2 if ( !class_exists('BaseActions') )
4 include $DIR_LIBS . 'BaseActions.php';
8 class AdminActions extends BaseActions
13 * AdminActions::$default_actions
14 * list of whole action names with which this class can deal
16 static private $default_actions = array(
40 * AdminActions::$skin_type_friendly_names
41 * friendly name for wrapped page types
43 static private $default_skin_types = array(
44 'actionlog' => _ADM_SKPRT_ACTIONLOG,
45 'activate' => _ADM_SKPRT_ACTIVATE,
46 'activatesetpwd' => _ADM_SKPRT_ACTIVATESETPWD,
47 'addnewlog' => _ADM_SKPRT_ADDNEWLOG,
48 'adminerrorpage' => _ADM_SKPRT_ADMINERRORPAGE,
49 'adminskindelete' => _ADM_SKPRT_ADMINSKINDELETE,
50 'adminskinedit' => _ADM_SKPRT_ADMINSKINEDIT,
51 'adminskinedittype' => _ADM_SKPRT_ADMINSKINEDITTYPE,
52 'adminskiniedoimport' => _ADM_SKPRT_ADMINSKINIEDOIMPORT,
53 'adminskinieimport' => _ADM_SKPRT_ADMINSKINIEIMPORT,
54 'adminskinieoverview' => _ADM_SKPRT_ADMINSKINIEOVERVIEW,
55 'adminskinoverview' => _ADM_SKPRT_ADMINSKINOVERVIEW,
56 'adminskinremovetype' => _ADM_SKPRT_ADMINSKINREMOVETYPE,
57 'admintemplatedelete' => _ADM_SKPRT_ADMINTEMPLATEDELETE,
58 'admintemplateedit' => _ADM_SKPRT_ADMINTEMPLATEEDIT,
59 'admintemplateoverview' => _ADM_SKPRT_ADMINTEMPLATEOVERVIEW,
60 'backupoverview' => _ADM_SKPRT_BACKUPOVERVIEW,
61 'backuprestore' => _ADM_SKPRT_BACKUPRESTORE,
62 'banlist' => _ADM_SKPRT_BANLIST,
63 'banlistdelete' => _ADM_SKPRT_BANLISTDELETE,
64 'banlistdeleteconfirm' => _ADM_SKPRT_BANLISTDELETECONFIRM,
65 'banlistnew' => _ADM_SKPRT_BANLISTNEW,
66 'batchcategory' => _ADM_SKPRT_BATCHCATEGORY,
67 'batchcomment' => _ADM_SKPRT_BATCHCOMMENT,
68 'batchdelete' => _ADM_SKPRT_BATCHDELETE,
69 'batchitem' => _ADM_SKPRT_BATCHITEM,
70 'batchmember' => _ADM_SKPRT_BATCHMEMBER,
71 'batchmove' => _ADM_SKPRT_BATCHMOVE,
72 'batchmovecat' => _ADM_SKPRT_BATCHMOVECAT,
73 'batchteam' => _ADM_SKPRT_BATCHTEAM,
74 'blogcommentlist' => _ADM_SKPRT_BLOGCOMMENTLIST,
75 'blogsettings' => _ADM_SKPRT_BLOGSETTINGS,
76 'bookmarklet' => _ADM_SKPRT_BOOKMARKLET,
77 'browseowncomments' => _ADM_SKPRT_BROWSEOWNCOMMENTS,
78 'browseownitems' => _ADM_SKPRT_BROWSEOWNITEMS,
79 'categorydelete' => _ADM_SKPRT_CATEGORYDELETE,
80 'categoryedit' => _ADM_SKPRT_CATEGORYEDIT,
81 'commentdelete' => _ADM_SKPRT_COMMENTDELETE,
82 'commentedit' => _ADM_SKPRT_COMMENTEDIT,
83 'createitem' => _ADM_SKPRT_CREATEITEM,
84 'createnewlog' => _ADM_SKPRT_CREATENEWLOG,
85 'createaccountinput' => _ADM_SKPRT_CREATEACCOUNTINPUT, /* not yet */
86 'createaccountsuccess' => _ADM_SKPRT_CREATEACCOUNTSUCCESS, /* not yet */
87 'createaccountdisable' => _ADM_SKPRT_CREATEACCOUNTDISALLOWED, /* not yet */
88 'deleteblog' => _ADM_SKPRT_DELETEBLOG,
89 'editmembersettings' => _ADM_SKPRT_EDITMEMBERSETTINGS,
90 'forgotpassword' => _ADM_SKPRT_FORGOTPASSWORD, /* not yet */
91 'itemcommentlist' => _ADM_SKPRT_ITEMCOMMENTLIST,
92 'itemdelete' => _ADM_SKPRT_ITEMDELETE,
93 'itemedit' => _ADM_SKPRT_ITEMEDIT,
94 'itemlist' => _ADM_SKPRT_ITEMLIST,
95 'itemmove' => _ADM_SKPRT_ITEMMOVE,
96 'login' => FALSE, //missing
97 'manage' => _ADM_SKPRT_MANAGE,
98 'manageteam' => _ADM_SKPRT_MANAGETEAM,
99 'memberdelete' => _ADM_SKPRT_MEMBERDELETE,
100 'memberedit' => FALSE, //missing
101 'overview' => _ADM_SKPRT_OVERVIEW,
102 'pagefoot' => _ADM_SKPRT_PAGEFOOT,
103 'pagehead' => _ADM_SKPRT_PAGEHEAD,
104 'plugindelete' => _ADM_SKPRT_PLUGINDELETE,
105 'pluginhelp' => _ADM_SKPRT_PLUGINHELP,
106 'pluginlist' => _ADM_SKPRT_PLUGINLIST,
107 'pluginoptions' => _ADM_SKPRT_PLUGINOPTIONS,
108 'settingsedit' => _ADM_SKPRT_SETTINGSEDIT,
109 'showlogin' => _ADM_SKPRT_SHOWLOGIN,
110 'skindelete' => _ADM_SKPRT_SKINDELETE,
111 'skinedit' => _ADM_SKPRT_SKINEDIT,
112 'skinedittype' => _ADM_SKPRT_SKINEDITTYPE,
113 'skiniedoimport' => _ADM_SKPRT_SKINIEDOIMPORT,
114 'skinieimport' => _ADM_SKPRT_SKINIEIMPORT,
115 'skinieoverview' => _ADM_SKPRT_SKINIEOVERVIEW,
116 'skinoverview' => _ADM_SKPRT_SKINOVERVIEW,
117 'skinremovetype' => _ADM_SKPRT_SKINREMOVETYPE,
118 'systemoverview' => _ADM_SKPRT_SYSTEMOVERVIEW,
119 'teamdelete' => _ADM_SKPRT_TEAMDELETE,
120 'templatedelete' => _ADM_SKPRT_TEMPLATEDELETE,
121 'templateedit' => _ADM_SKPRT_TEMPLATEEDIT,
122 'templateoverview' => _ADM_SKPRT_TEMPLATEOVERVIEW,
123 'usermanagement' => _ADM_SKPRT_USERMANAGEMENT,
127 * AdminActions::getAvailableSkinTypes()
131 * @return array list of friendly names for page actions
133 static public function getAvailableSkinTypes()
135 return self::$default_skin_types;
139 * AdminActions::getDefaultTypes()
143 * @return array list of friendly names for page actions
145 static public function getDefaultTypes()
147 return self::$default_skin_types;
151 * AdminActions::__construct()
152 * Constructor for a new Actions object
154 * @param string $type
157 public function __construct($type)
159 // call constructor of superclass first
160 parent::__construct();
163 if ( $type == 'admntemplateoverview' )
165 $this->skintype = 'admintemplateoverview';
169 $this->skintype = $type;
176 * AdminActions::getAvailableActions()
179 * @return array allowed actions for the page type
181 public function getAvailableActions()
183 $extra_actions = array();
185 switch ( $this->skintype )
188 $extra_actions = array(
193 $extra_actions = array(
198 case 'activatesetpwd':
199 $extra_actions = array(
200 /* nothing special */
204 $extra_actions = array(
210 case 'adminerrorpage':
211 $extra_actions = array(
212 /* nothing special */
215 case 'adminskindelete':
216 $extra_actions = array(
220 case 'adminskinedit':
221 $extra_actions = array(
227 case 'adminskinedittype':
228 $extra_actions = array(
231 'allowedskinactions',
232 'skineditallowedlist',
235 case 'adminskiniedoimport':
236 $extra_actions = array(
240 case 'adminskinieimport':
241 $extra_actions = array(
245 case 'adminskinieoverview':
246 $extra_actions = array(
247 'selectlocalskinfiles',
251 case 'adminskinoverview':
252 $extra_actions = array(
256 case 'adminskinremovetype':
257 $extra_actions = array(
261 case 'admintemplatedelete':
262 $extra_actions = array(
263 'editadmintemplateinfo',
265 case 'admintemplateedit':
266 $extra_actions = array(
270 case 'admintemplateoverview':
271 $extra_actions = array(
275 case 'backupoverview':
276 $extra_actions = array(
277 /* nothing special */
280 case 'backuprestore':
281 $extra_actions = array(
282 /* nothing special */
286 $extra_actions = array(
292 case 'banlistdelete':
293 $extra_actions = array(
298 case 'banlistdeleteconfirm':
299 $extra_actions = array(
