 43 | + $version = isset($parsed['version']) ? '<b>'.$parsed['version'].'</b> ' : ''; |
|
| 44 | 44 | if ($version) { |
| 45 | - $description = $version . trim(preg_replace('/(<b>.+?)+(<\/b>)/i', '', $description)); |
|
| 45 | + $description = $version.trim(preg_replace('/(<b>.+?)+(<\/b>)/i', '', $description)); |
|
| 46 | 46 | } |
| 47 | 47 | if (isset($parsed['modx_category'])) { |
| 48 | - include_once(MODX_MANAGER_PATH . 'includes/categories.inc.php'); |
|
| 48 | + include_once(MODX_MANAGER_PATH.'includes/categories.inc.php'); |
|
| 49 | 49 | $categoryid = getCategory($parsed['modx_category']); |
| 50 | 50 | } |
| 51 | 51 | } |
@@ -103,7 +103,7 @@ discard block |
||
| 103 | 103 | // finished emptying cache - redirect |
| 104 | 104 | if ($_POST['stay'] != '') { |
| 105 | 105 | $a = ($_POST['stay'] == '2') ? "102&id=$newid" : '101'; |
| 106 | - $header = 'Location: index.php?a=' . $a . '&r=2&stay=' . $_POST['stay']; |
|
| 106 | + $header = 'Location: index.php?a='.$a.'&r=2&stay='.$_POST['stay']; |
|
| 107 | 107 | header($header); |
| 108 | 108 | } else { |
| 109 | 109 | $header = 'Location: index.php?a=76&r=2'; |
@@ -158,7 +158,7 @@ discard block |
||
| 158 | 158 | // finished emptying cache - redirect |
| 159 | 159 | if ($_POST['stay'] != '') { |
| 160 | 160 | $a = ($_POST['stay'] == '2') ? "102&id=$id" : '101'; |
| 161 | - $header = 'Location: index.php?a=' . $a . '&r=2&stay=' . $_POST['stay']; |
|
| 161 | + $header = 'Location: index.php?a='.$a.'&r=2&stay='.$_POST['stay']; |
|
| 162 | 162 | header($header); |
| 163 | 163 | } else { |
| 164 | 164 | $modx->unlockElement(5, $id); |
@@ -3,22 +3,22 @@ |
||
| 3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
| 4 | 4 | } |
| 5 | 5 | if(!$modx->hasPermission('delete_role')) { |
| 6 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
| 6 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
| 7 | 7 | } |
| 8 | 8 | |
| 9 | 9 | $id = isset($_GET['id'])? (int)$_GET['id'] : 0; |
| 10 | 10 | if($id==0) { |
| 11 | - $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
| 11 | + $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
| 12 | 12 | } |
| 13 | 13 | |
| 14 | 14 | if($id==1){ |
| 15 | - $modx->webAlertAndQuit("The role you are trying to delete is the admin role. This role cannot be deleted!"); |
|
| 15 | + $modx->webAlertAndQuit("The role you are trying to delete is the admin role. This role cannot be deleted!"); |
|
| 16 | 16 | } |
| 17 | 17 | |
| 18 | 18 | $rs = $modx->getDatabase()->select('COUNT(*)', $modx->getFullTableName('user_attributes'), "role='{$id}'"); |
| 19 | 19 | $count=$modx->getDatabase()->getValue($rs); |
| 20 | 20 | if($count>0){ |
| 21 | - $modx->webAlertAndQuit("There are users with this role. It can't be deleted."); |
|
| 21 | + $modx->webAlertAndQuit("There are users with this role. It can't be deleted."); |
|
| 22 | 22 | } |
| 23 | 23 | |
| 24 | 24 | // Set the item name for logger |
@@ -1,23 +1,23 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | -if( ! defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 2 | +if (!defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
| 4 | 4 | } |
| 5 | -if(!$modx->hasPermission('delete_role')) { |
|
| 5 | +if (!$modx->hasPermission('delete_role')) { |
|
| 6 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
| 7 | 7 | } |
| 8 | 8 | |
| 9 | -$id = isset($_GET['id'])? (int)$_GET['id'] : 0; |
|
| 10 | -if($id==0) { |
|
| 9 | +$id = isset($_GET['id']) ? (int) $_GET['id'] : 0; |
|
| 10 | +if ($id == 0) { |
|
| 11 | 11 | $modx->webAlertAndQuit($_lang["error_no_id"]); |
| 12 | 12 | } |
| 13 | 13 | |
| 14 | -if($id==1){ |
|
| 14 | +if ($id == 1) { |
|
| 15 | 15 | $modx->webAlertAndQuit("The role you are trying to delete is the admin role. This role cannot be deleted!"); |
| 16 | 16 | } |
| 17 | 17 | |
| 18 | 18 | $rs = $modx->getDatabase()->select('COUNT(*)', $modx->getFullTableName('user_attributes'), "role='{$id}'"); |
| 19 | -$count=$modx->getDatabase()->getValue($rs); |
|
| 20 | -if($count>0){ |
|
| 19 | +$count = $modx->getDatabase()->getValue($rs); |
|
| 20 | +if ($count > 0) { |
|
| 21 | 21 | $modx->webAlertAndQuit("There are users with this role. It can't be deleted."); |
| 22 | 22 | } |
| 23 | 23 | |
@@ -28,5 +28,5 @@ discard block |
||
| 28 | 28 | // delete the attributes |
| 29 | 29 | $modx->getDatabase()->delete($modx->getFullTableName('user_roles'), "id='{$id}'"); |
| 30 | 30 | |
| 31 | -$header="Location: index.php?a=86"; |
|
| 31 | +$header = "Location: index.php?a=86"; |
|
| 32 | 32 | header($header); |
@@ -11,13 +11,13 @@ |
||
| 11 | 11 | $modx->webAlertAndQuit($_lang["error_no_id"]); |
| 12 | 12 | } |
| 13 | 13 | |
| 14 | -if($id==1){ |
|
| 14 | +if($id==1) { |
|
| 15 | 15 | $modx->webAlertAndQuit("The role you are trying to delete is the admin role. This role cannot be deleted!"); |
| 16 | 16 | } |
| 17 | 17 | |
| 18 | 18 | $rs = $modx->getDatabase()->select('COUNT(*)', $modx->getFullTableName('user_attributes'), "role='{$id}'"); |
| 19 | 19 | $count=$modx->getDatabase()->getValue($rs); |
| 20 | -if($count>0){ |
|
| 20 | +if($count>0) { |
|
| 21 | 21 | $modx->webAlertAndQuit("There are users with this role. It can't be deleted."); |
| 22 | 22 | } |
| 23 | 23 | |
@@ -3,12 +3,12 @@ discard block |
||
| 3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
| 4 | 4 | } |
| 5 | 5 | if(!$modx->hasPermission('save_document')||!$modx->hasPermission('publish_document')) { |
| 6 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
| 6 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
| 7 | 7 | } |
| 8 | 8 | |
| 9 | 9 | $id = isset($_REQUEST['id'])? (int)$_REQUEST['id'] : 0; |
| 10 | 10 | if($id==0) { |
| 11 | - $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
| 11 | + $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
| 12 | 12 | } |
| 13 | 13 | |
| 14 | 14 | /************webber ********/ |
@@ -32,20 +32,20 @@ discard block |
||
| 32 | 32 | $udperms->role = $_SESSION['mgrRole']; |
| 33 | 33 | |
| 34 | 34 | if(!$udperms->checkPermissions()) { |
| 35 | - $modx->webAlertAndQuit($_lang["access_permission_denied"]); |
|
| 35 | + $modx->webAlertAndQuit($_lang["access_permission_denied"]); |
|
| 36 | 36 | } |
| 37 | 37 | |
| 38 | 38 | // update the document |
| 39 | 39 | $modx->getDatabase()->update( |
| 40 | - array( |
|
| 41 | - 'published' => 1, |
|
| 42 | - 'pub_date' => 0, |
|
| 43 | - 'unpub_date' => 0, |
|
| 44 | - 'editedby' => $modx->getLoginUserID(), |
|
| 45 | - 'editedon' => time(), |
|
| 46 | - 'publishedby' => $modx->getLoginUserID(), |
|
| 47 | - 'publishedon' => time(), |
|
| 48 | - ), $modx->getFullTableName('site_content'), "id='{$id}'"); |
|
| 40 | + array( |
|
| 41 | + 'published' => 1, |
|
| 42 | + 'pub_date' => 0, |
|
| 43 | + 'unpub_date' => 0, |
|
| 44 | + 'editedby' => $modx->getLoginUserID(), |
|
| 45 | + 'editedon' => time(), |
|
| 46 | + 'publishedby' => $modx->getLoginUserID(), |
|
| 47 | + 'publishedon' => time(), |
|
| 48 | + ), $modx->getFullTableName('site_content'), "id='{$id}'"); |
|
| 49 | 49 | |
| 50 | 50 | // invoke OnDocPublished event |
| 51 | 51 | $modx->invokeEvent("OnDocPublished",array("docid"=>$id)); |
@@ -1,25 +1,25 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | -if( ! defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 2 | +if (!defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
| 4 | 4 | } |
| 5 | -if(!$modx->hasPermission('save_document')||!$modx->hasPermission('publish_document')) { |
|
| 5 | +if (!$modx->hasPermission('save_document') || !$modx->hasPermission('publish_document')) { |
|
| 6 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
| 7 | 7 | } |
| 8 | 8 | |
| 9 | -$id = isset($_REQUEST['id'])? (int)$_REQUEST['id'] : 0; |
|
| 10 | -if($id==0) { |
|
| 9 | +$id = isset($_REQUEST['id']) ? (int) $_REQUEST['id'] : 0; |
|
| 10 | +if ($id == 0) { |
|
| 11 | 11 | $modx->webAlertAndQuit($_lang["error_no_id"]); |
| 12 | 12 | } |
| 13 | 13 | |
| 14 | 14 | /************webber ********/ |
| 15 | -$content=$modx->getDatabase()->getRow($modx->getDatabase()->select('parent, pagetitle', $modx->getFullTableName('site_content'), "id='{$id}'")); |
|
| 16 | -$pid=($content['parent']==0?$id:$content['parent']); |
|
| 15 | +$content = $modx->getDatabase()->getRow($modx->getDatabase()->select('parent, pagetitle', $modx->getFullTableName('site_content'), "id='{$id}'")); |
|
| 16 | +$pid = ($content['parent'] == 0 ? $id : $content['parent']); |
|
| 17 | 17 | |
| 18 | 18 | /************** webber *************/ |
| 19 | -$sd=isset($_REQUEST['dir'])?'&dir='.$_REQUEST['dir']:'&dir=DESC'; |
|
| 20 | -$sb=isset($_REQUEST['sort'])?'&sort='.$_REQUEST['sort']:'&sort=createdon'; |
|
| 21 | -$pg=isset($_REQUEST['page'])?'&page='.(int)$_REQUEST['page']:''; |
|
| 22 | -$add_path=$sd.$sb.$pg; |
|
| 19 | +$sd = isset($_REQUEST['dir']) ? '&dir='.$_REQUEST['dir'] : '&dir=DESC'; |
|
| 20 | +$sb = isset($_REQUEST['sort']) ? '&sort='.$_REQUEST['sort'] : '&sort=createdon'; |
|
| 21 | +$pg = isset($_REQUEST['page']) ? '&page='.(int) $_REQUEST['page'] : ''; |
|
| 22 | +$add_path = $sd.$sb.$pg; |
|
| 23 | 23 | |
| 24 | 24 | /***********************************/ |
| 25 | 25 | |
@@ -31,7 +31,7 @@ discard block |
||
| 31 | 31 | $udperms->document = $id; |
| 32 | 32 | $udperms->role = $_SESSION['mgrRole']; |
| 33 | 33 | |
| 34 | -if(!$udperms->checkPermissions()) { |
|
| 34 | +if (!$udperms->checkPermissions()) { |
|
| 35 | 35 | $modx->webAlertAndQuit($_lang["access_permission_denied"]); |
| 36 | 36 | } |
| 37 | 37 | |
@@ -48,7 +48,7 @@ discard block |
||
| 48 | 48 | ), $modx->getFullTableName('site_content'), "id='{$id}'"); |
| 49 | 49 | |
| 50 | 50 | // invoke OnDocPublished event |
| 51 | -$modx->invokeEvent("OnDocPublished",array("docid"=>$id)); |
|
| 51 | +$modx->invokeEvent("OnDocPublished", array("docid"=>$id)); |
|
| 52 | 52 | |
| 53 | 53 | // Set the item name for logger |
| 54 | 54 | $_SESSION['itemname'] = $content['pagetitle']; |
@@ -56,6 +56,6 @@ discard block |
||
| 56 | 56 | // empty cache |
| 57 | 57 | $modx->clearCache('full'); |
| 58 | 58 | |
| 59 | -$header="Location: index.php?a=3&id=$pid&r=1".$add_path; |
|
| 59 | +$header = "Location: index.php?a=3&id=$pid&r=1".$add_path; |
|
| 60 | 60 | |
| 61 | 61 | header($header); |
@@ -1,9 +1,9 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | -if( ! defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 2 | +if (!defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 3 | 3 | exit(); |
| 4 | 4 | } |
| 5 | 5 | |
| 6 | -if(!$modx->hasPermission('delete_plugin')) { |
|
| 6 | +if (!$modx->hasPermission('delete_plugin')) { |
|
| 7 | 7 | $e->setError(3); |
| 8 | 8 | $e->dumpError(); |
| 9 | 9 | } |
@@ -14,18 +14,18 @@ discard block |
||
| 14 | 14 | // Get unique list of latest added plugins by highest sql-id |
| 15 | 15 | $rs = $modx->getDatabase()->query("SELECT t1.id FROM {$tbl_site_plugins} t1 LEFT JOIN {$tbl_site_plugins} t2 ON (t1.name = t2.name AND t1.id < t2.id) WHERE t2.id IS NULL;"); |
| 16 | 16 | $latestIds = array(); |
| 17 | -while($row = $modx->getDatabase()->getRow($rs)) { |
|
| 17 | +while ($row = $modx->getDatabase()->getRow($rs)) { |
|
| 18 | 18 | $latestIds[] = $row['id']; |
| 19 | 19 | } |
| 20 | 20 | |
| 21 | 21 | // Get list of plugins with disabled and enabled versions |
| 22 | 22 | $rs = $modx->getDatabase()->query("SELECT id FROM {$tbl_site_plugins} t1 WHERE disabled = 1 AND name IN (SELECT name FROM {$tbl_site_plugins} t2 WHERE t1.name = t2.name AND t1.id != t2.id)"); |
| 23 | 23 | |
| 24 | -while($row = $modx->getDatabase()->getRow($rs)) { |
|
| 24 | +while ($row = $modx->getDatabase()->getRow($rs)) { |
|
| 25 | 25 | |
| 26 | 26 | $id = $row['id']; |
| 27 | 27 | |
| 28 | - if(in_array($id,$latestIds)) continue; // Keep latest version of disabled plugins |
|
| 28 | + if (in_array($id, $latestIds)) continue; // Keep latest version of disabled plugins |
|
| 29 | 29 | |
| 30 | 30 | // invoke OnBeforePluginFormDelete event |
| 31 | 31 | $modx->invokeEvent('OnBeforePluginFormDelete', array('id'=> $id)); |
@@ -3,7 +3,7 @@ discard block |
||
| 3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
| 4 | 4 | } |
| 5 | 5 | if(!$modx->hasPermission('messages')) { |
| 6 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
| 6 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
