@@ -491,7 +491,7 @@ |
||
491 | 491 | }elseif ((!empty($pub_date)&& $pub_date<=$currentdate && $published)) { |
492 | 492 | $publishedon = $pub_date; |
493 | 493 | $publishedby = $modx->getLoginUserID(); |
494 | - }elseif ($was_published && !$published) { |
|
494 | + }elseif ($was_published && !$published) { |
|
495 | 495 | $publishedon = 0; |
496 | 496 | $publishedby = 0; |
497 | 497 | } else { |
@@ -273,11 +273,11 @@ discard block |
||
273 | 273 | } |
274 | 274 | |
275 | 275 | switch ($actionToTake) { |
276 | - case 'new' : |
|
276 | + case 'new' : |
|
277 | 277 | |
278 | - // invoke OnBeforeDocFormSave event |
|
279 | - switch($modx->config['docid_incrmnt_method']) |
|
280 | - { |
|
278 | + // invoke OnBeforeDocFormSave event |
|
279 | + switch($modx->config['docid_incrmnt_method']) |
|
280 | + { |
|
281 | 281 | case '1': |
282 | 282 | $from = "{$tbl_site_content} AS T0 LEFT JOIN {$tbl_site_content} AS T1 ON T0.id + 1 = T1.id"; |
283 | 283 | $where = "T1.id IS NULL"; |
@@ -291,7 +291,7 @@ discard block |
||
291 | 291 | |
292 | 292 | default: |
293 | 293 | $id = ''; |
294 | - } |
|
294 | + } |
|
295 | 295 | |
296 | 296 | $modx->invokeEvent("OnBeforeDocFormSave", array ( |
297 | 297 | "mode" => "new", |
@@ -442,256 +442,256 @@ discard block |
||
442 | 442 | |
443 | 443 | |
444 | 444 | break; |
445 | - case 'edit' : |
|
445 | + case 'edit' : |
|
446 | 446 | |
447 | - // get the document's current parent |
|
448 | - $oldparent = $existingDocument['parent']; |
|
449 | - $doctype = $existingDocument['type']; |
|
447 | + // get the document's current parent |
|
448 | + $oldparent = $existingDocument['parent']; |
|
449 | + $doctype = $existingDocument['type']; |
|
450 | 450 | |
451 | - if ($id == $site_start && $published == 0) { |
|
452 | - $modx->manager->saveFormValues(27); |
|
453 | - $modx->webAlertAndQuit("Document is linked to site_start variable and cannot be unpublished!"); |
|
454 | - } |
|
455 | - $today = $_SERVER['REQUEST_TIME'] + $modx->config['server_offset_time']; |
|
456 | - if ($id == $site_start && ($pub_date > $today || $unpub_date != "0")) { |
|
457 | - $modx->manager->saveFormValues(27); |
|
458 | - $modx->webAlertAndQuit("Document is linked to site_start variable and cannot have publish or unpublish dates set!"); |
|
459 | - } |
|
460 | - if ($parent == $id) { |
|
461 | - $modx->manager->saveFormValues(27); |
|
462 | - $modx->webAlertAndQuit("Document can not be it's own parent!"); |
|
463 | - } |
|
451 | + if ($id == $site_start && $published == 0) { |
|
452 | + $modx->manager->saveFormValues(27); |
|
453 | + $modx->webAlertAndQuit("Document is linked to site_start variable and cannot be unpublished!"); |
|
454 | + } |
|
455 | + $today = $_SERVER['REQUEST_TIME'] + $modx->config['server_offset_time']; |
|
456 | + if ($id == $site_start && ($pub_date > $today || $unpub_date != "0")) { |
|
457 | + $modx->manager->saveFormValues(27); |
|
458 | + $modx->webAlertAndQuit("Document is linked to site_start variable and cannot have publish or unpublish dates set!"); |
|
459 | + } |
|
460 | + if ($parent == $id) { |
|
461 | + $modx->manager->saveFormValues(27); |
|
462 | + $modx->webAlertAndQuit("Document can not be it's own parent!"); |
|
463 | + } |
|
464 | 464 | |
465 | - $parents = $modx->getParentIds($parent); |
|
466 | - if (in_array($id, $parents)) { |
|
467 | - $modx->webAlertAndQuit("Document descendant can not be it's parent!"); |
|
468 | - } |
|
465 | + $parents = $modx->getParentIds($parent); |
|
466 | + if (in_array($id, $parents)) { |
|
467 | + $modx->webAlertAndQuit("Document descendant can not be it's parent!"); |
|
468 | + } |
|
469 | 469 | |
470 | - // check to see document is a folder |
|
471 | - $rs = $modx->db->select('count(id)', $tbl_site_content, "parent='{$id}'"); |
|
472 | - $count = $modx->db->getValue($rs); |
|
473 | - if ($count > 0) { |
|
474 | - $isfolder = 1; |
|
475 | - } |
|
476 | - |
|
477 | - // set publishedon and publishedby |
|
478 | - $was_published = $existingDocument['published']; |
|
479 | - |
|
480 | - // keep original publish state, if change is not permitted |
|
481 | - if (!$modx->hasPermission('publish_document')) { |
|
482 | - $published = $was_published; |
|
483 | - $pub_date = 'pub_date'; |
|
484 | - $unpub_date = 'unpub_date'; |
|
485 | - } |
|
470 | + // check to see document is a folder |
|
471 | + $rs = $modx->db->select('count(id)', $tbl_site_content, "parent='{$id}'"); |
|
472 | + $count = $modx->db->getValue($rs); |
|
473 | + if ($count > 0) { |
|
474 | + $isfolder = 1; |
|
475 | + } |
|
486 | 476 | |
487 | - // if it was changed from unpublished to published |
|
488 | - if (!$was_published && $published) { |
|
489 | - $publishedon = $currentdate; |
|
490 | - $publishedby = $modx->getLoginUserID(); |
|
491 | - }elseif ((!empty($pub_date)&& $pub_date<=$currentdate && $published)) { |
|
492 | - $publishedon = $pub_date; |
|
493 | - $publishedby = $modx->getLoginUserID(); |
|
494 | - }elseif ($was_published && !$published) { |
|
495 | - $publishedon = 0; |
|
496 | - $publishedby = 0; |
|
497 | - } else { |
|
498 | - $publishedon = 'publishedon'; |
|
499 | - $publishedby = 'publishedby'; |
|
500 | - } |
|
477 | + // set publishedon and publishedby |
|
478 | + $was_published = $existingDocument['published']; |
|
501 | 479 | |
502 | - // invoke OnBeforeDocFormSave event |
|
503 | - $modx->invokeEvent("OnBeforeDocFormSave", array ( |
|
504 | - "mode" => "upd", |
|
505 | - "id" => $id |
|
506 | - )); |
|
480 | + // keep original publish state, if change is not permitted |
|
481 | + if (!$modx->hasPermission('publish_document')) { |
|
482 | + $published = $was_published; |
|
483 | + $pub_date = 'pub_date'; |
|
484 | + $unpub_date = 'unpub_date'; |
|
485 | + } |
|
507 | 486 | |
508 | - // update the document |
|
509 | - $modx->db->update( |
|
510 | - "introtext='{$introtext}', " |
|
511 | - . "content='{$content}', " |
|
512 | - . "pagetitle='{$pagetitle}', " |
|
513 | - . "longtitle='{$longtitle}', " |
|
514 | - . "type='{$type}', " |
|
515 | - . "description='{$description}', " |
|
516 | - . "alias='{$alias}', " |
|
517 | - . "link_attributes='{$link_attributes}', " |
|
518 | - . "isfolder={$isfolder}, " |
|
519 | - . "richtext={$richtext}, " |
|
520 | - . "published={$published}, " |
|
521 | - . "pub_date={$pub_date}, " |
|
522 | - . "unpub_date={$unpub_date}, " |
|
523 | - . "parent={$parent}, " |
|
524 | - . "template={$template}, " |
|
525 | - . "menuindex={$menuindex}, " |
|
526 | - . "searchable={$searchable}, " |
|
527 | - . "cacheable={$cacheable}, " |
|
528 | - . "editedby=" . $modx->getLoginUserID() . ", " |
|
529 | - . "editedon={$currentdate}, " |
|
530 | - . "publishedon={$publishedon}, " |
|
531 | - . "publishedby={$publishedby}, " |
|
532 | - . "contentType='{$contentType}', " |
|
533 | - . "content_dispo={$contentdispo}, " |
|
534 | - . "donthit={$donthit}, " |
|
535 | - . "menutitle='{$menutitle}', " |
|
536 | - . "hidemenu={$hidemenu}, " |
|
537 | - . "alias_visible={$aliasvisible}" |
|
538 | - , $tbl_site_content, "id='{$id}'"); |
|
539 | - |
|
540 | - // update template variables |
|
541 | - $rs = $modx->db->select('id, tmplvarid', $tbl_site_tmplvar_contentvalues, "contentid='{$id}'"); |
|
542 | - $tvIds = array (); |
|
543 | - while ($row = $modx->db->getRow($rs)) { |
|
544 | - $tvIds[$row['tmplvarid']] = $row['id']; |
|
545 | - } |
|
546 | - $tvDeletions = array(); |
|
547 | - $tvChanges = array(); |
|
548 | - foreach ($tmplvars as $field => $value) { |
|
549 | - if (!is_array($value)) { |
|
550 | - if (isset($tvIds[$value])) $tvDeletions[] = $tvIds[$value]; |
|
487 | + // if it was changed from unpublished to published |
|
488 | + if (!$was_published && $published) { |
|
489 | + $publishedon = $currentdate; |
|
490 | + $publishedby = $modx->getLoginUserID(); |
|
491 | + }elseif ((!empty($pub_date)&& $pub_date<=$currentdate && $published)) { |
|
492 | + $publishedon = $pub_date; |
|
493 | + $publishedby = $modx->getLoginUserID(); |
|
494 | + }elseif ($was_published && !$published) { |
|
495 | + $publishedon = 0; |
|
496 | + $publishedby = 0; |
|
551 | 497 | } else { |
552 | - $tvId = $value[0]; |
|
553 | - $tvVal = $value[1]; |
|
498 | + $publishedon = 'publishedon'; |
|
499 | + $publishedby = 'publishedby'; |
|
500 | + } |
|
554 | 501 | |
555 | - if (isset($tvIds[$tvId])) { |
|
556 | - $tvChanges[] = array(array('tmplvarid' => $tvId, 'contentid' => $id, 'value' => $modx->db->escape($tvVal)), array('id' => $tvIds[$tvId])); |
|
502 | + // invoke OnBeforeDocFormSave event |
|
503 | + $modx->invokeEvent("OnBeforeDocFormSave", array ( |
|
504 | + "mode" => "upd", |
|
505 | + "id" => $id |
|
506 | + )); |
|
507 | + |
|
508 | + // update the document |
|
509 | + $modx->db->update( |
|
510 | + "introtext='{$introtext}', " |
|
511 | + . "content='{$content}', " |
|
512 | + . "pagetitle='{$pagetitle}', " |
|
513 | + . "longtitle='{$longtitle}', " |
|
514 | + . "type='{$type}', " |
|
515 | + . "description='{$description}', " |
|
516 | + . "alias='{$alias}', " |
|
517 | + . "link_attributes='{$link_attributes}', " |
|
518 | + . "isfolder={$isfolder}, " |
|
519 | + . "richtext={$richtext}, " |
|
520 | + . "published={$published}, " |
|
521 | + . "pub_date={$pub_date}, " |
|
522 | + . "unpub_date={$unpub_date}, " |
|
523 | + . "parent={$parent}, " |
|
524 | + . "template={$template}, " |
|
525 | + . "menuindex={$menuindex}, " |
|
526 | + . "searchable={$searchable}, " |
|
527 | + . "cacheable={$cacheable}, " |
|
528 | + . "editedby=" . $modx->getLoginUserID() . ", " |
|
529 | + . "editedon={$currentdate}, " |
|
530 | + . "publishedon={$publishedon}, " |
|
531 | + . "publishedby={$publishedby}, " |
|
532 | + . "contentType='{$contentType}', " |
|
533 | + . "content_dispo={$contentdispo}, " |
|
534 | + . "donthit={$donthit}, " |
|
535 | + . "menutitle='{$menutitle}', " |
|
536 | + . "hidemenu={$hidemenu}, " |
|
537 | + . "alias_visible={$aliasvisible}" |
|
538 | + , $tbl_site_content, "id='{$id}'"); |
|
539 | + |
|
540 | + // update template variables |
|
541 | + $rs = $modx->db->select('id, tmplvarid', $tbl_site_tmplvar_contentvalues, "contentid='{$id}'"); |
|
542 | + $tvIds = array (); |
|
543 | + while ($row = $modx->db->getRow($rs)) { |
|
544 | + $tvIds[$row['tmplvarid']] = $row['id']; |
|
545 | + } |
|
546 | + $tvDeletions = array(); |
|
547 | + $tvChanges = array(); |
|
548 | + foreach ($tmplvars as $field => $value) { |
|
549 | + if (!is_array($value)) { |
|
550 | + if (isset($tvIds[$value])) $tvDeletions[] = $tvIds[$value]; |
|
557 | 551 | } else { |
558 | - $tvAdded[] = array('tmplvarid' => $tvId, 'contentid' => $id, 'value' => $modx->db->escape($tvVal)); |
|
552 | + $tvId = $value[0]; |
|
553 | + $tvVal = $value[1]; |
|
554 | + |
|
555 | + if (isset($tvIds[$tvId])) { |
|
556 | + $tvChanges[] = array(array('tmplvarid' => $tvId, 'contentid' => $id, 'value' => $modx->db->escape($tvVal)), array('id' => $tvIds[$tvId])); |
|
557 | + } else { |
|
558 | + $tvAdded[] = array('tmplvarid' => $tvId, 'contentid' => $id, 'value' => $modx->db->escape($tvVal)); |
|
559 | + } |
|
559 | 560 | } |
560 | 561 | } |
561 | - } |
|
562 | 562 | |
563 | - if (!empty($tvDeletions)) { |
|
564 | - $modx->db->delete($tbl_site_tmplvar_contentvalues, 'id IN('.implode(',', $tvDeletions).')'); |
|
565 | - } |
|
563 | + if (!empty($tvDeletions)) { |
|
564 | + $modx->db->delete($tbl_site_tmplvar_contentvalues, 'id IN('.implode(',', $tvDeletions).')'); |
|
565 | + } |
|
566 | 566 | |
567 | - if (!empty($tvAdded)) { |
|
568 | - foreach ($tvAdded as $tv) { |
|
569 | - $modx->db->insert($tv, $tbl_site_tmplvar_contentvalues); |
|
567 | + if (!empty($tvAdded)) { |
|
568 | + foreach ($tvAdded as $tv) { |
|
569 | + $modx->db->insert($tv, $tbl_site_tmplvar_contentvalues); |
|
570 | + } |
|
570 | 571 | } |
571 | - } |
|
572 | 572 | |
573 | - if (!empty($tvChanges)) { |
|
574 | - foreach ($tvChanges as $tv) { |
|
575 | - $modx->db->update($tv[0], $tbl_site_tmplvar_contentvalues, "id='{$tv[1]['id']}'"); |
|
573 | + if (!empty($tvChanges)) { |
|
574 | + foreach ($tvChanges as $tv) { |
|
575 | + $modx->db->update($tv[0], $tbl_site_tmplvar_contentvalues, "id='{$tv[1]['id']}'"); |
|
576 | + } |
|
576 | 577 | } |
577 | - } |
|
578 | 578 | |
579 | - // set document permissions |
|
580 | - if ($use_udperms == 1 && is_array($document_groups)) { |
|
581 | - $new_groups = array(); |
|
582 | - // process the new input |
|
583 | - foreach ($document_groups as $value_pair) { |
|
584 | - list($group, $link_id) = explode(',', $value_pair); // @see actions/mutate_content.dynamic.php @ line 1138 (permissions list) |
|
585 | - $new_groups[$group] = $link_id; |
|
586 | - } |
|
579 | + // set document permissions |
|
580 | + if ($use_udperms == 1 && is_array($document_groups)) { |
|
581 | + $new_groups = array(); |
|
582 | + // process the new input |
|
583 | + foreach ($document_groups as $value_pair) { |
|
584 | + list($group, $link_id) = explode(',', $value_pair); // @see actions/mutate_content.dynamic.php @ line 1138 (permissions list) |
|
585 | + $new_groups[$group] = $link_id; |
|
586 | + } |
|
587 | 587 | |
588 | - // grab the current set of permissions on this document the user can access |
|
589 | - $isManager = $modx->hasPermission('access_permissions'); |
|
590 | - $isWeb = $modx->hasPermission('web_access_permissions'); |
|
591 | - $rs = $modx->db->select( |
|
592 | - 'groups.id, groups.document_group', |
|
593 | - "{$tbl_document_groups} AS groups |
|
588 | + // grab the current set of permissions on this document the user can access |
|
589 | + $isManager = $modx->hasPermission('access_permissions'); |
|
590 | + $isWeb = $modx->hasPermission('web_access_permissions'); |
|
591 | + $rs = $modx->db->select( |
|
592 | + 'groups.id, groups.document_group', |
|
593 | + "{$tbl_document_groups} AS groups |
|
594 | 594 | LEFT JOIN {$tbl_documentgroup_names} AS dgn ON dgn.id = groups.document_group", |
595 | - "((1=".(int)$isManager." AND dgn.private_memgroup) OR (1=".(int)$isWeb." AND dgn.private_webgroup)) AND groups.document = '{$id}'" |
|
596 | - ); |
|
597 | - $old_groups = array(); |
|
598 | - while ($row = $modx->db->getRow($rs)) $old_groups[$row['document_group']] = $row['id']; |
|
599 | - |
|
600 | - // update the permissions in the database |
|
601 | - $insertions = $deletions = array(); |
|
602 | - foreach ($new_groups as $group => $link_id) { |
|
603 | - if (array_key_exists($group, $old_groups)) { |
|
604 | - unset($old_groups[$group]); |
|
605 | - continue; |
|
606 | - } elseif ($link_id == 'new') { |
|
607 | - $insertions[] = '('.(int)$group.','.$id.')'; |
|
595 | + "((1=".(int)$isManager." AND dgn.private_memgroup) OR (1=".(int)$isWeb." AND dgn.private_webgroup)) AND groups.document = '{$id}'" |
|
596 | + ); |
|
597 | + $old_groups = array(); |
|
598 | + while ($row = $modx->db->getRow($rs)) $old_groups[$row['document_group']] = $row['id']; |
|
599 | + |
|
600 | + // update the permissions in the database |
|
601 | + $insertions = $deletions = array(); |
|
602 | + foreach ($new_groups as $group => $link_id) { |
|
603 | + if (array_key_exists($group, $old_groups)) { |
|
604 | + unset($old_groups[$group]); |
|
605 | + continue; |
|
606 | + } elseif ($link_id == 'new') { |
|
607 | + $insertions[] = '('.(int)$group.','.$id.')'; |
|
608 | + } |
|
609 | + } |
|
610 | + if (!empty($insertions)) { |
|
611 | + $modx->db->query("INSERT INTO {$tbl_document_groups} (document_group, document) VALUES ".implode(',', $insertions)); |
|
612 | + } |
|
613 | + if (!empty($old_groups)) { |
|
614 | + $modx->db->delete($tbl_document_groups, "id IN (".implode(',', $old_groups).")"); |
|
615 | + } |
|
616 | + // necessary to remove all permissions as document is public |
|
617 | + if ((isset($_POST['chkalldocs']) && $_POST['chkalldocs'] == 'on')) { |
|
618 | + $modx->db->delete($tbl_document_groups, "document='{$id}'"); |
|
608 | 619 | } |
609 | 620 | } |
610 | - if (!empty($insertions)) { |
|
611 | - $modx->db->query("INSERT INTO {$tbl_document_groups} (document_group, document) VALUES ".implode(',', $insertions)); |
|
612 | - } |
|
613 | - if (!empty($old_groups)) { |
|
614 | - $modx->db->delete($tbl_document_groups, "id IN (".implode(',', $old_groups).")"); |
|
615 | - } |
|
616 | - // necessary to remove all permissions as document is public |
|
617 | - if ((isset($_POST['chkalldocs']) && $_POST['chkalldocs'] == 'on')) { |
|
618 | - $modx->db->delete($tbl_document_groups, "document='{$id}'"); |
|
621 | + |
|
622 | + // do the parent stuff |
|
623 | + if ($parent != 0) { |
|
624 | + $fields = array('isfolder' => 1); |
|
625 | + $modx->db->update($fields, $tbl_site_content, "id='{$_REQUEST['parent']}'"); |
|
619 | 626 | } |
620 | - } |
|
621 | 627 | |
622 | - // do the parent stuff |
|
623 | - if ($parent != 0) { |
|
624 | - $fields = array('isfolder' => 1); |
|
625 | - $modx->db->update($fields, $tbl_site_content, "id='{$_REQUEST['parent']}'"); |
|
626 | - } |
|
628 | + // finished moving the document, now check to see if the old_parent should no longer be a folder |
|
629 | + $rs = $modx->db->select('COUNT(id)', $tbl_site_content, "parent='{$oldparent}'"); |
|
630 | + $limit = $modx->db->getValue($rs); |
|
627 | 631 | |
628 | - // finished moving the document, now check to see if the old_parent should no longer be a folder |
|
629 | - $rs = $modx->db->select('COUNT(id)', $tbl_site_content, "parent='{$oldparent}'"); |
|
630 | - $limit = $modx->db->getValue($rs); |
|
632 | + if ($limit == 0) { |
|
633 | + $fields = array('isfolder' => 0); |
|
634 | + $modx->db->update($fields, $tbl_site_content, "id='{$oldparent}'"); |
|
635 | + } |
|
631 | 636 | |
632 | - if ($limit == 0) { |
|
633 | - $fields = array('isfolder' => 0); |
|
634 | - $modx->db->update($fields, $tbl_site_content, "id='{$oldparent}'"); |
|