300 'banlistdeletedlist',
305 $extra_actions = array(
311 case 'batchcategory':
312 $extra_actions = array(
318 $extra_actions = array(
324 $extra_actions = array(
330 $extra_actions = array(
336 $extra_actions = array(
342 $extra_actions = array(
351 $extra_actions = array(
360 $extra_actions = array(
366 case 'blogcommentlist':
367 $extra_actions = array(
374 $extra_actions = array(
390 $extra_actions = array(
394 case 'browseowncomments':
395 $extra_actions = array(
399 case 'browseownitems':
400 $extra_actions = array(
404 case 'categorydelete':
405 $extra_actions = array(
411 $extra_actions = array(
418 case 'commentdelete':
419 $extra_actions = array(
424 $extra_actions = array(
428 case 'createaccountinput':
429 $extra_actions = array(
435 case 'createaccountsuccess':
436 $extra_actions = array(
\r
440 case 'createaccountdisable':
441 $extra_actions = array(
442 /* nothing special */
446 $extra_actions = array(
458 $extra_actions = array(
464 $extra_actions = array(
469 case 'editmembersettings':
470 $extra_actions = array(
473 'localeselectoptions',
475 'defadminskinselect',
476 'defbookmarkletselect',
479 case 'forgotpassword':
480 $extra_actions = array(
481 /* nothing special */
484 case 'itemcommentlist':
485 $extra_actions = array(
491 $extra_actions = array(
498 $extra_actions = array(
510 $extra_actions = array(
517 $extra_actions = array(
523 $extra_actions = array(
524 /* nothing special */
528 $extra_actions = array(
537 $extra_actions = array(
542 $extra_actions = array(
547 $extra_actions = array(
552 $extra_actions = array(
558 $extra_actions = array(
563 case 'pluginoptions':
564 $extra_actions = array(
566 'editplugoptionslist',
570 $extra_actions = array(
573 'configsettingsedit',
574 'configsettingsyesno',
577 'localeselectoptions',
580 'defadminskinselect',
581 'defbookmarkletselect',
585 $extra_actions = array(
590 $extra_actions = array(
595 $extra_actions = array(
602 $extra_actions = array(
605 'allowedskinactions',
606 'skineditallowedlist'
609 case 'skiniedoimport':
610 $extra_actions = array(
615 $extra_actions = array(
619 case 'skinieoverview':
620 $extra_actions = array(
621 'selectlocalskinfiles',
626 $extra_actions = array(
630 case 'skinremovetype':
631 $extra_actions = array(
635 case 'systemoverview':
636 $extra_actions = array(
641 $extra_actions = array(
647 case 'templatedelete':
648 $extra_actions = array(
653 $extra_actions = array(
657 case 'templateoverview':
658 $extra_actions = array(
662 case 'usermanagement':
663 $extra_actions = array(
669 $extra_actions = array(
678 'selectlocalskinfiles',
686 $defined_actions = array_merge(self::$default_actions, $extra_actions);
688 return array_merge($defined_actions, parent::getAvailableActions());
692 * AdminActions::parse_actionloglist()
693 * Parse skinvar actionloglist
695 * @param string $template_name name of template to use
698 public function parse_actionloglist($template_name = '')
700 $query = "SELECT * FROM %s ORDER BY timestamp DESC;";
701 $query = sprintf($query, sql_table('actionlog'));
703 $resource = DB::getResult($query);
704 if ( $resource->rowCount() > 0 )
706 $template['content'] = 'actionlist';
707 $this->parser->parse(showlist($resource, 'table', $template, $template_name));
711 /* TODO: nothing to be shown */
717 * AdminActions::parse_activationmessage()
718 * Parse skinvar activationmessage
720 * @param string $type type of message
721 * @param string $template_name name of template to use
724 public function parse_activationmessage($type, $template_name = '')
726 global $CONF, $manager;
730 if ( !empty($template_name))
732 $template =& $manager->getTemplate($template_name);
735 $key = postVar('ackey');
738 Admin::error(_ERROR_ACTIVATE);
741 $info = MEMBER::getActivationInfo($key);
744 Admin::error(_ERROR_ACTIVATE);
747 $mem =& $manager->getMember($info->vmember);
750 Admin::error(_ERROR_ACTIVATE);
752 switch ( $info->vtype )
755 if ( array_key_exists('ACTIVATE_FORGOT_TITLE', $template) && !empty($template['ACTIVATE_FORGOT_TITLE']) )
757 $title = $template['ACTIVATE_FORGOT_TITLE'];
761 $title = _ACTIVATE_FORGOT_TITLE;
763 if ( array_key_exists('ACTIVATE_FORGOT_TEXT', $template) && !empty($template['ACTIVATE_FORGOT_TEXT']) )
765 $text = $template['ACTIVATE_FORGOT_TEXT'];
769 $text = _ACTIVATE_FORGOT_TEXT;
773 if ( array_key_exists('ACTIVATE_REGISTER_TITLE', $template) && !empty($template['ACTIVATE_REGISTER_TITLE']) )
775 $title = $template['ACTIVATE_REGISTER_TITLE'];
779 $title = _ACTIVATE_REGISTER_TITLE;
781 if ( array_key_exists('ACTIVATE_REGISTER_TEXT', $template) && !empty($template['ACTIVATE_REGISTER_TEXT']) )
783 $text = $template['ACTIVATE_REGISTER_TEXT'];
787 $text = _ACTIVATE_REGISTER_TEXT;
790 case 'addresschange':
791 if ( array_key_exists('ACTIVATE_CHANGE_TITLE', $template) && !empty($template['ACTIVATE_CHANGE_TITLE']) )
793 $title = $template['ACTIVATE_CHANGE_TITLE'];
797 $title = _ACTIVATE_CHANGE_TITLE;
799 if (array_key_exists('ACTIVATE_CHANGE_TEXT', $template) && !empty($template['ACTIVATE_CHANGE_TEXT']))
801 $text = $template['ACTIVATE_CHANGE_TEXT'];
805 $text = _ACTIVATE_CHANGE_TEXT;
810 'memberName' => Entity::hsc($mem->getDisplayName()),
811 'realName' => Entity::hsc($mem->getRealName()),
816 echo Template::fill($title, $aVars);
819 echo Template::fill($text, $aVars);
822 echo Entity::hsc($key);
829 * AdminActions::parse_addtickettourl()
830 * Parse skinvar addtickettourl
832 * @param string $url URI for ticket
835 public function parse_addtickettourl($url)
838 $url = $manager->addTicketToUrl($url);
839 echo Entity::hsc($url);
844 * AdminActions::parse_adminbanlist()
845 * Parse skinvar adminbanlist
847 * @param string $template_name name of template to use
850 public function parse_adminbanlist($template_name = '')
852 $blogid = intRequestVar('blogid');
854 $query = "SELECT * FROM %s WHERE blogid=%d ORDER BY iprange;";
855 $query = sprintf($query, sql_table('ban'), (integer) $blogid);
857 $resource = DB::getResult($query);
858 if ( $resource->rowCount() > 0 )
860 $template['content'] = 'banlist';
861 $this->parser-parse(showlist($resource, 'table', $template, $template_name));
871 * AdminActions::parse_adminbatchaction()
872 * Parse skinvar adminbatchaction
877 public function parse_adminbatchaction()
879 echo Entity::hsc(requestVar('batchaction'));
884 * AdminActions::parse_adminbatchlist()
885 * Parse skinvar adminbatchlist
887 * @param string $template_name name of template to use
