includes/SpecialUserlevels.php

   1 <?php
   2 /**
   3  * Provide an administration interface
   4  * DO NOT USE: INSECURE.
   5  *
   6  * TODO : remove everything related to group editing (SpecialGrouplevels.php)
   7  */
   8
   9 /** */
  10 require_once('HTMLForm.php');
  11 require_once('Group.php');
  12
  13 /** Entry point */
  14 function wfSpecialUserlevels($par=null) {
  15         global $wgRequest;
  16         # Debug statement
  17         // print_r($_POST);
  18         $form = new UserlevelsForm($wgRequest);
  19         $form->execute();
  20 }
  21
  22 /**
  23  * A class to manage user levels rights.
  24  */
  25 class UserlevelsForm extends HTMLForm {
  26         var $mPosted, $mRequest, $mSaveprefs;
  27         /** Escaped local url name*/
  28         var $action;
  29
  30         /** Constructor*/
  31         function UserlevelsForm ( &$request ) {
  32                 $this->mPosted = $request->wasPosted();
  33                 $this->mRequest = $request;
  34                 $this->mName = 'userlevels';
  35
  36                 $titleObj = Title::makeTitle( NS_SPECIAL, 'Userlevels' );
  37                 $this->action = $titleObj->escapeLocalURL();
  38         }
  39
  40         /**
  41          * Manage forms to be shown according to posted datas.
  42          * Depending on the submit button used : Call a form or a saving function.
  43          */
  44         function execute() {
  45                 // show the general form
  46                 $this->switchForm();
  47                 if ( $this->mPosted ) {
  48                         // show some more forms
  49                         if($this->mRequest->getCheck('ssearchuser')) {
  50                                 $this->editUserGroupsForm( $this->mRequest->getVal('user-editname')); }
  51
  52                         // save settings
  53                         if($this->mRequest->getCheck('saveusergroups')) {
  54                                 $this->saveUserGroups($this->mRequest->getVal('user-editname'),
  55                                                       $this->mRequest->getArray($this->mName.'-groupsmember'),
  56                                                       $this->mRequest->getArray($this->mName.'-groupsavailable'));
  57                         }
  58                 }
  59         }
  60
  61 // save things !!
  62         /**
  63          * Save user groups changes in the database.
  64          * Datas comes from the editUserGroupsForm() form function
  65          *
  66          * @param string $username Username to apply changes to.
  67          * @param array $removegroup id of groups to be removed.
  68          * @param array $addgroup id of groups to be added.
  69          *
  70          * @todo Log groupname instead of group id.
  71          */
  72         function saveUserGroups($username,$removegroup,$addgroup) {
  73                 $u = User::NewFromName($username);
  74
  75                 if(is_null($u)) {
  76                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
  77                         return;
  78                 }
  79
  80                 if($u->getID() == 0) {
  81                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
  82                         return;
  83                 }
  84
  85                 $groups = $u->getGroups();
  86                 $logcomment = ' ';
  87                 // remove then add groups
  88                 if(isset($removegroup)) {
  89                         $groups = array_diff($groups, $removegroup);
  90                         $logcomment .= implode( ' -', $removegroup);
  91                         }
  92                 if(isset($addgroup)) {
  93                         $groups = array_merge($groups, $addgroup);
  94                         $logcomment .= implode( ' +', $addgroup );
  95                         }
  96                 // save groups in user object and database
  97                 $u->setGroups($groups);
  98                 $u->saveSettings();
  99
 100                 $log = new LogPage( 'rights' );
 101                 $log->addEntry( 'rights', Title::makeTitle( NS_USER, $u->getName() ), $logcomment );
 102         }
 103
 104         /**
 105          * The entry form
 106          * It allows a user to look for a username and edit its groups membership
 107          */
 108         function switchForm() {
 109                 global $wgOut;
 110
 111                 // user selection
 112                 $wgOut->addHTML( "<form name=\"uluser\" action=\"$this->action\" method=\"post\">\n" );
 113                 $wgOut->addHTML( $this->fieldset( 'lookup-user',
 114                                 $this->textbox( 'user-editname' ) .
 115                                 '<input type="submit" name="ssearchuser" value="'.wfMsg('editusergroup').'" />'
 116                 ));
 117                 $wgOut->addHTML( "</form>\n" );
 118         }
 119
 120         /**
 121          * Edit user groups membership
 122          * @param string $username Name of the user.
 123          */
 124         function editUserGroupsForm($username) {
 125                 global $wgOut;
 126
 127                 $user = User::newFromName($username);
 128                 if(is_null($user)) {
 129                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
 130                         return;
 131                 }
 132
 133                 if($user->getID() == 0) {
 134                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
 135                         return;
 136                 }
 137
 138                 $groups = $user->getGroups();
 139
 140                 $wgOut->addHTML( "<form name=\"editGroup\" action=\"$this->action\" method=\"post\">\n".
 141                                                  '<input type="hidden" name="user-editname" value="'.$username.'" />');
 142                 $wgOut->addHTML( $this->fieldset( 'editusergroup',
 143                         wfMsg('editing', $this->mRequest->getVal('user-editname')).".<br />\n" .
 144                         '<table border="0" align="center"><tr><td>'.
 145                         HTMLSelectGroups($this->mName.'-groupsmember', $groups,true,6).
 146                         '</td><td>'.
 147                         HTMLSelectGroups($this->mName.'-groupsavailable', $groups,true,6,true).
 148                         '</td></tr></table>'."\n".
 149                         '<p>'.wfMsg('userlevels-groupshelp').'</p>'."\n".
 150                         '<input type="submit" name="saveusergroups" value="'.wfMsg('saveusergroups').'" />'
 151                         ));
 152                 $wgOut->addHTML( "</form>\n" );
 153         }
 154 } // end class UserlevelsForm
 155 ?>