635 | - } |
|
636 | 637 | |
638 | + // invoke OnDocFormSave event |
|
639 | + $modx->invokeEvent("OnDocFormSave", array ( |
|
640 | + "mode" => "upd", |
|
641 | + "id" => $id |
|
642 | + )); |
|
637 | 643 | |
638 | - // invoke OnDocFormSave event |
|
639 | - $modx->invokeEvent("OnDocFormSave", array ( |
|
640 | - "mode" => "upd", |
|
641 | - "id" => $id |
|
642 | - )); |
|
644 | + // secure web documents - flag as private |
|
645 | + include MODX_MANAGER_PATH . "includes/secure_web_documents.inc.php"; |
|
646 | + secureWebDocument($id); |
|
643 | 647 | |
644 | - // secure web documents - flag as private |
|
645 | - include MODX_MANAGER_PATH . "includes/secure_web_documents.inc.php"; |
|
646 | - secureWebDocument($id); |
|
648 | + // secure manager documents - flag as private |
|
649 | + include MODX_MANAGER_PATH . "includes/secure_mgr_documents.inc.php"; |
|
650 | + secureMgrDocument($id); |
|
647 | 651 | |
648 | - // secure manager documents - flag as private |
|
649 | - include MODX_MANAGER_PATH . "includes/secure_mgr_documents.inc.php"; |
|
650 | - secureMgrDocument($id); |
|
651 | - |
|
652 | - // Set the item name for logger |
|
653 | - $_SESSION['itemname'] = $no_esc_pagetitle; |
|
652 | + // Set the item name for logger |
|
653 | + $_SESSION['itemname'] = $no_esc_pagetitle; |
|
654 | 654 | |
655 | - if ($syncsite == 1) { |
|
656 | - // empty cache |
|
657 | - $keys = array('alias','parent','published','isfolder','menuindex','alias_visible'); |
|
658 | - $flag = ''; |
|
659 | - foreach($keys as $key) { |
|
660 | - if ($existingDocument[$key]===$_POST[$key]) continue; |
|
661 | - $flag = 'full'; |
|
662 | - break; |
|
655 | + if ($syncsite == 1) { |
|
656 | + // empty cache |
|
657 | + $keys = array('alias','parent','published','isfolder','menuindex','alias_visible'); |
|
658 | + $flag = ''; |
|
659 | + foreach($keys as $key) { |
|
660 | + if ($existingDocument[$key]===$_POST[$key]) continue; |
|
661 | + $flag = 'full'; |
|
662 | + break; |
|
663 | + } |
|
664 | + if($flag==='full') $modx->clearCache('full'); |
|
665 | + else $modx->clearCache($id); |
|
663 | 666 | } |
664 | - if($flag==='full') $modx->clearCache('full'); |
|
665 | - else $modx->clearCache($id); |
|
666 | - } |
|
667 | 667 | |
668 | - if ($_POST['refresh_preview'] == '1') |
|
669 | - $header = "Location: ".MODX_SITE_URL."index.php?id=$id&z=manprev"; |
|
670 | - else { |
|
671 | - if ($_POST['stay'] != '2' && $id > 0) { |
|
672 | - $modx->unlockElement(7, $id); |
|
673 | - } |
|
674 | - if ($_POST['stay'] != '') { |
|
675 | - $id = $_REQUEST['id']; |
|
676 | - if ($type == "reference") { |
|
677 | - // weblink |
|
678 | - $a = ($_POST['stay'] == '2') ? "27&id=$id" : "72&pid=$parent"; |
|
668 | + if ($_POST['refresh_preview'] == '1') |
|
669 | + $header = "Location: ".MODX_SITE_URL."index.php?id=$id&z=manprev"; |
|
670 | + else { |
|
671 | + if ($_POST['stay'] != '2' && $id > 0) { |
|
672 | + $modx->unlockElement(7, $id); |
|
673 | + } |
|
674 | + if ($_POST['stay'] != '') { |
|
675 | + $id = $_REQUEST['id']; |
|
676 | + if ($type == "reference") { |
|
677 | + // weblink |
|
678 | + $a = ($_POST['stay'] == '2') ? "27&id=$id" : "72&pid=$parent"; |
|
679 | + } else { |
|
680 | + // document |
|
681 | + $a = ($_POST['stay'] == '2') ? "27&id=$id" : "4&pid=$parent"; |
|
682 | + } |
|
683 | + $header = "Location: index.php?a=" . $a . "&r=1&stay=" . $_POST['stay'].$add_path; |
|
679 | 684 | } else { |
680 | - // document |
|
681 | - $a = ($_POST['stay'] == '2') ? "27&id=$id" : "4&pid=$parent"; |
|
685 | + $header = "Location: index.php?a=3&id=$id&r=1".$add_path; |
|
682 | 686 | } |
683 | - $header = "Location: index.php?a=" . $a . "&r=1&stay=" . $_POST['stay'].$add_path; |
|
687 | + } |
|
688 | + if (headers_sent()) { |
|
689 | + $header = str_replace('Location: ','',$header); |
|
690 | + echo "<script>document.location.href='$header';</script>\n"; |
|
684 | 691 | } else { |
685 | - $header = "Location: index.php?a=3&id=$id&r=1".$add_path; |
|
692 | + header($header); |
|
686 | 693 | } |
687 | - } |
|
688 | - if (headers_sent()) { |
|
689 | - $header = str_replace('Location: ','',$header); |
|
690 | - echo "<script>document.location.href='$header';</script>\n"; |
|
691 | - } else { |
|
692 | - header($header); |
|
693 | - } |
|
694 | - break; |
|
695 | - default : |
|
696 | - $modx->webAlertAndQuit("No operation set in request."); |
|
694 | + break; |
|
695 | + default : |
|
696 | + $modx->webAlertAndQuit("No operation set in request."); |
|
697 | 697 | } |
@@ -1,5 +1,5 @@ discard block |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
2 | +if (IN_MANAGER_MODE != "true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | 3 | if (!$modx->hasPermission('save_document')) { |
4 | 4 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 5 | } |
@@ -34,10 +34,10 @@ discard block |
||
34 | 34 | $aliasvisible = $_POST['alias_visible']; |
35 | 35 | |
36 | 36 | /************* webber ********/ |
37 | -$sd=isset($_POST['dir'])?'&dir='.$_POST['dir']:'&dir=DESC'; |
|
38 | -$sb=isset($_POST['sort'])?'&sort='.$_POST['sort']:'&sort=pub_date'; |
|
39 | -$pg=isset($_POST['page'])?'&page='.(int)$_POST['page']:''; |
|
40 | -$add_path=$sd.$sb.$pg; |
|
37 | +$sd = isset($_POST['dir']) ? '&dir='.$_POST['dir'] : '&dir=DESC'; |
|
38 | +$sb = isset($_POST['sort']) ? '&sort='.$_POST['sort'] : '&sort=pub_date'; |
|
39 | +$pg = isset($_POST['page']) ? '&page='.(int) $_POST['page'] : ''; |
|
40 | +$add_path = $sd.$sb.$pg; |
|
41 | 41 | |
42 | 42 | |
43 | 43 | |
@@ -71,7 +71,7 @@ discard block |
||
71 | 71 | // auto assign alias |
72 | 72 | if (!$alias && $automatic_alias) { |
73 | 73 | $alias = strtolower($modx->stripAlias(trim($pagetitle))); |
74 | - if(!$allow_duplicate_alias) { |
|
74 | + if (!$allow_duplicate_alias) { |
|
75 | 75 | if ($modx->db->getValue($modx->db->select('COUNT(id)', $tbl_site_content, "id<>'$id' AND alias='$alias'")) != 0) { |
76 | 76 | $cnt = 1; |
77 | 77 | $tempAlias = $alias; |
@@ -82,7 +82,7 @@ discard block |
||
82 | 82 | } |
83 | 83 | $alias = $tempAlias; |
84 | 84 | } |
85 | - }else{ |
|
85 | + } else { |
|
86 | 86 | if ($modx->db->getValue($modx->db->select('COUNT(id)', $tbl_site_content, "id<>'$id' AND parent=$parent AND alias='$alias'")) != 0) { |
87 | 87 | $cnt = 1; |
88 | 88 | $tempAlias = $alias; |
@@ -163,19 +163,19 @@ discard block |
||
163 | 163 | } |
164 | 164 | |
165 | 165 | // get document groups for current user |
166 | -$tmplvars = array (); |
|
166 | +$tmplvars = array(); |
|
167 | 167 | if ($_SESSION['mgrDocgroups']) { |
168 | 168 | $docgrp = implode(",", $_SESSION['mgrDocgroups']); |
169 | 169 | } |
170 | 170 | |
171 | 171 | // ensure that user has not made this document inaccessible to themselves |
172 | -if($_SESSION['mgrRole'] != 1 && is_array($document_groups)) { |
|
172 | +if ($_SESSION['mgrRole'] != 1 && is_array($document_groups)) { |
|
173 | 173 | $document_group_list = implode(',', $document_groups); |
174 | - $document_group_list = implode(',', array_filter(explode(',',$document_group_list), 'is_numeric')); |
|
175 | - if(!empty($document_group_list)) { |
|
174 | + $document_group_list = implode(',', array_filter(explode(',', $document_group_list), 'is_numeric')); |
|
175 | + if (!empty($document_group_list)) { |
|
176 | 176 | $rs = $modx->db->select('COUNT(mg.id)', "{$tbl_membergroup_access} AS mga, {$tbl_member_groups} AS mg", "mga.membergroup = mg.user_group AND mga.documentgroup IN({$document_group_list}) AND mg.member = {$_SESSION['mgrInternalKey']}"); |
177 | 177 | $count = $modx->db->getValue($rs); |
178 | - if($count == 0) { |
|
178 | + if ($count == 0) { |
|
179 | 179 | if ($actionToTake == 'edit') { |
180 | 180 | $modx->manager->saveFormValues(27); |
181 | 181 | $modx->webAlertAndQuit(sprintf($_lang["resource_permissions_error"]), "index.php?a=27&id={$id}"); |
@@ -193,45 +193,45 @@ discard block |
||
193 | 193 | INNER JOIN {$tbl_site_tmplvar_templates} AS tvtpl ON tvtpl.tmplvarid = tv.id |
194 | 194 | LEFT JOIN {$tbl_site_tmplvar_contentvalues} AS tvc ON tvc.tmplvarid=tv.id AND tvc.contentid = '{$id}' |
195 | 195 | LEFT JOIN {$tbl_site_tmplvar_access} AS tva ON tva.tmplvarid=tv.id", |
196 | - "tvtpl.templateid = '{$template}' AND (1='{$_SESSION['mgrRole']}' OR ISNULL(tva.documentgroup)" . ((!$docgrp) ? "" : " OR tva.documentgroup IN ($docgrp)") . ")", |
|
196 | + "tvtpl.templateid = '{$template}' AND (1='{$_SESSION['mgrRole']}' OR ISNULL(tva.documentgroup)".((!$docgrp) ? "" : " OR tva.documentgroup IN ($docgrp)").")", |
|
197 | 197 | "tv.rank" |
198 | 198 | ); |
199 | 199 | while ($row = $modx->db->getRow($rs)) { |
200 | 200 | $tmplvar = ''; |
201 | 201 | switch ($row['type']) { |
202 | 202 | case 'url': |
203 | - $tmplvar = $_POST["tv" . $row['id']]; |
|
204 | - if ($_POST["tv" . $row['id'] . '_prefix'] != '--') { |
|
205 | - $tmplvar = str_replace(array ( |
|
203 | + $tmplvar = $_POST["tv".$row['id']]; |
|
204 | + if ($_POST["tv".$row['id'].'_prefix'] != '--') { |
|
205 | + $tmplvar = str_replace(array( |
|
206 | 206 | "feed://", |
207 | 207 | "ftp://", |
208 | 208 | "http://", |
209 | 209 | "https://", |
210 | 210 | "mailto:" |
211 | 211 | ), "", $tmplvar); |
212 | - $tmplvar = $_POST["tv" . $row['id'] . '_prefix'] . $tmplvar; |
|
212 | + $tmplvar = $_POST["tv".$row['id'].'_prefix'].$tmplvar; |
|
213 | 213 | } |
214 | 214 | break; |
215 | 215 | case 'file': |
216 | - $tmplvar = $_POST["tv" . $row['id']]; |
|
216 | + $tmplvar = $_POST["tv".$row['id']]; |
|
217 | 217 | break; |
218 | 218 | default: |
219 | - if (is_array($_POST["tv" . $row['id']])) { |
|
219 | + if (is_array($_POST["tv".$row['id']])) { |
|
220 | 220 | // handles checkboxes & multiple selects elements |
221 | - $feature_insert = array (); |
|
222 | - $lst = $_POST["tv" . $row['id']]; |
|
221 | + $feature_insert = array(); |
|
222 | + $lst = $_POST["tv".$row['id']]; |
|
223 | 223 | while (list ($featureValue, $feature_item) = each($lst)) { |
224 | 224 | $feature_insert[count($feature_insert)] = $feature_item; |
225 | 225 | } |
226 | 226 | $tmplvar = implode("||", $feature_insert); |
227 | 227 | } else { |
228 | - $tmplvar = $_POST["tv" . $row['id']]; |
|
228 | + $tmplvar = $_POST["tv".$row['id']]; |
|
229 | 229 | } |
230 | 230 | break; |
231 | 231 | } |
232 | 232 | // save value if it was modified |
233 | 233 | if (strlen($tmplvar) > 0 && $tmplvar != $row['default_text']) { |
234 | - $tmplvars[$row['id']] = array ( |
|
234 | + $tmplvars[$row['id']] = array( |
|
235 | 235 | $row['id'], |
236 | 236 | $tmplvar |
237 | 237 | ); |
@@ -254,7 +254,7 @@ discard block |
||
254 | 254 | // check to see if the user is allowed to save the document in the place he wants to save it in |
255 | 255 | if ($use_udperms == 1) { |
256 | 256 | if ($existingDocument['parent'] != $parent) { |
257 | - include_once MODX_MANAGER_PATH ."processors/user_documents_permissions.class.php"; |
|
257 | + include_once MODX_MANAGER_PATH."processors/user_documents_permissions.class.php"; |
|
258 | 258 | $udperms = new udperms(); |
259 | 259 | $udperms->user = $modx->getLoginUserID(); |
260 | 260 | $udperms->document = $parent; |
@@ -276,7 +276,7 @@ discard block |
||
276 | 276 | case 'new' : |
277 | 277 | |
278 | 278 | // invoke OnBeforeDocFormSave event |
279 | - switch($modx->config['docid_incrmnt_method']) |
|
279 | + switch ($modx->config['docid_incrmnt_method']) |
|
280 | 280 | { |
281 | 281 | case '1': |
282 | 282 | $from = "{$tbl_site_content} AS T0 LEFT JOIN {$tbl_site_content} AS T1 ON T0.id + 1 = T1.id"; |
@@ -285,7 +285,7 @@ discard block |
||
285 | 285 | $id = $modx->db->getValue($rs); |
286 | 286 | break; |
287 | 287 | case '2': |
288 | - $rs = $modx->db->select('MAX(id)+1',$tbl_site_content); |
|
288 | + $rs = $modx->db->select('MAX(id)+1', $tbl_site_content); |
|
289 | 289 | $id = $modx->db->getValue($rs); |
290 | 290 | break; |
291 | 291 | |
@@ -293,7 +293,7 @@ discard block |
||
293 | 293 | $id = ''; |
294 | 294 | } |
295 | 295 | |
296 | - $modx->invokeEvent("OnBeforeDocFormSave", array ( |
|
296 | + $modx->invokeEvent("OnBeforeDocFormSave", array( |
|
297 | 297 | "mode" => "new", |
298 | 298 | "id" => $id |
299 | 299 | )); |
@@ -308,48 +308,47 @@ discard block |
||
308 | 308 | $publishedon = ($published ? $currentdate : 0); |
309 | 309 | $publishedby = ($published ? $modx->getLoginUserID() : 0); |
310 | 310 | |
311 | - if ((!empty($pub_date))&&($published)){ |
|
312 | - $publishedon=$pub_date; |
|
313 | - } |
|
314 | - |
|
315 | - $dbInsert = array |
|
316 | - ( |
|
317 | - "introtext" => $introtext , |
|
318 | - "content" => $content , |
|
319 | - "pagetitle" => $pagetitle , |
|
320 | - "longtitle" => $longtitle , |
|
321 | - "type" => $type , |
|
322 | - "description" => $description , |
|
323 | - "alias" => $alias , |
|
324 | - "link_attributes" => $link_attributes , |
|
325 | - "isfolder" => $isfolder , |
|
326 | - "richtext" => $richtext , |
|
327 | - "published" => $published , |
|
328 | - "parent" => $parent , |
|
329 | - "template" => $template , |
|
330 | - "menuindex" => $menuindex , |
|
331 | - "searchable" => $searchable , |
|
332 | - "cacheable" => $cacheable , |
|
333 | - "createdby" => $modx->getLoginUserID() , |
|
334 | - "createdon" => $currentdate , |
|
335 | - "editedby" => $modx->getLoginUserID() , |
|
336 | - "editedon" => $currentdate , |
|
337 | - "publishedby" => $publishedby , |
|
338 | - "publishedon" => $publishedon , |
|
339 | - "pub_date" => $pub_date , |
|
340 | - "unpub_date" => $unpub_date , |
|
341 | - "contentType" => $contentType , |
|
342 | - "content_dispo" => $contentdispo , |
|
343 | - "donthit" => $donthit , |
|
344 | - "menutitle" => $menutitle , |
|
345 | - "hidemenu" => $hidemenu , |
|
311 | + if ((!empty($pub_date)) && ($published)) { |
|
312 | + $publishedon = $pub_date; |
|
313 | + } |
|
314 | + |
|
315 | + $dbInsert = array( |
|
316 | + "introtext" => $introtext, |
|
317 | + "content" => $content, |
|
318 | + "pagetitle" => $pagetitle, |
|
319 | + "longtitle" => $longtitle, |
|
320 | + "type" => $type, |
|
321 | + "description" => $description, |
|
322 | + "alias" => $alias, |
|
323 | + "link_attributes" => $link_attributes, |
|
324 | + "isfolder" => $isfolder, |
|
325 | + "richtext" => $richtext, |
|
326 | + "published" => $published, |
|
327 | + "parent" => $parent, |
|
328 | + "template" => $template, |
|
329 | + "menuindex" => $menuindex, |
|
330 | + "searchable" => $searchable, |
|
331 | + "cacheable" => $cacheable, |
|
332 | + "createdby" => $modx->getLoginUserID(), |
|
333 | + "createdon" => $currentdate, |
|
334 | + "editedby" => $modx->getLoginUserID(), |
|
335 | + "editedon" => $currentdate, |
|
336 | + "publishedby" => $publishedby, |
|
337 | + "publishedon" => $publishedon, |
|
338 | + "pub_date" => $pub_date, |
|
339 | + "unpub_date" => $unpub_date, |
|
340 | + "contentType" => $contentType, |
|
341 | + "content_dispo" => $contentdispo, |
|
342 | + "donthit" => $donthit, |
|
343 | + "menutitle" => $menutitle, |
|
344 | + "hidemenu" => $hidemenu, |
|
346 | 345 | "alias_visible" => $aliasvisible |
347 | 346 | ); |
348 | 347 | |
349 | 348 | if ($id != '') |
350 | 349 | $dbInsert["id"] = $id; |
351 | 350 | |
352 | - $key = $modx->db->insert( $dbInsert, $tbl_site_content); |
|
351 | + $key = $modx->db->insert($dbInsert, $tbl_site_content); |
|
353 | 352 | |
354 | 353 | $tvChanges = array(); |
355 | 354 | foreach ($tmplvars as $field => $value) { |
@@ -371,7 +370,7 @@ discard block |
||
371 | 370 | foreach ($document_groups as $value_pair) { |
372 | 371 | // first, split the pair (this is a new document, so ignore the second value |
373 | 372 | list($group) = explode(',', $value_pair); // @see actions/mutate_content.dynamic.php @ line 1138 (permissions list) |
374 | - $new_groups[] = '('.(int)$group.','.$key.')'; |
|
373 | + $new_groups[] = '('.(int) $group.','.$key.')'; |
|
375 | 374 | } |
376 | 375 | $saved = true; |
377 | 376 | if (!empty($new_groups)) { |
@@ -380,7 +379,7 @@ discard block |
||
380 | 379 | } else { |
381 | 380 | $isManager = $modx->hasPermission('access_permissions'); |
382 | 381 | $isWeb = $modx->hasPermission('web_access_permissions'); |
383 | - if($use_udperms && !($isManager || $isWeb) && $parent != 0) { |
|
382 | + if ($use_udperms && !($isManager || $isWeb) && $parent != 0) { |
|
384 | 383 | // inherit document access permissions |
385 | 384 | $modx->db->insert( |
386 | 385 | array( |
@@ -399,17 +398,17 @@ discard block |
||
399 | 398 | } |
400 | 399 | |
401 | 400 | // invoke OnDocFormSave event |
402 | - $modx->invokeEvent("OnDocFormSave", array ( |
|
401 | + $modx->invokeEvent("OnDocFormSave", array( |
|
403 | 402 | "mode" => "new", |
404 | 403 | "id" => $key |
405 | 404 | )); |
406 | 405 | |
407 | 406 | // secure web documents - flag as private |
408 | - include MODX_MANAGER_PATH . "includes/secure_web_documents.inc.php"; |
|
407 | + include MODX_MANAGER_PATH."includes/secure_web_documents.inc.php"; |
|
409 | 408 | secureWebDocument($key); |
410 | 409 | |
411 | 410 | // secure manager documents - flag as private |
412 | - include MODX_MANAGER_PATH . "includes/secure_mgr_documents.inc.php"; |
|
411 | + include MODX_MANAGER_PATH."includes/secure_mgr_documents.inc.php"; |
|
413 | 412 | secureMgrDocument($key); |
414 | 413 | |
415 | 414 | // Set the item name for logger |
@@ -428,13 +427,13 @@ discard block |
||
428 | 427 | // document |
429 | 428 | if ($_POST['mode'] == "4") |
430 | 429 | $a = ($_POST['stay'] == '2') ? "27&id=$key" : "4&pid=$parent"; |
431 | - $header = "Location: index.php?a=" . $a . "&r=1&stay=" . $_POST['stay']; |
|
430 | + $header = "Location: index.php?a=".$a."&r=1&stay=".$_POST['stay']; |
|
432 | 431 | } else { |
433 | 432 | $header = "Location: index.php?a=3&id=$key&r=1"; |
434 | 433 | } |
435 | 434 | |
436 | 435 | if (headers_sent()) { |