890 public function parse_adminbatchlist($template_name = '')
893 $templates = array();
895 if ( !empty($template_name) )
897 $templates =& $manager->getTemplate($template_name);
900 if ( !array_key_exists('ADMIN_BATCHLIST', $templates) || empty($templates['ADMIN_BATCHLIST']) )
902 $template = '<li><%text(_BATCH_EXECUTING)%> '
903 . '<b><%adminbatchaction%></b> '
904 . '<%batchlisttype%> '
905 . '<b><%batchid%></b>... '
906 . '<b><%batchlistmsg%></b>'
911 $template = $templates['ADMIN_BATCHLIST'];
914 $selected = requestIntArray('batch');
915 $action = requestVar('batchaction');
917 switch ( $this->skintype )
920 $batchlisttype = _BATCH_ONITEM;
921 $deleteaction = 'deleteOneItem';
922 $moveaction = 'moveOneItem';
923 $destid = intRequestVar('destcatid');
926 $batchlisttype = _BATCH_ONCOMMENT;
927 $deleteaction = 'deleteOneComment';
930 $batchlisttype = _BATCH_ONMEMBER;
931 $deleteaction = 'deleteOneMember';
932 $setadminsql = sql_table('member') . ' SET madmin = 1 WHERE mnumber = ';
933 $unsetchksql = 'SELECT * FROM ' . sql_table('member') . ' WHERE madmin = 1 AND mcanlogin = 1';
934 $unsetupsql = sql_table('member') . ' SET madmin = 0 WHERE mnumber = ';
935 $unseterrmsg = _ERROR_ATLEASTONEADMIN;
938 $blogid = intRequestVar('blogid');
939 $batchlisttype = _BATCH_ONTEAM;
940 $deleteaction = 'deleteOneTeamMember';
941 $setadminsql = sql_table('team') . ' SET tadmin = 1 WHERE tblog = ' . $blogid . ' AND tmember = ';
942 $unsetchksql = 'SELECT * FROM ' . sql_table('team') . ' WHERE tadmin = 1 AND tblog = ' . $blogid;
943 $unseterrmsg = _ERROR_ATLEASTONEBLOGADMIN;
944 $unsetupsql = sql_table('team') . ' SET tadmin = 0 WHERE tblog = ' . $blogid . ' AND tmember = ';
946 case 'batchcategory':
947 $batchlisttype = _BATCH_ONCATEGORY;
948 $deleteaction = 'deleteOneCategory';
949 $moveaction = 'moveOneCategory';
950 $destid = intRequestVar('destblogid');
954 // walk over all selectedids and perform action
955 foreach ( $selected as $selectedid )
958 $selectedid = intval($selectedid);
962 if ( $this->skintype != 'batchteam' )
964 $error = call_user_func_array(array('Admin', $deleteaction), array($selectedid));
968 $error = Admin::deleteOneTeamMember($blogid, $selectedid);
972 $error = call_user_func_array(array('Admin', $moveaction), array($selectedid, $destid));
976 DB::execute("UPDATE {$setadminsql} {$selectedid};");
980 // there should always remain at least one super-admin
981 $r = DB::getResult($unsetchksql);
982 if ( $r->rowCount() < 2 )
984 $error = $unseterrmsg;
988 DB::execute("UPDATE {$unsetupsql} {$selectedid};");
992 $error = _BATCH_UNKNOWN . Entity::hsc($action);
996 'batchid' => $selectedid,
997 'batchlisttype' => Entity::hsc($batchlisttype),
998 'adminbatchaction' => Entity::hsc($action),
999 'batchlistmsg' => $error ? $error : _BATCH_SUCCESS,
1002 $this->parser->parse(Template::fill($template, $data));
1009 * AdminActions::parse_adminbloglink()
1010 * Parse skinvar adminbloglink
1012 * @param string $template_name name of template to use
1015 public function parse_adminbloglink($template_name = '')
1018 $blogid = intRequestVar('blogid');
1019 $blog =& $manager->getBlog($blogid);
1020 $templates = array();
1022 if ( !empty($template_name) )
1024 $templates =& $manager->getTemplate($template_name);
1027 if ( !array_key_exists('ADMIN_BLOGLINK', $templates) || empty($templates['ADMIN_BLOGLINK']) )
1029 $template = '<a href="<%url%>" title="<%adminbloglinktitle%>"><%blogname%></a>';
1033 $template = $templates['ADMIN_BLOGLINK'];
1037 'url' => Entity::hsc($blog->getURL()),
1038 'adminbloglinktitle' => _BLOGLIST_TT_VISIT,
1039 'blogname' => Entity::hsc($blog->getName())
1042 echo Template::fill($template, $data);
1047 * AdminActions::parse_adminerrormesg()
1048 * Parse skinvar adminerrormesg
1053 public function parse_adminerrormesg()
1058 if ( requestVar('errormessage') )
1060 $message = requestVar('errormessage');
1062 elseif ( cookieVar($CONF['CookiePrefix'] . 'errormessage') )
1064 $message = cookieVar($CONF['CookiePrefix'] . 'errormessage');
1066 elseif ( Admin::sessionVar($CONF['CookiePrefix'] . 'errormessage') )
1068 $message = Admin::sessionVar($CONF['CookiePrefix'] . 'errormessage');
1070 echo Entity::hsc($message);
1075 * AdminActions::parse_allowedskinactions()
1076 * Parse skinvar allowedskinactions
1081 public function parse_allowedskinactions()
1085 $type = strtolower(trim(requestVar('type')));
1086 $skinid = intRequestVar('skinid');
1088 if ( !preg_match('#^admin#', $this->skintype) )
1090 $skin =& $manager->getSkin($skinid);
1095 $skin =& $manager->getSkin($skinid, 'AdminActions');
1096 $tag = 'adminskinvar';
1099 $actions = $skin->getAllowedActionsForType($type);
1102 while ( $current = array_shift($actions) )
1104 echo helplink("{$tag}-{$current}") . "$current</a>\n";
1106 if ( count($actions) != 0 )
1115 * AdminActions::parse_banlistdeletedlist()
1116 * Parse skinvar banlistdeletedlist
1118 * @param string $template_name name of template to use
1121 public function parse_banlistdeletedlist($template_name = '')
1125 $templates = array();
1126 if ( $template_name )
1128 $templates =& $manager->getTemplate($template_name);
1131 if ( !array_key_exists('BANLIST_DELETED_LIST', $templates) || empty($templates['BANLIST_DELETED_LIST']) )
1133 $template = "<li><%blogname%></li>\n";
1137 $template = $templates['BANLIST_DELETED_LIST'];
1140 $deleted = requestArray('delblogs');
1141 foreach ( $deleted as $delblog )
1143 $blog =& $manager->getBlog($delblog);
1145 'blogname' => Entity::hsc($blog->getName())
1147 echo Template::fill($template, $data);
1154 * AdminActions::parse_batchdeletelist()
1155 * Parse skinvar batchdeletelist
1160 public function parse_batchdeletelist()
1162 $selected = requestIntArray('batch');
1165 foreach ( $selected as $select )
1167 echo '<input type="hidden" name="batch[' . ($index++) . ']" value="' . intval($select) . "\" />\n";
1169 // add hidden vars for team & comment
1170 if ( requestVar('action') == 'batchteam' )
1172 echo '<input type="hidden" name="blogid" value="' . intRequestVar('blogid') . "\" />\n";
1174 if ( requestVar('action') == 'batchcomment' )
1176 echo '<input type="hidden" name="itemid" value="' . intRequestVar('itemid') . "\" />\n";
1182 * AdminActions::parse_defadminskinselect()
1183 * Parse skinvar defadminskinselect
1185 * @param string $template_name name of template to use
1188 public function parse_defadminskinselect($template_name)
1190 global $CONF, $action;
