/**
 * simple admin gui for adding user accounts.
 *
 * @param string id
 * @param mixed data
 * @param string action
 * @return string page output response
 */
function ewiki_page_liveuser_admin_add_users($id, $data, $action)
{
    global $liveuserAuthAdmin, $liveuserPermAdmin;
    ob_start();
    echo ewiki_make_title($id, $id, 2);
    // add a user
    if (isset($_POST['submit_addusers'])) {
        if (empty($_POST['text_E-Mail_Address']) || empty($_POST['group_list'])) {
            echo '<p>Invalid form input was provided. Please ensure that the email and group fields are set and not empty.</p>';
            $o = ob_get_contents();
            ob_end_clean();
            return $o;
        }
        if (strlen($_POST['text_E-Mail_Address']) > 255) {
            echo '<p>The email field input is too long. Please ensure that it is 255 characters or less.</p>';
            $o = ob_get_contents();
            ob_end_clean();
            return $o;
        }
        if (!empty($_POST['username_text'])) {
            $username = $_POST['username_text'];
        } else {
            $username = $_POST['text_E-Mail_Address'];
        }
        // ensure user does not already exist
        if (($auth_id = liveuser_checkEntity('user', $username)) === false) {
            $pwd = liveuser_generate_password();
            if (($auth_id = liveuser_addEntity('user', array($username, $pwd))) !== false) {
                echo '<p>User ' . $username . ' was inserted into the database.<br />The following password has been set for this user: '******'</p>';
                //set preferences on successful creation
                foreach ($_POST as $post_key => $post_value) {
                    if (strstr($post_key, "text_")) {
                        //only work on fields with the text_ prefix
                        $varname = substr($post_key, 5);
                        //remove the text_ prefix
                        if (!ewiki_set_uservar($varname, $post_value, $username)) {
                            //set appropriate data
                            echo '<p>An error occurred while setting the additional preferences for the user.</p>';
                        }
                    }
                }
                if (is_numeric($group_id = liveuser_checkEntity('group', $_POST['group_list'])) && $liveuserPermAdmin->addUserToGroup($auth_id, $group_id) === true) {
                    echo '<p>User ' . $username . ' was added into the group: ' . $_POST['group_list'] . '</p>';
                } else {
                    echo '<p>An error occurred while adding the user to the group: ' . $_POST['group_list'] . '</p>';
                }
            } else {
                echo '<p>An error occurred while creating the user.</p>';
            }
        } else {
            echo '<p>User ' . $username . ' already exists and will not be created or modified.</p>';
        }
    }
    // show form
    ?>
	<form method="post" action="">
	<h3>Add a User</h3>
	<table>
  <tr><td><label for="email_text">E-Mail Address</label></td>
  <td><input name="text_E-Mail Address" type="text" maxlength="255" /><br /></td></tr>
  <tr><td><label for="username">User Name (if different from E-mail Address)</td>
  <td><input id="username_text" name="username_text" type="text" /></td></tr> 	
	<tr><td><label for="group_list">Group</label></td>
	<td><select id="group_list" name="group_list">
    <?php 
    foreach ($liveuserPermAdmin->getGroups() as $group) {
        echo '<option value="' . $group['name'] . '">' . $group['name'] . '</option>';
    }
    ?>
    </select></tr></td>
    <tr><td><label for="firstname_text">First Name</label></td>	
    <td><input name="text_First Name" type="text" /></td></tr>
    <tr><td><label for="middlename_text">Middle Name</label></td>	
    <td><input name="text_Middle Name" type="text" /></td></tr>
    <tr><td><label for="lastname_text">Last Name</label></td>	
    <td><input name="text_Last Name" type="text" /></td></tr>
    <tr><td><label for="title_text">Title</label></td>	
    <td><input name="text_Title" type="text" /></td></tr>
    <tr><td><label for="comp_text">Company</label></td>	
    <td><input name="text_Company" type="text" /></td></tr>
    <tr><td><label for="phone_text">Phone</label></td>
    <td><input name="text_Phone Number" type="text" /></td></tr>
    <tr><td><label for="addr_text">Address</label></td>
    <td><input name="text_Address"  type="text" /></td></tr>
    <tr><td><label for="city_text">City</label></td>
    <td><input name="text_City" type="text" /></td></tr>
    <tr><td><label for="state_text">State</label></td>