| 7 | 7 | } |
| 8 | 8 | |
| 9 | 9 | $sendto = $_REQUEST['sendto']; |
@@ -16,55 +16,55 @@ discard block |
||
| 16 | 16 | $postdate = time(); |
| 17 | 17 | |
| 18 | 18 | if($sendto=='u') { |
| 19 | - if($userid==0) { |
|
| 20 | - $modx->webAlertAndQuit($_lang["error_no_user_selected"]); |
|
| 21 | - } |
|
| 22 | - $modx->getDatabase()->insert( |
|
| 23 | - array( |
|
| 24 | - 'recipient' => $userid, |
|
| 25 | - 'sender' => $modx->getLoginUserID(), |
|
| 26 | - 'subject' => $subject, |
|
| 27 | - 'message' => $message, |
|
| 28 | - 'postdate' => $postdate, |
|
| 29 | - 'type' => 'Message', |
|
| 30 | - 'private' => 1, |
|
| 31 | - ), $modx->getFullTableName('user_messages')); |
|
| 19 | + if($userid==0) { |
|
| 20 | + $modx->webAlertAndQuit($_lang["error_no_user_selected"]); |
|
| 21 | + } |
|
| 22 | + $modx->getDatabase()->insert( |
|
| 23 | + array( |
|
| 24 | + 'recipient' => $userid, |
|
| 25 | + 'sender' => $modx->getLoginUserID(), |
|
| 26 | + 'subject' => $subject, |
|
| 27 | + 'message' => $message, |
|
| 28 | + 'postdate' => $postdate, |
|
| 29 | + 'type' => 'Message', |
|
| 30 | + 'private' => 1, |
|
| 31 | + ), $modx->getFullTableName('user_messages')); |
|
| 32 | 32 | } |
| 33 | 33 | |
| 34 | 34 | if($sendto=='g') { |
| 35 | - if($groupid==0) { |
|
| 36 | - $modx->webAlertAndQuit($_lang["error_no_group_selected"]); |
|
| 37 | - } |
|
| 38 | - $rs = $modx->getDatabase()->select('internalKey', $modx->getFullTableName('user_attributes'), "role='{$groupid}' AND internalKey!='".$modx->getLoginUserID()."'"); |
|
| 39 | - while ($row=$modx->getDatabase()->getRow($rs)) { |
|
| 40 | - $modx->getDatabase()->insert( |
|
| 41 | - array( |
|
| 42 | - 'recipient' => $row['internalKey'], |
|
| 43 | - 'sender' => $modx->getLoginUserID(), |
|
| 44 | - 'subject' => $subject, |
|
| 45 | - 'message' => $message, |
|
| 46 | - 'postdate' => $postdate, |
|
| 47 | - 'type' => 'Message', |
|
| 48 | - 'private' => 0, |
|
| 49 | - ), $modx->getFullTableName('user_messages')); |
|
| 50 | - } |
|
| 35 | + if($groupid==0) { |
|
| 36 | + $modx->webAlertAndQuit($_lang["error_no_group_selected"]); |
|
| 37 | + } |
|
| 38 | + $rs = $modx->getDatabase()->select('internalKey', $modx->getFullTableName('user_attributes'), "role='{$groupid}' AND internalKey!='".$modx->getLoginUserID()."'"); |
|
| 39 | + while ($row=$modx->getDatabase()->getRow($rs)) { |
|
| 40 | + $modx->getDatabase()->insert( |
|
| 41 | + array( |
|
| 42 | + 'recipient' => $row['internalKey'], |
|
| 43 | + 'sender' => $modx->getLoginUserID(), |
|
| 44 | + 'subject' => $subject, |
|
| 45 | + 'message' => $message, |
|
| 46 | + 'postdate' => $postdate, |
|
| 47 | + 'type' => 'Message', |
|
| 48 | + 'private' => 0, |
|
| 49 | + ), $modx->getFullTableName('user_messages')); |
|
| 50 | + } |
|
| 51 | 51 | } |
| 52 | 52 | |
| 53 | 53 | |
| 54 | 54 | if($sendto=='a') { |
| 55 | - $rs = $modx->getDatabase()->select('id', $modx->getFullTableName('manager_users'), "id!='".$modx->getLoginUserID()."'"); |
|
| 56 | - while ($row=$modx->getDatabase()->getRow($rs)) { |
|
| 57 | - $modx->getDatabase()->insert( |
|
| 58 | - array( |
|
| 59 | - 'recipient' => $row['id'], |
|
| 60 | - 'sender' => $modx->getLoginUserID(), |
|
| 61 | - 'subject' => $subject, |
|
| 62 | - 'message' => $message, |
|
| 63 | - 'postdate' => $postdate, |
|
| 64 | - 'type' => 'Message', |
|
| 65 | - 'private' => 0, |
|
| 66 | - ), $modx->getFullTableName('user_messages')); |
|
| 67 | - } |
|
| 55 | + $rs = $modx->getDatabase()->select('id', $modx->getFullTableName('manager_users'), "id!='".$modx->getLoginUserID()."'"); |
|
| 56 | + while ($row=$modx->getDatabase()->getRow($rs)) { |
|
| 57 | + $modx->getDatabase()->insert( |
|
| 58 | + array( |
|
| 59 | + 'recipient' => $row['id'], |
|
| 60 | + 'sender' => $modx->getLoginUserID(), |
|
| 61 | + 'subject' => $subject, |
|
| 62 | + 'message' => $message, |
|
| 63 | + 'postdate' => $postdate, |
|
| 64 | + 'type' => 'Message', |
|
| 65 | + 'private' => 0, |
|
| 66 | + ), $modx->getFullTableName('user_messages')); |
|
| 67 | + } |
|
| 68 | 68 | } |
| 69 | 69 | |
| 70 | 70 | $header = "Location: index.php?a=10"; |
@@ -1,8 +1,8 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | -if( ! defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 2 | +if (!defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
| 4 | 4 | } |
| 5 | -if(!$modx->hasPermission('messages')) { |
|
| 5 | +if (!$modx->hasPermission('messages')) { |
|
| 6 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
| 7 | 7 | } |
| 8 | 8 | |
@@ -10,13 +10,13 @@ discard block |
||
| 10 | 10 | $userid = $_REQUEST['user']; |
| 11 | 11 | $groupid = $_REQUEST['group']; |
| 12 | 12 | $subject = $modx->getDatabase()->escape($_REQUEST['messagesubject']); |
| 13 | -if($subject=="") $subject="(no subject)"; |
|
| 13 | +if ($subject == "") $subject = "(no subject)"; |
|
| 14 | 14 | $message = $modx->getDatabase()->escape($_REQUEST['messagebody']); |
| 15 | -if($message=="") $message="(no message)"; |
|
| 15 | +if ($message == "") $message = "(no message)"; |
|
| 16 | 16 | $postdate = time(); |
| 17 | 17 | |
| 18 | -if($sendto=='u') { |
|
| 19 | - if($userid==0) { |
|
| 18 | +if ($sendto == 'u') { |
|
| 19 | + if ($userid == 0) { |
|
| 20 | 20 | $modx->webAlertAndQuit($_lang["error_no_user_selected"]); |
| 21 | 21 | } |
| 22 | 22 | $modx->getDatabase()->insert( |
@@ -31,12 +31,12 @@ discard block |
||
| 31 | 31 | ), $modx->getFullTableName('user_messages')); |
| 32 | 32 | } |
| 33 | 33 | |
| 34 | -if($sendto=='g') { |
|
| 35 | - if($groupid==0) { |
|
| 34 | +if ($sendto == 'g') { |
|
| 35 | + if ($groupid == 0) { |
|
| 36 | 36 | $modx->webAlertAndQuit($_lang["error_no_group_selected"]); |
| 37 | 37 | } |
| 38 | 38 | $rs = $modx->getDatabase()->select('internalKey', $modx->getFullTableName('user_attributes'), "role='{$groupid}' AND internalKey!='".$modx->getLoginUserID()."'"); |
| 39 | - while ($row=$modx->getDatabase()->getRow($rs)) { |
|
| 39 | + while ($row = $modx->getDatabase()->getRow($rs)) { |
|
| 40 | 40 | $modx->getDatabase()->insert( |
| 41 | 41 | array( |
| 42 | 42 | 'recipient' => $row['internalKey'], |
@@ -51,9 +51,9 @@ discard block |
||
| 51 | 51 | } |
| 52 | 52 | |
| 53 | 53 | |
| 54 | -if($sendto=='a') { |
|
| 54 | +if ($sendto == 'a') { |
|
| 55 | 55 | $rs = $modx->getDatabase()->select('id', $modx->getFullTableName('manager_users'), "id!='".$modx->getLoginUserID()."'"); |
| 56 | - while ($row=$modx->getDatabase()->getRow($rs)) { |
|
| 56 | + while ($row = $modx->getDatabase()->getRow($rs)) { |
|
| 57 | 57 | $modx->getDatabase()->insert( |
| 58 | 58 | array( |
| 59 | 59 | 'recipient' => $row['id'], |
@@ -10,9 +10,13 @@ |
||
| 10 | 10 | $userid = $_REQUEST['user']; |
| 11 | 11 | $groupid = $_REQUEST['group']; |
| 12 | 12 | $subject = $modx->getDatabase()->escape($_REQUEST['messagesubject']); |
| 13 | -if($subject=="") $subject="(no subject)"; |
|
| 13 | +if($subject=="") { |
|
| 14 | + $subject="(no subject)"; |
|
| 15 | +} |
|
| 14 | 16 | $message = $modx->getDatabase()->escape($_REQUEST['messagebody']); |
| 15 | -if($message=="") $message="(no message)"; |
|
| 17 | +if($message=="") { |
|
| 18 | + $message="(no message)"; |
|
| 19 | +} |
|
| 16 | 20 | $postdate = time(); |
| 17 | 21 | |
| 18 | 22 | if($sendto=='u') { |
@@ -33,113 +33,113 @@ |
||
| 33 | 33 | } |
| 34 | 34 | |
| 35 | 35 | switch ($_POST['mode']) { |
| 36 | - case '19': |
|
| 37 | - |
|
| 38 | - // invoke OnBeforeTempFormSave event |
|
| 39 | - $modx->invokeEvent("OnBeforeTempFormSave", array( |
|
| 40 | - "mode" => "new", |
|
| 41 | - "id" => $id |
|
| 42 | - )); |
|
| 43 | - |
|
| 44 | - // disallow duplicate names for new templates |
|
| 45 | - $rs = $modx->getDatabase()->select('COUNT(id)', $modx->getFullTableName('site_templates'), "templatename='{$templatename}'"); |
|
| 46 | - $count = $modx->getDatabase()->getValue($rs); |
|
| 47 | - if ($count > 0) { |
|
| 48 | - $modx->getManagerApi()->saveFormValues(19); |
|
| 49 | - $modx->webAlertAndQuit(sprintf($_lang['duplicate_name_found_general'], $_lang['template'], $templatename), "index.php?a=19"); |
|
| 50 | - } |
|
| 51 | - |
|
| 52 | - //do stuff to save the new doc |
|
| 53 | - $newid = $modx->getDatabase()->insert(array( |
|
| 54 | - 'templatename' => $templatename, |
|
| 55 | - 'description' => $description, |
|
| 56 | - 'content' => $template, |
|
| 57 | - 'locked' => $locked, |
|
| 58 | - 'selectable' => $selectable, |
|
| 59 | - 'category' => $categoryid, |
|
| 60 | - 'createdon' => $currentdate, |
|
| 61 | - 'editedon' => $currentdate |
|
| 62 | - ), $modx->getFullTableName('site_templates')); |
|
| 63 | - |
|
| 64 | - // invoke OnTempFormSave event |
|
| 65 | - $modx->invokeEvent("OnTempFormSave", array( |
|
| 66 | - "mode" => "new", |
|
| 67 | - "id" => $newid |
|
| 68 | - )); |
|
| 69 | - // Set new assigned Tvs |
|
| 70 | - saveTemplateAccess($newid); |
|
| 71 | - |
|
| 72 | - // Set the item name for logger |
|
| 73 | - $_SESSION['itemname'] = $templatename; |
|
| 74 | - |
|
| 75 | - // empty cache |
|
| 76 | - $modx->clearCache('full'); |
|
| 77 | - |
|
| 78 | - // finished emptying cache - redirect |
|
| 79 | - if ($_POST['stay'] != '') { |
|
| 80 | - $a = ($_POST['stay'] == '2') ? "16&id=$newid" : "19"; |
|
| 81 | - $header = "Location: index.php?a=" . $a . "&r=2&stay=" . $_POST['stay']; |
|
| 82 | - header($header); |
|
| 83 | - } else { |
|
| 84 | - $header = "Location: index.php?a=76&r=2"; |
|
| 85 | - header($header); |
|
| 86 | - } |
|
| 87 | - |
|
| 88 | - break; |
|
| 89 | - case '16': |
|
| 90 | - |
|
| 91 | - // invoke OnBeforeTempFormSave event |
|
| 92 | - $modx->invokeEvent("OnBeforeTempFormSave", array( |
|
| 93 | - "mode" => "upd", |
|
| 94 | - "id" => $id |
|
| 95 | - )); |
|
| 96 | - |
|
| 97 | - // disallow duplicate names for templates |
|
| 98 | - $rs = $modx->getDatabase()->select('COUNT(*)', $modx->getFullTableName('site_templates'), "templatename='{$templatename}' AND id!='{$id}'"); |
|
| 99 | - $count = $modx->getDatabase()->getValue($rs); |
|
| 100 | - if ($count > 0) { |
|
| 101 | - $modx->getManagerApi()->saveFormValues(16); |
|
| 102 | - $modx->webAlertAndQuit(sprintf($_lang['duplicate_name_found_general'], $_lang['template'], $templatename), "index.php?a=16&id={$id}"); |
|
| 103 | - } |
|
| 104 | - |
|
| 105 | - //do stuff to save the edited doc |
|
| 106 | - $modx->getDatabase()->update(array( |
|
| 107 | - 'templatename' => $templatename, |
|
| 108 | - 'description' => $description, |
|
| 109 | - 'content' => $template, |
|
| 110 | - 'locked' => $locked, |
|
| 111 | - 'selectable' => $selectable, |
|
| 112 | - 'category' => $categoryid, |
|
| 113 | - 'editedon' => $currentdate |
|
| 114 | - ), $modx->getFullTableName('site_templates'), "id='{$id}'"); |
|
| 115 | - // Set new assigned Tvs |
|
| 116 | - saveTemplateAccess($id); |
|
| 117 | - |
|
| 118 | - // invoke OnTempFormSave event |
|
| 119 | - $modx->invokeEvent("OnTempFormSave", array( |
|
| 120 | - "mode" => "upd", |
|
| 121 | - "id" => $id |
|
| 122 | - )); |
|
| 123 | - |
|
| 124 | - // Set the item name for logger |
|
| 125 | - $_SESSION['itemname'] = $templatename; |
|
| 126 | - |
|
| 127 | - // first empty the cache |
|
| 128 | - $modx->clearCache('full'); |
|
| 129 | - |
|
| 130 | - // finished emptying cache - redirect |
|
| 131 | - if ($_POST['stay'] != '') { |
|
| 132 | - $a = ($_POST['stay'] == '2') ? "16&id=$id" : "19"; |
|
| 133 | - $header = "Location: index.php?a=" . $a . "&r=2&stay=" . $_POST['stay']; |
|
| 134 | - header($header); |
|
| 135 | - } else { |
|
| 136 | - $modx->unlockElement(1, $id); |
|
| 137 | - $header = "Location: index.php?a=76&r=2"; |
|
| 138 | - header($header); |
|
| 139 | - } |
|
| 140 | - |
|
| 141 | - |
|
| 142 | - break; |
|
| 143 | - default: |
|
| 144 | - $modx->webAlertAndQuit("No operation set in request."); |
|
| 36 | + case '19': |
|
| 37 | + |
|
| 38 | + // invoke OnBeforeTempFormSave event |
|
| 39 | + $modx->invokeEvent("OnBeforeTempFormSave", array( |
|
| 40 | + "mode" => "new", |
|
| 41 | + "id" => $id |
|
| 42 | + )); |
|
| 43 | + |
|
| 44 | + // disallow duplicate names for new templates |
|
| 45 | + $rs = $modx->getDatabase()->select('COUNT(id)', $modx->getFullTableName('site_templates'), "templatename='{$templatename}'"); |