437 | - $header = str_replace('Location: ','',$header); |
|
436 | + $header = str_replace('Location: ', '', $header); |
|
438 | 437 | echo "<script>document.location.href='$header';</script>\n"; |
439 | 438 | } else { |
440 | 439 | header($header); |
@@ -488,7 +487,7 @@ discard block |
||
488 | 487 | if (!$was_published && $published) { |
489 | 488 | $publishedon = $currentdate; |
490 | 489 | $publishedby = $modx->getLoginUserID(); |
491 | - }elseif ((!empty($pub_date)&& $pub_date<=$currentdate && $published)) { |
|
490 | + }elseif ((!empty($pub_date) && $pub_date <= $currentdate && $published)) { |
|
492 | 491 | $publishedon = $pub_date; |
493 | 492 | $publishedby = $modx->getLoginUserID(); |
494 | 493 | }elseif ($was_published && !$published) { |
@@ -500,7 +499,7 @@ discard block |
||
500 | 499 | } |
501 | 500 | |
502 | 501 | // invoke OnBeforeDocFormSave event |
503 | - $modx->invokeEvent("OnBeforeDocFormSave", array ( |
|
502 | + $modx->invokeEvent("OnBeforeDocFormSave", array( |
|
504 | 503 | "mode" => "upd", |
505 | 504 | "id" => $id |
506 | 505 | )); |
@@ -525,7 +524,7 @@ discard block |
||
525 | 524 | . "menuindex={$menuindex}, " |
526 | 525 | . "searchable={$searchable}, " |
527 | 526 | . "cacheable={$cacheable}, " |
528 | - . "editedby=" . $modx->getLoginUserID() . ", " |
|
527 | + . "editedby=".$modx->getLoginUserID().", " |
|
529 | 528 | . "editedon={$currentdate}, " |
530 | 529 | . "publishedon={$publishedon}, " |
531 | 530 | . "publishedby={$publishedby}, " |
@@ -539,7 +538,7 @@ discard block |
||
539 | 538 | |
540 | 539 | // update template variables |
541 | 540 | $rs = $modx->db->select('id, tmplvarid', $tbl_site_tmplvar_contentvalues, "contentid='{$id}'"); |
542 | - $tvIds = array (); |
|
541 | + $tvIds = array(); |
|
543 | 542 | while ($row = $modx->db->getRow($rs)) { |
544 | 543 | $tvIds[$row['tmplvarid']] = $row['id']; |
545 | 544 | } |
@@ -592,7 +591,7 @@ discard block |
||
592 | 591 | 'groups.id, groups.document_group', |
593 | 592 | "{$tbl_document_groups} AS groups |
594 | 593 | LEFT JOIN {$tbl_documentgroup_names} AS dgn ON dgn.id = groups.document_group", |
595 | - "((1=".(int)$isManager." AND dgn.private_memgroup) OR (1=".(int)$isWeb." AND dgn.private_webgroup)) AND groups.document = '{$id}'" |
|
594 | + "((1=".(int) $isManager." AND dgn.private_memgroup) OR (1=".(int) $isWeb." AND dgn.private_webgroup)) AND groups.document = '{$id}'" |
|
596 | 595 | ); |
597 | 596 | $old_groups = array(); |
598 | 597 | while ($row = $modx->db->getRow($rs)) $old_groups[$row['document_group']] = $row['id']; |
@@ -604,7 +603,7 @@ discard block |
||
604 | 603 | unset($old_groups[$group]); |
605 | 604 | continue; |
606 | 605 | } elseif ($link_id == 'new') { |
607 | - $insertions[] = '('.(int)$group.','.$id.')'; |
|
606 | + $insertions[] = '('.(int) $group.','.$id.')'; |
|
608 | 607 | } |
609 | 608 | } |
610 | 609 | if (!empty($insertions)) { |
@@ -636,17 +635,17 @@ discard block |
||
636 | 635 | |
637 | 636 | |
638 | 637 | // invoke OnDocFormSave event |
639 | - $modx->invokeEvent("OnDocFormSave", array ( |
|
638 | + $modx->invokeEvent("OnDocFormSave", array( |
|
640 | 639 | "mode" => "upd", |
641 | 640 | "id" => $id |
642 | 641 | )); |
643 | 642 | |
644 | 643 | // secure web documents - flag as private |
645 | - include MODX_MANAGER_PATH . "includes/secure_web_documents.inc.php"; |
|
644 | + include MODX_MANAGER_PATH."includes/secure_web_documents.inc.php"; |
|
646 | 645 | secureWebDocument($id); |
647 | 646 | |
648 | 647 | // secure manager documents - flag as private |
649 | - include MODX_MANAGER_PATH . "includes/secure_mgr_documents.inc.php"; |
|
648 | + include MODX_MANAGER_PATH."includes/secure_mgr_documents.inc.php"; |
|
650 | 649 | secureMgrDocument($id); |
651 | 650 | |
652 | 651 | // Set the item name for logger |
@@ -654,14 +653,14 @@ discard block |
||
654 | 653 | |
655 | 654 | if ($syncsite == 1) { |
656 | 655 | // empty cache |
657 | - $keys = array('alias','parent','published','isfolder','menuindex','alias_visible'); |
|
656 | + $keys = array('alias', 'parent', 'published', 'isfolder', 'menuindex', 'alias_visible'); |
|
658 | 657 | $flag = ''; |
659 | - foreach($keys as $key) { |
|
660 | - if ($existingDocument[$key]===$_POST[$key]) continue; |
|
658 | + foreach ($keys as $key) { |
|
659 | + if ($existingDocument[$key] === $_POST[$key]) continue; |
|
661 | 660 | $flag = 'full'; |
662 | 661 | break; |
663 | 662 | } |
664 | - if($flag==='full') $modx->clearCache('full'); |
|
663 | + if ($flag === 'full') $modx->clearCache('full'); |
|
665 | 664 | else $modx->clearCache($id); |
666 | 665 | } |
667 | 666 | |
@@ -680,13 +679,13 @@ discard block |
||
680 | 679 | // document |
681 | 680 | $a = ($_POST['stay'] == '2') ? "27&id=$id" : "4&pid=$parent"; |
682 | 681 | } |
683 | - $header = "Location: index.php?a=" . $a . "&r=1&stay=" . $_POST['stay'].$add_path; |
|
682 | + $header = "Location: index.php?a=".$a."&r=1&stay=".$_POST['stay'].$add_path; |
|
684 | 683 | } else { |
685 | 684 | $header = "Location: index.php?a=3&id=$id&r=1".$add_path; |
686 | 685 | } |
687 | 686 | } |
688 | 687 | if (headers_sent()) { |
689 | - $header = str_replace('Location: ','',$header); |
|
688 | + $header = str_replace('Location: ', '', $header); |
|
690 | 689 | echo "<script>document.location.href='$header';</script>\n"; |
691 | 690 | } else { |
692 | 691 | header($header); |
@@ -1,5 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
2 | +if(IN_MANAGER_MODE!="true") { |
|
3 | + die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
4 | +} |
|
3 | 5 | if (!$modx->hasPermission('save_document')) { |
4 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 7 | } |
@@ -82,7 +84,7 @@ discard block |
||
82 | 84 | } |
83 | 85 | $alias = $tempAlias; |
84 | 86 | } |
85 | - }else{ |
|
87 | + } else { |
|
86 | 88 | if ($modx->db->getValue($modx->db->select('COUNT(id)', $tbl_site_content, "id<>'$id' AND parent=$parent AND alias='$alias'")) != 0) { |
87 | 89 | $cnt = 1; |
88 | 90 | $tempAlias = $alias; |
@@ -132,8 +134,7 @@ discard block |
||
132 | 134 | } |
133 | 135 | //end webber |
134 | 136 | } |
135 | -} |
|
136 | -elseif ($alias) { |
|
137 | +} elseif ($alias) { |
|
137 | 138 | $alias = $modx->stripAlias($alias); |
138 | 139 | } |
139 | 140 | |
@@ -147,8 +148,7 @@ discard block |
||
147 | 148 | |
148 | 149 | if ($pub_date < $currentdate) { |
149 | 150 | $published = 1; |
150 | - } |
|
151 | - elseif ($pub_date > $currentdate) { |
|
151 | + } elseif ($pub_date > $currentdate) { |
|
152 | 152 | $published = 0; |
153 | 153 | } |
154 | 154 | } |
@@ -276,8 +276,7 @@ discard block |
||
276 | 276 | case 'new' : |
277 | 277 | |
278 | 278 | // invoke OnBeforeDocFormSave event |
279 | - switch($modx->config['docid_incrmnt_method']) |
|
280 | - { |
|
279 | + switch($modx->config['docid_incrmnt_method']) { |
|
281 | 280 | case '1': |
282 | 281 | $from = "{$tbl_site_content} AS T0 LEFT JOIN {$tbl_site_content} AS T1 ON T0.id + 1 = T1.id"; |
283 | 282 | $where = "T1.id IS NULL"; |
@@ -308,7 +307,7 @@ discard block |
||
308 | 307 | $publishedon = ($published ? $currentdate : 0); |
309 | 308 | $publishedby = ($published ? $modx->getLoginUserID() : 0); |
310 | 309 | |
311 | - if ((!empty($pub_date))&&($published)){ |
|
310 | + if ((!empty($pub_date))&&($published)) { |
|
312 | 311 | $publishedon=$pub_date; |
313 | 312 | } |
314 | 313 | |
@@ -346,8 +345,9 @@ discard block |
||
346 | 345 | "alias_visible" => $aliasvisible |
347 | 346 | ); |
348 | 347 | |
349 | - if ($id != '') |
|
350 | - $dbInsert["id"] = $id; |
|
348 | + if ($id != '') { |
|
349 | + $dbInsert["id"] = $id; |
|
350 | + } |
|
351 | 351 | |
352 | 352 | $key = $modx->db->insert( $dbInsert, $tbl_site_content); |
353 | 353 | |
@@ -423,11 +423,13 @@ discard block |
||
423 | 423 | // redirect/stay options |
424 | 424 | if ($_POST['stay'] != '') { |
425 | 425 | // weblink |
426 | - if ($_POST['mode'] == "72") |
|
427 | - $a = ($_POST['stay'] == '2') ? "27&id=$key" : "72&pid=$parent"; |
|
426 | + if ($_POST['mode'] == "72") { |
|
427 | + $a = ($_POST['stay'] == '2') ? "27&id=$key" : "72&pid=$parent"; |
|
428 | + } |
|
428 | 429 | // document |
429 | - if ($_POST['mode'] == "4") |
|
430 | - $a = ($_POST['stay'] == '2') ? "27&id=$key" : "4&pid=$parent"; |
|
430 | + if ($_POST['mode'] == "4") { |
|
431 | + $a = ($_POST['stay'] == '2') ? "27&id=$key" : "4&pid=$parent"; |
|
432 | + } |
|
431 | 433 | $header = "Location: index.php?a=" . $a . "&r=1&stay=" . $_POST['stay']; |
432 | 434 | } else { |
433 | 435 | $header = "Location: index.php?a=3&id=$key&r=1"; |
@@ -488,10 +490,10 @@ discard block |
||
488 | 490 | if (!$was_published && $published) { |
489 | 491 | $publishedon = $currentdate; |
490 | 492 | $publishedby = $modx->getLoginUserID(); |
491 | - }elseif ((!empty($pub_date)&& $pub_date<=$currentdate && $published)) { |
|
493 | + } elseif ((!empty($pub_date)&& $pub_date<=$currentdate && $published)) { |
|
492 | 494 | $publishedon = $pub_date; |
493 | 495 | $publishedby = $modx->getLoginUserID(); |
494 | - }elseif ($was_published && !$published) { |
|
496 | + } elseif ($was_published && !$published) { |
|
495 | 497 | $publishedon = 0; |
496 | 498 | $publishedby = 0; |
497 | 499 | } else { |
@@ -547,7 +549,9 @@ discard block |
||
547 | 549 | $tvChanges = array(); |
548 | 550 | foreach ($tmplvars as $field => $value) { |
549 | 551 | if (!is_array($value)) { |
550 | - if (isset($tvIds[$value])) $tvDeletions[] = $tvIds[$value]; |
|
552 | + if (isset($tvIds[$value])) { |
|
553 | + $tvDeletions[] = $tvIds[$value]; |
|
554 | + } |
|
551 | 555 | } else { |
552 | 556 | $tvId = $value[0]; |
553 | 557 | $tvVal = $value[1]; |
@@ -595,7 +599,9 @@ discard block |
||
595 | 599 | "((1=".(int)$isManager." AND dgn.private_memgroup) OR (1=".(int)$isWeb." AND dgn.private_webgroup)) AND groups.document = '{$id}'" |
596 | 600 | ); |
597 | 601 | $old_groups = array(); |
598 | - while ($row = $modx->db->getRow($rs)) $old_groups[$row['document_group']] = $row['id']; |
|
602 | + while ($row = $modx->db->getRow($rs)) { |
|
603 | + $old_groups[$row['document_group']] = $row['id']; |
|
604 | + } |
|
599 | 605 | |
600 | 606 | // update the permissions in the database |
601 | 607 | $insertions = $deletions = array(); |
@@ -657,17 +663,22 @@ discard block |
||
657 | 663 | $keys = array('alias','parent','published','isfolder','menuindex','alias_visible'); |
658 | 664 | $flag = ''; |
659 | 665 | foreach($keys as $key) { |
660 | - if ($existingDocument[$key]===$_POST[$key]) continue; |
|
666 | + if ($existingDocument[$key]===$_POST[$key]) { |
|
667 | + continue; |
|
668 | + } |
|
661 | 669 | $flag = 'full'; |
662 | 670 | break; |
663 | 671 | } |
664 | - if($flag==='full') $modx->clearCache('full'); |
|
665 | - else $modx->clearCache($id); |
|
672 | + if($flag==='full') { |
|
673 | + $modx->clearCache('full'); |
|
674 | + } else { |
|
675 | + $modx->clearCache($id); |
|
676 | + } |
|
666 | 677 | } |
667 | 678 | |
668 | - if ($_POST['refresh_preview'] == '1') |
|
669 | - $header = "Location: ".MODX_SITE_URL."index.php?id=$id&z=manprev"; |
|
670 | - else { |
|
679 | + if ($_POST['refresh_preview'] == '1') { |
|
680 | + $header = "Location: ".MODX_SITE_URL."index.php?id=$id&z=manprev"; |
|
681 | + } else { |
|
671 | 682 | if ($_POST['stay'] != '2' && $id > 0) { |
672 | 683 | $modx->unlockElement(7, $id); |
673 | 684 | } |
@@ -1,7 +1,7 @@ |
||
1 | 1 | <?php |
2 | 2 | if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
3 | 3 | if(!$modx->hasPermission('settings')) { |
4 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
4 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
5 | 5 | } |
6 | 6 | |
7 | 7 | $modx->db->truncate($modx->getFullTableName('manager_log')); |
@@ -1,10 +1,10 @@ |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | -if(!$modx->hasPermission('settings')) { |
|
2 | +if (IN_MANAGER_MODE != "true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | +if (!$modx->hasPermission('settings')) { |
|
4 | 4 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 5 | } |
6 | 6 | |
7 | 7 | $modx->db->truncate($modx->getFullTableName('manager_log')); |
8 | 8 | |
9 | -$header="Location: index.php?a=13"; |
|
9 | +$header = "Location: index.php?a=13"; |
|
10 | 10 | header($header); |
@@ -1,5 +1,7 @@ |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
2 | +if(IN_MANAGER_MODE!="true") { |
|
3 | + die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
4 | +} |
|
3 | 5 | if(!$modx->hasPermission('settings')) { |
4 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 7 | } |
@@ -1,12 +1,12 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
3 | 3 | if(!$modx->hasPermission('delete_module')) { |
4 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
4 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
5 | 5 | } |
6 | 6 | |
7 | 7 | $id = isset($_GET['id'])? intval($_GET['id']) : 0; |
8 | 8 | if($id==0) { |
9 | - $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
9 | + $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
10 | 10 | } |
11 | 11 | |
12 | 12 | // Set the item name for logger |
@@ -15,9 +15,9 @@ discard block |
||
15 | 15 | |
16 | 16 | // invoke OnBeforeModFormDelete event |
17 | 17 | $modx->invokeEvent("OnBeforeModFormDelete", |
18 | - array( |
|
19 | - "id" => $id |
|
20 | - )); |
|
18 | + array( |
|
19 | + "id" => $id |
|
20 | + )); |
|
21 | 21 | |
22 | 22 | // delete the module. |
23 | 23 | $modx->db->delete($modx->getFullTableName('site_modules'), "id='{$id}'"); |
@@ -30,9 +30,9 @@ discard block |
||
30 | 30 | |
31 | 31 | // invoke OnModFormDelete event |
32 | 32 | $modx->invokeEvent("OnModFormDelete", |
33 | - array( |
|
34 | - "id" => $id |
|
35 | - )); |
|
33 | + array( |
|
34 | + "id" => $id |
|
35 | + )); |
|
36 | 36 | |
37 | 37 | // empty cache |
38 | 38 | $modx->clearCache('full'); |
@@ -1,11 +1,11 @@ discard block |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | -if(!$modx->hasPermission('delete_module')) { |
|
2 | +if (IN_MANAGER_MODE != "true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | +if (!$modx->hasPermission('delete_module')) { |
|
4 | 4 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 5 | } |
6 | 6 | |
7 | -$id = isset($_GET['id'])? intval($_GET['id']) : 0; |
|
8 | -if($id==0) { |
|
7 | +$id = isset($_GET['id']) ? intval($_GET['id']) : 0; |
|
8 | +if ($id == 0) { |
|
9 | 9 | $modx->webAlertAndQuit($_lang["error_no_id"]); |
10 | 10 | } |
11 | 11 | |
@@ -38,5 +38,5 @@ discard block |
||
38 | 38 | $modx->clearCache('full'); |
39 | 39 | |
40 | 40 | // finished emptying cache - redirect |
41 | -$header="Location: index.php?a=106&r=2"; |
|
41 | +$header = "Location: index.php?a=106&r=2"; |
|
42 | 42 | header($header); |
@@ -1,5 +1,7 @@ |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
2 | +if(IN_MANAGER_MODE!="true") { |
|
3 | + die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
4 | +} |
|
3 | 5 | if(!$modx->hasPermission('delete_module')) { |
4 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 7 | } |
@@ -1,7 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
3 | 3 | if(!$modx->hasPermission('save_password')) { |
4 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
4 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
5 | 5 | } |
6 | 6 | |
7 | 7 | $id = $_POST['id']; |
@@ -9,26 +9,26 @@ discard block |
||
9 | 9 | $pass2 = $_POST['pass2']; |
10 | 10 | |
11 | 11 | if($pass1!=$pass2){ |
12 | - $modx->webAlertAndQuit("Passwords don't match!"); |
|
12 | + $modx->webAlertAndQuit("Passwords don't match!"); |
|
13 | 13 | } |
14 | 14 | |
15 | 15 | if(strlen($pass1)<6){ |
16 | - $modx->webAlertAndQuit("Password is too short. Please specify a password of at least 6 characters."); |
|
16 | + $modx->webAlertAndQuit("Password is too short. Please specify a password of at least 6 characters."); |
|
17 | 17 | } |
18 | 18 | |
19 | 19 | $pass1 = $modx->htmlspecialchars($pass1, ENT_NOQUOTES); |
20 | - $tbl_manager_users = $modx->getFullTableName('manager_users'); |
|
21 | - $uid = $modx->getLoginUserID(); |
|
22 | - $modx->loadExtension('phpass'); |
|
23 | - $f['password'] = $modx->phpass->HashPassword($pass1); |
|
24 | - $modx->db->update($f,$tbl_manager_users,"id='{$uid}'"); |
|
20 | + $tbl_manager_users = $modx->getFullTableName('manager_users'); |
|
21 | + $uid = $modx->getLoginUserID(); |
|
22 | + $modx->loadExtension('phpass'); |
|
23 | + $f['password'] = $modx->phpass->HashPassword($pass1); |
|
24 | + $modx->db->update($f,$tbl_manager_users,"id='{$uid}'"); |
|
25 | 25 | |
26 | - // invoke OnManagerChangePassword event |
|
27 | - $modx->invokeEvent('OnManagerChangePassword', array ( |
|
28 | - 'userid' => $uid, |
|
29 | - 'username' => $_SESSION['mgrShortname'], |
|
30 | - 'userpassword' => $pass1 |
|
31 | - )); |
|
26 | + // invoke OnManagerChangePassword event |
|
27 | + $modx->invokeEvent('OnManagerChangePassword', array ( |
|
28 | + 'userid' => $uid, |
|
29 | + 'username' => $_SESSION['mgrShortname'], |
|
30 | + 'userpassword' => $pass1 |
|
31 | + )); |
|
32 | 32 | |
33 | 33 | $header="Location: index.php?a=2"; |
34 | 34 | header($header); |
@@ -1,6 +1,6 @@ discard block |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | -if(!$modx->hasPermission('save_password')) { |
|
2 | +if (IN_MANAGER_MODE != "true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | +if (!$modx->hasPermission('save_password')) { |
|
4 | 4 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 5 | } |
6 | 6 | |
@@ -8,11 +8,11 @@ discard block |
||
8 | 8 | $pass1 = $_POST['pass1']; |
9 | 9 | $pass2 = $_POST['pass2']; |
10 | 10 | |
11 | -if($pass1!=$pass2){ |
|
11 | +if ($pass1 != $pass2) { |
|
12 | 12 | $modx->webAlertAndQuit("Passwords don't match!"); |
13 | 13 | } |
14 | 14 | |
15 | -if(strlen($pass1)<6){ |
|
15 | +if (strlen($pass1) < 6) { |
|