    <td><input name="text_State" type="text" /></td></tr>
    <tr><td><label for="zipcode_text">Zip Code</label></td>
    <td><input name="text_Zip Code"  type="text" /></td></tr>
    <tr><td><label for="country_text">Country</label></td>
    <td><input name="text_Country" type="text" /></td></tr>
  </table>
	<input type="submit" name="submit_addusers" />
	</form>
    <?php 
    $o = ob_get_contents();
    ob_end_clean();
    return $o;
}
Esempio n. 2
0
            //length of chunk
            $position = 0;
            $chunks = $passlen - $chunk_length;
            do {
                //position of beginning of chunk
                $subword = substr($password, $position, $chunk_length);
                if (strpos($dictionary, "\n" . strtolower($subword) . "\n")) {
                    $wordsfound[$subword] = strlen($subword);
                }
            } while (++$position <= $chunks);
        } while (++$chunk_length <= $passlen);
        unset($dictionary);
        //the dictionary is huge, no need to keep it anymore
        if (isset($wordsfound)) {
            arsort($wordsfound);
            foreach ($wordsfound as $word => $cred) {
                //echo("found $word ");
                $password = str_replace($word, $cred, $password);
            }
            //echo(" calculating complexity of $password");
            if (ewiki_calc_complexity(strlen($password), $possibilities) < EWIKI_PASSWORD_COMPLEXITY) {
                return 'CHPW_BADNEW_DICTIONARY';
            }
        }
    }
    //the password passed all the checks...its good enough...for now
    return "good passwd";
}
// initializes default language to 'EN'
$liveuserPermAdmin->setCurrentLanguage(liveuser_addEntity('language', array('EN', 'English', 'English')));
Esempio n. 3
0
/**
 * admin gui for modifying LiveWeb rights
 *
 * @param string id
 * @param mixed data
 * @param string action
 * @return string page output response
 */
function ewiki_page_liveuser_admin_rights($id, $data, $action)
{
    global $liveuserPermAdmin;
    ob_start();
    echo ewiki_make_title($id, $id, 2);
    // handle posted updates and deletes
    if (isset($_POST['submit_changerights'])) {
        foreach ($_POST as $key => $value) {
            list($prefix, $id) = explode('_', $key, 2);
            if ($prefix == 'chk' && is_numeric($id) && $value == 'on') {
                if (liveuser_removeEntity('right_id', $id)) {
                    echo '<p>Right ' . $id . ' was successfully deleted.</p>';
                } else {
                    echo '<p>Deletion of right ' . $id . ' failed.</p>';
                }
            }
        }
    }
    // handle posted new rights
    if (isset($_POST['rightname_text']) && isset($_POST['submit_addright'])) {
        $right_id = liveuser_checkEntity('right', $_POST['rightname_text']);
        if ($right_id === false) {
            $right_const = 'LU_R_' . strtoupper($_POST['rightname_text']);
            $right_id = liveuser_addEntity('right', array(LU_AREA_LIVEWEB, $right_const, $_POST['rightname_text']));
            if ($right_id !== false) {
                echo '<p>Right ' . $_POST['rightname_text'] . ' was successfully created.</p>';
            } else {
                echo '<p>Creation of right ' . $_POST['rightname_text'] . ' failed.</p>';
            }
        } else {
            echo '<p>Right ' . $_POST['rightname_text'] . ' already exists.</p>';
        }
        if (isset($_POST['addgroup']) && $right_id !== false) {
            $group_id = liveuser_checkEntity('group', $_POST['rightname_text']);
            if ($group_id === false) {
                $group_const = 'LU_G_' . strtoupper($_POST['rightname_text']);
                $group_id = liveuser_addEntity('group', array($group_const, $_POST['rightname_text'], null, true));
                if ($group_id !== false) {
                    echo '<p>Group ' . $_POST['rightname_text'] . ' was successfully created.</p>';
                } else {
                    echo '<p>Creation of group ' . $_POST['rightname_text'] . ' failed.</p>';
                }
            } else {
                echo '<p>Group ' . $_POST['rightname_text'] . ' already exists.</p>';
            }
            if ($group_id !== false) {
                // check if group already has the right
                if (liveuser_checkGroupRight($group_id, $right_id)) {
                    echo 'Group ' . $_POST['rightname_text'] . ' already has right ' . $_POST['rightname_text'] . '.</p>';
                } else {
                    // attempt to assign right to group
                    if ($liveuserPermAdmin->grantGroupRight($group_id, $right_id, 1) === true) {