|
| 46 | + $count = $modx->getDatabase()->getValue($rs); |
|
| 47 | + if ($count > 0) { |
|
| 48 | + $modx->getManagerApi()->saveFormValues(19); |
|
| 49 | + $modx->webAlertAndQuit(sprintf($_lang['duplicate_name_found_general'], $_lang['template'], $templatename), "index.php?a=19"); |
|
| 50 | + } |
|
| 51 | + |
|
| 52 | + //do stuff to save the new doc |
|
| 53 | + $newid = $modx->getDatabase()->insert(array( |
|
| 54 | + 'templatename' => $templatename, |
|
| 55 | + 'description' => $description, |
|
| 56 | + 'content' => $template, |
|
| 57 | + 'locked' => $locked, |
|
| 58 | + 'selectable' => $selectable, |
|
| 59 | + 'category' => $categoryid, |
|
| 60 | + 'createdon' => $currentdate, |
|
| 61 | + 'editedon' => $currentdate |
|
| 62 | + ), $modx->getFullTableName('site_templates')); |
|
| 63 | + |
|
| 64 | + // invoke OnTempFormSave event |
|
| 65 | + $modx->invokeEvent("OnTempFormSave", array( |
|
| 66 | + "mode" => "new", |
|
| 67 | + "id" => $newid |
|
| 68 | + )); |
|
| 69 | + // Set new assigned Tvs |
|
| 70 | + saveTemplateAccess($newid); |
|
| 71 | + |
|
| 72 | + // Set the item name for logger |
|
| 73 | + $_SESSION['itemname'] = $templatename; |
|
| 74 | + |
|
| 75 | + // empty cache |
|
| 76 | + $modx->clearCache('full'); |
|
| 77 | + |
|
| 78 | + // finished emptying cache - redirect |
|
| 79 | + if ($_POST['stay'] != '') { |
|
| 80 | + $a = ($_POST['stay'] == '2') ? "16&id=$newid" : "19"; |
|
| 81 | + $header = "Location: index.php?a=" . $a . "&r=2&stay=" . $_POST['stay']; |
|
| 82 | + header($header); |
|
| 83 | + } else { |
|
| 84 | + $header = "Location: index.php?a=76&r=2"; |
|
| 85 | + header($header); |
|
| 86 | + } |
|
| 87 | + |
|
| 88 | + break; |
|
| 89 | + case '16': |
|
| 90 | + |
|
| 91 | + // invoke OnBeforeTempFormSave event |
|
| 92 | + $modx->invokeEvent("OnBeforeTempFormSave", array( |
|
| 93 | + "mode" => "upd", |
|
| 94 | + "id" => $id |
|
| 95 | + )); |
|
| 96 | + |
|
| 97 | + // disallow duplicate names for templates |
|
| 98 | + $rs = $modx->getDatabase()->select('COUNT(*)', $modx->getFullTableName('site_templates'), "templatename='{$templatename}' AND id!='{$id}'"); |
|
| 99 | + $count = $modx->getDatabase()->getValue($rs); |
|
| 100 | + if ($count > 0) { |
|
| 101 | + $modx->getManagerApi()->saveFormValues(16); |
|
| 102 | + $modx->webAlertAndQuit(sprintf($_lang['duplicate_name_found_general'], $_lang['template'], $templatename), "index.php?a=16&id={$id}"); |
|
| 103 | + } |
|
| 104 | + |
|
| 105 | + //do stuff to save the edited doc |
|
| 106 | + $modx->getDatabase()->update(array( |
|
| 107 | + 'templatename' => $templatename, |
|
| 108 | + 'description' => $description, |
|
| 109 | + 'content' => $template, |
|
| 110 | + 'locked' => $locked, |
|
| 111 | + 'selectable' => $selectable, |
|
| 112 | + 'category' => $categoryid, |
|
| 113 | + 'editedon' => $currentdate |
|
| 114 | + ), $modx->getFullTableName('site_templates'), "id='{$id}'"); |
|
| 115 | + // Set new assigned Tvs |
|
| 116 | + saveTemplateAccess($id); |
|
| 117 | + |
|
| 118 | + // invoke OnTempFormSave event |
|
| 119 | + $modx->invokeEvent("OnTempFormSave", array( |
|
| 120 | + "mode" => "upd", |
|
| 121 | + "id" => $id |
|
| 122 | + )); |
|
| 123 | + |
|
| 124 | + // Set the item name for logger |
|
| 125 | + $_SESSION['itemname'] = $templatename; |
|
| 126 | + |
|
| 127 | + // first empty the cache |
|
| 128 | + $modx->clearCache('full'); |
|
| 129 | + |
|
| 130 | + // finished emptying cache - redirect |
|
| 131 | + if ($_POST['stay'] != '') { |
|
| 132 | + $a = ($_POST['stay'] == '2') ? "16&id=$id" : "19"; |
|
| 133 | + $header = "Location: index.php?a=" . $a . "&r=2&stay=" . $_POST['stay']; |
|
| 134 | + header($header); |
|
| 135 | + } else { |
|
| 136 | + $modx->unlockElement(1, $id); |
|
| 137 | + $header = "Location: index.php?a=76&r=2"; |
|
| 138 | + header($header); |
|
| 139 | + } |
|
| 140 | + |
|
| 141 | + |
|
| 142 | + break; |
|
| 143 | + default: |
|
| 144 | + $modx->webAlertAndQuit("No operation set in request."); |
|
| 145 | 145 | } |
@@ -1,27 +1,27 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | -if( ! defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 2 | +if (!defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
| 4 | 4 | } |
| 5 | 5 | if (!$modx->hasPermission('save_template')) { |
| 6 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
| 7 | 7 | } |
| 8 | 8 | |
| 9 | -$id = (int)$_POST['id']; |
|
| 9 | +$id = (int) $_POST['id']; |
|
| 10 | 10 | $template = $modx->getDatabase()->escape($_POST['post']); |
| 11 | 11 | $templatename = $modx->getDatabase()->escape(trim($_POST['templatename'])); |
| 12 | 12 | $description = $modx->getDatabase()->escape($_POST['description']); |
| 13 | 13 | $locked = $_POST['locked'] == 'on' ? 1 : 0; |
| 14 | -$selectable = $id == $modx->config['default_template'] ? 1 : // Force selectable |
|
| 14 | +$selectable = $id == $modx->config['default_template'] ? 1 : // Force selectable |
|
| 15 | 15 | $_POST['selectable'] == 'on' ? 1 : 0; |
| 16 | 16 | $currentdate = time() + $modx->config['server_offset_time']; |
| 17 | 17 | |
| 18 | 18 | //Kyle Jaebker - added category support |
| 19 | 19 | if (empty($_POST['newcategory']) && $_POST['categoryid'] > 0) { |
| 20 | - $categoryid = (int)$_POST['categoryid']; |
|
| 20 | + $categoryid = (int) $_POST['categoryid']; |
|
| 21 | 21 | } elseif (empty($_POST['newcategory']) && $_POST['categoryid'] <= 0) { |
| 22 | 22 | $categoryid = 0; |
| 23 | 23 | } else { |
| 24 | - include_once(MODX_MANAGER_PATH . 'includes/categories.inc.php'); |
|
| 24 | + include_once(MODX_MANAGER_PATH.'includes/categories.inc.php'); |
|
| 25 | 25 | $categoryid = checkCategory($_POST['newcategory']); |
| 26 | 26 | if (!$categoryid) { |
| 27 | 27 | $categoryid = newCategory($_POST['newcategory']); |
@@ -78,7 +78,7 @@ discard block |
||
| 78 | 78 | // finished emptying cache - redirect |
| 79 | 79 | if ($_POST['stay'] != '') { |
| 80 | 80 | $a = ($_POST['stay'] == '2') ? "16&id=$newid" : "19"; |
| 81 | - $header = "Location: index.php?a=" . $a . "&r=2&stay=" . $_POST['stay']; |
|
| 81 | + $header = "Location: index.php?a=".$a."&r=2&stay=".$_POST['stay']; |
|
| 82 | 82 | header($header); |
| 83 | 83 | } else { |
| 84 | 84 | $header = "Location: index.php?a=76&r=2"; |
@@ -130,7 +130,7 @@ discard block |
||
| 130 | 130 | // finished emptying cache - redirect |
| 131 | 131 | if ($_POST['stay'] != '') { |
| 132 | 132 | $a = ($_POST['stay'] == '2') ? "16&id=$id" : "19"; |
| 133 | - $header = "Location: index.php?a=" . $a . "&r=2&stay=" . $_POST['stay']; |
|
| 133 | + $header = "Location: index.php?a=".$a."&r=2&stay=".$_POST['stay']; |
|
| 134 | 134 | header($header); |
| 135 | 135 | } else { |
| 136 | 136 | $modx->unlockElement(1, $id); |
@@ -3,12 +3,12 @@ discard block |
||
| 3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
| 4 | 4 | } |
| 5 | 5 | if(!$modx->hasPermission('delete_snippet')) { |
| 6 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
| 6 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
| 7 | 7 | } |
| 8 | 8 | |
| 9 | 9 | $id = isset($_GET['id'])? (int)$_GET['id'] : 0; |
| 10 | 10 | if($id==0) { |
| 11 | - $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
| 11 | + $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
| 12 | 12 | } |
| 13 | 13 | |
| 14 | 14 | // Set the item name for logger |
@@ -17,18 +17,18 @@ discard block |
||
| 17 | 17 | |
| 18 | 18 | // invoke OnBeforeSnipFormDelete event |
| 19 | 19 | $modx->invokeEvent("OnBeforeSnipFormDelete", |
| 20 | - array( |
|
| 21 | - "id" => $id |
|
| 22 | - )); |
|
| 20 | + array( |
|
| 21 | + "id" => $id |
|
| 22 | + )); |
|
| 23 | 23 | |
| 24 | 24 | // delete the snippet. |
| 25 | 25 | $modx->getDatabase()->delete($modx->getFullTableName('site_snippets'), "id='{$id}'"); |
| 26 | 26 | |
| 27 | 27 | // invoke OnSnipFormDelete event |
| 28 | 28 | $modx->invokeEvent("OnSnipFormDelete", |
| 29 | - array( |
|
| 30 | - "id" => $id |
|
| 31 | - )); |
|
| 29 | + array( |
|
| 30 | + "id" => $id |
|
| 31 | + )); |
|
| 32 | 32 | |
| 33 | 33 | // empty cache |
| 34 | 34 | $modx->clearCache('full'); |
@@ -3,12 +3,12 @@ discard block |
||
| 3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
| 4 | 4 | } |
| 5 | 5 | if(!$modx->hasPermission('save_document')||!$modx->hasPermission('publish_document')) { |
| 6 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
| 6 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
| 7 | 7 | } |
| 8 | 8 | |
| 9 | 9 | $id = isset($_REQUEST['id'])? (int)$_REQUEST['id'] : 0; |
| 10 | 10 | if($id==0) { |
| 11 | - $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
| 11 | + $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
| 12 | 12 | } |
| 13 | 13 | |
| 14 | 14 | /************webber ********/ |
@@ -32,20 +32,20 @@ discard block |
||
| 32 | 32 | $udperms->role = $_SESSION['mgrRole']; |
| 33 | 33 | |
| 34 | 34 | if(!$udperms->checkPermissions()) { |
| 35 | - $modx->webAlertAndQuit($_lang["access_permission_denied"]); |
|
| 35 | + $modx->webAlertAndQuit($_lang["access_permission_denied"]); |
|
| 36 | 36 | } |
| 37 | 37 | |
| 38 | 38 | // update the document |
| 39 | 39 | $modx->getDatabase()->update( |
| 40 | - array( |
|
| 41 | - 'published' => 0, |
|
| 42 | - 'pub_date' => 0, |
|
| 43 | - 'unpub_date' => 0, |
|
| 44 | - 'editedby' => $modx->getLoginUserID(), |
|
| 45 | - 'editedon' => time(), |
|
| 46 | - 'publishedby' => 0, |
|
| 47 | - 'publishedon' => 0, |
|
| 48 | - ), $modx->getFullTableName('site_content'), "id='{$id}'"); |
|
| 40 | + array( |
|
| 41 | + 'published' => 0, |
|
| 42 | + 'pub_date' => 0, |
|
| 43 | + 'unpub_date' => 0, |
|
| 44 | + 'editedby' => $modx->getLoginUserID(), |
|
| 45 | + 'editedon' => time(), |
|
| 46 | + 'publishedby' => 0, |
|
| 47 | + 'publishedon' => 0, |
|
| 48 | + ), $modx->getFullTableName('site_content'), "id='{$id}'"); |
|
| 49 | 49 | |
| 50 | 50 | // invoke OnDocUnPublished event |
| 51 | 51 | $modx->invokeEvent("OnDocUnPublished",array("docid"=>$id)); |
@@ -1,25 +1,25 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | -if( ! defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 2 | +if (!defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
| 4 | 4 | } |
| 5 | -if(!$modx->hasPermission('save_document')||!$modx->hasPermission('publish_document')) { |
|
| 5 | +if (!$modx->hasPermission('save_document') || !$modx->hasPermission('publish_document')) { |
|
| 6 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
| 7 | 7 | } |
| 8 | 8 | |
| 9 | -$id = isset($_REQUEST['id'])? (int)$_REQUEST['id'] : 0; |
|
| 10 | -if($id==0) { |
|
| 9 | +$id = isset($_REQUEST['id']) ? (int) $_REQUEST['id'] : 0; |
|
| 10 | +if ($id == 0) { |
|
| 11 | 11 | $modx->webAlertAndQuit($_lang["error_no_id"]); |
| 12 | 12 | } |
| 13 | 13 | |
| 14 | 14 | /************webber ********/ |
| 15 | -$content=$modx->getDatabase()->getRow($modx->getDatabase()->select('parent, pagetitle', $modx->getFullTableName('site_content'), "id='{$id}'")); |
|
| 16 | -$pid=($content['parent']==0?$id:$content['parent']); |
|
| 15 | +$content = $modx->getDatabase()->getRow($modx->getDatabase()->select('parent, pagetitle', $modx->getFullTableName('site_content'), "id='{$id}'")); |
|
| 16 | +$pid = ($content['parent'] == 0 ? $id : $content['parent']); |
|
| 17 | 17 | |
| 18 | 18 | /************** webber *************/ |
| 19 | -$sd=isset($_REQUEST['dir'])?'&dir='.$_REQUEST['dir']:'&dir=DESC'; |
|
| 20 | -$sb=isset($_REQUEST['sort'])?'&sort='.$_REQUEST['sort']:'&sort=createdon'; |
|
| 21 | -$pg=isset($_REQUEST['page'])?'&page='.(int)$_REQUEST['page']:''; |
|
| 22 | -$add_path=$sd.$sb.$pg; |
|
| 19 | +$sd = isset($_REQUEST['dir']) ? '&dir='.$_REQUEST['dir'] : '&dir=DESC'; |
|
| 20 | +$sb = isset($_REQUEST['sort']) ? '&sort='.$_REQUEST['sort'] : '&sort=createdon'; |
|
| 21 | +$pg = isset($_REQUEST['page']) ? '&page='.(int) $_REQUEST['page'] : ''; |
|
| 22 | +$add_path = $sd.$sb.$pg; |
|
| 23 | 23 | |
| 24 | 24 | /***********************************/ |
| 25 | 25 | |
@@ -31,7 +31,7 @@ discard block |
||
| 31 | 31 | $udperms->document = $id; |
| 32 | 32 | $udperms->role = $_SESSION['mgrRole']; |
| 33 | 33 | |
| 34 | -if(!$udperms->checkPermissions()) { |
|
| 34 | +if (!$udperms->checkPermissions()) { |
|