1192 if ( $action == 'editmembersettings' )
1195 $default = ($member->adminskin > 0) ? $member->adminskin : $CONF['AdminSkin'];
1197 elseif ( $action == 'memberedit' )
1200 $mem = $manager->getMember(intRequestVar('memberid'));
1201 $default = ($mem->adminskin > 0) ? $mem->adminskin : $CONF['AdminSkin'];
1205 $default = $CONF['AdminSkin'];
1208 $query = "SELECT sdname as text, sdnumber as value FROM %s WHERE sdname LIKE 'admin/%%'";
1209 $query = sprintf($query, sql_table('skin_desc'));
1211 'name' => 'adminskin',
1212 'tabindex' => 10080,
1213 'selected' => $default
1215 $this->parser->parse(showlist($query, 'select', $template, $template_name));
1220 * AdminActions::parse_defbookmarkletselect()
1221 * Parse skinvar defbookmarkletselect
1223 * @param string $template_name name of template to use
1226 public function parse_defbookmarkletselect($template_name)
1228 global $CONF, $action;
1230 if ( $action == 'editmembersettings' )
1233 $default = ($member->bookmarklet > 0) ? $member->bookmarklet : $CONF['BookmarkletSkin'];
1235 elseif ( $action == 'memberedit' )
1238 $mem = $manager->getMember(intRequestVar('memberid'));
1239 $default = ($mem->bookmarklet > 0) ? $mem->bookmarklet : $CONF['BookmarkletSkin'];
1243 $default = $CONF['BookmarkletSkin'];
1246 $query = "SELECT sdname as text, sdnumber as value FROM %s WHERE sdname LIKE 'admin/%%'";
1247 $query = sprintf($query, sql_table('skin_desc'));
1250 'name' => 'bookmarklet',
1251 'tabindex' => 10085,
1252 'selected' => $default
1254 $this->parser->parse(showlist($query, 'select', $template, $template_name));
1259 * AdminActions::parse_batchdeletetype()
1260 * Parse skinvar batchdeletetype
1265 public function parse_batchdeletetype()
1267 echo Entity::hsc(requestVar('action'));
1272 * AdminActions::parse_batchmovebtn()
1273 * Parse skinvar batchmovebtn
1278 public function parse_batchmovebtn()
1280 $actionType = requestVar('action');
1281 switch ( $actionType )
1286 case 'batchcategory':
1294 * AdminActions::parse_batchmovelist()
1295 * Parse skinvar batchmovelist
1300 public function parse_batchmovelist()
1302 $selected = requestIntArray('batch');
1304 foreach ( $selected as $select )
1306 echo '<input type="hidden" name="batch[' . ($count) . ']" value="' . intval($select) . "\" />\n";
1313 * AdminActions::parse_batchmovetitle()
1314 * Parse skinvar batchmovetitle
1319 public function parse_batchmovetitle()
1321 $actionType = requestVar('action');
1322 switch ( $actionType )
1327 case 'batchcategory':
1328 echo _MOVECAT_TITLE;
1335 * AdminActions::parse_batchmovetype()
1336 * Parse skinvar batchmovetype
1341 public function parse_batchmovetype()
1343 echo Entity::hsc(requestVar('action'));
1348 * AdminActions::parse_blogcatlist()
1349 * Parse skinvar blogcatlist
1354 public function parse_blogcatlist($template_name = '')
1357 $blogid = intRequestVar('blogid');
1358 $query = "SELECT * FROM %s WHERE cblog = %d ORDER BY cname;";
1359 $query = sprintf($query, sql_table('category'), (integer) $blogid);
1361 $resource = DB::getResult($query);
1362 if ( $resource->rowCount() > 0 )
1364 $template['content'] = 'categorylist';
1365 $template['tabindex'] = 200;
1366 $this->parser->parse(listplug_batchlist('category', $resource, 'table', $template));
1370 /* TODO: nothing to be shown */
1372 $resource->closeCursor();
1378 * AdminActions::parse_blogid()
1379 * Parse skinvar blogid
1384 public function parse_blogid()
1386 echo intRequestVar('blogid');
1391 * AdminActions::parse_blognotifysetting()
1392 * Parse skinvar blognotifysetting
1397 public function parse_blognotifysetting($type)
1400 $blogid = intRequestVar('blogid');
1401 $blog =& $manager->getBlog($blogid);
1406 if ( !$blog->notifyOnComment() )
1412 if ( !$blog->notifyOnVote() )
1418 if ( !$blog->notifyOnNewItem() )
1424 echo ' checked="checked"';
1429 * AdminActions::parse_blogsetting()
1430 * Parse skinvar blogsetting
1432 * @param string $which name of weblog setting
1435 public function parse_blogsetting($which)
1437 echo $this->parse_getblogsetting($which);
1442 * AdminActions::parse_blogsettingyesno()
1443 * Parse skinvar blogsettingyesno
1445 * @param string $type type of weblog setting
1446 * @param string $template_name name of template to use
1449 public function parse_blogsettingyesno($type, $template_name = '')
1453 $blogid = intRequestVar('blogid');
1454 $blog =& $manager->getBlog($blogid);
1458 case 'convertbreaks':
1459 $checkedval = $blog->convertBreaks();
1462 case 'allowpastposting':
1463 $checkedval = $blog->allowPastPosting();
1467 $checkedval = $blog->commentsEnabled();
1471 $checkedval = $blog->isPublic();
1475 $checkedval = $blog->emailRequired();
1479 $checkedval = $blog->getSearchable();
1483 $this->parse_inputyesno($type, $checkedval, $tabindex, 1, 0, _YES, _NO, 0, $template_name);
1488 * AdminActions::parse_blogteamlist()
1489 * Parse skinvar blogteamlist
1491 * @param string $template_name name of template to use
1494 public function parse_blogteamlist($template_name = '')
1497 $blogid = intRequestVar('blogid');
1498 $query = "SELECT tblog, tmember, mname, mrealname, memail, tadmin "
1500 . "WHERE tmember=mnumber AND tblog= %d";
1501 $query = sprintf($query, sql_table('member'), sql_table('team'), (integer) $blogid);
1503 $resource = DB::getResult($query);
1504 if ( $resource->rowCount() > 0 )
1506 $template['content'] = 'teamlist';
1507 $template['tabindex'] = 10;
1509 $this->parser->parse(listplug_batchlist('team', $resource, 'table', $template));
1515 $resource->closeCursor();
1521 * AdminActions::parse_blogteammembers()
1522 * Parse skinvar blogteammembers
1527 public function parse_blogteammembers()
1529 $blogid = intRequestVar('blogid');
1530 $query = "SELECT mname, mrealname "
1532 . "WHERE mnumber=tmember AND tblog=%d;";
1533 $query = sprintf($query, sql_table('member'), sql_table('team'), (integer) $blogid);
1534 $res = DB::getResult($query);
1535 $memberNames = array();
1536 foreach ( $res as $row )
1538 $memberNames[] = Entity::hsc($row['mname']) . ' (' . Entity::hsc($row['mrealname']). ')';
1540 echo implode(',', $memberNames);
1544 * AdminActions::parse_blogtime()
1545 * Parse skinvar blogtime
1547 * @param string $type type of time
1548 * @param string $format format for time expression
1549 * @param integer $offset offset of time
1552 public function parse_blogtime($type, $format = '%H:%M', $offset = 0)
1556 if ( $type != 'blogtime' )
1558 /* return server time */
1559 $timestamp = time() + $offset;
