3 * Provide an administration interface
4 * DO NOT USE: INSECURE.
8 require_once('HTMLForm.php');
9 require_once('Group.php');
12 function wfSpecialUserlevels($par=null) {
16 $form = new UserlevelsForm($wgRequest);
21 * A class to manage user levels rights.
23 class UserlevelsForm
extends HTMLForm
{
24 var $mPosted, $mRequest, $mSaveprefs;
25 /** Escaped local url name*/
29 function UserlevelsForm ( &$request ) {
30 $this->mPosted
= $request->wasPosted();
31 $this->mRequest
= $request;
32 $this->mName
= 'userlevels';
34 $titleObj = Title
::makeTitle( NS_SPECIAL
, 'Userlevels' );
35 $this->action
= $titleObj->escapeLocalURL();
39 * Manage forms to be shown according to posted datas.
40 * Depending on the submit button used : Call a form or a saving function.
43 // show the general form
45 if ( $this->mPosted
) {
46 // show some more forms
47 if($this->mRequest
->getCheck('seditgroup')) {
48 $this->editGroupForm( $this->mRequest
->getVal($this->mName
.'-group-edit') ); }
49 if($this->mRequest
->getCheck('saddgroup')) {
50 $this->editGroupForm( ); }
51 if($this->mRequest
->getCheck('ssearchuser')) {
52 $this->editUserGroupsForm( $this->mRequest
->getVal('user-editname')); }
55 if($this->mRequest
->getCheck('savegroup')) {
56 $this->saveGroup($this->mRequest
->getVal('editgroup-name'),
57 $this->mRequest
->getVal('editgroup-oldname'),
58 $this->mRequest
->getVal('editgroup-description'),
59 $this->mRequest
->getVal('editgroup-getrights'));
61 } elseif($this->mRequest
->getCheck('saveusergroups')) {
62 $this->saveUserGroups($this->mRequest
->getVal('user-editname'),
63 $this->mRequest
->getVal($this->mName
.'-groupsmember'),
64 $this->mRequest
->getVal($this->mName
.'-groupsavailable'));
72 * @param string $newname Group name.
73 * @param string $oldname Old (current) group name.
74 * @param string $description Group description.
76 * @todo FIXME : doesnt validate anything. Log is incorrect.
78 function saveGroup($newname, $oldname, $description, $rights) {
79 $newame = trim($newname);
82 // We create a new group
86 $g = Group
::newFromName($oldname);
90 $g->setName($newname);
91 $g->setDescription($description);
92 if(isset($rights)) { $g->setRights( implode(',',$rights) ); }
96 $log = new LogPage( 'rights' );
97 $log->addEntry( 'rights', Title
::makeTitle( NS_SPECIAL
, $g->getName()) , ' '.$g->getRights() );
102 * Save user groups changes in the database.
103 * Datas comes from the editUserGroupsForm() form function
105 * @param string $username Username to apply changes to.
106 * @param array $removegroup id of groups to be removed.
107 * @param array $addgroup id of groups to be added.
109 * @todo Log groupname instead of group id.
111 function saveUserGroups($username,$removegroup,$addgroup) {
112 $u = User
::NewFromName($username);
115 $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
119 if($u->getID() == 0) {
120 $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
124 $groups = $u->getGroups();
126 // remove then add groups
127 if(isset($removegroup)) {
128 $groups = array_diff($groups, $removegroup);
129 $logcomment .= implode( ' -', $removegroup);
131 if(isset($addgroup)) {
132 $groups = array_merge($groups, $addgroup);
133 $logcomment .= implode( ' +', $addgroup );
135 // save groups in user object and database
136 $u->setGroups($groups);
139 $log = new LogPage( 'rights' );
140 $log->addEntry( 'rights', Title
::makeTitle( NS_USER
, $u->getName() ), $logcomment );
145 * It allows a user to select or eventually add a group as well as looking up
148 function switchForm() {
152 $wgOut->addHTML( "<form name=\"ulgroup\" action=\"$this->action\" method=\"post\">\n" );
153 $wgOut->addHTML( $this->fieldset( 'lookup-group',
154 $this->HTMLSelectGroups('group-edit', array(0 => $this->mRequest
->getVal($this->mName
.'-group-edit')) ) .
155 ' <input type="submit" name="seditgroup" value="'.wfMsg('editgroup').'" />' .
156 '<br /><input type="submit" name="saddgroup" value="'.wfMsg('addgroup').'" />'
158 $wgOut->addHTML( "</form>\n" );
161 $wgOut->addHTML( "<form name=\"uluser\" action=\"$this->action\" method=\"post\">\n" );
162 $wgOut->addHTML( $this->fieldset( 'lookup-user',
163 $this->textbox( 'user-editname' ) .