                        echo '<p>Right ' . $_POST['rightname_text'] . ' has been assigned to group ' . $_POST['rightname_text'] . '.</p>';
                    } else {
                        echo '<p>Assignment of right ' . $_POST['rightname_text'] . ' to group ' . $_POST['rightname_text'] . ' failed.</p>';
                    }
                }
            }
        }
    }
    // Show current table listing of rights
    $rights = $liveuserPermAdmin->getRights();
    if (is_array($rights) && !empty($rights)) {
        ?>
            <form method="post" action="">
            <h3>Edit Rights</h3>
            <table border="1">
            <tr><th>Delete</th><th>Right ID</th><th>Right</th></tr>
        <?php 
        foreach ($rights as $right) {
            ?>
                <tr>
                    <td><input name="chk_<?php 
            echo $right['right_id'];
            ?>
" type="checkbox" /></td>
                    <td><?php 
            echo $right['right_id'];
            ?>
</td>
                    <td><?php 
            echo $right['name'];
            ?>
</td>
                </tr>
            <?php 
        }
        ?>
            </table>
            <input type="reset" value="Reset" />
            <input name="submit_changerights" type="submit" value="Submit Changes" />
            </form>
        <?php 
    } else {
        ?>
            <h3>Edit Rights</h3>
            <p>No rights were found in the database.</p>
        <?php 
    }
    // Show Add a new right section
    ?>
        <form method="post" action="">
        <h3>Add a Right</h3>
        <p>When creating a right, you may choose to create a group with the right, which may then be applied to user accounts. If the right already exists, this form will still attempt to link a group to it. If the group already exists and does not have the right, the right will be assigned.</p>
        <label for="rightname_text">Right Name</label>
        <input id="rightname_text" name="rightname_text" type="text" /><br />
        <label for="addgroup">Add/Assign Group</label>
        <input id="addgroup" name="addgroup" type="checkbox" checked="checked" /><br />
        <input name="submit_addright" type="submit" value="Add Right" />
        </form>
    <?php 
    $o = ob_get_contents();
    ob_end_clean();
    return $o;
}
Esempio n. 4
0
/**
 * admin gui for modifying user accounts.
 *
 * @param string id
 * @param mixed data
 * @param string action
 * @return string page output response
 */
function ewiki_page_liveuser_admin_users($id, $data, $action)
{
    global $liveuserAuthAdmin, $liveuserPermAdmin, $ewiki_plugins;
    ob_start();
    echo ewiki_make_title($id, $id, 2);
    // handle posted deletes or updates
    if (isset($_POST['submit_deleteusers']) || isset($_POST['submit_changeusers']) || isset($_POST['submit_adduserstogroup']) || isset($_POST['submit_removeusersfromgroup']) || isset($_POST['submit_changegroups'])) {
        foreach ($_POST as $key => $value) {
            list($prefix, $id) = explode('_', $key, 2);
            //get password status of current $id
            $username = $_POST['origname_' . $id];
            $pwdstatus = ewiki_get_uservar("passwdstatus", NULL, $username);
            // Remove a user
            if ($prefix == 'chk' && is_numeric($id) && $value == 'on' && isset($_POST['submit_deleteusers'])) {
                if (liveuser_removeEntity('user_id', $id)) {
                    echo '<p>User ' . $id . ' was successfully removed.</p>';
                } else {
                    echo '<p>Removal of user ' . $id . ' failed.</p>';
                }
            }
            // Add a user to a group
            if ($prefix == 'chk' && is_numeric($id) && $value == 'on' && isset($_POST['submit_adduserstogroup'])) {
                if (($group_id = liveuser_checkEntity('group', $_POST['grouplist'])) !== false) {
                    if (liveuser_checkGroupUser($group_id, $id) === false) {
                        if ($liveuserPermAdmin->addUserToGroup($id, $group_id)) {
                            echo '<p>User ' . $id . ' was successfully added to group ' . $_POST['grouplist'] . '.</p>';
                        } else {
                            echo '<p>Addition of user ' . $id . ' to group ' . $_POST['grouplist'] . ' failed.</p>';
                        }
                    } else {
                        echo '<p>User ' . $id . ' is already a member of group ' . $_POST['grouplist'] . '.</p>';
                    }
                } else {
                    echo '<p>Group ' . $_POST['grouplist'] . ' does not exist.</p>';