1563 $bid = intRequestVar('blogid');
1564 $b =& $manager->getBlog($bid);
1565 $timestamp = $b->getCorrectTime() + $offset;
1568 echo i18n::formatted_datetime($format, $timestamp);
1573 * AdminActions::parse_bookmarkletadmin()
1574 * Parse skinvar bookmarkletadmin
1579 public function parse_bookmarkletadmin()
1583 $blogid = intRequestVar('blogid');
1585 echo Entity::hsc('javascript:' . getBookmarklet($blogid));
1590 * AdminActions::parse_categories()
1591 * Parse skinvar categories
1593 * create category dropdown box
1595 * @param string $type name of setting for category
1598 public function parse_categories($startidx = 0)
1602 if ( !array_key_exists('catid', Admin::$contents) || empty(Admin::$contents['catid']) )
1604 $catid = Admin::$blog->getDefaultCategory();
1608 $catid = Admin::$contents['catid'];
1611 $this->selectBlog('catid', 'category', $catid, $startidx, 1, Admin::$blog->getID());
1617 * AdminActions::parse_categorysetting()
1618 * Parse skinvar categorysetting
1620 * @param string $type type in category setting
1623 public function parse_categorysetting($type)
1625 $catid = intRequestVar('catid');
1626 if ( $type == 'id' )
1631 $blogid = intRequestVar('blogid');
1632 $query = "SELECT * FROM %s WHERE cblog = %d AND catid = %d;";
1633 $query = sprintf($query, sql_table('category'), (integer) $blogid, (integer) $catid);
1634 $row = DB::getRow($query);
1636 if ( $type != 'name' )
1638 echo Entity::hsc($row['cdesc']);
1642 echo Entity::hsc($row['cname']);
1649 * AdminActions::parse_codename()
1650 * Parse templatevar codename
1656 public function parse_checkedonval($value, $name)
1661 $itemid = intRequestVar('itemid');
1662 $item =& $manager->getItem($itemid, 1, 1);
1666 $blog =& $manager->getBlog($item['blogid']);
1668 if ( $blog->convertBreaks() && requestVar('action') == 'itemedit' )
1670 $item['body'] = removeBreaks($item['body']);
1671 $item['more'] = removeBreaks($item['more']);
1675 $contents = array();
1676 if ( requestVar('action') == 'itemedit' )
1680 if ( !isset($contents[$name]) )
1682 $contents[$name] = '';
1684 if ($contents[$name] == $value)
1686 echo 'checked="checked"';
1692 * AdminActions::parse_codename()
1693 * Parse templatevar codename
1698 * TODO: is this need???
1700 public function parse_codename()
1703 echo $nucleus['codename'];
1708 * AdminActions::parse_commentnavlist()
1709 * Parse skinvar commentnavlist
1714 public function parse_commentnavlist()
1716 global $CONF, $manager, $member;
1719 if ( postVar('start') )
1721 $start = intPostVar('start');
1728 // amount of items to show
1729 if ( postVar('amount') )
1731 $amount = intPostVar('amount');
1735 $amount = (integer) $CONF['DefaultListSize'];
1741 $query = 'SELECT cbody, cuser, cmail, cemail, mname, ctime, chost, cnumber, cip, citem '
1743 . 'LEFT OUTER JOIN %s ON mnumber=cmember '
1745 $query = sprintf($query, sql_table('comment'), sql_table('member'));
1747 if ( $this->skintype == 'itemcommentlist' )
1749 $itemid = intRequestVar('itemid');
1750 $query .= " citem={$itemid}";
1751 $template['canAddBan'] = $member->blogAdminRights(intRequestVar('blogid'));
1753 $nonComments = _NOCOMMENTS;
1755 elseif ( $this->skintype == 'browseowncomments' )
1758 $query .= ' cmember=' . $member->getID();
1759 $template['canAddBan'] = 0;
1761 $nonComments = _NOCOMMENTS_YOUR;
1763 elseif ( $this->skintype == 'blogcommentlist' )
1766 $query .= ' cblog=' . intRequestVar('blogid');
1767 $template['canAddBan'] = $member->blogAdminRights(intRequestVar('blogid'));
1768 $bid = intRequestVar('blogid');
1769 $nonComments = _NOCOMMENTS_BLOG;
1772 $search = postVar('search');
1773 if ( !empty($search) )
1775 $query .= ' and cbody LIKE ' . DB::quoteValue('%'.$search.'%');
1778 $query .= " ORDER BY ctime ASC LIMIT {$start},{$amount}";
1780 $resource = DB::getResult($query);
1781 if ( $resource->rowCount() > 0 )
1783 $template['action'] = $this->skintype;
1784 $template['start'] = $start;
1785 $template['amount'] = $amount;
1786 $template['minamount'] = 0;
1787 $template['maxamount'] = 1000;
1788 $template['blogid'] = $bid;
1789 $template['search'] = $search;
1790 $template['itemid'] = $itemid;
1792 $template['content'] = 'commentlist';
1794 $this->parser->parse(listplug_navlist('comment', $resource, 'table', $template));
1798 /* TODO: nothing to be shown */
1800 $resource->closeCursor();
1806 * AdminActions::parse_configsettingsedit()
1807 * Parse skinvar configsettingsedit
1809 * @param string $type type of global configuration
1812 public function parse_configsettingsedit($type)
1817 case 'DefaultListSize':
1818 if ( !array_key_exists('DefaultListSize', $CONF) )
1820 $query = "INSERT INTO %s VALUES (DefaultListSize, 10);";
1821 $query = sprintf($query, sql_table('config'));
1822 DB::execute($query);
1823 $CONF['DefaultListSize'] = 10;
1825 elseif ( intval($CONF['DefaultListSize']) < 1 )
1827 $CONF['DefaultListSize'] = 10;
1829 echo intval($CONF['DefaultListSize']);
1831 case 'SessionCookie':
1832 $value = $CONF['SessionCookie'];
1833 $txt1 = _SETTINGS_COOKIESESSION;
1834 $txt2 = _SETTINGS_COOKIEMONTH;
1835 $this->parse_inputyesno('SessionCookie', $value, 10190, 1, 0, $txt1, $txt2);
1838 $value = $CONF['URLMode'];
1839 $txt1 = _SETTINGS_URLMODE_NORMAL;
1840 $txt2 = _SETTINGS_URLMODE_PATHINFO;
1841 $this->parse_inputyesno('URLMode', $value, 10077, 'normal', 'pathinfo', $txt1, $txt2);
1844 if ( array_key_exists($type, $CONF) && is_string($CONF[$type]) )
1846 echo Entity::hsc($CONF[$type]);
1854 * AdminActions::parse_configsettingsyesno()
1855 * Parse skinvar configsettingsyesno
1857 * @param string $type type of global setting
1858 * @param integer $tabindex tabindex attribute of input element
1861 public function parse_configsettingsyesno($type, $tabindex)
1864 if ( array_key_exists($type, $CONF) )
1866 $this->parse_inputyesno($type, $CONF[$type], $tabindex);
1872 * AdminActions::parse_contents()
1873 * Parse skinvar contents
1875 * @param string $which part for item
1878 public function parse_contents($which)
1880 if ( !array_key_exists($which, Admin::$contents) )
1882 Admin::$contents[$which] = '';
1884 echo Entity::hsc(Admin::$contents[$which]);
1888 * AdminActions::parse_currenttime()
1889 * Parse skinvar currenttime
1891 * @param string $what
1894 public function parse_currenttime($what)
1896 $nu = getdate(Admin::$blog->getCorrectTime());
1901 * AdminActions::parse_customhelplink()
1902 * Parse skinvar customhelplink
1904 * @param string $topic name of topic
