function printContent() { ?> <table border="0"> <tr bgcolor="<?=BGCOLOR_ALT?>"> <th>#</th> <? if (SecurityUser::havePermission("DELETE")) { ?> <th></th> <? } ?> <th><?=Text::getText("FullName")?></th> <th><?=Text::getText("LoginName")?></th> </tr> <? $bg = TRUE; ?> <? foreach ($this->users as $u) { ?> <? $bg = !$bg; ?> <tr<? if ($bg) { ?> bgcolor="<?=BGCOLOR_ALT?>"<? } ?>> <td> <?=$u->getId()?> </td> <? if (SecurityUser::havePermission("DELETE")) { ?> <td><a href="<?=$this->userDeletePage?>?<?=$this->userDeleteUserParam?>=<?=$u->getId()?>" onClick="return confirm('<?=Text::getText('ConfirmDeleteUser')?>\n\n<?=$u->getLoginName()?>')"><img src="<?=IMAGE_TRASH?>" border="0" alt="<?=Text::getText('Delete')?>"></a></td> <? } ?> <td> <?=$u->getFullName()?> </td> <td> <a href="<?=$this->getUserPage()?>?id=<?=$u->getId()?>"><?=$u->getLoginName()?></a> </td> </tr> <? } ?> </table> <? }
function success($user, $pageAfterLogin) { SecurityUser::setCurrent($user); if ($pageAfterLogin) { header("Location: $pageAfterLogin"); exit; } else { header("Location: ./"); exit; //$errMsg = Text::getText("MissingNextPage"); } }
function logout() { SecurityUser::setCurrent(NULL); }
<? require_once("classes/SecurityUser.php"); ?> <? require_once("classes/Text.php"); ?> <? $group_id = $_REQUEST['group']; $user_id = $_REQUEST['user']; $g = SecurityGroup::getById($group_id); if ($g == NULL) { $errMsg = Text::getText("GroupNotFound"); $title = Text::getText("Delete"); include("error.php"); } else { $u = SecurityUser::getById($user_id); if ($u == NULL) { $errMsg = Text::getText("UserNotFound"); $title = Text::getText("Delete"); include("error.php"); } else { $g->addMember($u); header("Location: groupMembers.php?id=".$g->getId()); } } ?>
<? require_once("classes/SecurityUser.php"); ?> <? require_once("classes/Text.php"); ?> <? /* Requires variable $u to point to the user to display */ ?> <h2><?php echo Text::getText("EditUser"); ?> </h2> <? SecurityUser::requirePermission("CHANGE"); ?> <form method="POST"> <input type="hidden" name="action" value="save"> <table border="0" cellpadding="2"> <tr> <td colspan="2" align="center"> <?php echo Text::getText("UserInfo"); ?> </td> </tr> <tr> <th><?php echo Text::getText("LoginName"); ?> </th> <td><input type="text" name="loginName" value="<?php echo $u->getLoginName(); ?> "></td> </tr>
/** * Execute the shutdown procedure. * * @return void */ public function shutdown() { $storage = $this->getContext()->getStorage(); // write credentials to the storage $storage->write(self::AUTH_NAMESPACE, $this->authenticated); $storage->write(self::CREDENTIAL_NAMESPACE, $this->credentials); // call the parent shutdown method parent::shutdown(); }
<? require_once("classes/Recipe.php"); ?> <? require_once("classes/Category.php"); ?> <? require_once("classes/Text.php"); ?> <? require_once('classes/Rating.php'); ?> <? $id = $_REQUEST['id']; $u = SecurityUser::getById($id); if ($u == NULL) { $u = SecurityUser::getByLoginName($id); } if ($u == NULL) { $errMsg = Text::getText("MissingUser"); include("error.php"); exit; } include("header.php"); ?> <h2><?php echo $u->getFullName(); ?> </h2> <h3><?php echo Text::getText("Favorites"); ?> <a href="<?php echo $smellyfish_base_uri; ?> rss.php?lang=<?php echo $_SESSION['lang']; ?> &user=<?php
/** * Applies to the current user. */ function requirePermission($resource, $permission = "Permission") { SecurityUser::requirePermission($resource, $permission); }