                }
            }
            // Remove a user from a group
            if ($prefix == 'chk' && is_numeric($id) && $value == 'on' && isset($_POST['submit_removeusersfromgroup'])) {
                if (($group_id = liveuser_checkEntity('group', $_POST['grouplist'])) !== false) {
                    if ($liveuserPermAdmin->removeUserFromGroup($id, liveuser_checkEntity('group', $_POST['grouplist']))) {
                        echo '<p>User ' . $id . ' was successfully removed from group ' . $_POST['grouplist'] . '.</p>';
                    } else {
                        echo '<p>Removal of user ' . $id . ' from group ' . $_POST['grouplist'] . ' failed.</p>';
                    }
                } else {
                    echo '<p>Group ' . $_POST['grouplist'] . ' does not exist.</p>';
                }
            }
            // Change the user name
            if ($prefix == 'chname' && is_numeric($id) && !empty($value) && $_POST['origname_' . $id] != $value && isset($_POST['submit_changeusers'])) {
                $event_log = '';
                if (liveuser_checkEntity('user', $value) === false) {
                    if ($liveuserAuthAdmin->updateUser($id, $value)) {
                        $event_log .= '<p>User ' . $value . ' was successfully updated.</p>';
                        if (isset($ewiki_plugins['uservars_store'][0])) {
                            if ($ewiki_plugins['uservars_store'][0]($ewiki_plugins['uservars_retrieve'][0]($_POST['origname_' . $id]), $value)) {
                                $event_log .= '<p>User data copied to ' . $value;
                                if ($ewiki_plugins['uservars_store'][0](array(), $_POST['origname_' . $id])) {
                                    $event_log .= ' and deleted from ' . $_POST['origname_' . $id];
                                } else {
                                    $event_log .= ' but not deleted from ' . $_POST['origname_' . $id];
                                }
                                $event_log .= '.</p>';
                            } else {
                                $event_log .= '<p>User data copy failed.</p>';
                            }
                        }
                    } else {
                        $event_log .= '<p>Update of user ' . $value . ' failed.</p>';
                    }
                } else {
                    $event_log .= '<p>Another user with the name ' . $value . ' already exists in the database. No change has been made.</p>';
                }
                echo $event_log;
                ewiki_log("Attempted to rename " . $_POST['origname_' . $id] . " to {$value}." . $event_log, 1);
            }
            // Change user variable
            if ($prefix == 'chuvar' && is_numeric($id) && !empty($value) && $_POST['origchuvar_' . $id] != $value && isset($_POST['submit_changeusers'])) {
                if (ewiki_set_uservar($_POST['uvar_fieldname'], $value, $username)) {
                    echo "<p>UserVar " . $_POST['uvar_fieldname'] . " successfully updated for {$username}</p>";
                } else {
                    echo "<p>Update of UserVar " . $_POST['uvar_fieldname'] . " for {$username} failed.</p>";
                }
            }
            if ($prefix == "radpw" && is_numeric($id) && !empty($value) && isset($_POST['submit_changeusers'])) {
                if ($value == "expire" && ($pwdstatus == 'good' || is_null($pwdstatus))) {
                    ewiki_set_uservar("passwdexpiredate", time(), $username);
                    ewiki_set_uservar("passwdstatus", 'expired', $username);
                } elseif ($value == "good" && ($pwdstatus == 'expired' || is_null($pwdstatus))) {
                    ewiki_set_uservar("passwdexpiredate", time() + 60 * 60 * 24 * EWIKI_PASSWD_LIFETIME, $username);
                    ewiki_set_uservar("passwdstatus", 'good', $username);
                }
            }
            if ($prefix == 'chkrandpw' && is_numeric($id) && !empty($value) && isset($_POST['submit_changeusers'])) {
                $password = liveuser_generate_password();
                if ($liveuserAuthAdmin->updateUser($id, $_POST['chname_' . $id], $password)) {
                    ewiki_set_uservar("passwdexpiredate", time() - 60 * 60 * 24 * EWIKI_PASSWD_LIFETIME, $username);
                    ewiki_set_uservar("passwdstatus", 'expired', $username);
                    echo '<p>Password for user ' . $_POST['chname_' . $id] . " was successfully updated to \"{$password}\" and set to expire in " . EWIKI_PASSWD_LIFETIME . "days.</p>";
                } else {
