2012-01-26 23:08:02 -05:00
< ? php
2014-09-17 05:00:34 -04:00
require_once ( 'mod/settings.php' );
2016-02-05 15:52:39 -05:00
if ( ! function_exists ( 'delegate_init' )) {
2014-09-17 05:00:34 -04:00
function delegate_init ( & $a ) {
return settings_init ( $a );
}
2016-02-05 15:52:39 -05:00
}
2014-09-17 05:00:34 -04:00
2016-02-05 15:52:39 -05:00
if ( ! function_exists ( 'delegate_content' )) {
2012-01-26 23:08:02 -05:00
function delegate_content ( & $a ) {
if ( ! local_user ()) {
notice ( t ( 'Permission denied.' ) . EOL );
return ;
}
if ( $a -> argc > 2 && $a -> argv [ 1 ] === 'add' && intval ( $a -> argv [ 2 ])) {
// delegated admins can view but not change delegation permissions
if ( x ( $_SESSION , 'submanage' ) && intval ( $_SESSION [ 'submanage' ]))
goaway ( $a -> get_baseurl () . '/delegate' );
$id = $a -> argv [ 2 ];
$r = q ( " select `nickname` from user where uid = %d limit 1 " ,
intval ( $id )
);
if ( count ( $r )) {
$r = q ( " select id from contact where uid = %d and nurl = '%s' limit 1 " ,
intval ( local_user ()),
dbesc ( normalise_link ( $a -> get_baseurl () . '/profile/' . $r [ 0 ][ 'nickname' ]))
);
if ( count ( $r )) {
q ( " insert into manage ( uid, mid ) values ( %d , %d ) " ,
intval ( $a -> argv [ 2 ]),
intval ( local_user ())
);
}
}
goaway ( $a -> get_baseurl () . '/delegate' );
}
if ( $a -> argc > 2 && $a -> argv [ 1 ] === 'remove' && intval ( $a -> argv [ 2 ])) {
// delegated admins can view but not change delegation permissions
if ( x ( $_SESSION , 'submanage' ) && intval ( $_SESSION [ 'submanage' ]))
goaway ( $a -> get_baseurl () . '/delegate' );
q ( " delete from manage where uid = %d and mid = %d limit 1 " ,
intval ( $a -> argv [ 2 ]),
intval ( local_user ())
);
goaway ( $a -> get_baseurl () . '/delegate' );
}
$full_managers = array ();
// These people can manage this account/page with full privilege
2012-01-27 02:03:27 -05:00
$r = q ( " SELECT * FROM `user` WHERE `email` = '%s' AND `password` = '%s' " ,
2012-01-26 23:08:02 -05:00
dbesc ( $a -> user [ 'email' ]),
dbesc ( $a -> user [ 'password' ])
);
if ( count ( $r ))
$full_managers = $r ;
$delegates = array ();
// find everybody that currently has delegated management to this account/page
$r = q ( " select * from user where uid in ( select uid from manage where mid = %d ) " ,
intval ( local_user ())
);
if ( count ( $r ))
$delegates = $r ;
$uids = array ();
if ( count ( $full_managers ))
foreach ( $full_managers as $rr )
$uids [] = $rr [ 'uid' ];
if ( count ( $delegates ))
foreach ( $delegates as $rr )
$uids [] = $rr [ 'uid' ];
// find every contact who might be a candidate for delegation
2016-02-05 15:52:39 -05:00
$r = q ( " select nurl from contact where substring_index(contact.nurl,'/',3) = '%s'
2012-01-26 23:08:02 -05:00
and contact . uid = % d and contact . self = 0 and network = '%s' " ,
2012-03-22 09:19:27 -04:00
dbesc ( normalise_link ( $a -> get_baseurl ())),
2012-01-26 23:08:02 -05:00
intval ( local_user ()),
dbesc ( NETWORK_DFRN )
2016-02-05 15:52:39 -05:00
);
2012-01-26 23:08:02 -05:00
if ( ! count ( $r )) {
notice ( t ( 'No potential page delegates located.' ) . EOL );
return ;
}
$nicknames = array ();
if ( count ( $r )) {
foreach ( $r as $rr ) {
$nicknames [] = " ' " . dbesc ( basename ( $rr [ 'nurl' ])) . " ' " ;
}
}
$potentials = array ();
$nicks = implode ( ',' , $nicknames );
// get user records for all potential page delegates who are not already delegates or managers
$r = q ( " select `uid`, `username`, `nickname` from user where nickname in ( $nicks ) " );
if ( count ( $r ))
foreach ( $r as $rr )
if ( ! in_array ( $rr [ 'uid' ], $uids ))
$potentials [] = $rr ;
2014-04-24 05:49:11 -04:00
require_once ( " mod/settings.php " );
settings_init ( $a );
2012-01-26 23:08:02 -05:00
$o = replace_macros ( get_markup_template ( 'delegate.tpl' ), array (
'$header' => t ( 'Delegate Page Management' ),
'$base' => $a -> get_baseurl (),
'$desc' => t ( 'Delegates are able to manage all aspects of this account/page except for basic account settings. Please do not delegate your personal account to anybody that you do not trust completely.' ),
'$head_managers' => t ( 'Existing Page Managers' ),
'$managers' => $full_managers ,
'$head_delegates' => t ( 'Existing Page Delegates' ),
'$delegates' => $delegates ,
'$head_potentials' => t ( 'Potential Delegates' ),
'$potentials' => $potentials ,
'$remove' => t ( 'Remove' ),
'$add' => t ( 'Add' ),
'$none' => t ( 'No entries.' )
));
return $o ;
2016-02-05 15:52:39 -05:00
}
2014-04-24 05:49:11 -04:00
}