<?php require_once "libraries/head.php"; if (!isLogin()) { sendAjaxRedirect("login.php"); } if (isset($_POST["groupid"]) && isset($_POST["newstatus"])) { if (!isValidID($_POST["groupid"]) || !isValidID($_POST["newstatus"])) { sendAjaxResErr("Group ID or Status invalid!"); } $result = executeChange($_SESSION["userID"], $_POST["groupid"], $_POST["newstatus"]); if ($result === true) { sendAjaxResSuc("Change group status successfully!"); } else { sendAjaxResErr($result); } } function executeChange($userID, $groupID, $newStatus) { $newStatus = $newStatus; if ($newStatus !== "1" && $newStatus !== "2" && $newStatus !== "3") { return "Invalid status!"; } $userDAO = new UserDAO(); $user = $userDAO->getUserByID($userID); $groupDAO = new GroupDAO(); $group = $groupDAO->getGroupByID($groupID); if ($group === null) { return "Could not find this group!"; } if ($group->getActivateStatus() === $newStatus) {
sendAjaxRedirect("login.php"); } if (isset($_POST["groupid"])) { if (isset($_POST["checkedbox"])) { $checkedUser = $_POST["checkedbox"]; } else { $checkedUser = array(); } $result = execEditGroup($_SESSION["userID"], $_POST["groupid"], $checkedUser); if ($result === true) { sendAjaxResSuc(); } else { sendAjaxResErr($result); } } else { sendAjaxResErr("Didn't choose group!"); } function execEditGroup($userID, $groupID, $checkedUser) { if (gettype($checkedUser) != "array") { return "Wrong type of group member!"; } $checkedUser[] = $userID; $userDAO = new UserDAO(); $user = $userDAO->getUserByID($userID); if (!isValidID($groupID)) { return "Invalid group ID!"; } $groupDAO = new GroupDAO(); $group = $groupDAO->getGroupByID($groupID); if ($group === null) {
<?php require_once "libraries/head.php"; if (!isLogin()) { sendAjaxRedirect("login.php"); } if (isset($_POST["groupid"]) && isset($_POST["adduserid"])) { $result = execAddToGroup($_SESSION["userID"], $_POST["groupid"], $_POST["adduserid"]); if ($result === true) { sendAjaxResSuc(); } else { sendAjaxResErr($result); } } else { sendAjaxResErr("Didn't choose group member!"); } function execAddToGroup($userID, $groupID, $adduserIDs) { $userDAO = new UserDAO(); $user = $userDAO->getUserByID($userID); if (!isValidID($groupID)) { return "Invalid group ID!"; } if (gettype($adduserIDs) != "array") { return "Wrong type of user id!"; } if (count($adduserIDs) === 0) { return "You have to choose users to add to this group!"; } foreach ($adduserIDs as $adduserID) { if (!isValidID($adduserID)) {
<?php require_once "libraries/head.php"; if (!isLogin()) { sendAjaxRedirect("login.php"); } if (isset($_POST["groupmember"]) && isset($_POST["groupname"])) { $result = execCreateGroup($_SESSION["userID"], $_POST["groupmember"], $_POST["groupname"]); if ($result === true) { sendAjaxResSuc(); } else { sendAjaxResErr($result); } } else { sendAjaxResErr("Didn't choose group member or input group name!"); } function execCreateGroup($userID, $groupMember, $groupName) { $userDAO = new UserDAO(); $user = $userDAO->getUserByID($userID); if ($user->getRole()->getRoleID() == "4") { return "This user was forbidden to do this!"; } if (gettype($groupMember) != "array") { return "Wrong type of group member!"; } if (count($groupMember) === 0) { return "You must choose at least one group member!"; } if (count(array_unique($groupMember)) < count($groupMember)) { return "Group member has duplicate value!";
<?php require_once "libraries/head.php"; if (!isLogin()) { sendAjaxRedirect("login.php"); } if (isset($_POST["groupid"]) && isset($_FILES["uploadfile"])) { $result = uploadFile($_SESSION["userID"], $_POST["groupid"], $_FILES["uploadfile"]); if ($result === true) { sendAjaxResSuc(); } else { sendAjaxResErr($result); } } else { sendAjaxResErr("Didn't choose file or file exceeds max size!"); } function uploadFile($userID, $groupID, $file) { $userDAO = new UserDAO(); $user = $userDAO->getUserByID($userID); if ($user->getRole()->getRoleID() == "4") { return "This user was forbidden to upload file!"; } if (!isValidID($groupID)) { return "Group id is not valid!"; } $groupDAO = new GroupDAO(); $group = $groupDAO->getGroupByID($groupID); if ($group === null) { return "Can not find this group!"; }