16 | 16 | $modx->webAlertAndQuit("Password is too short. Please specify a password of at least 6 characters."); |
17 | 17 | } |
18 | 18 | |
@@ -21,14 +21,14 @@ discard block |
||
21 | 21 | $uid = $modx->getLoginUserID(); |
22 | 22 | $modx->loadExtension('phpass'); |
23 | 23 | $f['password'] = $modx->phpass->HashPassword($pass1); |
24 | - $modx->db->update($f,$tbl_manager_users,"id='{$uid}'"); |
|
24 | + $modx->db->update($f, $tbl_manager_users, "id='{$uid}'"); |
|
25 | 25 | |
26 | 26 | // invoke OnManagerChangePassword event |
27 | - $modx->invokeEvent('OnManagerChangePassword', array ( |
|
27 | + $modx->invokeEvent('OnManagerChangePassword', array( |
|
28 | 28 | 'userid' => $uid, |
29 | 29 | 'username' => $_SESSION['mgrShortname'], |
30 | 30 | 'userpassword' => $pass1 |
31 | 31 | )); |
32 | 32 | |
33 | -$header="Location: index.php?a=2"; |
|
33 | +$header = "Location: index.php?a=2"; |
|
34 | 34 | header($header); |
@@ -1,5 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
2 | +if(IN_MANAGER_MODE!="true") { |
|
3 | + die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
4 | +} |
|
3 | 5 | if(!$modx->hasPermission('save_password')) { |
4 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 7 | } |
@@ -8,11 +10,11 @@ discard block |
||
8 | 10 | $pass1 = $_POST['pass1']; |
9 | 11 | $pass2 = $_POST['pass2']; |
10 | 12 | |
11 | -if($pass1!=$pass2){ |
|
13 | +if($pass1!=$pass2) { |
|
12 | 14 | $modx->webAlertAndQuit("Passwords don't match!"); |
13 | 15 | } |
14 | 16 | |
15 | -if(strlen($pass1)<6){ |
|
17 | +if(strlen($pass1)<6) { |
|
16 | 18 | $modx->webAlertAndQuit("Password is too short. Please specify a password of at least 6 characters."); |
17 | 19 | } |
18 | 20 |
@@ -1,12 +1,12 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
3 | 3 | if(!$modx->hasPermission('delete_snippet')) { |
4 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
4 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
5 | 5 | } |
6 | 6 | |
7 | 7 | $id = isset($_GET['id'])? intval($_GET['id']) : 0; |
8 | 8 | if($id==0) { |
9 | - $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
9 | + $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
10 | 10 | } |
11 | 11 | |
12 | 12 | // Set the item name for logger |
@@ -15,18 +15,18 @@ discard block |
||
15 | 15 | |
16 | 16 | // invoke OnBeforeChunkFormDelete event |
17 | 17 | $modx->invokeEvent("OnBeforeChunkFormDelete", |
18 | - array( |
|
19 | - "id" => $id |
|
20 | - )); |
|
18 | + array( |
|
19 | + "id" => $id |
|
20 | + )); |
|
21 | 21 | |
22 | 22 | // delete the chunk. |
23 | 23 | $modx->db->delete($modx->getFullTableName('site_htmlsnippets'), "id='{$id}'"); |
24 | 24 | |
25 | 25 | // invoke OnChunkFormDelete event |
26 | 26 | $modx->invokeEvent("OnChunkFormDelete", |
27 | - array( |
|
28 | - "id" => $id |
|
29 | - )); |
|
27 | + array( |
|
28 | + "id" => $id |
|
29 | + )); |
|
30 | 30 | |
31 | 31 | // empty cache |
32 | 32 | $modx->clearCache('full'); |
@@ -1,11 +1,11 @@ discard block |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | -if(!$modx->hasPermission('delete_snippet')) { |
|
2 | +if (IN_MANAGER_MODE != "true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | +if (!$modx->hasPermission('delete_snippet')) { |
|
4 | 4 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 5 | } |
6 | 6 | |
7 | -$id = isset($_GET['id'])? intval($_GET['id']) : 0; |
|
8 | -if($id==0) { |
|
7 | +$id = isset($_GET['id']) ? intval($_GET['id']) : 0; |
|
8 | +if ($id == 0) { |
|
9 | 9 | $modx->webAlertAndQuit($_lang["error_no_id"]); |
10 | 10 | } |
11 | 11 | |
@@ -32,5 +32,5 @@ discard block |
||
32 | 32 | $modx->clearCache('full'); |
33 | 33 | |
34 | 34 | // finished emptying cache - redirect |
35 | -$header="Location: index.php?a=76&r=2"; |
|
35 | +$header = "Location: index.php?a=76&r=2"; |
|
36 | 36 | header($header); |
@@ -1,5 +1,7 @@ |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
2 | +if(IN_MANAGER_MODE!="true") { |
|
3 | + die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
4 | +} |
|
3 | 5 | if(!$modx->hasPermission('delete_snippet')) { |
4 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 7 | } |
@@ -1,7 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
3 | 3 | if(!$modx->hasPermission('access_permissions')) { |
4 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
4 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
5 | 5 | } |
6 | 6 | |
7 | 7 | // access group processor. |
@@ -18,113 +18,113 @@ discard block |
||
18 | 18 | $operation = $_REQUEST['operation']; |
19 | 19 | |
20 | 20 | switch ($operation) { |
21 | - case "add_user_group" : |
|
22 | - $newgroup = $_REQUEST['newusergroup']; |
|
23 | - if(empty($newgroup)) { |
|
24 | - $modx->webAlertAndQuit("No group name specified."); |
|
25 | - } else { |
|
26 | - $id = $modx->db->insert(array('name' => $modx->db->escape($newgroup)), $tbl_membergroup_names); |
|
21 | + case "add_user_group" : |
|
22 | + $newgroup = $_REQUEST['newusergroup']; |
|
23 | + if(empty($newgroup)) { |
|
24 | + $modx->webAlertAndQuit("No group name specified."); |
|
25 | + } else { |
|
26 | + $id = $modx->db->insert(array('name' => $modx->db->escape($newgroup)), $tbl_membergroup_names); |
|
27 | 27 | |
28 | - // invoke OnManagerCreateGroup event |
|
29 | - $modx->invokeEvent('OnManagerCreateGroup', array( |
|
30 | - 'groupid' => $id, |
|
31 | - 'groupname' => $newgroup, |
|
32 | - )); |
|
33 | - } |
|
34 | - break; |
|
35 | - case "add_document_group" : |
|
36 | - $newgroup = $_REQUEST['newdocgroup']; |
|
37 | - if(empty($newgroup)) { |
|
38 | - $modx->webAlertAndQuit("No group name specified."); |
|
39 | - } else { |
|
40 | - $id = $modx->db->insert(array('name' => $modx->db->escape($newgroup)), $tbl_documentgroup_names); |
|
28 | + // invoke OnManagerCreateGroup event |
|
29 | + $modx->invokeEvent('OnManagerCreateGroup', array( |
|
30 | + 'groupid' => $id, |
|
31 | + 'groupname' => $newgroup, |
|
32 | + )); |
|
33 | + } |
|
34 | + break; |
|
35 | + case "add_document_group" : |
|
36 | + $newgroup = $_REQUEST['newdocgroup']; |
|
37 | + if(empty($newgroup)) { |
|
38 | + $modx->webAlertAndQuit("No group name specified."); |
|
39 | + } else { |
|
40 | + $id = $modx->db->insert(array('name' => $modx->db->escape($newgroup)), $tbl_documentgroup_names); |
|
41 | 41 | |
42 | - // invoke OnCreateDocGroup event |
|
43 | - $modx->invokeEvent('OnCreateDocGroup', array( |
|
44 | - 'groupid' => $id, |
|
45 | - 'groupname' => $newgroup, |
|
46 | - )); |
|
47 | - } |
|
48 | - break; |
|
49 | - case "delete_user_group" : |
|
50 | - $updategroupaccess = true; |
|
51 | - $usergroup = intval($_REQUEST['usergroup']); |
|
52 | - if(empty($usergroup)) { |
|
53 | - $modx->webAlertAndQuit("No user group id specified for deletion."); |
|
54 | - } else { |
|
55 | - $modx->db->delete($tbl_membergroup_names, "id='{$usergroup}'"); |
|
42 | + // invoke OnCreateDocGroup event |
|
43 | + $modx->invokeEvent('OnCreateDocGroup', array( |
|
44 | + 'groupid' => $id, |
|
45 | + 'groupname' => $newgroup, |
|
46 | + )); |
|
47 | + } |
|
48 | + break; |
|
49 | + case "delete_user_group" : |
|
50 | + $updategroupaccess = true; |
|
51 | + $usergroup = intval($_REQUEST['usergroup']); |
|
52 | + if(empty($usergroup)) { |
|
53 | + $modx->webAlertAndQuit("No user group id specified for deletion."); |
|
54 | + } else { |
|
55 | + $modx->db->delete($tbl_membergroup_names, "id='{$usergroup}'"); |
|
56 | 56 | |
57 | - $modx->db->delete($tbl_membergroup_access, "membergroup='{$usergroup}'"); |
|
57 | + $modx->db->delete($tbl_membergroup_access, "membergroup='{$usergroup}'"); |
|
58 | 58 | |
59 | - $modx->db->delete($tbl_member_groups, "user_group='{$usergroup}'"); |
|
60 | - } |
|
61 | - break; |
|
62 | - case "delete_document_group" : |
|
63 | - $group = intval($_REQUEST['documentgroup']); |
|
64 | - if(empty($group)) { |
|
65 | - $modx->webAlertAndQuit("No document group id specified for deletion."); |
|
66 | - } else { |
|
67 | - $modx->db->delete($tbl_documentgroup_names, "id='{$group}'"); |
|
59 | + $modx->db->delete($tbl_member_groups, "user_group='{$usergroup}'"); |
|
60 | + } |
|
61 | + break; |
|
62 | + case "delete_document_group" : |
|
63 | + $group = intval($_REQUEST['documentgroup']); |
|
64 | + if(empty($group)) { |
|
65 | + $modx->webAlertAndQuit("No document group id specified for deletion."); |
|
66 | + } else { |
|
67 | + $modx->db->delete($tbl_documentgroup_names, "id='{$group}'"); |
|
68 | 68 | |
69 | - $modx->db->delete($tbl_membergroup_access, "documentgroup='{$group}'"); |
|
69 | + $modx->db->delete($tbl_membergroup_access, "documentgroup='{$group}'"); |
|
70 | 70 | |
71 | - $modx->db->delete($tbl_document_groups, "document_group='{$group}'"); |
|
72 | - } |
|
73 | - break; |
|
74 | - case "rename_user_group" : |
|
75 | - $newgroupname = $_REQUEST['newgroupname']; |
|
76 | - if(empty($newgroupname)) { |
|
77 | - $modx->webAlertAndQuit("No group name specified."); |
|
78 | - } |
|
79 | - $groupid = intval($_REQUEST['groupid']); |
|
80 | - if(empty($groupid)) { |
|
81 | - $modx->webAlertAndQuit("No group id specified for rename."); |
|
82 | - } |
|
71 | + $modx->db->delete($tbl_document_groups, "document_group='{$group}'"); |
|
72 | + } |
|
73 | + break; |
|
74 | + case "rename_user_group" : |
|
75 | + $newgroupname = $_REQUEST['newgroupname']; |
|
76 | + if(empty($newgroupname)) { |
|
77 | + $modx->webAlertAndQuit("No group name specified."); |
|
78 | + } |
|
79 | + $groupid = intval($_REQUEST['groupid']); |
|
80 | + if(empty($groupid)) { |
|
81 | + $modx->webAlertAndQuit("No group id specified for rename."); |
|
82 | + } |
|
83 | 83 | |
84 | - $modx->db->update(array('name' => $modx->db->escape($newgroupname)), $tbl_membergroup_names, "id='{$groupid}'"); |
|
85 | - break; |
|
86 | - case "rename_document_group" : |
|
87 | - $newgroupname = $_REQUEST['newgroupname']; |
|
88 | - if(empty($newgroupname)) { |
|
89 | - $modx->webAlertAndQuit("No group name specified."); |
|
90 | - } |
|
91 | - $groupid = intval($_REQUEST['groupid']); |
|
92 | - if(empty($groupid)) { |
|
93 | - $modx->webAlertAndQuit("No group id specified for rename."); |
|
94 | - } |
|
84 | + $modx->db->update(array('name' => $modx->db->escape($newgroupname)), $tbl_membergroup_names, "id='{$groupid}'"); |
|
85 | + break; |
|
86 | + case "rename_document_group" : |
|
87 | + $newgroupname = $_REQUEST['newgroupname']; |
|
88 | + if(empty($newgroupname)) { |
|
89 | + $modx->webAlertAndQuit("No group name specified."); |
|
90 | + } |
|
91 | + $groupid = intval($_REQUEST['groupid']); |
|
92 | + if(empty($groupid)) { |
|
93 | + $modx->webAlertAndQuit("No group id specified for rename."); |
|
94 | + } |
|
95 | 95 | |
96 | - $modx->db->update(array('name' => $modx->db->escape($newgroupname)), $tbl_documentgroup_names, "id='{$groupid}'"); |
|
97 | - break; |
|
98 | - case "add_document_group_to_user_group" : |
|
99 | - $updategroupaccess = true; |
|
100 | - $usergroup = intval($_REQUEST['usergroup']); |
|
101 | - $docgroup = intval($_REQUEST['docgroup']); |
|
102 | - $rs = $modx->db->select('COUNT(*)', $tbl_membergroup_access, "membergroup='{$usergroup}' AND documentgroup='{$docgroup}'"); |
|
103 | - $limit = $modx->db->getValue($rs); |
|
104 | - if($limit<=0) { |
|
105 | - $modx->db->insert(array('membergroup' => $usergroup, 'documentgroup' => $docgroup), $tbl_membergroup_access); |
|
106 | - } else { |
|
107 | - //alert user that coupling already exists? |
|
108 | - } |
|
109 | - break; |
|
110 | - case "remove_document_group_from_user_group" : |
|
111 | - $updategroupaccess = true; |
|
112 | - $coupling = intval($_REQUEST['coupling']); |
|
113 | - $modx->db->delete($tbl_membergroup_access, "id='{$coupling}'"); |
|
114 | - break; |
|
115 | - default : |
|
116 | - $modx->webAlertAndQuit("No operation set in request."); |
|
96 | + $modx->db->update(array('name' => $modx->db->escape($newgroupname)), $tbl_documentgroup_names, "id='{$groupid}'"); |
|
97 | + break; |
|
98 | + case "add_document_group_to_user_group" : |
|
99 | + $updategroupaccess = true; |
|
100 | + $usergroup = intval($_REQUEST['usergroup']); |
|
101 | + $docgroup = intval($_REQUEST['docgroup']); |
|
102 | + $rs = $modx->db->select('COUNT(*)', $tbl_membergroup_access, "membergroup='{$usergroup}' AND documentgroup='{$docgroup}'"); |
|
103 | + $limit = $modx->db->getValue($rs); |
|
104 | + if($limit<=0) { |
|
105 | + $modx->db->insert(array('membergroup' => $usergroup, 'documentgroup' => $docgroup), $tbl_membergroup_access); |
|
106 | + } else { |
|
107 | + //alert user that coupling already exists? |
|
108 | + } |
|
109 | + break; |
|
110 | + case "remove_document_group_from_user_group" : |
|
111 | + $updategroupaccess = true; |
|
112 | + $coupling = intval($_REQUEST['coupling']); |
|
113 | + $modx->db->delete($tbl_membergroup_access, "id='{$coupling}'"); |
|
114 | + break; |
|
115 | + default : |
|
116 | + $modx->webAlertAndQuit("No operation set in request."); |
|
117 | 117 | } |
118 | 118 | |
119 | 119 | // secure manager documents - flag as private |
120 | 120 | if($updategroupaccess==true){ |
121 | - include MODX_MANAGER_PATH."includes/secure_mgr_documents.inc.php"; |
|
122 | - secureMgrDocument(); |
|
121 | + include MODX_MANAGER_PATH."includes/secure_mgr_documents.inc.php"; |
|
122 | + secureMgrDocument(); |
|
123 | 123 | |
124 | - // Update the private group column |
|
125 | - $modx->db->update( |
|
126 | - 'dgn.private_memgroup = (mga.membergroup IS NOT NULL)', |
|
127 | - "{$tbl_documentgroup_names} AS dgn LEFT JOIN {$tbl_membergroup_access} AS mga ON mga.documentgroup = dgn.id"); |
|
124 | + // Update the private group column |
|
125 | + $modx->db->update( |
|
126 | + 'dgn.private_memgroup = (mga.membergroup IS NOT NULL)', |
|
127 | + "{$tbl_documentgroup_names} AS dgn LEFT JOIN {$tbl_membergroup_access} AS mga ON mga.documentgroup = dgn.id"); |
|
128 | 128 | } |
129 | 129 | |
130 | 130 | $header = "Location: index.php?a=40"; |
@@ -1,6 +1,6 @@ discard block |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | -if(!$modx->hasPermission('access_permissions')) { |
|
2 | +if (IN_MANAGER_MODE != "true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | +if (!$modx->hasPermission('access_permissions')) { |
|
4 | 4 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 5 | } |
6 | 6 | |
@@ -20,7 +20,7 @@ discard block |
||
20 | 20 | switch ($operation) { |
21 | 21 | case "add_user_group" : |
22 | 22 | $newgroup = $_REQUEST['newusergroup']; |
23 | - if(empty($newgroup)) { |
|
23 | + if (empty($newgroup)) { |
|
24 | 24 | $modx->webAlertAndQuit("No group name specified."); |
25 | 25 | } else { |
26 | 26 | $id = $modx->db->insert(array('name' => $modx->db->escape($newgroup)), $tbl_membergroup_names); |
@@ -34,7 +34,7 @@ discard block |
||
34 | 34 | break; |
35 | 35 | case "add_document_group" : |
36 | 36 | $newgroup = $_REQUEST['newdocgroup']; |
37 | - if(empty($newgroup)) { |
|
37 | + if (empty($newgroup)) { |
|
38 | 38 | $modx->webAlertAndQuit("No group name specified."); |
39 | 39 | } else { |
40 | 40 | $id = $modx->db->insert(array('name' => $modx->db->escape($newgroup)), $tbl_documentgroup_names); |
@@ -49,7 +49,7 @@ discard block |
||
49 | 49 | case "delete_user_group" : |
50 | 50 | $updategroupaccess = true; |
51 | 51 | $usergroup = intval($_REQUEST['usergroup']); |
52 | - if(empty($usergroup)) { |
|
52 | + if (empty($usergroup)) { |
|
53 | 53 | $modx->webAlertAndQuit("No user group id specified for deletion."); |
54 | 54 | } else { |
55 | 55 | $modx->db->delete($tbl_membergroup_names, "id='{$usergroup}'"); |
@@ -61,7 +61,7 @@ discard block |
||
61 | 61 | break; |
62 | 62 | case "delete_document_group" : |
63 | 63 | $group = intval($_REQUEST['documentgroup']); |
64 | - if(empty($group)) { |
|
64 | + if (empty($group)) { |
|
65 | 65 | $modx->webAlertAndQuit("No document group id specified for deletion."); |
66 | 66 | } else { |
67 | 67 | $modx->db->delete($tbl_documentgroup_names, "id='{$group}'"); |
@@ -73,11 +73,11 @@ discard block |
||
73 | 73 | break; |
74 | 74 | case "rename_user_group" : |
75 | 75 | $newgroupname = $_REQUEST['newgroupname']; |
76 | - if(empty($newgroupname)) { |
|
76 | + if (empty($newgroupname)) { |
|
77 | 77 | $modx->webAlertAndQuit("No group name specified."); |
78 | 78 | } |
79 | 79 | $groupid = intval($_REQUEST['groupid']); |
80 | - if(empty($groupid)) { |
|
80 | + if (empty($groupid)) { |
|
81 | 81 | $modx->webAlertAndQuit("No group id specified for rename."); |
82 | 82 | } |
83 | 83 | |
@@ -85,11 +85,11 @@ discard block |
||
85 | 85 | break; |
86 | 86 | case "rename_document_group" : |
87 | 87 | $newgroupname = $_REQUEST['newgroupname']; |
88 | - if(empty($newgroupname)) { |
|
88 | + if (empty($newgroupname)) { |
|
89 | 89 | $modx->webAlertAndQuit("No group name specified."); |
90 | 90 | } |
91 | 91 | $groupid = intval($_REQUEST['groupid']); |
92 | - if(empty($groupid)) { |
|
92 | + if (empty($groupid)) { |
|
93 | 93 | $modx->webAlertAndQuit("No group id specified for rename."); |
94 | 94 | } |
95 | 95 | |
@@ -101,7 +101,7 @@ discard block |
||
101 | 101 | $docgroup = intval($_REQUEST['docgroup']); |
102 | 102 | $rs = $modx->db->select('COUNT(*)', $tbl_membergroup_access, "membergroup='{$usergroup}' AND documentgroup='{$docgroup}'"); |
103 | 103 | $limit = $modx->db->getValue($rs); |
104 | - if($limit<=0) { |
|
104 | + if ($limit <= 0) { |
|
105 | 105 | $modx->db->insert(array('membergroup' => $usergroup, 'documentgroup' => $docgroup), $tbl_membergroup_access); |
106 | 106 | } else { |
107 | 107 | //alert user that coupling already exists? |
@@ -117,7 +117,7 @@ discard block |
||
117 | 117 | } |
118 | 118 | |
119 | 119 | // secure manager documents - flag as private |
120 | -if($updategroupaccess==true){ |
|
120 | +if ($updategroupaccess == true) { |
|
121 | 121 | include MODX_MANAGER_PATH."includes/secure_mgr_documents.inc.php"; |