echo $smellyfish_base_uri; ?> groups.php"><?php echo Text::getText("Groups"); ?> </a> </td> </tr> <? } ?> <tr class="navitem"> <td class="navitem"> <a href="http://nicolas.marchildon.net/carnet/category/smellyfish/">Blog</a> </td> </tr> <? if (SecurityUser::isAnonymous()) { ?> <tr class="navitem"> <td class="navitem"> <a href="<?php echo $smellyfish_base_uri; ?> login.php"><?php echo Text::getText("Login"); ?> </a> </td> </tr> <? } else { ?> <tr class="navitem"> <td class="navitem"> <a href="<?php
<? require_once("classes/SecurityUser.php"); ?> <? require_once("classes/Text.php"); ?> <? $u = SecurityUser::getById($_REQUEST['id']); if ($u == NULL) { $errMsg = Text::getText("UserNotFound"); $title = Text::getText("Delete"); include("error.php"); } else { $u->delete(); header("Location: users.php"); } ?>
<? require_once("config.php"); ?> <? require_once(RESACCMAN_BASE."/classes/SecurityUser.php"); ?> <? require_once(RESACCMAN_BASE."/classes/Text.php"); ?> <? $u = new SecurityUser(); $u->setLoginName($loginName); $u->setFullNAme($fullName); $u->setPassword($password); if ($action == "save") { if (strlen($loginName) > 0) { $u->setLoginName($loginName); $u->setFullName($fullName); $u->setPassword($password); $u->save(); header("Location: users.php"); } else { $errMsg = Text::getText("MissingLoginName"); $buttonCaption = Text::getText("Save"); include("header.php"); include("userEditForm.php"); include("footer.php"); } } else { $title = Text::getText("EditUser"); $buttonCaption = Text::getText("Save"); include("header.php"); include("userEditForm.php"); include("footer.php"); }
<? require_once("classes/SecurityUser.php"); ?> <? require_once("classes/Text.php"); ?> <? $u = new SecurityUser(); $u->setLoginName($_REQUEST['loginName']); $u->setFullNAme($_REQUEST['fullName']); $u->setPassword($_REQUEST['password']); if ($_REQUEST['action'] == "save") { if (strlen($_REQUEST['loginName']) > 0) { $u->setLoginName($_REQUEST['loginName']); $u->setFullName($_REQUEST['fullName']); $u->setPassword($_REQUEST['password']); $u->save(); header("Location: users.php"); } else { $errMsg = Text::getText("MissingLoginName"); $buttonCaption = Text::getText("Save"); include("header.php"); include("userEditForm.php"); include("footer.php"); } } else { $title = Text::getText("EditUser"); $buttonCaption = Text::getText("Save"); include("header.php"); include("userEditForm.php"); include("footer.php"); } ?>
<? require_once("classes/SecurityUser.php"); ?> <? require_once("classes/Text.php"); ?> <? SecurityUser::setCurrent(NULL); $errMsg=Text::getText("LoggedOut"); include("login.php"); ?>
echo Text::getText("AddMember"); ?> </h3> <p> <table> <tr> <form action="groupMemberAdd.php"> <input type="hidden" name="group" value="<?php echo $group->getId(); ?> "> <td></td> <td> <select name="user"> <? $allUsers = SecurityUser::getAll();?> <? for ($i = 0; $i < count($allUsers); $i++) { ?> <? $user = $allUsers[$i]; ?> <option value="<?php echo $user->getId(); ?> "><?php echo $user->getFullName(); ?> <? } ?> </select> </td> <td><input type="submit" value="<?php echo Text::getText("Add"); ?> "></td>
<? require_once("classes/SecurityUser.php"); ?> <? $user = SecurityUser::getCurrent(); ?> <p>Bienvenue, <?php echo $user->getFullName(); ?> .</p> <p>Voici SmellyFish: un répertoire de recettes. <a href="//smellyfish.marchildon.net/">SmellyFish</a>, ce n'est pas un site, mais un logiciel, créé par <a href="mailto:nicolas@marchildon.net">Nicolas Marchildon</a> comme projet personnel, et dont le code source est protégé par la GPL.