1905 * @param string $tplName name of template
1906 * @param string $url string as URI
1907 * @param string $iconURL string as URI for icon
1908 * @param string $alt alternative text for image element
1909 * @param string $title title for anchor element
1912 public function parse_customhelplink($topic, $tplName = '', $url = '', $iconURL = '', $alt = '', $title = '', $onclick = '')
1914 $this->customHelp($topic, $url, $iconURL);
1919 * AdminActions::parse_date()
1920 * Parse skinvar date
1922 public function parse_date($format = 'c')
1924 global $CONF, $manager;
1925 /* TODO: offset is based on i18n::get_current_locale()? */
1926 echo i18n::formatted_datetime($format, time());
1931 * AdminActions::parse_normalskinlist()
1932 * Parse skinvar defaultadminskintypes
1934 * @param string $template_name name of template
1937 public function parse_normalskinlist($template_name = '')
1939 global $CONF, $manager;
1941 if ( !preg_match('#^admin#', $this->skintype) )
1943 $skin =& $manager->getSkin($CONF['BaseSkin']);
1944 /* TODO: removeaction? */
1945 $template['editaction'] = 'skinedittype';
1949 $skin =& $manager->getSkin($CONF['AdminSkin'], 'AdminActions');
1950 $template['editaction'] = 'adminskinedittype';
1951 /* TODO: removeaction? */
1954 $temporary = $skin->getDefaultTypes();
1955 $normal_skintype = array();
1956 foreach ( $temporary as $type => $label )
1958 $normal_skintype[] = array(
1959 'skintype' => $type,
1960 'skintypename' => $label
1964 $template['tabindex'] = 10;
1965 $template['skinid'] = $skin->getID();
1966 $template['skinname'] = $skin->getName();
1967 $this->parser->parse(showlist($normal_skintype, 'list_normalskinlist', $template, $template_name));
1973 * AdminActions::parse_defblogselect()
1974 * Parse skinvar defblogselect
1976 * @param string $template_name name of template
1979 public function parse_defblogselect($template_name = '')
1983 $query = "SELECT bname as text, bnumber as value FROM %s;";
1984 $query = sprintf($query, sql_table('blog'));
1986 $template['name'] = 'DefaultBlog';
1987 $template['selected'] = $CONF['DefaultBlog'];
1988 $template['tabindex'] = 10;
1989 $this->parser->parse(showlist($query, 'select', $template, $template_name));
1995 * AdminActions::parse_defcatselect()
1996 * Parse skinvar defcatselect
1998 * @param string $template_name name of template
2001 public function parse_defcatselect($template_name = '')
2005 $blogid = intRequestVar('blogid');
2006 $blog =& $manager->getBlog($blogid);
2008 $query = "SELECT cname as text, catid as value FROM %s WHERE cblog=%d;";
2009 $query = sprintf($query, sql_table('category'), (integer) $blog->getID());
2011 $template['name'] = 'defcat';
2012 $template['selected'] = $blog->getDefaultCategory();
2013 $template['tabindex'] = 110;
2015 $this->parser->parse(showlist($query, 'select', $template, $template_name));
2021 * AdminActions::parse_defskinselect()
2022 * Parse skinvar defskinselect
2024 * @param string $type type of skin
2025 * @param string $template_name name of template
2028 public function parse_defskinselect($type = 'blog', $template_name = '')
2030 global $CONF, $manager, $member;
2032 if ( !preg_match('#^admin#', $this->skintype) )
2034 $blogid = intRequestVar('blogid');
2037 $template['selected'] = $CONF['BaseSkin'];
2041 $blog =& $manager->getBlog($blogid);
2042 $template['selected'] = $blog->getDefaultSkin();
2045 if ( $type != 'blog' )
2047 $template['name'] = 'BaseSkin';
2051 $template['name'] = 'defskin';
2054 $query = "SELECT sdname as text, sdnumber as value FROM %s WHERE sdname NOT LIKE 'admin/%%';";
2058 /* TODO: member object will have its own adminskin id */
2059 $template['selected'] = $CONF['AdminSkin'];
2060 $template['name'] = 'AdminSkin';
2061 $query = "SELECT sdname as text, sdnumber as value FROM %s WHERE sdname LIKE 'admin/%%';";
2064 $query = sprintf($query, sql_table('skin_desc'));
2065 $template['tabindex'] = 50;
2067 $this->parser->parse(showlist($query, 'select', $template, $template_name));
2073 * AdminActions::parse_deletecomment()
2074 * Parse skinvar deletecomment
2076 * @param string $type type of infomation for comment
2079 public function parse_deletecomment($type = 'id')
2081 $commentid = intRequestVar('commentid');
2082 $comment = COMMENT::getComment($commentid);
2087 echo intRequestVar('commentid');
2090 if ( array_key_exists('member', $comment) && !empty($comment['member']) )
2092 echo $comment['member'];
2096 echo $comment['user'];
2100 $body = strip_tags($comment['body']);
2101 echo Entity::hsc(shorten($body, 300, '...'));
2107 * AdminActions::parse_deleteitembody()
2108 * Parse skinvar deleteitembody
2113 public function parse_deleteitembody()
2117 $itemid = intRequestVar('itemid');
2118 $item =& $manager->getItem($itemid, 1, 1);
2120 $body = strip_tags($item['body']);
2122 echo Entity::hsc(shorten($body, 300, '...'));
2128 * AdminActions::parse_deleteitemid()
2129 * Parse skinvar deleteitemid
2134 public function parse_deleteitemid()
2136 echo (integer) intRequestVar('itemid');
2141 * AdminActions::parse_deleteitemtitle()
2142 * Parse skinvar deleteitemtitle
2147 public function parse_deleteitemtitle()
2151 $itemid = intRequestVar('itemid');
2152 $item =& $manager->getItem($itemid, 1, 1);
2154 echo Entity::hsc(strip_tags($item['title']));
2160 * AdminActions::parse_editcomment()
2161 * Parse skinvar editcomment
2163 * @param string $type type of comment setting
2166 public function parse_editcomment($type = 'id')
2170 $comment = Admin::$contents;
2175 echo intRequestVar('commentid');
2178 if ( !array_key_exists('member', $comment) || empty($comment['member']) )
2180 echo $comment['user'] . " (" . _EDITC_NONMEMBER . ")";
2184 echo $comment['member'] . " (" . _EDITC_MEMBER . ")";
2188 echo date("Y-m-d @ H:i", $comment['timestamp']);
2191 $comment['body'] = str_replace('<br />', '', $comment['body']);
2192 $comment['body'] = preg_replace("#<a href=['\"]([^'\"]+)['\"]( rel=\"nofollow\")?>[^<]*</a>#", "\\1", $comment['body']);
2193 echo $comment['body'];
2196 echo $comment['userid'];
2199 echo $comment['userid'];
2202 if ( array_key_exists($type, $comment) && !empty($comment[$type]) )
2204 echo $comment[$type];
2212 * AdminActions::parse_editdesturl()
2213 * Parse skinvar editdesturl
2215 public function parse_editdesturl()
2217 if ( requestVar('desturl') )
2219 echo Entity::hsc(requestVar('desturl'));
2225 * AdminActions::parse_editmemberlist()
2226 * Parse skinvar editmemberlist