122 | 122 | secureMgrDocument(); |
123 | 123 |
@@ -1,5 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
2 | +if(IN_MANAGER_MODE!="true") { |
|
3 | + die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
4 | +} |
|
3 | 5 | if(!$modx->hasPermission('access_permissions')) { |
4 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 7 | } |
@@ -117,7 +119,7 @@ discard block |
||
117 | 119 | } |
118 | 120 | |
119 | 121 | // secure manager documents - flag as private |
120 | -if($updategroupaccess==true){ |
|
122 | +if($updategroupaccess==true) { |
|
121 | 123 | include MODX_MANAGER_PATH."includes/secure_mgr_documents.inc.php"; |
122 | 124 | secureMgrDocument(); |
123 | 125 |
@@ -1,9 +1,9 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | if(IN_MANAGER_MODE != "true") { |
3 | - die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | + die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
4 | 4 | } |
5 | 5 | if(!$modx->hasPermission('save_web_user')) { |
6 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
6 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
7 | 7 | } |
8 | 8 | |
9 | 9 | $tbl_web_users = $modx->getFullTableName('web_users'); |
@@ -12,10 +12,10 @@ discard block |
||
12 | 12 | |
13 | 13 | $input = $_POST; |
14 | 14 | foreach($input as $k => $v) { |
15 | - if($k !== 'comment') { |
|
16 | - $v = sanitize($v); |
|
17 | - } |
|
18 | - $input[$k] = $v; |
|
15 | + if($k !== 'comment') { |
|
16 | + $v = sanitize($v); |
|
17 | + } |
|
18 | + $input[$k] = $v; |
|
19 | 19 | } |
20 | 20 | |
21 | 21 | $id = intval($input['id']); |
@@ -51,80 +51,80 @@ discard block |
||
51 | 51 | |
52 | 52 | // verify password |
53 | 53 | if($passwordgenmethod == "spec" && $input['specifiedpassword'] != $input['confirmpassword']) { |
54 | - webAlertAndQuit("Password typed is mismatched"); |
|
54 | + webAlertAndQuit("Password typed is mismatched"); |
|
55 | 55 | } |
56 | 56 | |
57 | 57 | // verify email |
58 | 58 | if($email == '' || !preg_match("/^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,24}$/i", $email)) { |
59 | - webAlertAndQuit("E-mail address doesn't seem to be valid!"); |
|
59 | + webAlertAndQuit("E-mail address doesn't seem to be valid!"); |
|
60 | 60 | } |
61 | 61 | |
62 | 62 | switch($input['mode']) { |
63 | - case '87' : // new user |
|
64 | - // check if this user name already exist |
|
65 | - $rs = $modx->db->select('count(id)', $tbl_web_users, "username='{$esc_newusername}'"); |
|
66 | - $limit = $modx->db->getValue($rs); |
|
67 | - if($limit > 0) { |
|
68 | - webAlertAndQuit("User name is already in use!"); |
|
69 | - } |
|
70 | - |
|
71 | - // check if the email address already exist |
|
72 | - $rs = $modx->db->select('count(id)', $tbl_web_user_attributes, "email='{$esc_email}' AND id!='{$id}'"); |
|
73 | - $limit = $modx->db->getValue($rs); |
|
74 | - if($limit > 0) { |
|
75 | - webAlertAndQuit("Email is already in use!"); |
|
76 | - } |
|
77 | - |
|
78 | - // generate a new password for this user |
|
79 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
80 | - if(strlen($specifiedpassword) < 6) { |
|
81 | - webAlertAndQuit("Password is too short!"); |
|
82 | - } else { |
|
83 | - $newpassword = $specifiedpassword; |
|
84 | - } |
|
85 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
86 | - webAlertAndQuit("You didn't specify a password for this user!"); |
|
87 | - } elseif($passwordgenmethod == 'g') { |
|
88 | - $newpassword = generate_password(8); |
|
89 | - } else { |
|
90 | - webAlertAndQuit("No password generation method specified!"); |
|
91 | - } |
|
92 | - |
|
93 | - // invoke OnBeforeWUsrFormSave event |
|
94 | - $modx->invokeEvent("OnBeforeWUsrFormSave", array( |
|
95 | - "mode" => "new", |
|
96 | - )); |
|
97 | - |
|
98 | - // create the user account |
|
99 | - $field = array(); |
|
100 | - $field['username'] = $esc_newusername; |
|
101 | - $field['password'] = md5($newpassword); |
|
102 | - $internalKey = $modx->db->insert($field, $tbl_web_users); |
|
103 | - |
|
104 | - $field = compact('internalKey', 'fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'blocked', 'blockeduntil', 'blockedafter'); |
|
105 | - $field = $modx->db->escape($field); |
|
106 | - $modx->db->insert($field, $tbl_web_user_attributes); |
|
107 | - |
|
108 | - // Save User Settings |
|
109 | - saveUserSettings($internalKey); |
|
110 | - |
|
111 | - // Set the item name for logger |
|
112 | - $_SESSION['itemname'] = $newusername; |
|
113 | - |
|
114 | - /*******************************************************************************/ |
|
115 | - // put the user in the user_groups he/ she should be in |
|
116 | - // first, check that up_perms are switched on! |
|
117 | - if($use_udperms == 1) { |
|
118 | - if(!empty($user_groups)) { |
|
119 | - for($i = 0; $i < count($user_groups); $i++) { |
|
120 | - $f = array(); |
|
121 | - $f['webgroup'] = intval($user_groups[$i]); |
|
122 | - $f['webuser'] = $internalKey; |
|
123 | - $modx->db->insert($f, $tbl_web_groups); |
|
124 | - } |
|
125 | - } |
|
126 | - } |
|
127 | - // end of user_groups stuff! |
|
63 | + case '87' : // new user |
|
64 | + // check if this user name already exist |
|
65 | + $rs = $modx->db->select('count(id)', $tbl_web_users, "username='{$esc_newusername}'"); |
|
66 | + $limit = $modx->db->getValue($rs); |
|
67 | + if($limit > 0) { |
|
68 | + webAlertAndQuit("User name is already in use!"); |
|
69 | + } |
|
70 | + |
|
71 | + // check if the email address already exist |
|
72 | + $rs = $modx->db->select('count(id)', $tbl_web_user_attributes, "email='{$esc_email}' AND id!='{$id}'"); |
|
73 | + $limit = $modx->db->getValue($rs); |
|
74 | + if($limit > 0) { |
|
75 | + webAlertAndQuit("Email is already in use!"); |
|
76 | + } |
|
77 | + |
|
78 | + // generate a new password for this user |
|
79 | + if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
80 | + if(strlen($specifiedpassword) < 6) { |
|
81 | + webAlertAndQuit("Password is too short!"); |
|
82 | + } else { |
|
83 | + $newpassword = $specifiedpassword; |
|
84 | + } |
|
85 | + } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
86 | + webAlertAndQuit("You didn't specify a password for this user!"); |
|
87 | + } elseif($passwordgenmethod == 'g') { |
|
88 | + $newpassword = generate_password(8); |
|
89 | + } else { |
|
90 | + webAlertAndQuit("No password generation method specified!"); |
|
91 | + } |
|
92 | + |
|
93 | + // invoke OnBeforeWUsrFormSave event |
|
94 | + $modx->invokeEvent("OnBeforeWUsrFormSave", array( |
|
95 | + "mode" => "new", |
|
96 | + )); |
|
97 | + |
|
98 | + // create the user account |
|
99 | + $field = array(); |
|
100 | + $field['username'] = $esc_newusername; |
|
101 | + $field['password'] = md5($newpassword); |
|
102 | + $internalKey = $modx->db->insert($field, $tbl_web_users); |
|
103 | + |
|
104 | + $field = compact('internalKey', 'fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'blocked', 'blockeduntil', 'blockedafter'); |
|
105 | + $field = $modx->db->escape($field); |
|
106 | + $modx->db->insert($field, $tbl_web_user_attributes); |
|
107 | + |
|
108 | + // Save User Settings |
|
109 | + saveUserSettings($internalKey); |
|
110 | + |
|
111 | + // Set the item name for logger |
|
112 | + $_SESSION['itemname'] = $newusername; |
|
113 | + |
|
114 | + /*******************************************************************************/ |
|
115 | + // put the user in the user_groups he/ she should be in |
|
116 | + // first, check that up_perms are switched on! |
|
117 | + if($use_udperms == 1) { |
|
118 | + if(!empty($user_groups)) { |
|
119 | + for($i = 0; $i < count($user_groups); $i++) { |
|
120 | + $f = array(); |
|
121 | + $f['webgroup'] = intval($user_groups[$i]); |
|
122 | + $f['webuser'] = $internalKey; |
|
123 | + $modx->db->insert($f, $tbl_web_groups); |
|
124 | + } |
|
125 | + } |
|
126 | + } |
|
127 | + // end of user_groups stuff! |
|
128 | 128 | |
129 | 129 | // invoke OnWebSaveUser event |
130 | 130 | $modx->invokeEvent("OnWebSaveUser", array( |
@@ -142,26 +142,26 @@ discard block |
||
142 | 142 | "id" => $internalKey |
143 | 143 | )); |
144 | 144 | |
145 | - if($passwordnotifymethod == 'e') { |
|
146 | - sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
147 | - if($input['stay'] != '') { |
|
148 | - $a = ($input['stay'] == '2') ? "88&id={$internalKey}" : "87"; |
|
149 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
150 | - header($header); |
|
151 | - } else { |
|
152 | - $header = "Location: index.php?a=99&r=2"; |
|
153 | - header($header); |
|
154 | - } |
|
155 | - } else { |
|
156 | - if($input['stay'] != '') { |
|
157 | - $a = ($input['stay'] == '2') ? "88&id={$internalKey}" : "87"; |
|
158 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
159 | - } else { |
|
160 | - $stayUrl = "index.php?a=99&r=2"; |
|
161 | - } |
|
162 | - |
|
163 | - include_once "header.inc.php"; |
|
164 | - ?> |
|
145 | + if($passwordnotifymethod == 'e') { |
|
146 | + sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
147 | + if($input['stay'] != '') { |
|
148 | + $a = ($input['stay'] == '2') ? "88&id={$internalKey}" : "87"; |
|
149 | + $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
150 | + header($header); |
|
151 | + } else { |
|
152 | + $header = "Location: index.php?a=99&r=2"; |
|
153 | + header($header); |
|
154 | + } |
|
155 | + } else { |
|
156 | + if($input['stay'] != '') { |
|
157 | + $a = ($input['stay'] == '2') ? "88&id={$internalKey}" : "87"; |
|
158 | + $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
159 | + } else { |
|
160 | + $stayUrl = "index.php?a=99&r=2"; |
|
161 | + } |
|
162 | + |
|
163 | + include_once "header.inc.php"; |
|
164 | + ?> |
|
165 | 165 | |
166 | 166 | <h1><?php echo $_lang['web_user_title']; ?></h1> |
167 | 167 | |
@@ -183,84 +183,84 @@ discard block |
||
183 | 183 | </div> |
184 | 184 | <?php |
185 | 185 | |
186 | - include_once "footer.inc.php"; |
|
187 | - } |
|
188 | - break; |
|
189 | - case '88' : // edit user |
|
190 | - // generate a new password for this user |
|
191 | - if($genpassword == 1) { |
|
192 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
193 | - if(strlen($specifiedpassword) < 6) { |
|
194 | - webAlertAndQuit("Password is too short!"); |
|
195 | - } else { |
|
196 | - $newpassword = $specifiedpassword; |
|
197 | - } |
|
198 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
199 | - webAlertAndQuit("You didn't specify a password for this user!"); |
|
200 | - } elseif($passwordgenmethod == 'g') { |
|
201 | - $newpassword = generate_password(8); |
|
202 | - } else { |
|
203 | - webAlertAndQuit("No password generation method specified!"); |
|
204 | - } |
|
205 | - } |
|
206 | - if($passwordnotifymethod == 'e') { |
|
207 | - sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
208 | - } |
|
209 | - |
|
210 | - // check if the username already exist |
|
211 | - $rs = $modx->db->select('count(id)', $tbl_web_users, "username='{$esc_newusername}' AND id!='{$id}'"); |
|
212 | - $limit = $modx->db->getValue($rs); |
|
213 | - if($limit > 0) { |
|
214 | - webAlertAndQuit("User name is already in use!"); |
|
215 | - } |
|
216 | - |
|
217 | - // check if the email address already exists |
|
218 | - $rs = $modx->db->select('count(internalKey)', $tbl_web_user_attributes, "email='{$esc_email}' AND internalKey!='{$id}'"); |
|
219 | - $limit = $modx->db->getValue($rs); |
|
220 | - if($limit > 0) { |
|
221 | - webAlertAndQuit("Email is already in use!"); |
|
222 | - } |
|
223 | - |
|
224 | - // invoke OnBeforeWUsrFormSave event |
|
225 | - $modx->invokeEvent("OnBeforeWUsrFormSave", array( |
|
226 | - "mode" => "upd", |
|
227 | - "id" => $id |
|
228 | - )); |
|
229 | - |
|
230 | - // update user name and password |
|
231 | - $field = array(); |
|
232 | - $field['username'] = $esc_newusername; |
|
233 | - if($genpassword == 1) { |
|
234 | - $field['password'] = md5($newpassword); |
|
235 | - } |
|
236 | - $modx->db->update($field, $tbl_web_users, "id='{$id}'"); |
|
237 | - $field = compact('fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'failedlogincount', 'blocked', 'blockeduntil', 'blockedafter'); |
|
238 | - $field = $modx->db->escape($field); |
|
239 | - $modx->db->update($field, $tbl_web_user_attributes, "internalKey='{$id}'"); |
|
240 | - |
|
241 | - // Save User Settings |
|
242 | - saveUserSettings($id); |
|
243 | - |
|
244 | - // Set the item name for logger |
|
245 | - $_SESSION['itemname'] = $newusername; |
|
246 | - |
|
247 | - /*******************************************************************************/ |
|
248 | - // put the user in the user_groups he/ she should be in |
|
249 | - // first, check that up_perms are switched on! |
|
250 | - if($use_udperms == 1) { |
|
251 | - // as this is an existing user, delete his/ her entries in the groups before saving the new groups |
|
252 | - $modx->db->delete($tbl_web_groups, "webuser='{$id}'"); |
|
253 | - if(!empty($user_groups)) { |
|
254 | - for($i = 0; $i < count($user_groups); $i++) { |
|
255 | - $field = array(); |
|
256 | - $field['webgroup'] = intval($user_groups[$i]); |
|
257 | - $field['webuser'] = $id; |
|
258 | - $modx->db->insert($field, $tbl_web_groups); |
|
259 | - } |
|
260 | - } |
|
261 | - } |
|
262 | - // end of user_groups stuff! |
|
263 | - /*******************************************************************************/ |
|
186 | + include_once "footer.inc.php"; |
|
187 | + } |
|
188 | + break; |
|
189 | + case '88' : // edit user |
|
190 | + // generate a new password for this user |
|
191 | + if($genpassword == 1) { |
|
192 | + if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
193 | + if(strlen($specifiedpassword) < 6) { |
|
194 | + webAlertAndQuit("Password is too short!"); |
|
195 | + } else { |
|
196 | + $newpassword = $specifiedpassword; |
|
197 | + } |
|
198 | + } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
199 | + webAlertAndQuit("You didn't specify a password for this user!"); |
|
200 | + } elseif($passwordgenmethod == 'g') { |
|
201 | + $newpassword = generate_password(8); |
|
202 | + } else { |
|
203 | + webAlertAndQuit("No password generation method specified!"); |
|
204 | + } |
|
205 | + } |
|
206 | + if($passwordnotifymethod == 'e') { |
|
207 | + sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
208 | + } |
|
209 | + |
|
210 | + // check if the username already exist |
|
211 | + $rs = $modx->db->select('count(id)', $tbl_web_users, "username='{$esc_newusername}' AND id!='{$id}'"); |
|
212 | + $limit = $modx->db->getValue($rs); |
|
213 | + if($limit > 0) { |
|
214 | + webAlertAndQuit("User name is already in use!"); |
|
215 | + } |
|
216 | + |
|
217 | + // check if the email address already exists |
|
218 | + $rs = $modx->db->select('count(internalKey)', $tbl_web_user_attributes, "email='{$esc_email}' AND internalKey!='{$id}'"); |
|
219 | + $limit = $modx->db->getValue($rs); |
|
220 | + if($limit > 0) { |
|
221 | + webAlertAndQuit("Email is already in use!"); |
|
222 | + } |
|
223 | + |
|
224 | + // invoke OnBeforeWUsrFormSave event |
|
225 | + $modx->invokeEvent("OnBeforeWUsrFormSave", array( |
|
226 | + "mode" => "upd", |
|
227 | + "id" => $id |
|
228 | + )); |
|
229 | + |
|
230 | + // update user name and password |
|
231 | + $field = array(); |
|
232 | + $field['username'] = $esc_newusername; |
|
233 | + if($genpassword == 1) { |
|
234 | + $field['password'] = md5($newpassword); |
|
235 | + } |
|
236 | + $modx->db->update($field, $tbl_web_users, "id='{$id}'"); |
|
237 | + $field = compact('fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'failedlogincount', 'blocked', 'blockeduntil', 'blockedafter'); |
|
238 | + $field = $modx->db->escape($field); |
|
239 | + $modx->db->update($field, $tbl_web_user_attributes, "internalKey='{$id}'"); |
|
240 | + |
|
241 | + // Save User Settings |
|
242 | + saveUserSettings($id); |
|
243 | + |
|
244 | + // Set the item name for logger |
|
245 | + $_SESSION['itemname'] = $newusername; |
|
246 | + |
|
247 | + /*******************************************************************************/ |
|
248 | + // put the user in the user_groups he/ she should be in |
|
249 | + // first, check that up_perms are switched on! |
|
250 | + if($use_udperms == 1) { |
|
251 | + // as this is an existing user, delete his/ her entries in the groups before saving the new groups |
|
252 | + $modx->db->delete($tbl_web_groups, "webuser='{$id}'"); |
|
253 | + if(!empty($user_groups)) { |
|
254 | + for($i = 0; $i < count($user_groups); $i++) { |
|
255 | + $field = array(); |
|
256 | + $field['webgroup'] = intval($user_groups[$i]); |
|
257 | + $field['webuser'] = $id; |
|
258 | + $modx->db->insert($field, $tbl_web_groups); |
|
259 | + } |
|
260 | + } |
|
261 | + } |
|
262 | + // end of user_groups stuff! |
|
263 | + /*******************************************************************************/ |
|
264 | 264 | |
265 | 265 | // invoke OnWebSaveUser event |
266 | 266 | $modx->invokeEvent("OnWebSaveUser", array( |
@@ -289,16 +289,16 @@ discard block |
||
289 | 289 | "id" => $id |
290 | 290 | )); |
291 | 291 | |
292 | - if($genpassword == 1 && $passwordnotifymethod == 's') { |
|
293 | - if($input['stay'] != '') { |
|
294 | - $a = ($input['stay'] == '2') ? "88&id={$id}" : "87"; |
|
295 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
296 | - } else { |
|
297 | - $stayUrl = "index.php?a=99&r=2"; |
|
298 | - } |
|
292 | + if($genpassword == 1 && $passwordnotifymethod == 's') { |
|
293 | + if($input['stay'] != '') { |
|
294 | + $a = ($input['stay'] == '2') ? "88&id={$id}" : "87"; |
|
295 | + $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
296 | + } else { |
|
297 | + $stayUrl = "index.php?a=99&r=2"; |
|
298 | + } |
|
299 | 299 | |
300 | - include_once "header.inc.php"; |
|
301 | - ?> |
|
300 | + include_once "header.inc.php"; |
|