                    echo '<p>Update of password for user ' . $_POST['chname_' . $id] . ' failed.</p>';
                }
            }
            // Change the user's password
            if ($prefix == 'chpw' && is_numeric($id) && !empty($value) && isset($_POST['submit_changeusers'])) {
                // check for cracklib functions and validate against them if possible
                liveuser_admin_users_cracklib_check($_POST['chname_' . $id], $value);
                if ($liveuserAuthAdmin->updateUser($id, $_POST['chname_' . $id], $value)) {
                    ewiki_set_uservar("passwdexpiredate", time() - 60 * 60 * 24 * EWIKI_PASSWD_LIFETIME, $username);
                    ewiki_set_uservar("passwdstatus", 'expired', $username);
                    echo '<p>Password for user ' . $_POST['chname_' . $id] . ' was successfully updated and set to expire in ' . EWIKI_PASSWD_LIFETIME . 'days.</p>';
                } else {
                    echo '<p>Update of password for user ' . $_POST['chname_' . $id] . ' failed.</p>';
                }
            }
            // Remove a group
            if ($prefix == 'chkgroup' && is_numeric($id) && $value == 'on' && isset($_POST['submit_changegroups'])) {
                if (liveuser_removeEntity('group_id', $id)) {
                    echo '<p>Group ' . $id . ' was successfully deleted.</p>';
                } else {
                    echo '<p>Deletion of group ' . $id . ' failed.</p>';
                }
            }
            // Change group name
            if ($prefix == 'chgroupname' && is_numeric($id) && !empty($value) && $_POST['origgroupname_' . $id] != $value && isset($_POST['submit_changegroups'])) {
                if ($liveuserPermAdmin->updateGroup($id, $value)) {
                    echo '<p>Group ' . $value . ' was successfully updated.</p>';
                } else {
                    echo 'Update of group ' . $value . ' failed.</p>';
                }
            }
        }
    }
    // Add a user
    if (!empty($_POST['username_text']) && !empty($_POST['pw_text']) && isset($_POST['submit_adduser'])) {
        if (liveuser_checkEntity('user', $_POST['username_text']) === false) {
            // check for cracklib functions and validate against them if possible
            liveuser_admin_users_cracklib_check($_POST['chname_' . $id], $value);
            if (liveuser_addEntity('user', array($_POST['username_text'], $_POST['pw_text'])) !== false) {
                echo '<p>User ' . $_POST['username_text'] . ' was successfully created.</p>';
            } else {
                echo '<p>Creation of user ' . $_POST['username_text'] . ' failed.</p>';
            }
        } else {
            echo '<p>User ' . $_POST['username_text'] . ' already exists.</p>';
        }
    }
    // Add a lot of users and add them into groups
    if (!empty($_POST['usernames_text']) && isset($_POST['submit_addusers'])) {
        $newusers = explode("\n", $_POST['usernames_text']);
        foreach ($newusers as $newuser) {
            $newuser = trim($newuser);
            if (($auth_id = liveuser_checkEntity('user', $newuser)) === false) {
                if ($_POST["pwgen_addusers"] == "on") {
                    $password = liveuser_generate_password();
                } else {
                    $password = $newuser;
                }
                if (($auth_id = liveuser_addEntity('user', array($newuser, $password))) !== false) {
                    echo "<p>User {$newuser} was successfully created with password {$password}.</p>";
                } else {
                    echo '<p>Creation of user ' . $newuser . ' failed.</p>';
                }
            } else {
                echo '<p>User ' . $newuser . ' already exists.</p>';
            }
            if ($auth_id !== false && !empty($_POST['usernames_grouplist'])) {
                if (($group_id = liveuser_checkEntity('group', $_POST['usernames_grouplist'])) !== false) {
                    if (liveuser_checkGroupUser($group_id, $auth_id) === false) {
                        if ($liveuserPermAdmin->addUserToGroup($auth_id, $group_id)) {
                            echo '<p>User ' . $newuser . ' was successfully added to group ' . $_POST['usernames_grouplist'] . '.</p>';
                        } else {
                            echo '<p>Addition of user ' . $newuser . ' to group ' . $_POST['usernames_grouplist'] . ' failed.</p>';
                        }
                    } else {
                        echo '<p>User ' . $newuser . ' is already a member of group ' . $_POST['usernames_grouplist'] . '.</p>';
