コード例 #1
0
ファイル: api.php プロジェクト: realkazan/smppi
include "includes/db.php";
include "includes/site.class.php";
$csms = new SmppiSite();
if (isset($_REQUEST['login']) && isset($_REQUEST['skey']) && isset($_REQUEST['action'])) {
    $ip = $_SERVER['REMOTE_ADDR'];
    $login = $_REQUEST['login'];
    $md5key = md5($_REQUEST['skey']);
    if ($user_id = $csms->api_auth($login, $md5key, $ip)) {
        if ($_REQUEST['action'] == "sendsms") {
            $user_rights = $csms->user_rights($user_id);
            if (in_array("SMS_APISEND", $user_rights)) {
                $phone = $_REQUEST['phone'];
                $msg = $_REQUEST['msg'];
                $method = isset($_REQUEST['method']) ? $_REQUEST['method'] : "gsm";
                if ($sms_id = $csms->sendsms($phone, $msg, 1, $method)) {
                    $csms->users_log($user_id, "sendsms:{$sms_id}", $_SERVER['REMOTE_ADDR']);
                    $return = array("result" => "success", "sms_id" => $sms_id);
                } else {
                    $return = array("result" => "error", "reason" => "sendsms");
                }
            } else {
                $return = array("result" => "error", "reason" => "access denied");
            }
        } else {
            $return = array("result" => "error", "reason" => "wrong request 2");
        }
    } else {
        $return = array("result" => "error", "reason" => "bad login or password");
    }
} else {
    $return = array("result" => "error", "reason" => "wrong request 1");
コード例 #2
0
ファイル: user.act.php プロジェクト: realkazan/smppi
<?php

/*
 * user.act.php
 */
include_once "includes/session.inc.php";
include_once "includes/db.php";
include_once "includes/site.class.php";
include_once "lang/lang.{$site_lang}.php";
$csms = new SmppiSite();
include "includes/auth.inc.php";
if (in_array("SMS_ADMIN", $user_rights)) {
    if (isset($_REQUEST['user_id']) && $_REQUEST['user_id'] == 0 && isset($_REQUEST['user_login']) && $_REQUEST['user_login'] != "" && isset($_REQUEST['user_password']) && $_REQUEST['user_password'] != "" && isset($_REQUEST['user_ip']) && $_REQUEST['user_ip'] != "" && isset($_REQUEST['user_interface']) && $_REQUEST['user_interface'] != "") {
        $params = array("login" => $_REQUEST['user_login'], "password" => md5(trim($_REQUEST['user_password'])), "ip" => $_REQUEST['user_ip'], "interface" => $_REQUEST['user_interface']);
        if ($new_user_id = $csms->create_user($params)) {
            $csms->users_log($user_id, "create user:{$new_user_id}", $_SERVER['REMOTE_ADDR']);
            if (isset($_REQUEST['user_rights'])) {
                foreach ($_REQUEST['user_rights'] as $right) {
                    $csms->insert_right($new_user_id, $right);
                }
            }
            header("location: " . BASE_PATH . "adm/");
        }
    } elseif (isset($_REQUEST['user_id']) && $_REQUEST['user_id'] > 0 && isset($_REQUEST['user_login']) && $_REQUEST['user_login'] != "" && isset($_REQUEST['user_password']) && isset($_REQUEST['user_ip']) && $_REQUEST['user_ip'] != "" && isset($_REQUEST['user_interface']) && $_REQUEST['user_interface'] != "") {
        $user_password = $_REQUEST['user_password'] == "" ? "" : md5($_REQUEST['user_password']);
        $params = array("id" => $_REQUEST['user_id'], "login" => $_REQUEST['user_login'], "password" => $user_password, "ip" => $_REQUEST['user_ip'], "interface" => $_REQUEST['user_interface']);
        if ($csms->update_user($params)) {
            $new_user_id = $params['id'];
            $csms->users_log($user_id, "update user:{$new_user_id}", $_SERVER['REMOTE_ADDR']);
            $csms->delete_rights($new_user_id);
            if (isset($_REQUEST['user_rights'])) {