301 | + ?> |
|
302 | 302 | |
303 | 303 | <h1><?php echo $_lang['web_user_title']; ?></h1> |
304 | 304 | |
@@ -318,124 +318,124 @@ discard block |
||
318 | 318 | </div> |
319 | 319 | <?php |
320 | 320 | |
321 | - include_once "footer.inc.php"; |
|
322 | - } else { |
|
323 | - if($input['stay'] != '') { |
|
324 | - $a = ($input['stay'] == '2') ? "88&id={$id}" : "87"; |
|
325 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
326 | - header($header); |
|
327 | - } else { |
|
328 | - $header = "Location: index.php?a=99&r=2"; |
|
329 | - header($header); |
|
330 | - } |
|
331 | - } |
|
332 | - break; |
|
333 | - default : |
|
334 | - webAlertAndQuit("No operation set in request."); |
|
321 | + include_once "footer.inc.php"; |
|
322 | + } else { |
|
323 | + if($input['stay'] != '') { |
|
324 | + $a = ($input['stay'] == '2') ? "88&id={$id}" : "87"; |
|
325 | + $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
326 | + header($header); |
|
327 | + } else { |
|
328 | + $header = "Location: index.php?a=99&r=2"; |
|
329 | + header($header); |
|
330 | + } |
|
331 | + } |
|
332 | + break; |
|
333 | + default : |
|
334 | + webAlertAndQuit("No operation set in request."); |
|
335 | 335 | } |
336 | 336 | |
337 | 337 | // in case any plugins include a quoted_printable function |
338 | 338 | function save_user_quoted_printable($string) { |
339 | - $crlf = "\n"; |
|
340 | - $string = preg_replace('!(\r\n|\r|\n)!', $crlf, $string) . $crlf; |
|
341 | - $f[] = '/([\000-\010\013\014\016-\037\075\177-\377])/e'; |
|
342 | - $r[] = "'=' . sprintf('%02X', ord('\\1'))"; |
|
343 | - $f[] = '/([\011\040])' . $crlf . '/e'; |
|
344 | - $r[] = "'=' . sprintf('%02X', ord('\\1')) . '" . $crlf . "'"; |
|
345 | - $string = preg_replace($f, $r, $string); |
|
346 | - return trim(wordwrap($string, 70, ' =' . $crlf)); |
|
339 | + $crlf = "\n"; |
|
340 | + $string = preg_replace('!(\r\n|\r|\n)!', $crlf, $string) . $crlf; |
|
341 | + $f[] = '/([\000-\010\013\014\016-\037\075\177-\377])/e'; |
|
342 | + $r[] = "'=' . sprintf('%02X', ord('\\1'))"; |
|
343 | + $f[] = '/([\011\040])' . $crlf . '/e'; |
|
344 | + $r[] = "'=' . sprintf('%02X', ord('\\1')) . '" . $crlf . "'"; |
|
345 | + $string = preg_replace($f, $r, $string); |
|
346 | + return trim(wordwrap($string, 70, ' =' . $crlf)); |
|
347 | 347 | } |
348 | 348 | |
349 | 349 | // Send an email to the user |
350 | 350 | function sendMailMessage($email, $uid, $pwd, $ufn) { |
351 | - global $modx, $_lang, $websignupemail_message; |
|
352 | - global $emailsubject, $emailsender; |
|
353 | - global $site_name, $site_url; |
|
354 | - $message = sprintf($websignupemail_message, $uid, $pwd); // use old method |
|
355 | - // replace placeholders |
|
356 | - $message = str_replace("[+uid+]", $uid, $message); |
|
357 | - $message = str_replace("[+pwd+]", $pwd, $message); |
|
358 | - $message = str_replace("[+ufn+]", $ufn, $message); |
|
359 | - $message = str_replace("[+sname+]", $site_name, $message); |
|
360 | - $message = str_replace("[+saddr+]", $emailsender, $message); |
|
361 | - $message = str_replace("[+semail+]", $emailsender, $message); |
|
362 | - $message = str_replace("[+surl+]", $site_url, $message); |
|
363 | - |
|
364 | - $param = array(); |
|
365 | - $param['from'] = "{$site_name}<{$emailsender}>"; |
|
366 | - $param['subject'] = $emailsubject; |
|
367 | - $param['body'] = $message; |
|
368 | - $param['to'] = $email; |
|
369 | - $param['type'] = 'text'; |
|
370 | - $rs = $modx->sendmail($param); |
|
371 | - if(!$rs) { |
|
372 | - $modx->manager->saveFormValues(); |
|
373 | - $modx->messageQuit("{$email} - {$_lang['error_sending_email']}"); |
|
374 | - } |
|
351 | + global $modx, $_lang, $websignupemail_message; |
|
352 | + global $emailsubject, $emailsender; |
|
353 | + global $site_name, $site_url; |
|
354 | + $message = sprintf($websignupemail_message, $uid, $pwd); // use old method |
|
355 | + // replace placeholders |
|
356 | + $message = str_replace("[+uid+]", $uid, $message); |
|
357 | + $message = str_replace("[+pwd+]", $pwd, $message); |
|
358 | + $message = str_replace("[+ufn+]", $ufn, $message); |
|
359 | + $message = str_replace("[+sname+]", $site_name, $message); |
|
360 | + $message = str_replace("[+saddr+]", $emailsender, $message); |
|
361 | + $message = str_replace("[+semail+]", $emailsender, $message); |
|
362 | + $message = str_replace("[+surl+]", $site_url, $message); |
|
363 | + |
|
364 | + $param = array(); |
|
365 | + $param['from'] = "{$site_name}<{$emailsender}>"; |
|
366 | + $param['subject'] = $emailsubject; |
|
367 | + $param['body'] = $message; |
|
368 | + $param['to'] = $email; |
|
369 | + $param['type'] = 'text'; |
|
370 | + $rs = $modx->sendmail($param); |
|
371 | + if(!$rs) { |
|
372 | + $modx->manager->saveFormValues(); |
|
373 | + $modx->messageQuit("{$email} - {$_lang['error_sending_email']}"); |
|
374 | + } |
|
375 | 375 | } |
376 | 376 | |
377 | 377 | // Save User Settings |
378 | 378 | function saveUserSettings($id) { |
379 | - global $modx; |
|
380 | - $tbl_web_user_settings = $modx->getFullTableName('web_user_settings'); |
|
381 | - |
|
382 | - $settings = array( |
|
383 | - "login_home", |
|
384 | - "allowed_ip", |
|
385 | - "allowed_days" |
|
386 | - ); |
|
387 | - |
|
388 | - $modx->db->delete($tbl_web_user_settings, "webuser='{$id}'"); |
|
389 | - |
|
390 | - foreach($settings as $n) { |
|
391 | - $vl = $_POST[$n]; |
|
392 | - if(is_array($vl)) { |
|
393 | - $vl = implode(",", $vl); |
|
394 | - } |
|
395 | - if($vl != '') { |
|
396 | - $f = array(); |
|
397 | - $f['webuser'] = $id; |
|
398 | - $f['setting_name'] = $n; |
|
399 | - $f['setting_value'] = $vl; |
|
400 | - $f = $modx->db->escape($f); |
|
401 | - $modx->db->insert($f, $tbl_web_user_settings); |
|
402 | - } |
|
403 | - } |
|
379 | + global $modx; |
|
380 | + $tbl_web_user_settings = $modx->getFullTableName('web_user_settings'); |
|
381 | + |
|
382 | + $settings = array( |
|
383 | + "login_home", |
|
384 | + "allowed_ip", |
|
385 | + "allowed_days" |
|
386 | + ); |
|
387 | + |
|
388 | + $modx->db->delete($tbl_web_user_settings, "webuser='{$id}'"); |
|
389 | + |
|
390 | + foreach($settings as $n) { |
|
391 | + $vl = $_POST[$n]; |
|
392 | + if(is_array($vl)) { |
|
393 | + $vl = implode(",", $vl); |
|
394 | + } |
|
395 | + if($vl != '') { |
|
396 | + $f = array(); |
|
397 | + $f['webuser'] = $id; |
|
398 | + $f['setting_name'] = $n; |
|
399 | + $f['setting_value'] = $vl; |
|
400 | + $f = $modx->db->escape($f); |
|
401 | + $modx->db->insert($f, $tbl_web_user_settings); |
|
402 | + } |
|
403 | + } |
|
404 | 404 | } |
405 | 405 | |
406 | 406 | // Web alert - sends an alert to web browser |
407 | 407 | function webAlertAndQuit($msg) { |
408 | - global $id, $modx; |
|
409 | - $mode = $_POST['mode']; |
|
410 | - $modx->manager->saveFormValues($mode); |
|
411 | - $modx->webAlertAndQuit($msg, "index.php?a={$mode}" . ($mode == '88' ? "&id={$id}" : '')); |
|
408 | + global $id, $modx; |
|
409 | + $mode = $_POST['mode']; |
|
410 | + $modx->manager->saveFormValues($mode); |
|
411 | + $modx->webAlertAndQuit($msg, "index.php?a={$mode}" . ($mode == '88' ? "&id={$id}" : '')); |
|
412 | 412 | } |
413 | 413 | |
414 | 414 | // Generate password |
415 | 415 | function generate_password($length = 10) { |
416 | - $allowable_characters = "abcdefghjkmnpqrstuvxyzABCDEFGHJKLMNPQRSTUVWXYZ23456789"; |
|
417 | - $ps_len = strlen($allowable_characters); |
|
418 | - mt_srand((double) microtime() * 1000000); |
|
419 | - $pass = ""; |
|
420 | - for($i = 0; $i < $length; $i++) { |
|
421 | - $pass .= $allowable_characters[mt_rand(0, $ps_len - 1)]; |
|
422 | - } |
|
423 | - return $pass; |
|
416 | + $allowable_characters = "abcdefghjkmnpqrstuvxyzABCDEFGHJKLMNPQRSTUVWXYZ23456789"; |
|
417 | + $ps_len = strlen($allowable_characters); |
|
418 | + mt_srand((double) microtime() * 1000000); |
|
419 | + $pass = ""; |
|
420 | + for($i = 0; $i < $length; $i++) { |
|
421 | + $pass .= $allowable_characters[mt_rand(0, $ps_len - 1)]; |
|
422 | + } |
|
423 | + return $pass; |
|
424 | 424 | } |
425 | 425 | |
426 | 426 | function sanitize($str = '', $safecount = 0) { |
427 | - global $modx; |
|
428 | - $safecount++; |
|
429 | - if(1000 < $safecount) { |
|
430 | - exit("error too many loops '{$safecount}'"); |
|
431 | - } |
|
432 | - if(is_array($str)) { |
|
433 | - foreach($str as $i => $v) { |
|
434 | - $str[$i] = sanitize($v, $safecount); |
|
435 | - } |
|
436 | - } else { |
|
437 | - // $str = strip_tags($str); // LEAVE < and > intact |
|
438 | - $str = htmlspecialchars($str, ENT_NOQUOTES, $modx->config['modx_charset']); |
|
439 | - } |
|
440 | - return $str; |
|
427 | + global $modx; |
|
428 | + $safecount++; |
|
429 | + if(1000 < $safecount) { |
|
430 | + exit("error too many loops '{$safecount}'"); |
|
431 | + } |
|
432 | + if(is_array($str)) { |
|
433 | + foreach($str as $i => $v) { |
|
434 | + $str[$i] = sanitize($v, $safecount); |
|
435 | + } |
|
436 | + } else { |
|
437 | + // $str = strip_tags($str); // LEAVE < and > intact |
|
438 | + $str = htmlspecialchars($str, ENT_NOQUOTES, $modx->config['modx_charset']); |
|
439 | + } |
|
440 | + return $str; |
|
441 | 441 | } |
@@ -60,108 +60,108 @@ discard block |
||
60 | 60 | } |
61 | 61 | |
62 | 62 | switch($input['mode']) { |
63 | - case '87' : // new user |
|
64 | - // check if this user name already exist |
|
65 | - $rs = $modx->db->select('count(id)', $tbl_web_users, "username='{$esc_newusername}'"); |
|
66 | - $limit = $modx->db->getValue($rs); |
|
67 | - if($limit > 0) { |
|
68 | - webAlertAndQuit("User name is already in use!"); |
|
69 | - } |
|
70 | - |
|
71 | - // check if the email address already exist |
|
72 | - $rs = $modx->db->select('count(id)', $tbl_web_user_attributes, "email='{$esc_email}' AND id!='{$id}'"); |
|
73 | - $limit = $modx->db->getValue($rs); |
|
74 | - if($limit > 0) { |
|
75 | - webAlertAndQuit("Email is already in use!"); |
|
76 | - } |
|
63 | + case '87' : // new user |
|
64 | + // check if this user name already exist |
|
65 | + $rs = $modx->db->select('count(id)', $tbl_web_users, "username='{$esc_newusername}'"); |
|
66 | + $limit = $modx->db->getValue($rs); |
|
67 | + if($limit > 0) { |
|
68 | + webAlertAndQuit("User name is already in use!"); |
|
69 | + } |
|
70 | + |
|
71 | + // check if the email address already exist |
|
72 | + $rs = $modx->db->select('count(id)', $tbl_web_user_attributes, "email='{$esc_email}' AND id!='{$id}'"); |
|
73 | + $limit = $modx->db->getValue($rs); |
|
74 | + if($limit > 0) { |
|
75 | + webAlertAndQuit("Email is already in use!"); |
|
76 | + } |
|
77 | + |
|
78 | + // generate a new password for this user |
|
79 | + if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
80 | + if(strlen($specifiedpassword) < 6) { |
|
81 | + webAlertAndQuit("Password is too short!"); |
|
82 | + } else { |
|
83 | + $newpassword = $specifiedpassword; |
|
84 | + } |
|
85 | + } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
86 | + webAlertAndQuit("You didn't specify a password for this user!"); |
|
87 | + } elseif($passwordgenmethod == 'g') { |
|
88 | + $newpassword = generate_password(8); |
|
89 | + } else { |
|
90 | + webAlertAndQuit("No password generation method specified!"); |
|
91 | + } |
|
92 | + |
|
93 | + // invoke OnBeforeWUsrFormSave event |
|
94 | + $modx->invokeEvent("OnBeforeWUsrFormSave", array( |
|
95 | + "mode" => "new", |
|
96 | + )); |
|
97 | + |
|
98 | + // create the user account |
|
99 | + $field = array(); |
|
100 | + $field['username'] = $esc_newusername; |
|
101 | + $field['password'] = md5($newpassword); |
|
102 | + $internalKey = $modx->db->insert($field, $tbl_web_users); |
|
103 | + |
|
104 | + $field = compact('internalKey', 'fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'blocked', 'blockeduntil', 'blockedafter'); |
|
105 | + $field = $modx->db->escape($field); |
|
106 | + $modx->db->insert($field, $tbl_web_user_attributes); |
|
107 | + |
|
108 | + // Save User Settings |
|
109 | + saveUserSettings($internalKey); |
|
110 | + |
|
111 | + // Set the item name for logger |
|
112 | + $_SESSION['itemname'] = $newusername; |
|
113 | + |
|
114 | + /*******************************************************************************/ |
|
115 | + // put the user in the user_groups he/ she should be in |
|
116 | + // first, check that up_perms are switched on! |
|
117 | + if($use_udperms == 1) { |
|
118 | + if(!empty($user_groups)) { |
|
119 | + for($i = 0; $i < count($user_groups); $i++) { |
|
120 | + $f = array(); |
|
121 | + $f['webgroup'] = intval($user_groups[$i]); |
|
122 | + $f['webuser'] = $internalKey; |
|
123 | + $modx->db->insert($f, $tbl_web_groups); |
|
124 | + } |
|
125 | + } |
|
126 | + } |
|
127 | + // end of user_groups stuff! |
|
128 | + |
|
129 | + // invoke OnWebSaveUser event |
|
130 | + $modx->invokeEvent("OnWebSaveUser", array( |
|
131 | + "mode" => "new", |
|
132 | + "userid" => $internalKey, |
|
133 | + "username" => $newusername, |
|
134 | + "userpassword" => $newpassword, |
|
135 | + "useremail" => $email, |
|
136 | + "userfullname" => $fullname |
|
137 | + )); |
|
77 | 138 | |
78 | - // generate a new password for this user |
|
79 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
80 | - if(strlen($specifiedpassword) < 6) { |
|
81 | - webAlertAndQuit("Password is too short!"); |
|
82 | - } else { |
|
83 | - $newpassword = $specifiedpassword; |
|
84 | - } |
|
85 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
86 | - webAlertAndQuit("You didn't specify a password for this user!"); |
|
87 | - } elseif($passwordgenmethod == 'g') { |
|
88 | - $newpassword = generate_password(8); |
|
89 | - } else { |
|
90 | - webAlertAndQuit("No password generation method specified!"); |
|
91 | - } |
|
139 | + // invoke OnWUsrFormSave event |
|
140 | + $modx->invokeEvent("OnWUsrFormSave", array( |
|
141 | + "mode" => "new", |
|
142 | + "id" => $internalKey |
|
143 | + )); |
|
92 | 144 | |
93 | - // invoke OnBeforeWUsrFormSave event |
|
94 | - $modx->invokeEvent("OnBeforeWUsrFormSave", array( |
|
95 | - "mode" => "new", |
|
96 | - )); |
|
97 | - |
|
98 | - // create the user account |
|
99 | - $field = array(); |
|
100 | - $field['username'] = $esc_newusername; |
|
101 | - $field['password'] = md5($newpassword); |
|
102 | - $internalKey = $modx->db->insert($field, $tbl_web_users); |
|
103 | - |
|
104 | - $field = compact('internalKey', 'fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'blocked', 'blockeduntil', 'blockedafter'); |
|
105 | - $field = $modx->db->escape($field); |
|
106 | - $modx->db->insert($field, $tbl_web_user_attributes); |
|
107 | - |
|
108 | - // Save User Settings |
|
109 | - saveUserSettings($internalKey); |
|
110 | - |
|
111 | - // Set the item name for logger |
|
112 | - $_SESSION['itemname'] = $newusername; |
|
113 | - |
|
114 | - /*******************************************************************************/ |
|
115 | - // put the user in the user_groups he/ she should be in |
|
116 | - // first, check that up_perms are switched on! |
|
117 | - if($use_udperms == 1) { |
|
118 | - if(!empty($user_groups)) { |
|
119 | - for($i = 0; $i < count($user_groups); $i++) { |
|
120 | - $f = array(); |
|
121 | - $f['webgroup'] = intval($user_groups[$i]); |
|
122 | - $f['webuser'] = $internalKey; |
|
123 | - $modx->db->insert($f, $tbl_web_groups); |
|
124 | - } |
|
125 | - } |
|
126 | - } |
|
127 | - // end of user_groups stuff! |
|
128 | - |
|
129 | - // invoke OnWebSaveUser event |
|
130 | - $modx->invokeEvent("OnWebSaveUser", array( |
|
131 | - "mode" => "new", |
|
132 | - "userid" => $internalKey, |
|
133 | - "username" => $newusername, |
|
134 | - "userpassword" => $newpassword, |
|
135 | - "useremail" => $email, |
|
136 | - "userfullname" => $fullname |
|
137 | - )); |
|
138 | - |
|
139 | - // invoke OnWUsrFormSave event |
|
140 | - $modx->invokeEvent("OnWUsrFormSave", array( |
|
141 | - "mode" => "new", |
|
142 | - "id" => $internalKey |
|
143 | - )); |
|
144 | - |
|
145 | - if($passwordnotifymethod == 'e') { |
|
146 | - sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
147 | - if($input['stay'] != '') { |
|
148 | - $a = ($input['stay'] == '2') ? "88&id={$internalKey}" : "87"; |
|
149 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
150 | - header($header); |
|
151 | - } else { |
|
152 | - $header = "Location: index.php?a=99&r=2"; |
|
153 | - header($header); |
|
154 | - } |
|
155 | - } else { |
|
156 | - if($input['stay'] != '') { |
|
157 | - $a = ($input['stay'] == '2') ? "88&id={$internalKey}" : "87"; |
|
158 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
159 | - } else { |
|
160 | - $stayUrl = "index.php?a=99&r=2"; |
|
161 | - } |
|
162 | - |
|
163 | - include_once "header.inc.php"; |
|
164 | - ?> |
|
145 | + if($passwordnotifymethod == 'e') { |
|
146 | + sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
147 | + if($input['stay'] != '') { |
|
148 | + $a = ($input['stay'] == '2') ? "88&id={$internalKey}" : "87"; |
|
149 | + $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
150 | + header($header); |
|
151 | + } else { |
|
152 | + $header = "Location: index.php?a=99&r=2"; |
|
153 | + header($header); |
|
154 | + } |
|
155 | + } else { |
|
156 | + if($input['stay'] != '') { |
|
157 | + $a = ($input['stay'] == '2') ? "88&id={$internalKey}" : "87"; |
|
158 | + $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
159 | + } else { |
|
160 | + $stayUrl = "index.php?a=99&r=2"; |
|
161 | + } |
|
162 | + |
|
163 | + include_once "header.inc.php"; |
|
164 | + ?> |
|
165 | 165 | |
166 | 166 | <h1><?php echo $_lang['web_user_title']; ?></h1> |
167 | 167 | |
@@ -183,122 +183,122 @@ discard block |
||
183 | 183 | </div> |
184 | 184 | <?php |
185 | 185 | |
186 | - include_once "footer.inc.php"; |
|
187 | - } |
|
188 | - break; |
|
189 | - case '88' : // edit user |
|