164 '<input type="submit" name="ssearchuser" value="'.wfMsg('editusergroup').'" />'
166 $wgOut->addHTML( "</form>\n" );
170 * Edit a group properties and rights.
171 * @param string $groupname Name of a group to be edited.
173 function editGroupForm($groupID = 0) {
176 if($this->mRequest
->getVal('seditgroup')) {
177 // fetch data if we edit a group
178 $g = Group
::newFromID($groupID);
179 $fieldname = 'editgroup';
181 // default datas when we add a group
183 $fieldname = 'addgroup';
186 $gName = $g->getName();
187 $gDescription = $g->getDescription();
190 $wgOut->addHTML( "<form name=\"editGroup\" action=\"$this->action\" method=\"post\">\n".
191 '<input type="hidden" name="editgroup-oldname" value="'.$gName.'" />');
192 $wgOut->addHTML( $this->fieldset( $fieldname,
193 $this->textbox( 'editgroup-name', $gName ) .
194 $this->textareabox( 'editgroup-description', $gDescription ) .
195 '<br /><table border="0" align="center"><tr><td>'.
196 $this->HTMLSelectRights($g->getRights()).
197 '</td></tr></table>'."\n".
198 '<input type="submit" name="savegroup" value="'.wfMsg('savegroup').'" />'
201 $wgOut->addHTML( "</form>\n" );
205 * Edit user groups membership
206 * @param string $username Name of the user.
208 function editUserGroupsForm($username) {
211 $user = User
::newFromName($username);
213 $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
217 if($user->getID() == 0) {
218 $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
222 $groups = $user->getGroups();
224 $wgOut->addHTML( "<form name=\"editGroup\" action=\"$this->action\" method=\"post\">\n".
225 '<input type="hidden" name="user-editname" value="'.$username.'" />');
226 $wgOut->addHTML( $this->fieldset( 'editusergroup',
227 wfMsg('editing', $this->mRequest
->getVal('user-editname')).".<br />\n" .
228 '<table border="0" align="center"><tr><td>'.
229 $this->HTMLSelectGroups('groupsmember', $groups,true,6).
231 $this->HTMLSelectGroups('groupsavailable', $groups,true,6,true).
232 '</td></tr></table>'."\n".
233 '<p>'.wfMsg('userlevels-groupshelp').'</p>'."\n".
234 '<input type="submit" name="saveusergroups" value="'.wfMsg('saveusergroups').'" />'
236 $wgOut->addHTML( "</form>\n" );
240 /** Build a select with all existent groups
241 * @param string $selectname Name of this element. Name of form is automaticly prefixed.
242 * @param array $selected Array of element selected when posted. Multiples will only show them.
243 * @param boolean $multiple A multiple elements select.
244 * @param integer $size Number of element to be shown ignored for non multiple (default 6).
245 * @param boolean $reverse If true, multiple select will hide selected elements (default false).
247 function HTMLSelectGroups($selectname, $selected=array(), $multiple=false, $size=6, $reverse=false) {
248 $selectname = $this->mName
.'-'.$selectname;
249 $dbr =& wfGetDB( DB_SLAVE
);
250 $group = $dbr->tableName( 'group' );
251 $sql = "SELECT group_id, group_name FROM $group";
252 $res = $dbr->query($sql,'wfSpecialAdmin');
254 $out = wfMsg($selectname);
255 $out .= '<select name="'.$selectname;
256 if($multiple) { $out.='[]" multiple="multiple" size="'.$size; }
259 while($g = $dbr->fetchObject( $res ) ) {
261 // for multiple will only show the things we want
262 if(in_array($g->group_id
, $selected) xor $reverse) {
263 $out .= '<option value="'.$g->group_id
.'">'.$g->group_name
."</option>\n";
267 if(in_array($g->group_id
, $selected)) { $out .= 'selected="selected" '; }
268 $out .= 'value="'.$g->group_id
.'">'.$g->group_name
."</option>\n";
271 $out .= "</select>\n";
275 function HTMLSelectRights($selected='') {
276 global $wgAvailableRights;
277 $out = '<select name="editgroup-getrights[]" multiple="multiple">';
278 $groupRights = explode(',',$selected);
280 foreach($wgAvailableRights as $right) {
282 // check box when right exist
283 if(in_array($right, $groupRights)) { $selected = 'selected="selected" '; }
284 else { $selected = ''; }
286 $out .= '<option value="'.$right.'" '.$selected.'>'.$right."</option>\n";
288 $out .= "</select>\n";