| 35 | 35 | $modx->webAlertAndQuit($_lang["access_permission_denied"]); |
| 36 | 36 | } |
| 37 | 37 | |
@@ -48,7 +48,7 @@ discard block |
||
| 48 | 48 | ), $modx->getFullTableName('site_content'), "id='{$id}'"); |
| 49 | 49 | |
| 50 | 50 | // invoke OnDocUnPublished event |
| 51 | -$modx->invokeEvent("OnDocUnPublished",array("docid"=>$id)); |
|
| 51 | +$modx->invokeEvent("OnDocUnPublished", array("docid"=>$id)); |
|
| 52 | 52 | |
| 53 | 53 | // Set the item name for logger |
| 54 | 54 | $_SESSION['itemname'] = $content['pagetitle']; |
@@ -56,6 +56,6 @@ discard block |
||
| 56 | 56 | // empty cache |
| 57 | 57 | $modx->clearCache('full'); |
| 58 | 58 | |
| 59 | -$header="Location: index.php?a=3&id=$pid&r=1".$add_path; |
|
| 59 | +$header = "Location: index.php?a=3&id=$pid&r=1".$add_path; |
|
| 60 | 60 | |
| 61 | 61 | header($header); |
@@ -1,9 +1,9 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | 2 | if( ! defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
| 3 | - die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
| 3 | + die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
| 4 | 4 | } |
| 5 | 5 | if(!$modx->hasPermission('save_user')) { |
| 6 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
| 6 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
| 7 | 7 | } |
| 8 | 8 | |
| 9 | 9 | $tbl_manager_users = $modx->getFullTableName('manager_users'); |
@@ -43,134 +43,134 @@ discard block |
||
| 43 | 43 | |
| 44 | 44 | // verify password |
| 45 | 45 | if($passwordgenmethod == "spec" && $input['specifiedpassword'] != $input['confirmpassword']) { |
| 46 | - webAlertAndQuit("Password typed is mismatched", 12); |
|
| 46 | + webAlertAndQuit("Password typed is mismatched", 12); |
|
| 47 | 47 | } |
| 48 | 48 | |
| 49 | 49 | // verify email |
| 50 | 50 | if($email == '' || !preg_match("/^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,24}$/i", $email)) { |
| 51 | - webAlertAndQuit("E-mail address doesn't seem to be valid!", 12); |
|
| 51 | + webAlertAndQuit("E-mail address doesn't seem to be valid!", 12); |
|
| 52 | 52 | } |
| 53 | 53 | |
| 54 | 54 | // verify admin security |
| 55 | 55 | if($_SESSION['mgrRole'] != 1) { |
| 56 | - // Check to see if user tried to spoof a "1" (admin) role |
|
| 57 | - if(!$modx->hasPermission('save_user')) { |
|
| 58 | - webAlertAndQuit("Illegal attempt to create/modify administrator by non-administrator!", 12); |
|
| 59 | - } |
|
| 60 | - // Verify that the user being edited wasn't an admin and the user ID got spoofed |
|
| 61 | - $rs = $modx->getDatabase()->select('count(internalKey)', $tbl_user_attributes, "internalKey='{$id}' AND role=1"); |
|
| 62 | - $limit = $modx->getDatabase()->getValue($rs); |
|
| 63 | - if($limit > 0) { |
|
| 64 | - webAlertAndQuit("You cannot alter an administrative user.", 12); |
|
| 65 | - } |
|
| 56 | + // Check to see if user tried to spoof a "1" (admin) role |
|
| 57 | + if(!$modx->hasPermission('save_user')) { |
|
| 58 | + webAlertAndQuit("Illegal attempt to create/modify administrator by non-administrator!", 12); |
|
| 59 | + } |
|
| 60 | + // Verify that the user being edited wasn't an admin and the user ID got spoofed |
|
| 61 | + $rs = $modx->getDatabase()->select('count(internalKey)', $tbl_user_attributes, "internalKey='{$id}' AND role=1"); |
|
| 62 | + $limit = $modx->getDatabase()->getValue($rs); |
|
| 63 | + if($limit > 0) { |
|
| 64 | + webAlertAndQuit("You cannot alter an administrative user.", 12); |
|
| 65 | + } |
|
| 66 | 66 | |
| 67 | 67 | } |
| 68 | 68 | |
| 69 | 69 | switch($input['mode']) { |
| 70 | - case '11' : // new user |
|
| 71 | - // check if this user name already exist |
|
| 72 | - $rs = $modx->getDatabase()->select('count(id)', $tbl_manager_users, sprintf("username='%s'", $modx->getDatabase()->escape($newusername))); |
|
| 73 | - $limit = $modx->getDatabase()->getValue($rs); |
|
| 74 | - if($limit > 0) { |
|
| 75 | - webAlertAndQuit("User name is already in use!", 12); |
|
| 76 | - } |
|
| 77 | - |
|
| 78 | - // check if the email address already exist |
|
| 79 | - $rs = $modx->getDatabase()->select('count(internalKey)', $tbl_user_attributes, sprintf("email='%s' AND id!='%s'", $modx->getDatabase()->escape($email), $id)); |
|
| 80 | - $limit = $modx->getDatabase()->getValue($rs); |
|
| 81 | - if($limit > 0) { |
|
| 82 | - webAlertAndQuit("Email is already in use!", 12); |
|
| 83 | - } |
|
| 84 | - |
|
| 85 | - // generate a new password for this user |
|
| 86 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
| 87 | - if(strlen($specifiedpassword) < 6) { |
|
| 88 | - webAlertAndQuit("Password is too short!", 12); |
|
| 89 | - } else { |
|
| 90 | - $newpassword = $specifiedpassword; |
|
| 91 | - } |
|
| 92 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
| 93 | - webAlertAndQuit("You didn't specify a password for this user!", 12); |
|
| 94 | - } elseif($passwordgenmethod == 'g') { |
|
| 95 | - $newpassword = generate_password(8); |
|
| 96 | - } else { |
|
| 97 | - webAlertAndQuit("No password generation method specified!", 12); |
|
| 98 | - } |
|
| 99 | - |
|
| 100 | - // invoke OnBeforeUserFormSave event |
|
| 101 | - $modx->invokeEvent("OnBeforeUserFormSave", array( |
|
| 102 | - "mode" => "new", |
|
| 103 | - )); |
|
| 104 | - |
|
| 105 | - // create the user account |
|
| 106 | - $internalKey = $modx->getDatabase()->insert(array('username' => $modx->getDatabase()->escape($newusername)), $tbl_manager_users); |
|
| 107 | - |
|
| 108 | - $field = array(); |
|
| 109 | - $field['password'] = $modx->getPasswordHash()->HashPassword($newpassword); |
|
| 110 | - $modx->getDatabase()->update($field, $tbl_manager_users, "id='{$internalKey}'"); |
|
| 111 | - |
|
| 112 | - $field = compact('internalKey', 'fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'blocked', 'blockeduntil', 'blockedafter'); |
|
| 113 | - $field = $modx->getDatabase()->escape($field); |
|
| 114 | - $modx->getDatabase()->insert($field, $tbl_user_attributes); |
|
| 115 | - |
|
| 116 | - // Save user settings |
|
| 70 | + case '11' : // new user |
|
| 71 | + // check if this user name already exist |
|
| 72 | + $rs = $modx->getDatabase()->select('count(id)', $tbl_manager_users, sprintf("username='%s'", $modx->getDatabase()->escape($newusername))); |
|
| 73 | + $limit = $modx->getDatabase()->getValue($rs); |
|
| 74 | + if($limit > 0) { |
|
| 75 | + webAlertAndQuit("User name is already in use!", 12); |
|
| 76 | + } |
|
| 77 | + |
|
| 78 | + // check if the email address already exist |
|
| 79 | + $rs = $modx->getDatabase()->select('count(internalKey)', $tbl_user_attributes, sprintf("email='%s' AND id!='%s'", $modx->getDatabase()->escape($email), $id)); |
|
| 80 | + $limit = $modx->getDatabase()->getValue($rs); |
|
| 81 | + if($limit > 0) { |
|
| 82 | + webAlertAndQuit("Email is already in use!", 12); |
|
| 83 | + } |
|
| 84 | + |
|
| 85 | + // generate a new password for this user |
|
| 86 | + if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
| 87 | + if(strlen($specifiedpassword) < 6) { |
|
| 88 | + webAlertAndQuit("Password is too short!", 12); |
|
| 89 | + } else { |
|
| 90 | + $newpassword = $specifiedpassword; |
|
| 91 | + } |
|
| 92 | + } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
| 93 | + webAlertAndQuit("You didn't specify a password for this user!", 12); |
|
| 94 | + } elseif($passwordgenmethod == 'g') { |
|
| 95 | + $newpassword = generate_password(8); |
|
| 96 | + } else { |
|
| 97 | + webAlertAndQuit("No password generation method specified!", 12); |
|
| 98 | + } |
|
| 99 | + |
|
| 100 | + // invoke OnBeforeUserFormSave event |
|
| 101 | + $modx->invokeEvent("OnBeforeUserFormSave", array( |
|
| 102 | + "mode" => "new", |
|
| 103 | + )); |
|
| 104 | + |
|
| 105 | + // create the user account |
|
| 106 | + $internalKey = $modx->getDatabase()->insert(array('username' => $modx->getDatabase()->escape($newusername)), $tbl_manager_users); |
|
| 107 | + |
|
| 108 | + $field = array(); |
|
| 109 | + $field['password'] = $modx->getPasswordHash()->HashPassword($newpassword); |
|
| 110 | + $modx->getDatabase()->update($field, $tbl_manager_users, "id='{$internalKey}'"); |
|
| 111 | + |
|
| 112 | + $field = compact('internalKey', 'fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'blocked', 'blockeduntil', 'blockedafter'); |
|
| 113 | + $field = $modx->getDatabase()->escape($field); |
|
| 114 | + $modx->getDatabase()->insert($field, $tbl_user_attributes); |
|
| 115 | + |
|
| 116 | + // Save user settings |
|
| 117 | 117 | saveManagerUserSettings($internalKey); |
| 118 | 118 | |
| 119 | - // invoke OnManagerSaveUser event |
|
| 120 | - $modx->invokeEvent("OnManagerSaveUser", array( |
|
| 121 | - "mode" => "new", |
|
| 122 | - "userid" => $internalKey, |
|
| 123 | - "username" => $newusername, |
|
| 124 | - "userpassword" => $newpassword, |
|
| 125 | - "useremail" => $email, |
|
| 126 | - "userfullname" => $fullname, |
|
| 127 | - "userroleid" => $role |
|
| 128 | - )); |
|
| 129 | - |
|
| 130 | - // invoke OnUserFormSave event |
|
| 131 | - $modx->invokeEvent("OnUserFormSave", array( |
|
| 132 | - "mode" => "new", |
|
| 133 | - "id" => $internalKey |
|
| 134 | - )); |
|
| 135 | - |
|
| 136 | - // Set the item name for logger |
|
| 137 | - $_SESSION['itemname'] = $newusername; |
|
| 138 | - |
|
| 139 | - /*******************************************************************************/ |
|
| 140 | - // put the user in the user_groups he/ she should be in |
|
| 141 | - // first, check that up_perms are switched on! |
|
| 142 | - if($use_udperms == 1) { |
|
| 143 | - if(!empty($user_groups)) { |
|
| 144 | - for($i = 0; $i < count($user_groups); $i++) { |
|
| 145 | - $f = array(); |
|
| 146 | - $f['user_group'] = (int)$user_groups[$i]; |
|
| 147 | - $f['member'] = $internalKey; |
|
| 148 | - $modx->getDatabase()->insert($f, $tbl_member_groups); |
|
| 149 | - } |
|
| 150 | - } |
|
| 151 | - } |
|
| 152 | - // end of user_groups stuff! |
|
| 153 | - |
|
| 154 | - if($passwordnotifymethod == 'e') { |
|
| 119 | + // invoke OnManagerSaveUser event |
|
| 120 | + $modx->invokeEvent("OnManagerSaveUser", array( |
|
| 121 | + "mode" => "new", |
|
| 122 | + "userid" => $internalKey, |
|
| 123 | + "username" => $newusername, |
|
| 124 | + "userpassword" => $newpassword, |
|
| 125 | + "useremail" => $email, |
|
| 126 | + "userfullname" => $fullname, |
|
| 127 | + "userroleid" => $role |
|
| 128 | + )); |
|
| 129 | + |
|
| 130 | + // invoke OnUserFormSave event |
|
| 131 | + $modx->invokeEvent("OnUserFormSave", array( |
|
| 132 | + "mode" => "new", |
|
| 133 | + "id" => $internalKey |
|
| 134 | + )); |
|
| 135 | + |
|
| 136 | + // Set the item name for logger |
|
| 137 | + $_SESSION['itemname'] = $newusername; |
|
| 138 | + |
|
| 139 | + /*******************************************************************************/ |
|
| 140 | + // put the user in the user_groups he/ she should be in |
|
| 141 | + // first, check that up_perms are switched on! |
|
| 142 | + if($use_udperms == 1) { |
|
| 143 | + if(!empty($user_groups)) { |
|
| 144 | + for($i = 0; $i < count($user_groups); $i++) { |
|
| 145 | + $f = array(); |
|
| 146 | + $f['user_group'] = (int)$user_groups[$i]; |
|
| 147 | + $f['member'] = $internalKey; |
|
| 148 | + $modx->getDatabase()->insert($f, $tbl_member_groups); |
|
| 149 | + } |
|
| 150 | + } |
|
| 151 | + } |
|
| 152 | + // end of user_groups stuff! |
|
| 153 | + |
|
| 154 | + if($passwordnotifymethod == 'e') { |
|
| 155 | 155 | sendMailMessageForUser($email, $newusername, $newpassword, $fullname, $signupemail_message, MODX_MANAGER_URL); |
| 156 | - if($input['stay'] != '') { |
|
| 157 | - $a = ($input['stay'] == '2') ? "12&id={$internalKey}" : "11"; |
|
| 158 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 159 | - header($header); |
|
| 160 | - } else { |
|
| 161 | - $header = "Location: index.php?a=75&r=2"; |
|
| 162 | - header($header); |
|
| 163 | - } |
|
| 164 | - } else { |
|
| 165 | - if($input['stay'] != '') { |
|
| 166 | - $a = ($input['stay'] == '2') ? "12&id={$internalKey}" : "11"; |
|
| 167 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 168 | - } else { |
|
| 169 | - $stayUrl = "index.php?a=75&r=2"; |
|
| 170 | - } |
|
| 171 | - |
|
| 172 | - include_once "header.inc.php"; |
|
| 173 | - ?> |
|