190 | - // generate a new password for this user |
|
191 | - if($genpassword == 1) { |
|
192 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
193 | - if(strlen($specifiedpassword) < 6) { |
|
194 | - webAlertAndQuit("Password is too short!"); |
|
195 | - } else { |
|
196 | - $newpassword = $specifiedpassword; |
|
197 | - } |
|
198 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
199 | - webAlertAndQuit("You didn't specify a password for this user!"); |
|
200 | - } elseif($passwordgenmethod == 'g') { |
|
201 | - $newpassword = generate_password(8); |
|
202 | - } else { |
|
203 | - webAlertAndQuit("No password generation method specified!"); |
|
204 | - } |
|
205 | - } |
|
206 | - if($passwordnotifymethod == 'e') { |
|
207 | - sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
208 | - } |
|
209 | - |
|
210 | - // check if the username already exist |
|
211 | - $rs = $modx->db->select('count(id)', $tbl_web_users, "username='{$esc_newusername}' AND id!='{$id}'"); |
|
212 | - $limit = $modx->db->getValue($rs); |
|
213 | - if($limit > 0) { |
|
214 | - webAlertAndQuit("User name is already in use!"); |
|
215 | - } |
|
216 | - |
|
217 | - // check if the email address already exists |
|
218 | - $rs = $modx->db->select('count(internalKey)', $tbl_web_user_attributes, "email='{$esc_email}' AND internalKey!='{$id}'"); |
|
219 | - $limit = $modx->db->getValue($rs); |
|
220 | - if($limit > 0) { |
|
221 | - webAlertAndQuit("Email is already in use!"); |
|
222 | - } |
|
223 | - |
|
224 | - // invoke OnBeforeWUsrFormSave event |
|
225 | - $modx->invokeEvent("OnBeforeWUsrFormSave", array( |
|
226 | - "mode" => "upd", |
|
227 | - "id" => $id |
|
228 | - )); |
|
229 | - |
|
230 | - // update user name and password |
|
231 | - $field = array(); |
|
232 | - $field['username'] = $esc_newusername; |
|
233 | - if($genpassword == 1) { |
|
234 | - $field['password'] = md5($newpassword); |
|
235 | - } |
|
236 | - $modx->db->update($field, $tbl_web_users, "id='{$id}'"); |
|
237 | - $field = compact('fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'failedlogincount', 'blocked', 'blockeduntil', 'blockedafter'); |
|
238 | - $field = $modx->db->escape($field); |
|
239 | - $modx->db->update($field, $tbl_web_user_attributes, "internalKey='{$id}'"); |
|
240 | - |
|
241 | - // Save User Settings |
|
242 | - saveUserSettings($id); |
|
243 | - |
|
244 | - // Set the item name for logger |
|
245 | - $_SESSION['itemname'] = $newusername; |
|
246 | - |
|
247 | - /*******************************************************************************/ |
|
248 | - // put the user in the user_groups he/ she should be in |
|
249 | - // first, check that up_perms are switched on! |
|
250 | - if($use_udperms == 1) { |
|
251 | - // as this is an existing user, delete his/ her entries in the groups before saving the new groups |
|
252 | - $modx->db->delete($tbl_web_groups, "webuser='{$id}'"); |
|
253 | - if(!empty($user_groups)) { |
|
254 | - for($i = 0; $i < count($user_groups); $i++) { |
|
255 | - $field = array(); |
|
256 | - $field['webgroup'] = intval($user_groups[$i]); |
|
257 | - $field['webuser'] = $id; |
|
258 | - $modx->db->insert($field, $tbl_web_groups); |
|
259 | - } |
|
260 | - } |
|
261 | - } |
|
262 | - // end of user_groups stuff! |
|
263 | - /*******************************************************************************/ |
|
264 | - |
|
265 | - // invoke OnWebSaveUser event |
|
266 | - $modx->invokeEvent("OnWebSaveUser", array( |
|
267 | - "mode" => "upd", |
|
268 | - "userid" => $id, |
|
269 | - "username" => $newusername, |
|
270 | - "userpassword" => $newpassword, |
|
271 | - "useremail" => $email, |
|
272 | - "userfullname" => $fullname, |
|
273 | - "oldusername" => (($oldusername != $newusername) ? $oldusername : ""), |
|
274 | - "olduseremail" => (($oldemail != $email) ? $oldemail : "") |
|
275 | - )); |
|
276 | - |
|
277 | - // invoke OnWebChangePassword event |
|
278 | - if($genpassword == 1) { |
|
279 | - $modx->invokeEvent("OnWebChangePassword", array( |
|
186 | + include_once "footer.inc.php"; |
|
187 | + } |
|
188 | + break; |
|
189 | + case '88' : // edit user |
|
190 | + // generate a new password for this user |
|
191 | + if($genpassword == 1) { |
|
192 | + if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
193 | + if(strlen($specifiedpassword) < 6) { |
|
194 | + webAlertAndQuit("Password is too short!"); |
|
195 | + } else { |
|
196 | + $newpassword = $specifiedpassword; |
|
197 | + } |
|
198 | + } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
199 | + webAlertAndQuit("You didn't specify a password for this user!"); |
|
200 | + } elseif($passwordgenmethod == 'g') { |
|
201 | + $newpassword = generate_password(8); |
|
202 | + } else { |
|
203 | + webAlertAndQuit("No password generation method specified!"); |
|
204 | + } |
|
205 | + } |
|
206 | + if($passwordnotifymethod == 'e') { |
|
207 | + sendMailMessage($email, $newusername, $newpassword, $fullname); |
|
208 | + } |
|
209 | + |
|
210 | + // check if the username already exist |
|
211 | + $rs = $modx->db->select('count(id)', $tbl_web_users, "username='{$esc_newusername}' AND id!='{$id}'"); |
|
212 | + $limit = $modx->db->getValue($rs); |
|
213 | + if($limit > 0) { |
|
214 | + webAlertAndQuit("User name is already in use!"); |
|
215 | + } |
|
216 | + |
|
217 | + // check if the email address already exists |
|
218 | + $rs = $modx->db->select('count(internalKey)', $tbl_web_user_attributes, "email='{$esc_email}' AND internalKey!='{$id}'"); |
|
219 | + $limit = $modx->db->getValue($rs); |
|
220 | + if($limit > 0) { |
|
221 | + webAlertAndQuit("Email is already in use!"); |
|
222 | + } |
|
223 | + |
|
224 | + // invoke OnBeforeWUsrFormSave event |
|
225 | + $modx->invokeEvent("OnBeforeWUsrFormSave", array( |
|
226 | + "mode" => "upd", |
|
227 | + "id" => $id |
|
228 | + )); |
|
229 | + |
|
230 | + // update user name and password |
|
231 | + $field = array(); |
|
232 | + $field['username'] = $esc_newusername; |
|
233 | + if($genpassword == 1) { |
|
234 | + $field['password'] = md5($newpassword); |
|
235 | + } |
|
236 | + $modx->db->update($field, $tbl_web_users, "id='{$id}'"); |
|
237 | + $field = compact('fullname', 'role', 'email', 'phone', 'mobilephone', 'fax', 'zip', 'street', 'city', 'state', 'country', 'gender', 'dob', 'photo', 'comment', 'failedlogincount', 'blocked', 'blockeduntil', 'blockedafter'); |
|
238 | + $field = $modx->db->escape($field); |
|
239 | + $modx->db->update($field, $tbl_web_user_attributes, "internalKey='{$id}'"); |
|
240 | + |
|
241 | + // Save User Settings |
|
242 | + saveUserSettings($id); |
|
243 | + |
|
244 | + // Set the item name for logger |
|
245 | + $_SESSION['itemname'] = $newusername; |
|
246 | + |
|
247 | + /*******************************************************************************/ |
|
248 | + // put the user in the user_groups he/ she should be in |
|
249 | + // first, check that up_perms are switched on! |
|
250 | + if($use_udperms == 1) { |
|
251 | + // as this is an existing user, delete his/ her entries in the groups before saving the new groups |
|
252 | + $modx->db->delete($tbl_web_groups, "webuser='{$id}'"); |
|
253 | + if(!empty($user_groups)) { |
|
254 | + for($i = 0; $i < count($user_groups); $i++) { |
|
255 | + $field = array(); |
|
256 | + $field['webgroup'] = intval($user_groups[$i]); |
|
257 | + $field['webuser'] = $id; |
|
258 | + $modx->db->insert($field, $tbl_web_groups); |
|
259 | + } |
|
260 | + } |
|
261 | + } |
|
262 | + // end of user_groups stuff! |
|
263 | + /*******************************************************************************/ |
|
264 | + |
|
265 | + // invoke OnWebSaveUser event |
|
266 | + $modx->invokeEvent("OnWebSaveUser", array( |
|
267 | + "mode" => "upd", |
|
280 | 268 | "userid" => $id, |
281 | 269 | "username" => $newusername, |
282 | - "userpassword" => $newpassword |
|
270 | + "userpassword" => $newpassword, |
|
271 | + "useremail" => $email, |
|
272 | + "userfullname" => $fullname, |
|
273 | + "oldusername" => (($oldusername != $newusername) ? $oldusername : ""), |
|
274 | + "olduseremail" => (($oldemail != $email) ? $oldemail : "") |
|
283 | 275 | )); |
284 | - } |
|
285 | 276 | |
286 | - // invoke OnWUsrFormSave event |
|
287 | - $modx->invokeEvent("OnWUsrFormSave", array( |
|
288 | - "mode" => "upd", |
|
289 | - "id" => $id |
|
290 | - )); |
|
277 | + // invoke OnWebChangePassword event |
|
278 | + if($genpassword == 1) { |
|
279 | + $modx->invokeEvent("OnWebChangePassword", array( |
|
280 | + "userid" => $id, |
|
281 | + "username" => $newusername, |
|
282 | + "userpassword" => $newpassword |
|
283 | + )); |
|
284 | + } |
|
285 | + |
|
286 | + // invoke OnWUsrFormSave event |
|
287 | + $modx->invokeEvent("OnWUsrFormSave", array( |
|
288 | + "mode" => "upd", |
|
289 | + "id" => $id |
|
290 | + )); |
|
291 | 291 | |
292 | - if($genpassword == 1 && $passwordnotifymethod == 's') { |
|
293 | - if($input['stay'] != '') { |
|
294 | - $a = ($input['stay'] == '2') ? "88&id={$id}" : "87"; |
|
295 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
296 | - } else { |
|
297 | - $stayUrl = "index.php?a=99&r=2"; |
|
298 | - } |
|
292 | + if($genpassword == 1 && $passwordnotifymethod == 's') { |
|
293 | + if($input['stay'] != '') { |
|
294 | + $a = ($input['stay'] == '2') ? "88&id={$id}" : "87"; |
|
295 | + $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
296 | + } else { |
|
297 | + $stayUrl = "index.php?a=99&r=2"; |
|
298 | + } |
|
299 | 299 | |
300 | - include_once "header.inc.php"; |
|
301 | - ?> |
|
300 | + include_once "header.inc.php"; |
|
301 | + ?> |
|
302 | 302 | |
303 | 303 | <h1><?php echo $_lang['web_user_title']; ?></h1> |
304 | 304 | |
@@ -318,20 +318,20 @@ discard block |
||
318 | 318 | </div> |
319 | 319 | <?php |
320 | 320 | |
321 | - include_once "footer.inc.php"; |
|
322 | - } else { |
|
323 | - if($input['stay'] != '') { |
|
324 | - $a = ($input['stay'] == '2') ? "88&id={$id}" : "87"; |
|
325 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
326 | - header($header); |
|
327 | - } else { |
|
328 | - $header = "Location: index.php?a=99&r=2"; |
|
329 | - header($header); |
|
330 | - } |
|
331 | - } |
|
332 | - break; |
|
333 | - default : |
|
334 | - webAlertAndQuit("No operation set in request."); |
|
321 | + include_once "footer.inc.php"; |
|
322 | + } else { |
|
323 | + if($input['stay'] != '') { |
|
324 | + $a = ($input['stay'] == '2') ? "88&id={$id}" : "87"; |
|
325 | + $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
326 | + header($header); |
|
327 | + } else { |
|
328 | + $header = "Location: index.php?a=99&r=2"; |
|
329 | + header($header); |
|
330 | + } |
|
331 | + } |
|
332 | + break; |
|
333 | + default : |
|
334 | + webAlertAndQuit("No operation set in request."); |
|
335 | 335 | } |
336 | 336 | |
337 | 337 | // in case any plugins include a quoted_printable function |
@@ -1,8 +1,8 @@ discard block |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE != "true") { |
|
2 | +if (IN_MANAGER_MODE != "true") { |
|
3 | 3 | die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
4 | 4 | } |
5 | -if(!$modx->hasPermission('save_web_user')) { |
|
5 | +if (!$modx->hasPermission('save_web_user')) { |
|
6 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
7 | 7 | } |
8 | 8 | |
@@ -11,8 +11,8 @@ discard block |
||
11 | 11 | $tbl_web_groups = $modx->getFullTableName('web_groups'); |
12 | 12 | |
13 | 13 | $input = $_POST; |
14 | -foreach($input as $k => $v) { |
|
15 | - if($k !== 'comment') { |
|
14 | +foreach ($input as $k => $v) { |
|
15 | + if ($k !== 'comment') { |
|
16 | 16 | $v = sanitize($v); |
17 | 17 | } |
18 | 18 | $input[$k] = $v; |
@@ -50,41 +50,41 @@ discard block |
||
50 | 50 | $user_groups = $input['user_groups']; |
51 | 51 | |
52 | 52 | // verify password |
53 | -if($passwordgenmethod == "spec" && $input['specifiedpassword'] != $input['confirmpassword']) { |
|
53 | +if ($passwordgenmethod == "spec" && $input['specifiedpassword'] != $input['confirmpassword']) { |
|
54 | 54 | webAlertAndQuit("Password typed is mismatched"); |
55 | 55 | } |
56 | 56 | |
57 | 57 | // verify email |
58 | -if($email == '' || !preg_match("/^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,24}$/i", $email)) { |
|
58 | +if ($email == '' || !preg_match("/^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,24}$/i", $email)) { |
|
59 | 59 | webAlertAndQuit("E-mail address doesn't seem to be valid!"); |
60 | 60 | } |
61 | 61 | |
62 | -switch($input['mode']) { |
|
62 | +switch ($input['mode']) { |
|
63 | 63 | case '87' : // new user |
64 | 64 | // check if this user name already exist |
65 | 65 | $rs = $modx->db->select('count(id)', $tbl_web_users, "username='{$esc_newusername}'"); |
66 | 66 | $limit = $modx->db->getValue($rs); |
67 | - if($limit > 0) { |
|
67 | + if ($limit > 0) { |
|
68 | 68 | webAlertAndQuit("User name is already in use!"); |
69 | 69 | } |
70 | 70 | |
71 | 71 | // check if the email address already exist |
72 | 72 | $rs = $modx->db->select('count(id)', $tbl_web_user_attributes, "email='{$esc_email}' AND id!='{$id}'"); |
73 | 73 | $limit = $modx->db->getValue($rs); |
74 | - if($limit > 0) { |
|
74 | + if ($limit > 0) { |
|
75 | 75 | webAlertAndQuit("Email is already in use!"); |
76 | 76 | } |
77 | 77 | |
78 | 78 | // generate a new password for this user |
79 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
80 | - if(strlen($specifiedpassword) < 6) { |
|
79 | + if ($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
80 | + if (strlen($specifiedpassword) < 6) { |
|
81 | 81 | webAlertAndQuit("Password is too short!"); |
82 | 82 | } else { |
83 | 83 | $newpassword = $specifiedpassword; |
84 | 84 | } |
85 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
85 | + } elseif ($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
86 | 86 | webAlertAndQuit("You didn't specify a password for this user!"); |
87 | - } elseif($passwordgenmethod == 'g') { |
|
87 | + } elseif ($passwordgenmethod == 'g') { |
|
88 | 88 | $newpassword = generate_password(8); |
89 | 89 | } else { |
90 | 90 | webAlertAndQuit("No password generation method specified!"); |
@@ -114,9 +114,9 @@ discard block |
||
114 | 114 | /*******************************************************************************/ |
115 | 115 | // put the user in the user_groups he/ she should be in |
116 | 116 | // first, check that up_perms are switched on! |
117 | - if($use_udperms == 1) { |
|
118 | - if(!empty($user_groups)) { |
|
119 | - for($i = 0; $i < count($user_groups); $i++) { |
|
117 | + if ($use_udperms == 1) { |
|
118 | + if (!empty($user_groups)) { |
|
119 | + for ($i = 0; $i < count($user_groups); $i++) { |
|
120 | 120 | $f = array(); |
121 | 121 | $f['webgroup'] = intval($user_groups[$i]); |
122 | 122 | $f['webuser'] = $internalKey; |
@@ -142,20 +142,20 @@ discard block |
||
142 | 142 | "id" => $internalKey |
143 | 143 | )); |
144 | 144 | |
145 | - if($passwordnotifymethod == 'e') { |
|
145 | + if ($passwordnotifymethod == 'e') { |
|
146 | 146 | sendMailMessage($email, $newusername, $newpassword, $fullname); |
147 | - if($input['stay'] != '') { |
|
147 | + if ($input['stay'] != '') { |
|
148 | 148 | $a = ($input['stay'] == '2') ? "88&id={$internalKey}" : "87"; |
149 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
149 | + $header = "Location: index.php?a={$a}&r=2&stay=".$input['stay']; |
|
150 | 150 | header($header); |
151 | 151 | } else { |
152 | 152 | $header = "Location: index.php?a=99&r=2"; |
153 | 153 | header($header); |
154 | 154 | } |
155 | 155 | } else { |
156 | - if($input['stay'] != '') { |
|
156 | + if ($input['stay'] != '') { |
|
157 | 157 | $a = ($input['stay'] == '2') ? "88&id={$internalKey}" : "87"; |
158 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
158 | + $stayUrl = "index.php?a={$a}&r=2&stay=".$input['stay']; |
|
159 | 159 | } else { |
160 | 160 | $stayUrl = "index.php?a=99&r=2"; |
161 | 161 | } |
@@ -188,36 +188,36 @@ discard block |
||
188 | 188 | break; |
189 | 189 | case '88' : // edit user |
190 | 190 | // generate a new password for this user |
191 | - if($genpassword == 1) { |
|
192 | - if($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
193 | - if(strlen($specifiedpassword) < 6) { |
|
191 | + if ($genpassword == 1) { |
|
192 | + if ($specifiedpassword != "" && $passwordgenmethod == "spec") { |
|
193 | + if (strlen($specifiedpassword) < 6) { |
|
194 | 194 | webAlertAndQuit("Password is too short!"); |
195 | 195 | } else { |
196 | 196 | $newpassword = $specifiedpassword; |
197 | 197 | } |
198 | - } elseif($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
198 | + } elseif ($specifiedpassword == "" && $passwordgenmethod == "spec") { |
|
199 | 199 | webAlertAndQuit("You didn't specify a password for this user!"); |
200 | - } elseif($passwordgenmethod == 'g') { |
|
200 | + } elseif ($passwordgenmethod == 'g') { |
|
201 | 201 | $newpassword = generate_password(8); |
202 | 202 | } else { |
203 | 203 | webAlertAndQuit("No password generation method specified!"); |
204 | 204 | } |
205 | 205 | } |
206 | - if($passwordnotifymethod == 'e') { |
|
206 | + if ($passwordnotifymethod == 'e') { |
|
207 | 207 | sendMailMessage($email, $newusername, $newpassword, $fullname); |
208 | 208 | } |
209 | 209 | |
210 | 210 | // check if the username already exist |
211 | 211 | $rs = $modx->db->select('count(id)', $tbl_web_users, "username='{$esc_newusername}' AND id!='{$id}'"); |
212 | 212 | $limit = $modx->db->getValue($rs); |
213 | - if($limit > 0) { |
|
213 | + if ($limit > 0) { |
|
214 | 214 | webAlertAndQuit("User name is already in use!"); |
215 | 215 | } |
216 | 216 | |
217 | 217 | // check if the email address already exists |
218 | 218 | $rs = $modx->db->select('count(internalKey)', $tbl_web_user_attributes, "email='{$esc_email}' AND internalKey!='{$id}'"); |