</p> <p>Ce site sert à la fois de démo et de répertoire de recettes personnelles. Les recettes qui s'y trouvent proviennent principalement du document Word que le père de Nicolas a bâtit. Nicolas y a ajouté les recettes de sa copine, ainsi que quelques recettes prises par-ci et par-là, sur le web et dans des revues.</p> <p>Le système possède une gestion de permissions très flexible. Des usagers peuvent appartenir à un ou plusieurs groupes, et c'est à chacun des groupes qu'on donne des permissions. Les permissions (Lecture, Modification, Suppression) sont applicables à toutes les "ressources" du système: recette, catégorie, usager, etc. Un administrateur ne se distingue d'un usager ordinaire que par le plus grand nombre de permissions qu'on lui donne.</p>
/** * Tests whether the current user has the specified * permission on the "Group" resource. * * Do not mix with hasPermission() */ function havePermission($permission) { $u = SecurityUser::getCurrent(); return $u->hasPermission("Group", $permission); }
/** * Static function that tries to log the specified user in. * * @return LoginResult */ function login($username, $password) { if (strlen($username) > 0) { $user = SecurityUser::getByLoginName($username); if ($user == NULL) { return new LoginResult(FALSE, Text::getText("UserNotFound")); } else { if ($user->verifyPassword($password)) { SecurityUser::setCurrent($user); return new LoginResult(TRUE); } else { return new LoginResult(FALSE, Text::getText("BadPassword")); } } } else { return new LoginResult(FALSE, Text::getText("NoUserSpecified")); } }
<? require_once("config.php"); ?> <? require_once(RESACCMAN_BASE."/classes/SecurityUser.php"); ?> <? require_once(RESACCMAN_BASE."/classes/Text.php"); ?> <? $u = SecurityUser::getById($id); if ($u == NULL) { $errMsg = Text::getText("MissingUser"); include("error.php"); exit; } if ($action == "save") { if (strlen($loginName) > 0) { $u->setLoginName($loginName); $u->setFullName($fullName); if ($changePassword == "true") { $u->setPassword($password); } $u->save(); header("Location: users.php"); } else { $errMsg = Text::getText("MissingLoginName"); $buttonCaption = Text::getText("Save"); include("header.php"); include("userEditForm.php"); include("footer.php"); } } else { $title = Text::getText("EditUser"); $buttonCaption = Text::getText("Save");
<? require_once("config.php"); ?> <? require_once(RESACCMAN_BASE."/classes/SecurityUser.php"); ?> <? require_once(RESACCMAN_BASE."/classes/Text.php"); ?> <? session_register("pageAfterLogin"); if ($action == "login") { if (strlen($loginName) > 0) { $user = SecurityUser::getByLoginName($loginName); if ($user == NULL) { $errMsg = Text::getText("UserNotFound"); } else { if ($user->verifyPassword($password)) { SecurityUser::setCurrent($user); if ($pageAfterLogin) { $errMsg = $pageAfterLogin; header("Location: $pageAfterLogin"); exit; } else { header("Location: ./"); exit; //$errMsg = Text::getText("MissingNextPage"); } } else { $errMsg = Text::getText("BadPassword"); } } } else { $errMsg = Text::getText("NoUserSpecified"); } }
/** * Applies to the current user. */ function requirePermission($permission, $resource = "Resource") { SecurityUser::requirePermission($permission, $resource); }
echo Text::getText("Delete"); ?> "></a></td> <? } ?> <td> <?php echo $u->getFullName(); ?> </td> <td> <a href="<?php echo $u->href(); ?> "><?php echo $u->getLoginName(); ?> </a> </td> <? if (SecurityUser::havePermission("CHANGE")) { ?> <td> <a href="userEdit.php?id=<?php echo $u->getId(); ?> "><?php echo Text::getText("Edit"); ?> </a> </td> <? } ?> </tr> <? } ?> </table> <? if (SecurityUSer::havePermission("ADD")) { ?> <h3><?php echo Text::getText("AddUser");