| 156 | + if($input['stay'] != '') { |
|
| 157 | + $a = ($input['stay'] == '2') ? "12&id={$internalKey}" : "11"; |
|
| 158 | + $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 159 | + header($header); |
|
| 160 | + } else { |
|
| 161 | + $header = "Location: index.php?a=75&r=2"; |
|
| 162 | + header($header); |
|
| 163 | + } |
|
| 164 | + } else { |
|
| 165 | + if($input['stay'] != '') { |
|
| 166 | + $a = ($input['stay'] == '2') ? "12&id={$internalKey}" : "11"; |
|
| 167 | + $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 168 | + } else { |
|
| 169 | + $stayUrl = "index.php?a=75&r=2"; |
|
| 170 | + } |
|
| 171 | + |
|
| 172 | + include_once "header.inc.php"; |
|
| 173 | + ?> |
|
| 174 | 174 | |
| 175 | 175 | <h1><?php echo $_lang['user_title']; ?></h1> |
| 176 | 176 | |
@@ -192,125 +192,125 @@ discard block |
||
| 192 | 192 | </div> |
| 193 | 193 | <?php |
| 194 | 194 | |
| 195 | - include_once "footer.inc.php"; |
|
| 196 | - } |
|
| 197 | - break; |
|
| 198 | - case '12' : // edit user |
|
| 199 | - // generate a new password for this user |
|
| 200 | - if($genpassword == 1) { |
|
| 201 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
| 202 | - if(strlen($specifiedpassword) < 6) { |
|
| 203 | - webAlertAndQuit("Password is too short!", 12); |
|
| 204 | - } else { |
|
| 205 | - $newpassword = $specifiedpassword; |
|
| 206 | - } |
|
| 207 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
| 208 | - webAlertAndQuit("You didn't specify a password for this user!", 12); |
|
| 209 | - } elseif($passwordgenmethod == 'g') { |
|
| 210 | - $newpassword = generate_password(8); |
|
| 211 | - } else { |
|
| 212 | - webAlertAndQuit("No password generation method specified!", 12); |
|
| 213 | - } |
|
| 214 | - } |
|
| 215 | - if($passwordnotifymethod == 'e') { |
|
| 195 | + include_once "footer.inc.php"; |
|
| 196 | + } |
|
| 197 | + break; |
|
| 198 | + case '12' : // edit user |
|
| 199 | + // generate a new password for this user |
|
| 200 | + if($genpassword == 1) { |
|
| 201 | + if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
| 202 | + if(strlen($specifiedpassword) < 6) { |
|
| 203 | + webAlertAndQuit("Password is too short!", 12); |
|
| 204 | + } else { |
|
| 205 | + $newpassword = $specifiedpassword; |
|
| 206 | + } |
|
| 207 | + } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
| 208 | + webAlertAndQuit("You didn't specify a password for this user!", 12); |
|
| 209 | + } elseif($passwordgenmethod == 'g') { |
|
| 210 | + $newpassword = generate_password(8); |
|
| 211 | + } else { |
|
| 212 | + webAlertAndQuit("No password generation method specified!", 12); |
|
| 213 | + } |
|
| 214 | + } |
|
| 215 | + if($passwordnotifymethod == 'e') { |
|
| 216 | 216 | sendMailMessageForUser($email, $newusername, $newpassword, $fullname, $signupemail_message, MODX_MANAGER_URL); |
| 217 | - } |
|
| 218 | - |
|
| 219 | - // check if the username already exist |
|
| 220 | - $rs = $modx->getDatabase()->select('count(id)', $tbl_manager_users, sprintf("username='%s' AND id!='%s'", $modx->getDatabase()->escape($newusername), $id)); |
|
| 221 | - $limit = $modx->getDatabase()->getValue($rs); |
|
| 222 | - if($limit > 0) { |
|
| 223 | - webAlertAndQuit("User name is already in use!", 12); |
|
| 224 | - } |
|
| 225 | - |
|
| 226 | - // check if the email address already exists |
|
| 227 | - $rs = $modx->getDatabase()->select('count(internalKey)', $tbl_user_attributes, sprintf("email='%s' AND internalKey!='%s'", $modx->getDatabase()->escape($email), $id)); |
|
| 228 | - $limit = $modx->getDatabase()->getValue($rs); |
|
| 229 | - if($limit > 0) { |
|
| 230 | - webAlertAndQuit("Email is already in use!", 12); |
|
| 231 | - } |
|
| 232 | - |
|
| 233 | - // invoke OnBeforeUserFormSave event |
|
| 234 | - $modx->invokeEvent("OnBeforeUserFormSave", array( |
|
| 235 | - "mode" => "upd", |
|
| 236 | - "id" => $id |
|
| 237 | - )); |
|
| 238 | - |
|
| 239 | - // update user name and password |
|
| 240 | - $field = array(); |
|
| 241 | - $field['username'] = $modx->getDatabase()->escape($newusername); |
|
| 242 | - if($genpassword == 1) { |
|
| 243 | - $field['password'] = $modx->getPasswordHash()->HashPassword($newpassword); |
|
| 244 | - } |
|
| 245 | - $modx->getDatabase()->update($field, $tbl_manager_users, "id='{$id}'"); |
|
| 246 | - $field = compact('fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'failedlogincount', 'blocked', 'blockeduntil', 'blockedafter'); |
|
| 247 | - $field = $modx->getDatabase()->escape($field); |
|
| 248 | - $modx->getDatabase()->update($field, $tbl_user_attributes, "internalKey='{$id}'"); |
|
| 249 | - |
|
| 250 | - // Save user settings |
|
| 217 | + } |
|
| 218 | + |
|
| 219 | + // check if the username already exist |
|
| 220 | + $rs = $modx->getDatabase()->select('count(id)', $tbl_manager_users, sprintf("username='%s' AND id!='%s'", $modx->getDatabase()->escape($newusername), $id)); |
|
| 221 | + $limit = $modx->getDatabase()->getValue($rs); |
|
| 222 | + if($limit > 0) { |
|
| 223 | + webAlertAndQuit("User name is already in use!", 12); |
|
| 224 | + } |
|
| 225 | + |
|
| 226 | + // check if the email address already exists |
|
| 227 | + $rs = $modx->getDatabase()->select('count(internalKey)', $tbl_user_attributes, sprintf("email='%s' AND internalKey!='%s'", $modx->getDatabase()->escape($email), $id)); |
|
| 228 | + $limit = $modx->getDatabase()->getValue($rs); |
|
| 229 | + if($limit > 0) { |
|
| 230 | + webAlertAndQuit("Email is already in use!", 12); |
|
| 231 | + } |
|
| 232 | + |
|
| 233 | + // invoke OnBeforeUserFormSave event |
|
| 234 | + $modx->invokeEvent("OnBeforeUserFormSave", array( |
|
| 235 | + "mode" => "upd", |
|
| 236 | + "id" => $id |
|
| 237 | + )); |
|
| 238 | + |
|
| 239 | + // update user name and password |
|
| 240 | + $field = array(); |
|
| 241 | + $field['username'] = $modx->getDatabase()->escape($newusername); |
|
| 242 | + if($genpassword == 1) { |
|
| 243 | + $field['password'] = $modx->getPasswordHash()->HashPassword($newpassword); |
|
| 244 | + } |
|
| 245 | + $modx->getDatabase()->update($field, $tbl_manager_users, "id='{$id}'"); |
|
| 246 | + $field = compact('fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'failedlogincount', 'blocked', 'blockeduntil', 'blockedafter'); |
|
| 247 | + $field = $modx->getDatabase()->escape($field); |
|
| 248 | + $modx->getDatabase()->update($field, $tbl_user_attributes, "internalKey='{$id}'"); |
|
| 249 | + |
|
| 250 | + // Save user settings |
|
| 251 | 251 | saveManagerUserSettings($id); |
| 252 | 252 | |
| 253 | - // Set the item name for logger |
|
| 254 | - $_SESSION['itemname'] = $newusername; |
|
| 255 | - |
|
| 256 | - // invoke OnManagerSaveUser event |
|
| 257 | - $modx->invokeEvent("OnManagerSaveUser", array( |
|
| 258 | - "mode" => "upd", |
|
| 259 | - "userid" => $id, |
|
| 260 | - "username" => $newusername, |
|
| 261 | - "userpassword" => $newpassword, |
|
| 262 | - "useremail" => $email, |
|
| 263 | - "userfullname" => $fullname, |
|
| 264 | - "userroleid" => $role, |
|
| 265 | - "oldusername" => (($oldusername != $newusername) ? $oldusername : ""), |
|
| 266 | - "olduseremail" => (($oldemail != $email) ? $oldemail : "") |
|
| 267 | - )); |
|
| 268 | - |
|
| 269 | - // invoke OnManagerChangePassword event |
|
| 270 | - if($genpassword == 1) { |
|
| 271 | - $modx->invokeEvent("OnManagerChangePassword", array( |
|
| 272 | - "userid" => $id, |
|
| 273 | - "username" => $newusername, |
|
| 274 | - "userpassword" => $newpassword |
|
| 275 | - )); |
|
| 276 | - } |
|
| 277 | - |
|
| 278 | - // invoke OnUserFormSave event |
|
| 279 | - $modx->invokeEvent("OnUserFormSave", array( |
|
| 280 | - "mode" => "upd", |
|
| 281 | - "id" => $id |
|
| 282 | - )); |
|
| 283 | - |
|
| 284 | - /*******************************************************************************/ |
|
| 285 | - // put the user in the user_groups he/ she should be in |
|
| 286 | - // first, check that up_perms are switched on! |
|
| 287 | - if($use_udperms == 1) { |
|
| 288 | - // as this is an existing user, delete his/ her entries in the groups before saving the new groups |
|
| 289 | - $modx->getDatabase()->delete($tbl_member_groups, "member='{$id}'"); |
|
| 290 | - if(!empty($user_groups)) { |
|
| 291 | - for($i = 0; $i < count($user_groups); $i++) { |
|
| 292 | - $field = array(); |
|
| 293 | - $field['user_group'] = (int)$user_groups[$i]; |
|
| 294 | - $field['member'] = $id; |
|
| 295 | - $modx->getDatabase()->insert($field, $tbl_member_groups); |
|
| 296 | - } |
|
| 297 | - } |
|
| 298 | - } |
|
| 299 | - // end of user_groups stuff! |
|
| 300 | - /*******************************************************************************/ |
|
| 301 | - if($id == $modx->getLoginUserID() && ($genpassword !== 1 && $passwordnotifymethod != 's')) { |
|
| 302 | - $modx->webAlertAndQuit($_lang["user_changeddata"], 'javascript:top.location.href="index.php?a=8";'); |
|
| 303 | - } |
|
| 304 | - if($genpassword == 1 && $passwordnotifymethod == 's') { |
|
| 305 | - if($input['stay'] != '') { |
|
| 306 | - $a = ($input['stay'] == '2') ? "12&id={$id}" : "11"; |
|
| 307 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 308 | - } else { |
|
| 309 | - $stayUrl = "index.php?a=75&r=2"; |
|
| 310 | - } |
|
| 311 | - |
|
| 312 | - include_once "header.inc.php"; |
|
| 313 | - ?> |
|
| 253 | + // Set the item name for logger |
|
| 254 | + $_SESSION['itemname'] = $newusername; |
|
| 255 | + |
|
| 256 | + // invoke OnManagerSaveUser event |
|
| 257 | + $modx->invokeEvent("OnManagerSaveUser", array( |
|
| 258 | + "mode" => "upd", |
|
| 259 | + "userid" => $id, |
|
| 260 | + "username" => $newusername, |
|
| 261 | + "userpassword" => $newpassword, |
|
| 262 | + "useremail" => $email, |
|
| 263 | + "userfullname" => $fullname, |
|
| 264 | + "userroleid" => $role, |
|
| 265 | + "oldusername" => (($oldusername != $newusername) ? $oldusername : ""), |
|
| 266 | + "olduseremail" => (($oldemail != $email) ? $oldemail : "") |
|
| 267 | + )); |
|
| 268 | + |
|
| 269 | + // invoke OnManagerChangePassword event |
|
| 270 | + if($genpassword == 1) { |
|
| 271 | + $modx->invokeEvent("OnManagerChangePassword", array( |
|
| 272 | + "userid" => $id, |
|
| 273 | + "username" => $newusername, |
|
| 274 | + "userpassword" => $newpassword |
|
| 275 | + )); |
|
| 276 | + } |
|
| 277 | + |
|
| 278 | + // invoke OnUserFormSave event |
|
| 279 | + $modx->invokeEvent("OnUserFormSave", array( |
|
| 280 | + "mode" => "upd", |
|
| 281 | + "id" => $id |
|
| 282 | + )); |
|
| 283 | + |
|
| 284 | + /*******************************************************************************/ |
|
| 285 | + // put the user in the user_groups he/ she should be in |
|
| 286 | + // first, check that up_perms are switched on! |
|
| 287 | + if($use_udperms == 1) { |
|
| 288 | + // as this is an existing user, delete his/ her entries in the groups before saving the new groups |
|
| 289 | + $modx->getDatabase()->delete($tbl_member_groups, "member='{$id}'"); |
|
| 290 | + if(!empty($user_groups)) { |
|
| 291 | + for($i = 0; $i < count($user_groups); $i++) { |
|
| 292 | + $field = array(); |
|
| 293 | + $field['user_group'] = (int)$user_groups[$i]; |
|
| 294 | + $field['member'] = $id; |
|
| 295 | + $modx->getDatabase()->insert($field, $tbl_member_groups); |
|
| 296 | + } |
|
| 297 | + } |
|
| 298 | + } |
|
| 299 | + // end of user_groups stuff! |
|
| 300 | + /*******************************************************************************/ |
|
| 301 | + if($id == $modx->getLoginUserID() && ($genpassword !== 1 && $passwordnotifymethod != 's')) { |
|
| 302 | + $modx->webAlertAndQuit($_lang["user_changeddata"], 'javascript:top.location.href="index.php?a=8";'); |
|
| 303 | + } |
|
| 304 | + if($genpassword == 1 && $passwordnotifymethod == 's') { |
|
| 305 | + if($input['stay'] != '') { |
|
| 306 | + $a = ($input['stay'] == '2') ? "12&id={$id}" : "11"; |
|
| 307 | + $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 308 | + } else { |
|
| 309 | + $stayUrl = "index.php?a=75&r=2"; |
|
| 310 | + } |
|
| 311 | + |
|
| 312 | + include_once "header.inc.php"; |
|
| 313 | + ?> |
|
| 314 | 314 | |
| 315 | 315 | <h1><?php echo $_lang['user_title']; ?></h1> |
| 316 | 316 | |
@@ -330,18 +330,18 @@ discard block |
||