2228 * @param string $template_name name of template
2231 public function parse_editmemberlist($template_name = '')
2234 // show list of members with actions
2235 $query = 'SELECT * FROM %s;';
2236 $query = sprintf($query, sql_table('member'));
2238 $resource = DB::getResult($query);
2239 if ( $resource->rowCount() > 0 )
2241 $template['content'] = 'memberlist';
2242 $template['tabindex'] = 10;
2244 $this->parser->parse(listplug_batchlist('member', $resource, 'table', $template));
2250 $resource->closeCursor();
2256 * AdminActions::parse_editmember()
2257 * Parse skinvar editmember
2259 * @param string $type type of information for member
2260 * @return string $tempateName name of template to use
2263 public function parse_editmember($type = 'id', $template_name = '')
2265 global $CONF, $manager, $member;
2267 $memberid = intRequestVar('memberid');
2268 $mem =& $manager->getMember($memberid);
2273 echo intRequestVar('memberid');
2276 if ( $this->skintype == 'teamdelete' || $this->skintype == 'memberdelete' )
2278 echo Entity::hsc($mem->getDisplayName());
2282 $dispName = Entity::hsc($mem->getDisplayName());
2283 if ( $CONF['AllowLoginEdit'] || $member->isAdmin() )
2285 echo '<input name="name" tabindex="10" maxlength="32" size="32" value="' . $dispName . "\" />\n";
2294 echo Entity::hsc($mem->getRealName());
2297 echo Entity::hsc($mem->getEmail());
2300 echo Entity::hsc($mem->getURL());
2303 $this->parse_inputyesno('admin', $mem->isAdmin(), 60, 1, 0, _YES, _NO, 0, $template_name);
2306 $this->parse_inputyesno('canlogin', $mem->canLogin(), 70, 1, 0, _YES, _NO, $mem->isAdmin(), $template_name);
2309 echo Entity::hsc($mem->getNotes());
2312 $this->parse_inputyesno('autosave', $mem->getAutosave(), 87, 1, 0, _YES, _NO, 0, $template_name);
2321 * AdminActions::parse_editpluginfo()
2322 * Parse skinvar editpluginfo
2324 * @param string $type type of plugin info
2327 public function parse_editpluginfo($type)
2331 $pid = intRequestVar('plugid');
2338 echo Entity::hsc($manager->getPluginNameFromPid($pid));
2345 * AdminActions::parse_editplugoptionslist()
2346 * Parse skinvar editplugoptionslist
2348 * @param string $template_name name of template
2351 public function parse_editplugoptionslist($template_name = '')
2355 $pid = intRequestVar('plugid');
2356 $aOptions = array();
2359 $query = "SELECT * FROM %s WHERE ocontext='global' AND opid=%d ORDER BY oid ASC;";
2360 $query = sprintf($query, sql_table('plugin_option_desc'), (integer) $pid);
2361 $resource = DB::getResult($query);
2363 foreach ( $resource as $row )
2365 $aOIDs[] = $row['oid'];
2366 $aOptions[$row['oid']] = array(
2367 'oid' => $row['oid'],
2368 'value' => $row['odef'],
2369 'name' => $row['oname'],
2370 'description' => $row['odesc'],
2371 'type' => $row['otype'],
2372 'typeinfo' => $row['oextra'],
2377 // fill out actual values
2378 if ( count($aOIDs) > 0 )
2380 $query = 'SELECT oid, ovalue FROM %s WHERE oid in (%s)';
2381 $query = sprintf($query, sql_table('plugin_option'), implode(',', $aOIDs));
2383 $result = DB::getResult($query);
2384 foreach ( $result as $row )
2386 $aOptions[$row['oid']]['value'] = $row['ovalue'];
2392 'context' => 'global',
2394 'options' => &$aOptions
2396 $manager->notify('PrePluginOptionsEdit', $data);
2398 if ( sizeof($aOptions) > 0 )
2400 $template['content'] = 'plugoptionlist';
2401 $this->parser->parse(showlist($aOptions, 'table', $template, $template_name));
2405 echo '<p>' . _ERROR_NOPLUGOPTIONS . "</p>\n";
2411 * AdminActions::parse_editskin()
2412 * Parse skinvar editskin
2414 * @param string $type type of skin
2417 public function parse_editskin($type = 'id')
2421 $skinid = intRequestVar('skinid');
2423 if ( !preg_match('#^admin#', $this->skintype) )
2425 $skin =& $manager->getSKIN($skinid);
2429 $skin =& $manager->getSKIN($skinid, 'AdminActions');
2435 echo intRequestVar('skinid');
2438 echo Entity::hsc($skin->getName());
2441 echo Entity::hsc($skin->getDescription());
2444 echo Entity::hsc($skin->getContentType());
2447 echo Entity::hsc($skin->getIncludePrefix());
2450 $this->parse_inputyesno('inc_mode', $skin->getIncludeMode(), 120, 'skindir', 'normal', _PARSER_INCMODE_SKINDIR, _PARSER_INCMODE_NORMAL);
2458 * AdminActions::parse_editskintype()
2459 * Parse skinvar editskintype
2461 * @param string $type name of type for skin type
2464 public function parse_editskintype($stype = 'id')
2468 static $skin = NULL;
2469 static $types = array();
2471 if ( $skin == NULL )
2473 $skinid = intRequestVar('skinid');
2475 if ( !preg_match('#^admin#', $this->skintype) )
2477 $skin =& $manager->getSkin($skinid);
2481 $skin =& $manager->getSkin($skinid, 'AdminActions');
2484 $types = $skin->getDefaultTypes();
2487 $type = strtolower(trim(requestVar('type')));
2492 echo $skin->getID();
2495 echo Entity::hsc($skin->getName());
2498 echo Entity::hsc($skin->getDescription());
2501 echo Entity::hsc($skin->getContentType());
2504 echo Entity::hsc($skin->getContentFromDB($type));
2507 if ( !array_key_exists($type, $types) )
2509 $skinType = ucfirst($type);
2513 $skinType = $types[$type];
2515 echo Entity::hsc($skinType);
2518 echo Entity::hsc($type);
2521 echo Entity::hsc($skin->getIncludePrefix());
2524 if ( !$skin->getIncludeMode() != 'skindir' )
2526 $incMode = _PARSER_INCMODE_NORMAL;
2530 $incMode = _PARSER_INCMODE_SKINDIR;
2532 echo Entity::hsc($incMode);
2541 * AdminActions::parse_adminurl()
2542 * Parse skinvar adminurl
2543 * (shortcut for admin url)
2548 public function parse_adminurl()
2550 $this->parse_sitevar('adminurl');
2555 * AdminActions::parse_edittemplateinfo()
2556 * Parse skinvar edittemplateinfo
2558 * @param string $format format to output
2559 * @param string $typedesc type of template
2560 * @param string $typename type name of template
2561 * @param string $help help text
2562 * @param string $tabindex index value for tabindex attribute of input element
2563 * @param string $big textarea size
2564 * @param string $tplt name of template to be filled
2567 public function parse_edittemplateinfo($format, $typedesc = '', $typename = '', $help = '', $tabindex = 0, $big = 0, $template_name = '')
2571 static $name = NULL;
2572 static $desc = NULL;
2576 $id = intRequestVar('templateid');
2579 if ( $name == NULL )
2581 $name = Template::getNameFromId($id);
2584 if ( $desc == NULL )
2586 $desc = Template::getDesc($id);
2589 $template =& $manager->getTemplate($name);
2597 echo Entity::hsc($name);
2600 echo Entity::hsc($desc);
2602 case 'extratemplate':