                    }
                } else {
                    echo '<p>Group ' . $_POST['usernames_grouplist'] . ' does not exist.</p>';
                }
            }
        }
    }
    // Add a group
    if (!empty($_POST['groupname_text']) && isset($_POST['submit_addgroup'])) {
        $group_id = liveuser_checkEntity('group', $_POST['groupname_text']);
        if ($group_id === false) {
            $group_const = 'LU_G_' . strtoupper($_POST['groupname_text']);
            $group_id = liveuser_addEntity('group', array($group_const, $_POST['groupname_text'], null, true));
            if ($group_id !== false) {
                echo '<p>Group ' . $_POST['groupname_text'] . ' was successfully created.</p>';
            } else {
                echo '<p>Creation of group ' . $_POST['groupname_text'] . ' failed.</p>';
            }
        } else {
            echo '<p>Group ' . $_POST['groupname_text'] . ' already exists.</p>';
        }
        if (isset($_POST['addright']) && $group_id !== false) {
            $right_id = liveuser_checkEntity('right', $_POST['groupname_text']);
            if ($right_id === false) {
                $right_const = 'LU_R_' . strtoupper($_POST['groupname_text']);
                $right_id = liveuser_addEntity('right', array(LU_AREA_LIVEWEB, $right_const, $_POST['groupname_text']));
                if ($right_id !== false) {
                    echo '<p>Right ' . $_POST['groupname_text'] . ' was successfully created.</p>';
                } else {
                    echo '<p>Creation of right ' . $_POST['groupname_text'] . ' failed.</p>';
                }
            } else {
                echo '<p>Right ' . $_POST['groupname_text'] . ' already exists.</p>';
            }
            if ($right_id !== false) {
                // check if group already has the right
                if (liveuser_checkGroupRight($group_id, $right_id)) {
                    echo 'Group ' . $_POST['groupname_text'] . ' already has right ' . $_POST['groupname_text'] . '.</p>';
                } else {
                    // attempt to assign right to group
                    if ($liveuserPermAdmin->grantGroupRight($group_id, $right_id, 1) === true) {
                        echo '<p>Right ' . $_POST['groupname_text'] . ' has been assigned to group ' . $_POST['groupname_text'] . '.</p>';
                    } else {
                        echo '<p>Assignment of right ' . $_POST['groupname_text'] . ' to group ' . $_POST['groupname_text'] . ' failed.</p>';
                    }
                }
            }
        }
    }
    // Show current table listing of pages and permissions
    $users = $liveuserAuthAdmin->getUsers();
    $groups = $liveuserPermAdmin->getGroups();
    //uservars based controls
    if (isset($ewiki_plugins['uservars_search'][0])) {
        if (isset($_REQUEST['search_fieldname'])) {
            //set fieldname variable
            $fieldname = $_REQUEST['search_fieldname'];
        }
        if (strlen($_REQUEST['search_fieldvalue'])) {
            //set fieldvalue variable
            $fieldvalue = $_REQUEST['search_fieldvalue'];
        }
        if (!empty($fieldname)) {
            $userdata = ewiki_search_uservar($fieldname, $fieldvalue);
            //get data for the given fieldname/fieldvalue combination
            //Remove non-matching users
            foreach ($users as $key => $user) {
                if (!isset($userdata[$user['handle']])) {
                    unset($users[$key]);
                }
            }
        }
        //Display search form
        ?>
      <form method="post" action="">
        <table>
          <tr><td>Field Name</td><td>
			<input type="text" name="search_fieldname" value="<?php 
        echo $fieldname;
        ?>
">
			</td></tr>
          <tr><td>Value</td><td>
			<input type="text" name="search_fieldvalue" value="<?php 
        echo $fieldvalue;
        ?>
">
			</td></tr>
        </table>
        <input value="Search" type="submit" name="submit_searchaccount" />
      </form>
      
      <?php 
    }
    if (is_array($users) && !empty($users)) {
        ?>
	    <form method="post" action="">
	    <h3>Edit Users</h3>
      <input type="hidden" name="uvar_fieldname" value="<?php 
        echo $fieldname;
        ?>
">
	    <table border="1">
	    <tr><th>Select</th><th>User ID</th><th>User Name<br />Password [Random]</th><th>Password Status</th><th>Groups</th>
        <?php 
        if (!empty($fieldname)) {
            ?>

    <th><?php 
            echo $fieldname;
            ?>
 			
		<input type="hidden" name="search_fieldname" value="<?php 