| 330 | 330 | </div> |
| 331 | 331 | <?php |
| 332 | 332 | |
| 333 | - include_once "footer.inc.php"; |
|
| 334 | - } else { |
|
| 335 | - if($input['stay'] != '') { |
|
| 336 | - $a = ($input['stay'] == '2') ? "12&id={$id}" : "11"; |
|
| 337 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 338 | - header($header); |
|
| 339 | - } else { |
|
| 340 | - $header = "Location: index.php?a=75&r=2"; |
|
| 341 | - header($header); |
|
| 342 | - } |
|
| 343 | - } |
|
| 344 | - break; |
|
| 345 | - default: |
|
| 346 | - webAlertAndQuit("No operation set in request.", 12); |
|
| 333 | + include_once "footer.inc.php"; |
|
| 334 | + } else { |
|
| 335 | + if($input['stay'] != '') { |
|
| 336 | + $a = ($input['stay'] == '2') ? "12&id={$id}" : "11"; |
|
| 337 | + $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 338 | + header($header); |
|
| 339 | + } else { |
|
| 340 | + $header = "Location: index.php?a=75&r=2"; |
|
| 341 | + header($header); |
|
| 342 | + } |
|
| 343 | + } |
|
| 344 | + break; |
|
| 345 | + default: |
|
| 346 | + webAlertAndQuit("No operation set in request.", 12); |
|
| 347 | 347 | } |
@@ -67,110 +67,110 @@ discard block |
||
| 67 | 67 | } |
| 68 | 68 | |
| 69 | 69 | switch($input['mode']) { |
| 70 | - case '11' : // new user |
|
| 71 | - // check if this user name already exist |
|
| 72 | - $rs = $modx->getDatabase()->select('count(id)', $tbl_manager_users, sprintf("username='%s'", $modx->getDatabase()->escape($newusername))); |
|
| 73 | - $limit = $modx->getDatabase()->getValue($rs); |
|
| 74 | - if($limit > 0) { |
|
| 75 | - webAlertAndQuit("User name is already in use!", 12); |
|
| 76 | - } |
|
| 77 | - |
|
| 78 | - // check if the email address already exist |
|
| 79 | - $rs = $modx->getDatabase()->select('count(internalKey)', $tbl_user_attributes, sprintf("email='%s' AND id!='%s'", $modx->getDatabase()->escape($email), $id)); |
|
| 80 | - $limit = $modx->getDatabase()->getValue($rs); |
|
| 81 | - if($limit > 0) { |
|
| 82 | - webAlertAndQuit("Email is already in use!", 12); |
|
| 83 | - } |
|
| 84 | - |
|
| 85 | - // generate a new password for this user |
|
| 86 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
| 87 | - if(strlen($specifiedpassword) < 6) { |
|
| 88 | - webAlertAndQuit("Password is too short!", 12); |
|
| 89 | - } else { |
|
| 90 | - $newpassword = $specifiedpassword; |
|
| 91 | - } |
|
| 92 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
| 93 | - webAlertAndQuit("You didn't specify a password for this user!", 12); |
|
| 94 | - } elseif($passwordgenmethod == 'g') { |
|
| 95 | - $newpassword = generate_password(8); |
|
| 96 | - } else { |
|
| 97 | - webAlertAndQuit("No password generation method specified!", 12); |
|
| 98 | - } |
|
| 99 | - |
|
| 100 | - // invoke OnBeforeUserFormSave event |
|
| 101 | - $modx->invokeEvent("OnBeforeUserFormSave", array( |
|
| 102 | - "mode" => "new", |
|
| 103 | - )); |
|
| 104 | - |
|
| 105 | - // create the user account |
|
| 106 | - $internalKey = $modx->getDatabase()->insert(array('username' => $modx->getDatabase()->escape($newusername)), $tbl_manager_users); |
|
| 107 | - |
|
| 108 | - $field = array(); |
|
| 109 | - $field['password'] = $modx->getPasswordHash()->HashPassword($newpassword); |
|
| 110 | - $modx->getDatabase()->update($field, $tbl_manager_users, "id='{$internalKey}'"); |
|
| 111 | - |
|
| 112 | - $field = compact('internalKey', 'fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'blocked', 'blockeduntil', 'blockedafter'); |
|
| 113 | - $field = $modx->getDatabase()->escape($field); |
|
| 114 | - $modx->getDatabase()->insert($field, $tbl_user_attributes); |
|
| 115 | - |
|
| 116 | - // Save user settings |
|
| 117 | - saveManagerUserSettings($internalKey); |
|
| 118 | - |
|
| 119 | - // invoke OnManagerSaveUser event |
|
| 120 | - $modx->invokeEvent("OnManagerSaveUser", array( |
|
| 121 | - "mode" => "new", |
|
| 122 | - "userid" => $internalKey, |
|
| 123 | - "username" => $newusername, |
|
| 124 | - "userpassword" => $newpassword, |
|
| 125 | - "useremail" => $email, |
|
| 126 | - "userfullname" => $fullname, |
|
| 127 | - "userroleid" => $role |
|
| 128 | - )); |
|
| 129 | - |
|
| 130 | - // invoke OnUserFormSave event |
|
| 131 | - $modx->invokeEvent("OnUserFormSave", array( |
|
| 132 | - "mode" => "new", |
|
| 133 | - "id" => $internalKey |
|
| 134 | - )); |
|
| 135 | - |
|
| 136 | - // Set the item name for logger |
|
| 137 | - $_SESSION['itemname'] = $newusername; |
|
| 138 | - |
|
| 139 | - /*******************************************************************************/ |
|
| 140 | - // put the user in the user_groups he/ she should be in |
|
| 141 | - // first, check that up_perms are switched on! |
|
| 142 | - if($use_udperms == 1) { |
|
| 143 | - if(!empty($user_groups)) { |
|
| 144 | - for($i = 0; $i < count($user_groups); $i++) { |
|
| 145 | - $f = array(); |
|
| 146 | - $f['user_group'] = (int)$user_groups[$i]; |
|
| 147 | - $f['member'] = $internalKey; |
|
| 148 | - $modx->getDatabase()->insert($f, $tbl_member_groups); |
|
| 149 | - } |
|
| 150 | - } |
|
| 151 | - } |
|
| 152 | - // end of user_groups stuff! |
|
| 153 | - |
|
| 154 | - if($passwordnotifymethod == 'e') { |
|
| 155 | - sendMailMessageForUser($email, $newusername, $newpassword, $fullname, $signupemail_message, MODX_MANAGER_URL); |
|
| 156 | - if($input['stay'] != '') { |
|
| 157 | - $a = ($input['stay'] == '2') ? "12&id={$internalKey}" : "11"; |
|
| 158 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 159 | - header($header); |
|
| 160 | - } else { |
|
| 161 | - $header = "Location: index.php?a=75&r=2"; |
|
| 162 | - header($header); |
|
| 163 | - } |
|
| 164 | - } else { |
|
| 165 | - if($input['stay'] != '') { |
|
| 166 | - $a = ($input['stay'] == '2') ? "12&id={$internalKey}" : "11"; |
|
| 167 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 168 | - } else { |
|
| 169 | - $stayUrl = "index.php?a=75&r=2"; |
|
| 170 | - } |
|
| 171 | - |
|
| 172 | - include_once "header.inc.php"; |
|
| 173 | - ?> |
|
| 70 | + case '11' : // new user |
|
| 71 | + // check if this user name already exist |
|
| 72 | + $rs = $modx->getDatabase()->select('count(id)', $tbl_manager_users, sprintf("username='%s'", $modx->getDatabase()->escape($newusername))); |
|
| 73 | + $limit = $modx->getDatabase()->getValue($rs); |
|
| 74 | + if($limit > 0) { |
|
| 75 | + webAlertAndQuit("User name is already in use!", 12); |
|
| 76 | + } |
|
| 77 | + |
|
| 78 | + // check if the email address already exist |
|
| 79 | + $rs = $modx->getDatabase()->select('count(internalKey)', $tbl_user_attributes, sprintf("email='%s' AND id!='%s'", $modx->getDatabase()->escape($email), $id)); |
|
| 80 | + $limit = $modx->getDatabase()->getValue($rs); |
|
| 81 | + if($limit > 0) { |
|
| 82 | + webAlertAndQuit("Email is already in use!", 12); |
|
| 83 | + } |
|
| 84 | + |
|
| 85 | + // generate a new password for this user |
|
| 86 | + if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
| 87 | + if(strlen($specifiedpassword) < 6) { |
|
| 88 | + webAlertAndQuit("Password is too short!", 12); |
|
| 89 | + } else { |
|
| 90 | + $newpassword = $specifiedpassword; |
|
| 91 | + } |
|
| 92 | + } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
| 93 | + webAlertAndQuit("You didn't specify a password for this user!", 12); |
|
| 94 | + } elseif($passwordgenmethod == 'g') { |
|
| 95 | + $newpassword = generate_password(8); |
|
| 96 | + } else { |
|
| 97 | + webAlertAndQuit("No password generation method specified!", 12); |
|
| 98 | + } |
|
| 99 | + |
|
| 100 | + // invoke OnBeforeUserFormSave event |
|
| 101 | + $modx->invokeEvent("OnBeforeUserFormSave", array( |
|
| 102 | + "mode" => "new", |
|
| 103 | + )); |
|
| 104 | + |
|
| 105 | + // create the user account |
|
| 106 | + $internalKey = $modx->getDatabase()->insert(array('username' => $modx->getDatabase()->escape($newusername)), $tbl_manager_users); |
|
| 107 | + |
|
| 108 | + $field = array(); |
|
| 109 | + $field['password'] = $modx->getPasswordHash()->HashPassword($newpassword); |
|
| 110 | + $modx->getDatabase()->update($field, $tbl_manager_users, "id='{$internalKey}'"); |
|
| 111 | + |
|
| 112 | + $field = compact('internalKey', 'fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'blocked', 'blockeduntil', 'blockedafter'); |
|
| 113 | + $field = $modx->getDatabase()->escape($field); |
|
| 114 | + $modx->getDatabase()->insert($field, $tbl_user_attributes); |
|
| 115 | + |
|
| 116 | + // Save user settings |
|
| 117 | + saveManagerUserSettings($internalKey); |
|
| 118 | + |
|
| 119 | + // invoke OnManagerSaveUser event |
|
| 120 | + $modx->invokeEvent("OnManagerSaveUser", array( |
|
| 121 | + "mode" => "new", |
|
| 122 | + "userid" => $internalKey, |
|
| 123 | + "username" => $newusername, |
|
| 124 | + "userpassword" => $newpassword, |
|
| 125 | + "useremail" => $email, |
|
| 126 | + "userfullname" => $fullname, |
|
| 127 | + "userroleid" => $role |
|
| 128 | + )); |
|
| 129 | + |
|
| 130 | + // invoke OnUserFormSave event |
|
| 131 | + $modx->invokeEvent("OnUserFormSave", array( |
|
| 132 | + "mode" => "new", |
|
| 133 | + "id" => $internalKey |
|
| 134 | + )); |
|
| 135 | + |
|
| 136 | + // Set the item name for logger |
|
| 137 | + $_SESSION['itemname'] = $newusername; |
|
| 138 | + |
|
| 139 | + /*******************************************************************************/ |
|
| 140 | + // put the user in the user_groups he/ she should be in |
|
| 141 | + // first, check that up_perms are switched on! |
|
| 142 | + if($use_udperms == 1) { |
|
| 143 | + if(!empty($user_groups)) { |
|
| 144 | + for($i = 0; $i < count($user_groups); $i++) { |
|
| 145 | + $f = array(); |
|
| 146 | + $f['user_group'] = (int)$user_groups[$i]; |
|
| 147 | + $f['member'] = $internalKey; |
|
| 148 | + $modx->getDatabase()->insert($f, $tbl_member_groups); |
|
| 149 | + } |
|
| 150 | + } |
|
| 151 | + } |
|
| 152 | + // end of user_groups stuff! |
|
| 153 | + |
|
| 154 | + if($passwordnotifymethod == 'e') { |
|
| 155 | + sendMailMessageForUser($email, $newusername, $newpassword, $fullname, $signupemail_message, MODX_MANAGER_URL); |
|
| 156 | + if($input['stay'] != '') { |
|
| 157 | + $a = ($input['stay'] == '2') ? "12&id={$internalKey}" : "11"; |
|
| 158 | + $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 159 | + header($header); |
|
| 160 | + } else { |
|
| 161 | + $header = "Location: index.php?a=75&r=2"; |
|
| 162 | + header($header); |
|
| 163 | + } |
|
| 164 | + } else { |
|
| 165 | + if($input['stay'] != '') { |
|
| 166 | + $a = ($input['stay'] == '2') ? "12&id={$internalKey}" : "11"; |
|
| 167 | + $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 168 | + } else { |
|
| 169 | + $stayUrl = "index.php?a=75&r=2"; |
|
| 170 | + } |
|
| 171 | + |
|
| 172 | + include_once "header.inc.php"; |
|
| 173 | + ?> |
|
| 174 | 174 | |
| 175 | 175 | <h1><?php echo $_lang['user_title']; ?></h1> |
| 176 | 176 | |
@@ -192,125 +192,125 @@ discard block |
||
| 192 | 192 | </div> |
| 193 | 193 | <?php |
| 194 | 194 | |
| 195 | - include_once "footer.inc.php"; |
|
| 196 | - } |
|
| 197 | - break; |
|
| 198 | - case '12' : // edit user |
|
| 199 | - // generate a new password for this user |
|
| 200 | - if($genpassword == 1) { |
|
| 201 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
| 202 | - if(strlen($specifiedpassword) < 6) { |
|
| 203 | - webAlertAndQuit("Password is too short!", 12); |
|
| 204 | - } else { |
|
| 205 | - $newpassword = $specifiedpassword; |
|
| 206 | - } |
|
| 207 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
| 208 | - webAlertAndQuit("You didn't specify a password for this user!", 12); |
|
| 209 | - } elseif($passwordgenmethod == 'g') { |
|
| 210 | - $newpassword = generate_password(8); |
|
| 211 | - } else { |
|
| 212 | - webAlertAndQuit("No password generation method specified!", 12); |
|
| 213 | - } |
|
| 214 | - } |
|
| 215 | - if($passwordnotifymethod == 'e') { |
|
| 216 | - sendMailMessageForUser($email, $newusername, $newpassword, $fullname, $signupemail_message, MODX_MANAGER_URL); |
|
| 217 | - } |
|
| 218 | - |
|
| 219 | - // check if the username already exist |
|
| 220 | - $rs = $modx->getDatabase()->select('count(id)', $tbl_manager_users, sprintf("username='%s' AND id!='%s'", $modx->getDatabase()->escape($newusername), $id)); |