219 | 219 | $limit = $modx->db->getValue($rs); |
220 | - if($limit > 0) { |
|
220 | + if ($limit > 0) { |
|
221 | 221 | webAlertAndQuit("Email is already in use!"); |
222 | 222 | } |
223 | 223 | |
@@ -230,7 +230,7 @@ discard block |
||
230 | 230 | // update user name and password |
231 | 231 | $field = array(); |
232 | 232 | $field['username'] = $esc_newusername; |
233 | - if($genpassword == 1) { |
|
233 | + if ($genpassword == 1) { |
|
234 | 234 | $field['password'] = md5($newpassword); |
235 | 235 | } |
236 | 236 | $modx->db->update($field, $tbl_web_users, "id='{$id}'"); |
@@ -247,11 +247,11 @@ discard block |
||
247 | 247 | /*******************************************************************************/ |
248 | 248 | // put the user in the user_groups he/ she should be in |
249 | 249 | // first, check that up_perms are switched on! |
250 | - if($use_udperms == 1) { |
|
250 | + if ($use_udperms == 1) { |
|
251 | 251 | // as this is an existing user, delete his/ her entries in the groups before saving the new groups |
252 | 252 | $modx->db->delete($tbl_web_groups, "webuser='{$id}'"); |
253 | - if(!empty($user_groups)) { |
|
254 | - for($i = 0; $i < count($user_groups); $i++) { |
|
253 | + if (!empty($user_groups)) { |
|
254 | + for ($i = 0; $i < count($user_groups); $i++) { |
|
255 | 255 | $field = array(); |
256 | 256 | $field['webgroup'] = intval($user_groups[$i]); |
257 | 257 | $field['webuser'] = $id; |
@@ -275,7 +275,7 @@ discard block |
||
275 | 275 | )); |
276 | 276 | |
277 | 277 | // invoke OnWebChangePassword event |
278 | - if($genpassword == 1) { |
|
278 | + if ($genpassword == 1) { |
|
279 | 279 | $modx->invokeEvent("OnWebChangePassword", array( |
280 | 280 | "userid" => $id, |
281 | 281 | "username" => $newusername, |
@@ -289,10 +289,10 @@ discard block |
||
289 | 289 | "id" => $id |
290 | 290 | )); |
291 | 291 | |
292 | - if($genpassword == 1 && $passwordnotifymethod == 's') { |
|
293 | - if($input['stay'] != '') { |
|
292 | + if ($genpassword == 1 && $passwordnotifymethod == 's') { |
|
293 | + if ($input['stay'] != '') { |
|
294 | 294 | $a = ($input['stay'] == '2') ? "88&id={$id}" : "87"; |
295 | - $stayUrl = "index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
295 | + $stayUrl = "index.php?a={$a}&r=2&stay=".$input['stay']; |
|
296 | 296 | } else { |
297 | 297 | $stayUrl = "index.php?a=99&r=2"; |
298 | 298 | } |
@@ -320,9 +320,9 @@ discard block |
||
320 | 320 | |
321 | 321 | include_once "footer.inc.php"; |
322 | 322 | } else { |
323 | - if($input['stay'] != '') { |
|
323 | + if ($input['stay'] != '') { |
|
324 | 324 | $a = ($input['stay'] == '2') ? "88&id={$id}" : "87"; |
325 | - $header = "Location: index.php?a={$a}&r=2&stay=" . $input['stay']; |
|
325 | + $header = "Location: index.php?a={$a}&r=2&stay=".$input['stay']; |
|
326 | 326 | header($header); |
327 | 327 | } else { |
328 | 328 | $header = "Location: index.php?a=99&r=2"; |
@@ -335,19 +335,19 @@ discard block |
||
335 | 335 | } |
336 | 336 | |
337 | 337 | // in case any plugins include a quoted_printable function |
338 | -function save_user_quoted_printable($string) { |
|
338 | +function save_user_quoted_printable($string){ |
|
339 | 339 | $crlf = "\n"; |
340 | - $string = preg_replace('!(\r\n|\r|\n)!', $crlf, $string) . $crlf; |
|
340 | + $string = preg_replace('!(\r\n|\r|\n)!', $crlf, $string).$crlf; |
|
341 | 341 | $f[] = '/([\000-\010\013\014\016-\037\075\177-\377])/e'; |
342 | 342 | $r[] = "'=' . sprintf('%02X', ord('\\1'))"; |
343 | - $f[] = '/([\011\040])' . $crlf . '/e'; |
|
344 | - $r[] = "'=' . sprintf('%02X', ord('\\1')) . '" . $crlf . "'"; |
|
343 | + $f[] = '/([\011\040])'.$crlf.'/e'; |
|
344 | + $r[] = "'=' . sprintf('%02X', ord('\\1')) . '".$crlf."'"; |
|
345 | 345 | $string = preg_replace($f, $r, $string); |
346 | - return trim(wordwrap($string, 70, ' =' . $crlf)); |
|
346 | + return trim(wordwrap($string, 70, ' ='.$crlf)); |
|
347 | 347 | } |
348 | 348 | |
349 | 349 | // Send an email to the user |
350 | -function sendMailMessage($email, $uid, $pwd, $ufn) { |
|
350 | +function sendMailMessage($email, $uid, $pwd, $ufn){ |
|
351 | 351 | global $modx, $_lang, $websignupemail_message; |
352 | 352 | global $emailsubject, $emailsender; |
353 | 353 | global $site_name, $site_url; |
@@ -368,14 +368,14 @@ discard block |
||
368 | 368 | $param['to'] = $email; |
369 | 369 | $param['type'] = 'text'; |
370 | 370 | $rs = $modx->sendmail($param); |
371 | - if(!$rs) { |
|
371 | + if (!$rs) { |
|
372 | 372 | $modx->manager->saveFormValues(); |
373 | 373 | $modx->messageQuit("{$email} - {$_lang['error_sending_email']}"); |
374 | 374 | } |
375 | 375 | } |
376 | 376 | |
377 | 377 | // Save User Settings |
378 | -function saveUserSettings($id) { |
|
378 | +function saveUserSettings($id){ |
|
379 | 379 | global $modx; |
380 | 380 | $tbl_web_user_settings = $modx->getFullTableName('web_user_settings'); |
381 | 381 | |
@@ -387,12 +387,12 @@ discard block |
||
387 | 387 | |
388 | 388 | $modx->db->delete($tbl_web_user_settings, "webuser='{$id}'"); |
389 | 389 | |
390 | - foreach($settings as $n) { |
|
390 | + foreach ($settings as $n) { |
|
391 | 391 | $vl = $_POST[$n]; |
392 | - if(is_array($vl)) { |
|
392 | + if (is_array($vl)) { |
|
393 | 393 | $vl = implode(",", $vl); |
394 | 394 | } |
395 | - if($vl != '') { |
|
395 | + if ($vl != '') { |
|
396 | 396 | $f = array(); |
397 | 397 | $f['webuser'] = $id; |
398 | 398 | $f['setting_name'] = $n; |
@@ -404,33 +404,33 @@ discard block |
||
404 | 404 | } |
405 | 405 | |
406 | 406 | // Web alert - sends an alert to web browser |
407 | -function webAlertAndQuit($msg) { |
|
407 | +function webAlertAndQuit($msg){ |
|
408 | 408 | global $id, $modx; |
409 | 409 | $mode = $_POST['mode']; |
410 | 410 | $modx->manager->saveFormValues($mode); |
411 | - $modx->webAlertAndQuit($msg, "index.php?a={$mode}" . ($mode == '88' ? "&id={$id}" : '')); |
|
411 | + $modx->webAlertAndQuit($msg, "index.php?a={$mode}".($mode == '88' ? "&id={$id}" : '')); |
|
412 | 412 | } |
413 | 413 | |
414 | 414 | // Generate password |
415 | -function generate_password($length = 10) { |
|
415 | +function generate_password($length = 10){ |
|
416 | 416 | $allowable_characters = "abcdefghjkmnpqrstuvxyzABCDEFGHJKLMNPQRSTUVWXYZ23456789"; |
417 | 417 | $ps_len = strlen($allowable_characters); |
418 | 418 | mt_srand((double) microtime() * 1000000); |
419 | 419 | $pass = ""; |
420 | - for($i = 0; $i < $length; $i++) { |
|
420 | + for ($i = 0; $i < $length; $i++) { |
|
421 | 421 | $pass .= $allowable_characters[mt_rand(0, $ps_len - 1)]; |
422 | 422 | } |
423 | 423 | return $pass; |
424 | 424 | } |
425 | 425 | |
426 | -function sanitize($str = '', $safecount = 0) { |
|
426 | +function sanitize($str = '', $safecount = 0){ |
|
427 | 427 | global $modx; |
428 | 428 | $safecount++; |
429 | - if(1000 < $safecount) { |
|
429 | + if (1000 < $safecount) { |
|
430 | 430 | exit("error too many loops '{$safecount}'"); |
431 | 431 | } |
432 | - if(is_array($str)) { |
|
433 | - foreach($str as $i => $v) { |
|
432 | + if (is_array($str)) { |
|
433 | + foreach ($str as $i => $v) { |
|
434 | 434 | $str[$i] = sanitize($v, $safecount); |
435 | 435 | } |
436 | 436 | } else { |
@@ -335,7 +335,8 @@ discard block |
||
335 | 335 | } |
336 | 336 | |
337 | 337 | // in case any plugins include a quoted_printable function |
338 | -function save_user_quoted_printable($string) { |
|
338 | +function save_user_quoted_printable($string) |
|
339 | +{ |
|
339 | 340 | $crlf = "\n"; |
340 | 341 | $string = preg_replace('!(\r\n|\r|\n)!', $crlf, $string) . $crlf; |
341 | 342 | $f[] = '/([\000-\010\013\014\016-\037\075\177-\377])/e'; |
@@ -347,7 +348,8 @@ discard block |
||
347 | 348 | } |
348 | 349 | |
349 | 350 | // Send an email to the user |
350 | -function sendMailMessage($email, $uid, $pwd, $ufn) { |
|
351 | +function sendMailMessage($email, $uid, $pwd, $ufn) |
|
352 | +{ |
|
351 | 353 | global $modx, $_lang, $websignupemail_message; |
352 | 354 | global $emailsubject, $emailsender; |
353 | 355 | global $site_name, $site_url; |
@@ -375,7 +377,8 @@ discard block |
||
375 | 377 | } |
376 | 378 | |
377 | 379 | // Save User Settings |
378 | -function saveUserSettings($id) { |
|
380 | +function saveUserSettings($id) |
|
381 | +{ |
|
379 | 382 | global $modx; |
380 | 383 | $tbl_web_user_settings = $modx->getFullTableName('web_user_settings'); |
381 | 384 | |
@@ -404,7 +407,8 @@ discard block |
||
404 | 407 | } |
405 | 408 | |
406 | 409 | // Web alert - sends an alert to web browser |
407 | -function webAlertAndQuit($msg) { |
|
410 | +function webAlertAndQuit($msg) |
|
411 | +{ |
|
408 | 412 | global $id, $modx; |
409 | 413 | $mode = $_POST['mode']; |
410 | 414 | $modx->manager->saveFormValues($mode); |
@@ -412,7 +416,8 @@ discard block |
||
412 | 416 | } |
413 | 417 | |
414 | 418 | // Generate password |
415 | -function generate_password($length = 10) { |
|
419 | +function generate_password($length = 10) |
|
420 | +{ |
|
416 | 421 | $allowable_characters = "abcdefghjkmnpqrstuvxyzABCDEFGHJKLMNPQRSTUVWXYZ23456789"; |
417 | 422 | $ps_len = strlen($allowable_characters); |
418 | 423 | mt_srand((double) microtime() * 1000000); |
@@ -423,7 +428,8 @@ discard block |
||
423 | 428 | return $pass; |
424 | 429 | } |
425 | 430 | |
426 | -function sanitize($str = '', $safecount = 0) { |
|
431 | +function sanitize($str = '', $safecount = 0) |
|
432 | +{ |
|
427 | 433 | global $modx; |
428 | 434 | $safecount++; |
429 | 435 | if(1000 < $safecount) { |
@@ -1,12 +1,12 @@ discard block |
||
1 | 1 | <?php |
2 | 2 | if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
3 | 3 | if(!$modx->hasPermission('edit_template')) { |
4 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
4 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
5 | 5 | } |
6 | 6 | |
7 | 7 | $id = isset($_GET['id'])? intval($_GET['id']) : 0; |
8 | 8 | if($id==0) { |
9 | - $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
9 | + $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
10 | 10 | } |
11 | 11 | |
12 | 12 | // count duplicates |
@@ -17,37 +17,37 @@ discard block |
||
17 | 17 | |
18 | 18 | // duplicate TV |
19 | 19 | $newid = $modx->db->insert( |
20 | - array( |
|
21 | - 'type'=>'', |
|
22 | - 'name'=>'', |
|
23 | - 'caption'=>'', |
|
24 | - 'description'=>'', |
|
25 | - 'default_text'=>'', |
|
26 | - 'elements'=>'', |
|
27 | - 'rank'=>'', |
|
28 | - 'display'=>'', |
|
29 | - 'display_params'=>'', |
|
30 | - 'category'=>'', |
|
31 | - ), $modx->getFullTableName('site_tmplvars'), // Insert into |
|
32 | - "type, CONCAT(name, ' {$_lang['duplicated_el_suffix']}{$count}') AS name, CONCAT(caption, ' Duplicate{$count}') AS caption, description, default_text, elements, rank, display, display_params, category", $modx->getFullTableName('site_tmplvars'), "id='{$id}'"); // Copy from |
|
20 | + array( |
|
21 | + 'type'=>'', |
|
22 | + 'name'=>'', |
|
23 | + 'caption'=>'', |
|
24 | + 'description'=>'', |
|
25 | + 'default_text'=>'', |
|
26 | + 'elements'=>'', |
|
27 | + 'rank'=>'', |
|
28 | + 'display'=>'', |
|
29 | + 'display_params'=>'', |
|
30 | + 'category'=>'', |
|
31 | + ), $modx->getFullTableName('site_tmplvars'), // Insert into |
|
32 | + "type, CONCAT(name, ' {$_lang['duplicated_el_suffix']}{$count}') AS name, CONCAT(caption, ' Duplicate{$count}') AS caption, description, default_text, elements, rank, display, display_params, category", $modx->getFullTableName('site_tmplvars'), "id='{$id}'"); // Copy from |
|
33 | 33 | |
34 | 34 | |
35 | 35 | // duplicate TV Template Access Permissions |
36 | 36 | $modx->db->insert( |
37 | - array( |
|
38 | - 'tmplvarid'=>'', |
|
39 | - 'templateid'=>'', |
|
40 | - 'rank'=>'', |
|
41 | - ), $modx->getFullTableName('site_tmplvar_templates'), // Insert into |
|
42 | - "'{$newid}', templateid, rank", $modx->getFullTableName('site_tmplvar_templates'), "tmplvarid='{$id}'"); // Copy from |
|
37 | + array( |
|
38 | + 'tmplvarid'=>'', |
|
39 | + 'templateid'=>'', |
|
40 | + 'rank'=>'', |
|
41 | + ), $modx->getFullTableName('site_tmplvar_templates'), // Insert into |
|
42 | + "'{$newid}', templateid, rank", $modx->getFullTableName('site_tmplvar_templates'), "tmplvarid='{$id}'"); // Copy from |
|
43 | 43 | |
44 | 44 | // duplicate TV Access Permissions |
45 | 45 | $modx->db->insert( |
46 | - array( |
|
47 | - 'tmplvarid'=>'', |
|
48 | - 'documentgroup'=>'', |
|
49 | - ), $modx->getFullTableName('site_tmplvar_access'), // Insert into |
|
50 | - "'{$newid}', documentgroup", $modx->getFullTableName('site_tmplvar_access'), "tmplvarid='{$id}'"); // Copy from |
|
46 | + array( |
|
47 | + 'tmplvarid'=>'', |
|
48 | + 'documentgroup'=>'', |
|
49 | + ), $modx->getFullTableName('site_tmplvar_access'), // Insert into |
|
50 | + "'{$newid}', documentgroup", $modx->getFullTableName('site_tmplvar_access'), "tmplvarid='{$id}'"); // Copy from |
|
51 | 51 | |
52 | 52 | // Set the item name for logger |
53 | 53 | $name = $modx->db->getValue($modx->db->select('name', $modx->getFullTableName('site_tmplvars'), "id='{$newid}'")); |
@@ -1,18 +1,18 @@ discard block |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | -if(!$modx->hasPermission('edit_template')) { |
|
2 | +if (IN_MANAGER_MODE != "true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | +if (!$modx->hasPermission('edit_template')) { |
|
4 | 4 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 5 | } |
6 | 6 | |
7 | -$id = isset($_GET['id'])? intval($_GET['id']) : 0; |
|
8 | -if($id==0) { |
|
7 | +$id = isset($_GET['id']) ? intval($_GET['id']) : 0; |
|
8 | +if ($id == 0) { |
|
9 | 9 | $modx->webAlertAndQuit($_lang["error_no_id"]); |
10 | 10 | } |
11 | 11 | |
12 | 12 | // count duplicates |
13 | 13 | $name = $modx->db->getValue($modx->db->select('name', $modx->getFullTableName('site_tmplvars'), "id='{$id}'")); |
14 | 14 | $count = $modx->db->getRecordCount($modx->db->select('name', $modx->getFullTableName('site_tmplvars'), "name LIKE '{$name} {$_lang['duplicated_el_suffix']}%'")); |
15 | -if($count>=1) $count = ' '.($count+1); |
|
15 | +if ($count >= 1) $count = ' '.($count + 1); |
|
16 | 16 | else $count = ''; |
17 | 17 | |
18 | 18 | // duplicate TV |
@@ -54,5 +54,5 @@ discard block |
||
54 | 54 | $_SESSION['itemname'] = $name; |
55 | 55 | |
56 | 56 | // finish duplicating - redirect to new variable |
57 | -$header="Location: index.php?r=2&a=301&id=$newid"; |
|
57 | +$header = "Location: index.php?r=2&a=301&id=$newid"; |
|
58 | 58 | header($header); |
@@ -1,5 +1,7 @@ discard block |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
2 | +if(IN_MANAGER_MODE!="true") { |
|
3 | + die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
4 | +} |
|
3 | 5 | if(!$modx->hasPermission('edit_template')) { |
4 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 7 | } |
@@ -12,8 +14,11 @@ discard block |
||
12 | 14 | // count duplicates |
13 | 15 | $name = $modx->db->getValue($modx->db->select('name', $modx->getFullTableName('site_tmplvars'), "id='{$id}'")); |
14 | 16 | $count = $modx->db->getRecordCount($modx->db->select('name', $modx->getFullTableName('site_tmplvars'), "name LIKE '{$name} {$_lang['duplicated_el_suffix']}%'")); |
15 | -if($count>=1) $count = ' '.($count+1); |
|
16 | -else $count = ''; |
|
17 | +if($count>=1) { |
|
18 | + $count = ' '.($count+1); |
|
19 | +} else { |
|
20 | + $count = ''; |
|
21 | +} |
|
17 | 22 | |
18 | 23 | // duplicate TV |
19 | 24 | $newid = $modx->db->insert( |
@@ -1,17 +1,17 @@ |
||
1 | 1 | <?php |
2 | 2 | if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
3 | 3 | if(!$modx->hasPermission('delete_eventlog')) { |
4 | - $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
4 | + $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
|
5 | 5 | } |
6 | 6 | |
7 | 7 | if (isset($_GET['cls']) && $_GET['cls']==1) { |
8 | - $where = ''; |
|
8 | + $where = ''; |
|
9 | 9 | } else { |
10 | - $id = isset($_GET['id'])? intval($_GET['id']) : 0; |
|
11 | - if($id==0) { |
|
12 | - $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
13 | - } |
|
14 | - $where = "id='{$id}'"; |
|
10 | + $id = isset($_GET['id'])? intval($_GET['id']) : 0; |
|
11 | + if($id==0) { |
|
12 | + $modx->webAlertAndQuit($_lang["error_no_id"]); |
|
13 | + } |
|
14 | + $where = "id='{$id}'"; |
|
15 | 15 | } |
16 | 16 | |
17 | 17 | // delete event log |
@@ -1,14 +1,14 @@ discard block |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | -if(!$modx->hasPermission('delete_eventlog')) { |
|
2 | +if (IN_MANAGER_MODE != "true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
3 | +if (!$modx->hasPermission('delete_eventlog')) { |
|
4 | 4 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 5 | } |
6 | 6 | |
7 | -if (isset($_GET['cls']) && $_GET['cls']==1) { |
|
7 | +if (isset($_GET['cls']) && $_GET['cls'] == 1) { |
|
8 | 8 | $where = ''; |
9 | 9 | } else { |
10 | - $id = isset($_GET['id'])? intval($_GET['id']) : 0; |
|
11 | - if($id==0) { |
|
10 | + $id = isset($_GET['id']) ? intval($_GET['id']) : 0; |
|
11 | + if ($id == 0) { |
|
12 | 12 | $modx->webAlertAndQuit($_lang["error_no_id"]); |
13 | 13 | } |
14 | 14 | $where = "id='{$id}'"; |
@@ -17,5 +17,5 @@ discard block |
||
17 | 17 | // delete event log |
18 | 18 | $modx->db->delete($modx->getFullTableName('event_log'), $where); |
19 | 19 | |
20 | -$header="Location: index.php?a=114"; |
|
20 | +$header = "Location: index.php?a=114"; |
|
21 | 21 | header($header); |
@@ -1,5 +1,7 @@ |
||
1 | 1 | <?php |
2 | -if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
2 | +if(IN_MANAGER_MODE!="true") { |
|
3 | + die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the EVO Content Manager instead of accessing this file directly."); |
|
4 | +} |
|
3 | 5 | if(!$modx->hasPermission('delete_eventlog')) { |
4 | 6 | $modx->webAlertAndQuit($_lang["error_no_privileges"]); |
5 | 7 | } |