            echo $fieldname;
            ?>
">
		<input type="hidden" name="search_fieldvalue" value="<?php 
            echo $fieldvalue;
            ?>
">
		</th>
	<?php 
        }
        echo '</tr>';
        foreach ($users as $user) {
            ?>
                <tr>
                    <td><input name="chk_<?php 
            echo $user['auth_user_id'];
            ?>
" type="checkbox" /></td>
                    <td><?php 
            echo $user['auth_user_id'];
            ?>
</td>
                    <td>
                        <input id="chname_<?php 
            echo $user['auth_user_id'];
            ?>
" name="chname_<?php 
            echo $user['auth_user_id'];
            ?>
" type="text" value="<?php 
            echo $user['handle'];
            ?>
" />
                        <input name="origname_<?php 
            echo $user['auth_user_id'];
            ?>
" type="hidden" value="<?php 
            echo $user['handle'];
            ?>
"><br />
                        
                        <input id="chpw_<?php 
            echo $user['auth_user_id'];
            ?>
" name="chpw_<?php 
            echo $user['auth_user_id'];
            ?>
" type="text" value="" />
                        <input name="chkrandpw_<?php 
            echo $user['auth_user_id'];
            ?>
" type="checkbox" />
                        <?php 
            echo $liveuserAuthAdmin->encryptPW($user['handle']) == $user['passwd'] ? '<div class="warning">Password == User Name</div>' : '';
            ?>
                        
                    </td>
                    <td>
                    <?php 
            $good = '<input type="radio" name="radpw_' . $user["auth_user_id"] . '" value="good" CHECKED >Good<br />' . '<input type="radio" name="radpw_' . $user["auth_user_id"] . '" value="expire">Expired<br />';
            $expired = '<input type="radio" name="radpw_' . $user["auth_user_id"] . '" value="good">Good<br />' . '<input type="radio" name="radpw_' . $user["auth_user_id"] . '" value="expire" CHECKED >Expired<br />';
            echo ewiki_get_uservar("passwdstatus", 'good', $user['handle']) == 'good' ? $good : $expired;
            echo intval((ewiki_get_uservar("passwdexpiredate", time(), $user['handle']) - time()) / (60 * 60 * 24)) . " Days<br />";
            ?>
                    </td>
                    <td>
            <?php 
            foreach ($liveuserPermAdmin->getGroups(array('where_user_id' => $user['auth_user_id'])) as $group) {
                echo $group['name'] . '<br />';
            }
            ?>
                    </td>
                
            <?php 
            if (isset($userdata[$user['handle']])) {
                echo '<input id="origchuvar_' . $user['auth_user_id'] . '" name="origchuvar_' . $user['auth_user_id'] . '" type="hidden" value="' . $userdata[$user['handle']] . '">';
                echo '<td> <input id="chuvar_' . $user['auth_user_id'] . '" name="chuvar_' . $user['auth_user_id'] . '" type="text" value="' . $userdata[$user['handle']] . '" /></td>';
            }
            echo "</tr>";
        }
        ?>
            </table>
            <input type="reset" value="Reset" />
            <input type="submit" name="submit_deleteusers" value="Delete Selected" />
            <input type="submit" name="submit_changeusers" value="Submit Changes" />
        <?php 
        if (is_array($groups) && !empty($groups)) {
            ?>
                <br /><br /><label for="grouplist">Group</label>
                <select id="grouplist" name="grouplist">
            <?php 
            foreach ($groups as $group) {
                echo '<option value="' . $group['name'] . '">' . $group['name'] . '</option>';
            }
            ?>
                </select><br />
                <input type="submit" name="submit_adduserstogroup" value="Add Selected" />
                <input type="submit" name="submit_removeusersfromgroup" value="Remove Selected" />
            <?php 
        }
        echo '</form>';
    } else {
        ?>
            <h3>Edit Users</h3>
            <p>No users were found in the database.</p>
        <?php 
    }
    // Show Add a new user section
    ?>
	<form method="post" action="">
	<h3>Add a User</h3>
	<label for="username_text">User Name</label>
	<input id="username_text" name="username_text" type="text" /><br />
	<label for="pw_text">Password</label>
	<input id="pw_text" name="pw_text" type="text" /><br />
	<input type="submit" name="submit_adduser" value="Add User" />
	</form>
    <?php 
    // Show Add multiple users section
    ?>
	<form method="post" action="">