|
| 221 | - $limit = $modx->getDatabase()->getValue($rs); |
|
| 222 | - if($limit > 0) { |
|
| 223 | - webAlertAndQuit("User name is already in use!", 12); |
|
| 224 | - } |
|
| 225 | - |
|
| 226 | - // check if the email address already exists |
|
| 227 | - $rs = $modx->getDatabase()->select('count(internalKey)', $tbl_user_attributes, sprintf("email='%s' AND internalKey!='%s'", $modx->getDatabase()->escape($email), $id)); |
|
| 228 | - $limit = $modx->getDatabase()->getValue($rs); |
|
| 229 | - if($limit > 0) { |
|
| 230 | - webAlertAndQuit("Email is already in use!", 12); |
|
| 231 | - } |
|
| 232 | - |
|
| 233 | - // invoke OnBeforeUserFormSave event |
|
| 234 | - $modx->invokeEvent("OnBeforeUserFormSave", array( |
|
| 235 | - "mode" => "upd", |
|
| 236 | - "id" => $id |
|
| 237 | - )); |
|
| 238 | - |
|
| 239 | - // update user name and password |
|
| 240 | - $field = array(); |
|
| 241 | - $field['username'] = $modx->getDatabase()->escape($newusername); |
|
| 242 | - if($genpassword == 1) { |
|
| 243 | - $field['password'] = $modx->getPasswordHash()->HashPassword($newpassword); |
|
| 244 | - } |
|
| 245 | - $modx->getDatabase()->update($field, $tbl_manager_users, "id='{$id}'"); |
|
| 246 | - $field = compact('fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'failedlogincount', 'blocked', 'blockeduntil', 'blockedafter'); |
|
| 247 | - $field = $modx->getDatabase()->escape($field); |
|
| 248 | - $modx->getDatabase()->update($field, $tbl_user_attributes, "internalKey='{$id}'"); |
|
| 249 | - |
|
| 250 | - // Save user settings |
|
| 251 | - saveManagerUserSettings($id); |
|
| 252 | - |
|
| 253 | - // Set the item name for logger |
|
| 254 | - $_SESSION['itemname'] = $newusername; |
|
| 255 | - |
|
| 256 | - // invoke OnManagerSaveUser event |
|
| 257 | - $modx->invokeEvent("OnManagerSaveUser", array( |
|
| 258 | - "mode" => "upd", |
|
| 259 | - "userid" => $id, |
|
| 260 | - "username" => $newusername, |
|
| 261 | - "userpassword" => $newpassword, |
|
| 262 | - "useremail" => $email, |
|
| 263 | - "userfullname" => $fullname, |
|
| 264 | - "userroleid" => $role, |
|
| 265 | - "oldusername" => (($oldusername != $newusername) ? $oldusername : ""), |
|
| 266 | - "olduseremail" => (($oldemail != $email) ? $oldemail : "") |
|
| 267 | - )); |
|
| 268 | - |
|
| 269 | - // invoke OnManagerChangePassword event |
|
| 270 | - if($genpassword == 1) { |
|
| 271 | - $modx->invokeEvent("OnManagerChangePassword", array( |
|
| 272 | - "userid" => $id, |
|
| 273 | - "username" => $newusername, |
|
| 274 | - "userpassword" => $newpassword |
|
| 275 | - )); |
|
| 276 | - } |
|
| 277 | - |
|
| 278 | - // invoke OnUserFormSave event |
|
| 279 | - $modx->invokeEvent("OnUserFormSave", array( |
|
| 280 | - "mode" => "upd", |
|
| 281 | - "id" => $id |
|
| 282 | - )); |
|
| 283 | - |
|
| 284 | - /*******************************************************************************/ |
|
| 285 | - // put the user in the user_groups he/ she should be in |
|
| 286 | - // first, check that up_perms are switched on! |
|
| 287 | - if($use_udperms == 1) { |
|
| 288 | - // as this is an existing user, delete his/ her entries in the groups before saving the new groups |
|
| 289 | - $modx->getDatabase()->delete($tbl_member_groups, "member='{$id}'"); |
|
| 290 | - if(!empty($user_groups)) { |
|
| 291 | - for($i = 0; $i < count($user_groups); $i++) { |
|
| 292 | - $field = array(); |
|
| 293 | - $field['user_group'] = (int)$user_groups[$i]; |
|
| 294 | - $field['member'] = $id; |
|
| 295 | - $modx->getDatabase()->insert($field, $tbl_member_groups); |
|
| 296 | - } |
|
| 297 | - } |
|
| 298 | - } |
|
| 299 | - // end of user_groups stuff! |
|
| 300 | - /*******************************************************************************/ |
|
| 301 | - if($id == $modx->getLoginUserID() && ($genpassword !== 1 && $passwordnotifymethod != 's')) { |
|
| 302 | - $modx->webAlertAndQuit($_lang["user_changeddata"], 'javascript:top.location.href="index.php?a=8";'); |
|
| 303 | - } |
|
| 304 | - if($genpassword == 1 && $passwordnotifymethod == 's') { |
|
| 305 | - if($input['stay'] != '') { |
|
| 306 | - $a = ($input['stay'] == '2') ? "12&id={$id}" : "11"; |
|
| 307 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 308 | - } else { |
|
| 309 | - $stayUrl = "index.php?a=75&r=2"; |
|
| 310 | - } |
|
| 311 | - |
|
| 312 | - include_once "header.inc.php"; |
|
| 313 | - ?> |
|
| 195 | + include_once "footer.inc.php"; |
|
| 196 | + } |
|
| 197 | + break; |
|
| 198 | + case '12' : // edit user |
|
| 199 | + // generate a new password for this user |
|
| 200 | + if($genpassword == 1) { |
|
| 201 | + if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
| 202 | + if(strlen($specifiedpassword) < 6) { |
|
| 203 | + webAlertAndQuit("Password is too short!", 12); |
|
| 204 | + } else { |
|
| 205 | + $newpassword = $specifiedpassword; |
|
| 206 | + } |
|
| 207 | + } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
| 208 | + webAlertAndQuit("You didn't specify a password for this user!", 12); |
|
| 209 | + } elseif($passwordgenmethod == 'g') { |
|
| 210 | + $newpassword = generate_password(8); |
|
| 211 | + } else { |
|
| 212 | + webAlertAndQuit("No password generation method specified!", 12); |
|
| 213 | + } |
|
| 214 | + } |
|
| 215 | + if($passwordnotifymethod == 'e') { |
|
| 216 | + sendMailMessageForUser($email, $newusername, $newpassword, $fullname, $signupemail_message, MODX_MANAGER_URL); |
|
| 217 | + } |
|
| 218 | + |
|
| 219 | + // check if the username already exist |
|
| 220 | + $rs = $modx->getDatabase()->select('count(id)', $tbl_manager_users, sprintf("username='%s' AND id!='%s'", $modx->getDatabase()->escape($newusername), $id)); |
|
| 221 | + $limit = $modx->getDatabase()->getValue($rs); |
|
| 222 | + if($limit > 0) { |
|
| 223 | + webAlertAndQuit("User name is already in use!", 12); |
|
| 224 | + } |
|
| 225 | + |
|
| 226 | + // check if the email address already exists |
|
| 227 | + $rs = $modx->getDatabase()->select('count(internalKey)', $tbl_user_attributes, sprintf("email='%s' AND internalKey!='%s'", $modx->getDatabase()->escape($email), $id)); |
|
| 228 | + $limit = $modx->getDatabase()->getValue($rs); |
|
| 229 | + if($limit > 0) { |
|
| 230 | + webAlertAndQuit("Email is already in use!", 12); |
|
| 231 | + } |
|
| 232 | + |
|
| 233 | + // invoke OnBeforeUserFormSave event |
|
| 234 | + $modx->invokeEvent("OnBeforeUserFormSave", array( |
|
| 235 | + "mode" => "upd", |
|
| 236 | + "id" => $id |
|
| 237 | + )); |
|
| 238 | + |
|
| 239 | + // update user name and password |
|
| 240 | + $field = array(); |
|
| 241 | + $field['username'] = $modx->getDatabase()->escape($newusername); |
|
| 242 | + if($genpassword == 1) { |
|
| 243 | + $field['password'] = $modx->getPasswordHash()->HashPassword($newpassword); |
|
| 244 | + } |
|
| 245 | + $modx->getDatabase()->update($field, $tbl_manager_users, "id='{$id}'"); |
|
| 246 | + $field = compact('fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'failedlogincount', 'blocked', 'blockeduntil', 'blockedafter'); |
|
| 247 | + $field = $modx->getDatabase()->escape($field); |
|
| 248 | + $modx->getDatabase()->update($field, $tbl_user_attributes, "internalKey='{$id}'"); |
|
| 249 | + |
|
| 250 | + // Save user settings |
|
| 251 | + saveManagerUserSettings($id); |
|
| 252 | + |
|
| 253 | + // Set the item name for logger |
|
| 254 | + $_SESSION['itemname'] = $newusername; |
|
| 255 | + |
|
| 256 | + // invoke OnManagerSaveUser event |
|
| 257 | + $modx->invokeEvent("OnManagerSaveUser", array( |
|
| 258 | + "mode" => "upd", |
|
| 259 | + "userid" => $id, |
|
| 260 | + "username" => $newusername, |
|
| 261 | + "userpassword" => $newpassword, |
|
| 262 | + "useremail" => $email, |
|
| 263 | + "userfullname" => $fullname, |
|
| 264 | + "userroleid" => $role, |
|
| 265 | + "oldusername" => (($oldusername != $newusername) ? $oldusername : ""), |
|
| 266 | + "olduseremail" => (($oldemail != $email) ? $oldemail : "") |
|
| 267 | + )); |
|
| 268 | + |
|
| 269 | + // invoke OnManagerChangePassword event |
|
| 270 | + if($genpassword == 1) { |
|
| 271 | + $modx->invokeEvent("OnManagerChangePassword", array( |
|
| 272 | + "userid" => $id, |
|
| 273 | + "username" => $newusername, |
|
| 274 | + "userpassword" => $newpassword |
|
| 275 | + )); |
|
| 276 | + } |
|
| 277 | + |
|
| 278 | + // invoke OnUserFormSave event |
|
| 279 | + $modx->invokeEvent("OnUserFormSave", array( |
|
| 280 | + "mode" => "upd", |
|
| 281 | + "id" => $id |
|
| 282 | + )); |
|
| 283 | + |
|
| 284 | + /*******************************************************************************/ |
|
| 285 | + // put the user in the user_groups he/ she should be in |
|
| 286 | + // first, check that up_perms are switched on! |
|
| 287 | + if($use_udperms == 1) { |
|
| 288 | + // as this is an existing user, delete his/ her entries in the groups before saving the new groups |
|
| 289 | + $modx->getDatabase()->delete($tbl_member_groups, "member='{$id}'"); |
|
| 290 | + if(!empty($user_groups)) { |
|
| 291 | + for($i = 0; $i < count($user_groups); $i++) { |
|
| 292 | + $field = array(); |
|
| 293 | + $field['user_group'] = (int)$user_groups[$i]; |
|
| 294 | + $field['member'] = $id; |
|
| 295 | + $modx->getDatabase()->insert($field, $tbl_member_groups); |
|
| 296 | + } |
|
| 297 | + } |
|
| 298 | + } |
|
| 299 | + // end of user_groups stuff! |
|
| 300 | + /*******************************************************************************/ |
|
| 301 | + if($id == $modx->getLoginUserID() && ($genpassword !== 1 && $passwordnotifymethod != 's')) { |
|
| 302 | + $modx->webAlertAndQuit($_lang["user_changeddata"], 'javascript:top.location.href="index.php?a=8";'); |
|
| 303 | + } |
|
| 304 | + if($genpassword == 1 && $passwordnotifymethod == 's') { |
|
| 305 | + if($input['stay'] != '') { |
|
| 306 | + $a = ($input['stay'] == '2') ? "12&id={$id}" : "11"; |
|
| 307 | + $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 308 | + } else { |
|
| 309 | + $stayUrl = "index.php?a=75&r=2"; |
|
| 310 | + } |
|
| 311 | + |
|
| 312 | + include_once "header.inc.php"; |
|
| 313 | + ?> |
|
| 314 | 314 | |
| 315 | 315 | <h1><?php echo $_lang['user_title']; ?></h1> |
| 316 | 316 | |
@@ -330,18 +330,18 @@ discard block |
||
| 330 | 330 | </div> |
| 331 | 331 | <?php |
| 332 | 332 | |
| 333 | - include_once "footer.inc.php"; |
|
| 334 | - } else { |
|
| 335 | - if($input['stay'] != '') { |
|
| 336 | - $a = ($input['stay'] == '2') ? "12&id={$id}" : "11"; |
|
| 337 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 338 | - header($header); |
|
| 339 | - } else { |
|
| 340 | - $header = "Location: index.php?a=75&r=2"; |
|
| 341 | - header($header); |
|
| 342 | - } |
|
| 343 | - } |
|
| 344 | - break; |
|
| 345 | - default: |
|
| 346 | - webAlertAndQuit("No operation set in request.", 12); |
|
| 333 | + include_once "footer.inc.php"; |
|
| 334 | + } else { |
|
| 335 | + if($input['stay'] != '') { |
|
| 336 | + $a = ($input['stay'] == '2') ? "12&id={$id}" : "11"; |
|
| 337 | + $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 338 | + header($header); |
|
| 339 | + } else { |
|
| 340 | + $header = "Location: index.php?a=75&r=2"; |
|
| 341 | + header($header); |
|
| 342 | + } |
|
| 343 | + } |
|
| 344 | + break; |
|
| 345 | + default: |
|
| 346 | + webAlertAndQuit("No operation set in request.", 12); |
|
| 347 | 347 | } |
@@ -1,8 +1,8 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | -if( ! defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 2 | +if (!defined('IN_MANAGER_MODE') || IN_MANAGER_MODE !== true) { |
|
| 3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
| 4 | 4 | } |
| 5 | -if(!$modx->hasPermission('save_user')) { |
|
| 5 | +if (!$modx->hasPermission('save_user')) { |
|
| 6 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
| 7 | 7 | } |
| 8 | 8 | |
@@ -12,7 +12,7 @@ discard block |
||
| 12 | 12 | |
| 13 | 13 | $input = $_POST; |
| 14 | 14 | |
| 15 | -$id = (int)$input['id']; |
|
| 15 | +$id = (int) $input['id']; |
|
| 16 | 16 | $oldusername = $input['oldusername']; |
| 17 | 17 | $newusername = !empty ($input['newusername']) ? trim($input['newusername']) : "New User"; |
| 18 | 18 | $fullname = $input['fullname']; |
