includes/SpecialUserrights.php

   1 <?php
   2 /**
   3  * Provide an administration interface
   4  * DO NOT USE: INSECURE.
   5  *
   6  * TODO : remove everything related to group editing (SpecialGrouplevels.php)
   7  * @package MediaWiki
   8  * @subpackage SpecialPage
   9  */
  10
  11 /** */
  12 require_once('HTMLForm.php');
  13 require_once('Group.php');
  14
  15 /** Entry point */
  16 function wfSpecialUserrights() {
  17         global $wgRequest;
  18         $form = new UserrightsForm($wgRequest);
  19         $form->execute();
  20 }
  21
  22 /**
  23  * A class to manage user levels rights.
  24  * @package MediaWiki
  25  * @subpackage SpecialPage
  26  */
  27 class UserrightsForm extends HTMLForm {
  28         var $mPosted, $mRequest, $mSaveprefs;
  29         /** Escaped local url name*/
  30         var $action;
  31
  32         /** Constructor*/
  33         function UserrightsForm ( &$request ) {
  34                 $this->mPosted = $request->wasPosted();
  35                 $this->mRequest = $request;
  36                 $this->mName = 'userrights';
  37
  38                 $titleObj = Title::makeTitle( NS_SPECIAL, 'Userrights' );
  39                 $this->action = $titleObj->escapeLocalURL();
  40         }
  41
  42         /**
  43          * Manage forms to be shown according to posted datas.
  44          * Depending on the submit button used : Call a form or a saving function.
  45          */
  46         function execute() {
  47                 // show the general form
  48                 $this->switchForm();
  49                 if ( $this->mPosted ) {
  50                         // show some more forms
  51                         if($this->mRequest->getCheck('ssearchuser')) {
  52                                 $this->editUserGroupsForm( $this->mRequest->getVal('user-editname')); }
  53
  54                         // save settings
  55                         if($this->mRequest->getCheck('saveusergroups')) {
  56                                 $this->saveUserGroups($this->mRequest->getVal('user-editname'),
  57                                                       $this->mRequest->getArray('member'),
  58                                                       $this->mRequest->getArray('available'));
  59                         }
  60                 }
  61         }
  62
  63 // save things !!
  64         /**
  65          * Save user groups changes in the database.
  66          * Datas comes from the editUserGroupsForm() form function
  67          *
  68          * @param string $username Username to apply changes to.
  69          * @param array $removegroup id of groups to be removed.
  70          * @param array $addgroup id of groups to be added.
  71          *
  72          * @todo Log groupname instead of group id.
  73          */
  74         function saveUserGroups($username,$removegroup,$addgroup) {
  75                 $u = User::NewFromName($username);
  76
  77                 if(is_null($u)) {
  78                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
  79                         return;
  80                 }
  81
  82                 if($u->getID() == 0) {
  83                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
  84                         return;
  85                 }
  86
  87                 $groups = $u->getGroups();
  88                 $logcomment = ' ';
  89                 // remove then add groups
  90                 if(isset($removegroup)) {
  91                         $groups = array_diff($groups, $removegroup);
  92                         $logcomment .= implode( ' -', $removegroup);
  93                         }
  94                 if(isset($addgroup)) {
  95                         $groups = array_merge($groups, $addgroup);
  96                         $logcomment .= implode( ' +', $addgroup );
  97                         }
  98                 // save groups in user object and database
  99                 $u->setGroups($groups);
 100                 $u->saveSettings();
 101
 102                 $log = new LogPage( 'rights' );
 103                 $log->addEntry( 'rights', Title::makeTitle( NS_USER, $u->getName() ), $logcomment );
 104         }
 105
 106         /**
 107          * The entry form
 108          * It allows a user to look for a username and edit its groups membership
 109          */
 110         function switchForm() {
 111                 global $wgOut;
 112
 113                 // user selection
 114                 $wgOut->addHTML( "<form name=\"uluser\" action=\"$this->action\" method=\"post\">\n" );
 115                 $wgOut->addHTML( $this->fieldset( 'lookup-user',
 116                                 $this->textbox( 'user-editname' ) .
 117                                 '<input type="submit" name="ssearchuser" value="'.wfMsg('editusergroup').'" />'
 118                 ));
 119                 $wgOut->addHTML( "</form>\n" );
 120         }
 121
 122         /**
 123          * Edit user groups membership
 124          * @param string $username Name of the user.
 125          */
 126         function editUserGroupsForm($username) {
 127                 global $wgOut;
 128
 129                 $user = User::newFromName($username);
 130                 if(is_null($user)) {
 131                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
 132                         return;
 133                 }
 134
 135                 if($user->getID() == 0) {
 136                         $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
 137                         return;
 138                 }
 139
 140                 $groups = $user->getGroups();
 141
 142                 $wgOut->addHTML( "<form name=\"editGroup\" action=\"$this->action\" method=\"post\">\n".
 143                                                  '<input type="hidden" name="user-editname" value="'.$username.'" />');
 144                 $wgOut->addHTML( $this->fieldset( 'editusergroup',
 145                         wfMsg('editing', $this->mRequest->getVal('user-editname')).".<br />\n" .
 146                         '<table border="0" align="center"><tr><td>'.
 147                         HTMLSelectGroups('member', $this->mName.'-groupsmember', $groups,true,6).
 148                         '</td><td>'.
 149                         HTMLSelectGroups('available', $this->mName.'-groupsavailable', $groups,true,6,true).
 150                         '</td></tr></table>'."\n".
 151                         '<p>'.wfMsg('userrights-groupshelp').'</p>'."\n".
 152                         '<input type="submit" name="saveusergroups" value="'.wfMsg('saveusergroups').'" />'
 153                         ));
 154                 $wgOut->addHTML( "</form>\n" );
 155         }
 156 } // end class UserrightsForm
 157 ?>