	<h3>Add Multiple Users</h3>
        <p>Insert one user name per line. This input will be processed as a 
        batch, and each user will be created with a password identical to his 
        user name or a randomly generated password if the "Generate Passwords" 
        box is checked.</p>
	<textarea id="usernames_text" name="usernames_text" rows="10" cols="25"></textarea>    
    <?php 
    if (is_array($groups) && !empty($groups)) {
        ?>
            <label for="usernames_grouplist">Groups</label>
            <select id="usernames_grouplist" name="usernames_grouplist" />
            <option value=""></option>
        <?php 
        foreach ($groups as $group) {
            echo '<option value="' . $group['name'] . '">' . $group['name'] . '</option>';
        }
        ?>
            </select>
        <?php 
    }
    ?>
        <p><input type="checkbox" name="pwgen_addusers" checked="checked"> Generate random passwords.</p>
        <input type="submit" name="submit_addusers" value="Add Users" />    
        </form>
    <?php 
    // Groups Section
    if (is_array($groups) && !empty($groups)) {
        ?>
	    <form method="post" action="">
	    <h3>Edit Groups</h3>
	    <table border="1">
	    <tr><th>Delete</th><th>Group ID</th><th>Group Name</th></tr>
        <?php 
        foreach ($groups as $group) {
            ?>
                <tr>
                    <td><input name="chkgroup_<?php 
            echo $group['group_id'];
            ?>
" type="checkbox" /></td>
                    <td><?php 
            echo $group['group_id'];
            ?>
</td>
                    <td>
                        <input name="chgroupname_<?php 
            echo $group['group_id'];
            ?>
" type="text" value="<?php 
            echo $group['name'];
            ?>
" />
                        <input name="origgroupname_<?php 
            echo $group['group_id'];
            ?>
" type="hidden" value="<?php 
            echo $group['name'];
            ?>
" />
                    </td>
                </tr>
            <?php 
        }
        ?>
            </table>
            <input type="reset" value="Reset" />
            <input name="submit_changegroups" type="submit" value="Submit Changes">
            </form>
        <?php 
    } else {
        ?>
            <h3>Edit Groups</h3>
            <p>No groups were found in the database.</p>
        <?php 
    }
    // Show Add a new group section
    ?>
	<form method="post" action="">
	<h3>Add a Group</h3>
        <p>When creating a group, you may choose to create a right with the group, which may then be applied to user accounts via the group. If the group already exists, this form will still attempt to link a right to it. If the right already exists and is not associated with the group, it will be assigned to the group.</p>
	<label for="groupname_text">Group Name</label>
	<input id="groupname_text" name="groupname_text" type="text"><br />
	<label for="addright">Add/Link Right</label>
	<input id="addright" name="addright" type="checkbox" checked="checked"><br />
	<input type="submit" name="submit_addgroup" value="Add Group" />
	</form>
    <?php 
    $o = ob_get_contents();
    ob_end_clean();
    return $o;
}
Esempio n. 5
0
liveuser_addPerm('[NewPage]', $liveuserBaseRings['manage'], $defs['LU_R_STAFF']);
// set rights on all existing pagename's
foreach ($pagenames as $pagename) {
    liveuser_addPerm($pagename['pagename'], $liveuserBaseRings['manage'], $defs['LU_R_STAFF']);
}
echo "// add the following lines to liveuser_conf.php\n";
foreach ($defs as $key => $value) {
    echo 'define(\'' . $key . '\', ' . (is_numeric($value) ? $value : '\'' . $value . '\'') . ");\n";
    define($key, $value);
}
// default user list
$users = array('user1', 'user2', 'user3');
// add users (password = username) and set group memberships for default users
foreach ($users as $user) {
    if (liveuser_checkEntity('user', $user) === false) {
        if (liveuser_addEntity('user', array($user, $user)) !== false) {
            echo 'added user ' . $user . "\n";
        }
        $id = liveuser_checkEntity('user', $user);
        if ($id !== false && $liveuserPermAdmin->addUserToGroup($id, $setup_defs['LU_G_STAFF'])) {
            echo 'added user ' . $user . ' to group Staff' . "\n";
        }
    }
}
// set special group membership for a user
$user1 = liveuser_checkEntity('user', 'user1');
if (liveuser_checkGroupUser($setup_defs['LU_G_LW_PUBLISHER'], $user1) === false) {
    if ($liveuserPermAdmin->addUserToGroup($user1, $setup_defs['LU_G_LW_PUBLISHER'])) {
        echo 'added user user1 to group Publisher' . "\n";
    }
}