@@ -42,56 +42,56 @@ discard block |
||
| 42 | 42 | $user_groups = $input['user_groups']; |
| 43 | 43 | |
| 44 | 44 | // verify password |
| 45 | -if($passwordgenmethod == "spec" && $input['specifiedpassword'] != $input['confirmpassword']) { |
|
| 45 | +if ($passwordgenmethod == "spec" && $input['specifiedpassword'] != $input['confirmpassword']) { |
|
| 46 | 46 | webAlertAndQuit("Password typed is mismatched", 12); |
| 47 | 47 | } |
| 48 | 48 | |
| 49 | 49 | // verify email |
| 50 | -if($email == '' || !preg_match("/^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,24}$/i", $email)) { |
|
| 50 | +if ($email == '' || !preg_match("/^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,24}$/i", $email)) { |
|
| 51 | 51 | webAlertAndQuit("E-mail address doesn't seem to be valid!", 12); |
| 52 | 52 | } |
| 53 | 53 | |
| 54 | 54 | // verify admin security |
| 55 | -if($_SESSION['mgrRole'] != 1) { |
|
| 55 | +if ($_SESSION['mgrRole'] != 1) { |
|
| 56 | 56 | // Check to see if user tried to spoof a "1" (admin) role |
| 57 | - if(!$modx->hasPermission('save_user')) { |
|
| 57 | + if (!$modx->hasPermission('save_user')) { |
|
| 58 | 58 | webAlertAndQuit("Illegal attempt to create/modify administrator by non-administrator!", 12); |
| 59 | 59 | } |
| 60 | 60 | // Verify that the user being edited wasn't an admin and the user ID got spoofed |
| 61 | 61 | $rs = $modx->getDatabase()->select('count(internalKey)', $tbl_user_attributes, "internalKey='{$id}' AND role=1"); |
| 62 | 62 | $limit = $modx->getDatabase()->getValue($rs); |
| 63 | - if($limit > 0) { |
|
| 63 | + if ($limit > 0) { |
|
| 64 | 64 | webAlertAndQuit("You cannot alter an administrative user.", 12); |
| 65 | 65 | } |
| 66 | 66 | |
| 67 | 67 | } |
| 68 | 68 | |
| 69 | -switch($input['mode']) { |
|
| 69 | +switch ($input['mode']) { |
|
| 70 | 70 | case '11' : // new user |
| 71 | 71 | // check if this user name already exist |
| 72 | 72 | $rs = $modx->getDatabase()->select('count(id)', $tbl_manager_users, sprintf("username='%s'", $modx->getDatabase()->escape($newusername))); |
| 73 | 73 | $limit = $modx->getDatabase()->getValue($rs); |
| 74 | - if($limit > 0) { |
|
| 74 | + if ($limit > 0) { |
|
| 75 | 75 | webAlertAndQuit("User name is already in use!", 12); |
| 76 | 76 | } |
| 77 | 77 | |
| 78 | 78 | // check if the email address already exist |
| 79 | 79 | $rs = $modx->getDatabase()->select('count(internalKey)', $tbl_user_attributes, sprintf("email='%s' AND id!='%s'", $modx->getDatabase()->escape($email), $id)); |
| 80 | 80 | $limit = $modx->getDatabase()->getValue($rs); |
| 81 | - if($limit > 0) { |
|
| 81 | + if ($limit > 0) { |
|
| 82 | 82 | webAlertAndQuit("Email is already in use!", 12); |
| 83 | 83 | } |
| 84 | 84 | |
| 85 | 85 | // generate a new password for this user |
| 86 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
| 87 | - if(strlen($specifiedpassword) < 6) { |
|
| 86 | + if ($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
| 87 | + if (strlen($specifiedpassword) < 6) { |
|
| 88 | 88 | webAlertAndQuit("Password is too short!", 12); |
| 89 | 89 | } else { |
| 90 | 90 | $newpassword = $specifiedpassword; |
| 91 | 91 | } |
| 92 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
| 92 | + } elseif ($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
| 93 | 93 | webAlertAndQuit("You didn't specify a password for this user!", 12); |
| 94 | - } elseif($passwordgenmethod == 'g') { |
|
| 94 | + } elseif ($passwordgenmethod == 'g') { |
|
| 95 | 95 | $newpassword = generate_password(8); |
| 96 | 96 | } else { |
| 97 | 97 | webAlertAndQuit("No password generation method specified!", 12); |
@@ -139,11 +139,11 @@ discard block |
||
| 139 | 139 | /*******************************************************************************/ |
| 140 | 140 | // put the user in the user_groups he/ she should be in |
| 141 | 141 | // first, check that up_perms are switched on! |
| 142 | - if($use_udperms == 1) { |
|
| 143 | - if(!empty($user_groups)) { |
|
| 144 | - for($i = 0; $i < count($user_groups); $i++) { |
|
| 142 | + if ($use_udperms == 1) { |
|
| 143 | + if (!empty($user_groups)) { |
|
| 144 | + for ($i = 0; $i < count($user_groups); $i++) { |
|
| 145 | 145 | $f = array(); |
| 146 | - $f['user_group'] = (int)$user_groups[$i]; |
|
| 146 | + $f['user_group'] = (int) $user_groups[$i]; |
|
| 147 | 147 | $f['member'] = $internalKey; |
| 148 | 148 | $modx->getDatabase()->insert($f, $tbl_member_groups); |
| 149 | 149 | } |
@@ -151,20 +151,20 @@ discard block |
||
| 151 | 151 | } |
| 152 | 152 | // end of user_groups stuff! |
| 153 | 153 | |
| 154 | - if($passwordnotifymethod == 'e') { |
|
| 154 | + if ($passwordnotifymethod == 'e') { |
|
| 155 | 155 | sendMailMessageForUser($email, $newusername, $newpassword, $fullname, $signupemail_message, MODX_MANAGER_URL); |
| 156 | - if($input['stay'] != '') { |
|
| 156 | + if ($input['stay'] != '') { |
|
| 157 | 157 | $a = ($input['stay'] == '2') ? "12&id={$internalKey}" : "11"; |
| 158 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 158 | + $header = "Location: index.php?a={$a}&r=2&stay=".$input['stay']; |
|
| 159 | 159 | header($header); |
| 160 | 160 | } else { |
| 161 | 161 | $header = "Location: index.php?a=75&r=2"; |
| 162 | 162 | header($header); |
| 163 | 163 | } |
| 164 | 164 | } else { |
| 165 | - if($input['stay'] != '') { |
|
| 165 | + if ($input['stay'] != '') { |
|
| 166 | 166 | $a = ($input['stay'] == '2') ? "12&id={$internalKey}" : "11"; |
| 167 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 167 | + $stayUrl = "index.php?a={$a}&r=2&stay=".$input['stay']; |
|
| 168 | 168 | } else { |
| 169 | 169 | $stayUrl = "index.php?a=75&r=2"; |
| 170 | 170 | } |
@@ -197,36 +197,36 @@ discard block |
||
| 197 | 197 | break; |
| 198 | 198 | case '12' : // edit user |
| 199 | 199 | // generate a new password for this user |
| 200 | - if($genpassword == 1) { |
|
| 201 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
| 202 | - if(strlen($specifiedpassword) < 6) { |
|
| 200 | + if ($genpassword == 1) { |
|
| 201 | + if ($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
| 202 | + if (strlen($specifiedpassword) < 6) { |
|
| 203 | 203 | webAlertAndQuit("Password is too short!", 12); |
| 204 | 204 | } else { |
| 205 | 205 | $newpassword = $specifiedpassword; |
| 206 | 206 | } |
| 207 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
| 207 | + } elseif ($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
| 208 | 208 | webAlertAndQuit("You didn't specify a password for this user!", 12); |
| 209 | - } elseif($passwordgenmethod == 'g') { |
|
| 209 | + } elseif ($passwordgenmethod == 'g') { |
|
| 210 | 210 | $newpassword = generate_password(8); |
| 211 | 211 | } else { |
| 212 | 212 | webAlertAndQuit("No password generation method specified!", 12); |
| 213 | 213 | } |
| 214 | 214 | } |
| 215 | - if($passwordnotifymethod == 'e') { |
|
| 215 | + if ($passwordnotifymethod == 'e') { |
|
| 216 | 216 | sendMailMessageForUser($email, $newusername, $newpassword, $fullname, $signupemail_message, MODX_MANAGER_URL); |
| 217 | 217 | } |
| 218 | 218 | |
| 219 | 219 | // check if the username already exist |
| 220 | 220 | $rs = $modx->getDatabase()->select('count(id)', $tbl_manager_users, sprintf("username='%s' AND id!='%s'", $modx->getDatabase()->escape($newusername), $id)); |
| 221 | 221 | $limit = $modx->getDatabase()->getValue($rs); |
| 222 | - if($limit > 0) { |
|
| 222 | + if ($limit > 0) { |
|
| 223 | 223 | webAlertAndQuit("User name is already in use!", 12); |
| 224 | 224 | } |
| 225 | 225 | |
| 226 | 226 | // check if the email address already exists |
| 227 | 227 | $rs = $modx->getDatabase()->select('count(internalKey)', $tbl_user_attributes, sprintf("email='%s' AND internalKey!='%s'", $modx->getDatabase()->escape($email), $id)); |
| 228 | 228 | $limit = $modx->getDatabase()->getValue($rs); |
| 229 | - if($limit > 0) { |
|
| 229 | + if ($limit > 0) { |
|
| 230 | 230 | webAlertAndQuit("Email is already in use!", 12); |
| 231 | 231 | } |
| 232 | 232 | |
@@ -239,7 +239,7 @@ discard block |
||
| 239 | 239 | // update user name and password |
| 240 | 240 | $field = array(); |
| 241 | 241 | $field['username'] = $modx->getDatabase()->escape($newusername); |
| 242 | - if($genpassword == 1) { |
|
| 242 | + if ($genpassword == 1) { |
|
| 243 | 243 | $field['password'] = $modx->getPasswordHash()->HashPassword($newpassword); |
| 244 | 244 | } |
| 245 | 245 | $modx->getDatabase()->update($field, $tbl_manager_users, "id='{$id}'"); |
@@ -267,7 +267,7 @@ discard block |
||
| 267 | 267 | )); |
| 268 | 268 | |
| 269 | 269 | // invoke OnManagerChangePassword event |
| 270 | - if($genpassword == 1) { |
|
| 270 | + if ($genpassword == 1) { |
|
| 271 | 271 | $modx->invokeEvent("OnManagerChangePassword", array( |
| 272 | 272 | "userid" => $id, |
| 273 | 273 | "username" => $newusername, |
@@ -284,13 +284,13 @@ discard block |
||
| 284 | 284 | /*******************************************************************************/ |
| 285 | 285 | // put the user in the user_groups he/ she should be in |
| 286 | 286 | // first, check that up_perms are switched on! |
| 287 | - if($use_udperms == 1) { |
|
| 287 | + if ($use_udperms == 1) { |
|
| 288 | 288 | // as this is an existing user, delete his/ her entries in the groups before saving the new groups |
| 289 | 289 | $modx->getDatabase()->delete($tbl_member_groups, "member='{$id}'"); |
| 290 | - if(!empty($user_groups)) { |
|
| 291 | - for($i = 0; $i < count($user_groups); $i++) { |
|
| 290 | + if (!empty($user_groups)) { |
|
| 291 | + for ($i = 0; $i < count($user_groups); $i++) { |
|
| 292 | 292 | $field = array(); |
| 293 | - $field['user_group'] = (int)$user_groups[$i]; |
|
| 293 | + $field['user_group'] = (int) $user_groups[$i]; |
|
| 294 | 294 | $field['member'] = $id; |
| 295 | 295 | $modx->getDatabase()->insert($field, $tbl_member_groups); |
| 296 | 296 | } |
@@ -298,13 +298,13 @@ discard block |
||
| 298 | 298 | } |
| 299 | 299 | // end of user_groups stuff! |
| 300 | 300 | /*******************************************************************************/ |
| 301 | - if($id == $modx->getLoginUserID() && ($genpassword !== 1 && $passwordnotifymethod != 's')) { |
|
| 301 | + if ($id == $modx->getLoginUserID() && ($genpassword !== 1 && $passwordnotifymethod != 's')) { |
|
| 302 | 302 | $modx->webAlertAndQuit($_lang["user_changeddata"], 'javascript:top.location.href="index.php?a=8";'); |
| 303 | 303 | } |
| 304 | - if($genpassword == 1 && $passwordnotifymethod == 's') { |
|
| 305 | - if($input['stay'] != '') { |
|
| 304 | + if ($genpassword == 1 && $passwordnotifymethod == 's') { |
|
| 305 | + if ($input['stay'] != '') { |
|
| 306 | 306 | $a = ($input['stay'] == '2') ? "12&id={$id}" : "11"; |
| 307 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 307 | + $stayUrl = "index.php?a={$a}&r=2&stay=".$input['stay']; |
|
| 308 | 308 | } else { |
| 309 | 309 | $stayUrl = "index.php?a=75&r=2"; |
| 310 | 310 | } |
@@ -324,7 +324,7 @@ discard block |
||
| 324 | 324 | <div class="sectionHeader"><?php echo $_lang['user_title']; ?></div> |
| 325 | 325 | <div class="sectionBody"> |
| 326 | 326 | <div id="disp"> |
| 327 | - <p><?php echo sprintf($_lang["password_msg"], $modx->getPhpCompat()->htmlspecialchars($newusername), $modx->getPhpCompat()->htmlspecialchars($newpassword)) . (($id == $modx->getLoginUserID()) ? ' ' . $_lang['user_changeddata'] : ''); ?></p> |
|
| 327 | + <p><?php echo sprintf($_lang["password_msg"], $modx->getPhpCompat()->htmlspecialchars($newusername), $modx->getPhpCompat()->htmlspecialchars($newpassword)).(($id == $modx->getLoginUserID()) ? ' '.$_lang['user_changeddata'] : ''); ?></p> |
|
| 328 | 328 | </div> |
| 329 | 329 | </div> |
| 330 | 330 | </div> |
@@ -332,9 +332,9 @@ discard block |
||
| 332 | 332 | |
| 333 | 333 | include_once "footer.inc.php"; |
| 334 | 334 | } else { |
| 335 | - if($input['stay'] != '') { |
|
| 335 | + if ($input['stay'] != '') { |
|
| 336 | 336 | $a = ($input['stay'] == '2') ? "12&id={$id}" : "11"; |
| 337 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
| 337 | + $header = "Location: index.php?a={$a}&r=2&stay=".$input['stay']; |
|
| 338 | 338 | header($header); |
| 339 | 339 | } else { |
| 340 | 340 | $header = "Location: index.php?a=75&r=2"; |