2604 $pluginfields = array();
2605 if ( !preg_match('#^admin/#', $this->skintype) )
2607 $manager->notify('TemplateExtraFields', array('fields' => &$pluginfields));
2611 $manager->notify('AdminTemplateExtraFields', array('fields' => &$pluginfields));
2614 foreach ( $pluginfields as $ptkey => $ptvalue )
2619 $tmplt =& $manager->getTemplate($desc);
2622 /* extra plugin field */
2623 if ( !array_key_exists('TEMPLATE_EDIT_EXPLUGNAME', $tmplt) || empty($tmplt['TEMPLATE_EDIT_EXPLUGNAME']) )
2627 . "<th colspan=\"2\"><%explugtplname%></th>\n";
2631 $base = $tmplt['TEMPLATE_EDIT_EXPLUGNAME'];
2634 'explugtplname' => Entity::hsc($ptkey)
2636 echo Template::fill($base, $data);
2638 foreach ( $ptvalue as $ptname => $ptdesc )
2640 if ( !array_key_exists($ptname, $template) )
2646 $content = $template[$ptname];
2648 $this->parser->parse(listplug_templateEditRow($content, $ptdesc, $ptname, $help, $tabidx++, $big, $template_name));
2654 $typedesc = defined($typedesc) ? constant($typedesc) : $typedesc;
2655 $typename = defined($typename) ? constant($typename) : $typename;
2657 if ( !array_key_exists($typename, $template) )
2663 $content = $template[$typename];
2665 $this->parser->parse(listplug_templateEditRow($content, $typedesc, $typename, $help, $tabindex, $big, $template_name));
2673 * AdminActions::parse_eventformextra()
2674 * Parse skinvar eventformextra
2676 * @param string $type name of type for event form extra
2679 public function parse_eventformextra($type = 'activation')
2688 $key = requestVar('ackey');
2691 Admin::error(_ERROR_ACTIVATE);
2693 $info = MEMBER::getActivationInfo($key);
2696 Admin::error(_ERROR_ACTIVATE);
2698 $mem =& $manager->getMember($info->vmember);
2701 Admin::error(_ERROR_ACTIVATE);
2704 'type' => 'activation',
2708 case 'membermailform-notloggedin':
2709 $data = array('type' => 'membermailform-notloggedin',);
2712 $manager->notify('FormExtra', $data);
2717 * AdminActions::parse_extrahead()
2718 * Parse skinvar extrahead
2720 public function parse_extrahead()
2724 $extrahead = Admin::getAdminextrahead();
2727 'extrahead' => &$extrahead,
2728 'action' => Admin::getAdminAction()
2731 $manager->notify('AdminPrePageHead', $data);
2737 * AdminActions::parse_member()
2738 * Parse skinvar member
2739 * (includes a member info thingie)
2741 * @param string $what which memberdata is needed
2744 public function parse_member($what)
2746 global $memberinfo, $member, $CONF;
2748 // 1. only allow the member-details-page specific variables on member pages
2749 if ( $this->skintype == 'member' )
2754 echo Entity::hsc($memberinfo->getDisplayName());
2757 echo Entity::hsc($memberinfo->getRealName());
2760 echo Entity::hsc($memberinfo->getNotes());
2763 echo Entity::hsc($memberinfo->getURL());
2766 echo Entity::hsc($memberinfo->getEmail());
2769 echo Entity::hsc($memberinfo->getID());
2774 // 2. the next bunch of options is available everywhere, as long as the user is logged in
2775 if ( $member->isLoggedIn() )
2780 echo $member->getDisplayName();
2782 case 'yourrealname':
2783 echo $member->getRealName();
2786 echo $member->getNotes();
2789 echo $member->getURL();
2792 echo $member->getEmail();
2795 echo $member->getID();
2797 case 'yourprofileurl':
2798 if ( $CONF['URLMode'] == 'pathinfo' )
2800 echo Link::create_member_link($member->getID());
2804 echo $CONF['IndexURL'] . Link::create_member_link($member->getID());
2813 * AdminActions::parse_version()
2814 * Parse skinvar version
2815 * (include nucleus versionnumber)
2820 public function parse_version()
2823 echo 'Nucleus CMS ' . $nucleus['version'];
2828 * AdminActions::parse_sitevar()
2829 * Parse skinvar sitevar
2830 * (include a sitevar)
2832 * @param string $which
2835 public function parse_sitevar($which)
2841 echo $CONF['IndexURL'];
2844 echo $CONF['SiteName'];
2847 echo $CONF['AdminEmail'];
2850 echo $CONF['AdminURL'];
2857 * AdminActions::parse_actionurl()
2863 public function parse_actionurl()
2866 echo Entity::hsc($CONF['ActionURL']);
2871 * AdminActions::parse_getblogsetting()
2872 * Parse skinvar getblogsetting
2874 public function parse_getblogsetting($which)
2876 global $blog, $manager;
2882 elseif ( $bid = intRequestVar('blogid') )
2884 $b =& $manager->getBlog($bid);
2894 return Entity::hsc($b->getID());
2897 return Entity::hsc($b->getURL());
2900 return Entity::hsc($b->getName());
2903 return Entity::hsc($b->getDescription());
2906 return Entity::hsc($b->getShortName());
2908 case 'notifyaddress':
2909 return Entity::hsc($b->getNotifyAddress());
2912 return Entity::hsc($b->getMaxComments());
2915 return Entity::hsc($b->getUpdateFile());
2918 return Entity::hsc($b->getTimeOffset());
2925 * AdminActions::parse_geteditpluginfo()
2926 * Parse skinvar geteditpluginfo
2928 * @param string $type name of setting for edit plugin info
2931 public function parse_geteditpluginfo($type)
2934 $pid = intRequestVar('plugid');
2941 return Entity::hsc($manager->getPluginNameFromPid($pid));
2948 * AdminActions::parse_getmember()
2949 * Parse skinvar getmember
2950 * (includes a member info thingie)
2952 * @param string $what name of setting for member
2955 public function parse_getmember($what)
2957 global $memberinfo, $member;
2958 // 1. only allow the member-details-page specific variables on member pages
2959 if ( $this->skintype == 'member' )
2964 return Entity::hsc($memberinfo->getDisplayName());
2967 return Entity::hsc($memberinfo->getRealName());
2970 return Entity::hsc($memberinfo->getNotes());
2973 return Entity::hsc($memberinfo->getURL());
2976 return Entity::hsc($memberinfo->getEmail());
2979 return Entity::hsc($memberinfo->getID());
2983 // 2. the next bunch of options is available everywhere, as long as the user is logged in
2984 if ( $member->isLoggedIn() )
2989 return $member->getDisplayName();
2991 case 'yourrealname':
2992 return $member->getRealName();
2995 return $member->getNotes();
2998 return $member->getURL();
3001 return $member->getEmail();
3004 return $member->getID();
3012 * AdminActions::parse_headmessage()
3013 * Parse skinvar headmessage
3018 public function parse_headmessage()
3020 if ( !empty(Admin::$headMess) )
3022 echo '<p>' . _MESSAGE . ': ' . Entity::hsc(Admin::$headMess) . "</p>\n";
3028 * AdminActions::parse_helplink()
3029 * Parse skinvar helplink
3031 * @param string $topic name of topic for help
3034 public function parse_helplink($topic = '')
3036 if ( !empty($topic) )
3044 * AdminActions::parse_helpplugname()
3045 * Parse skinvar helpplugname
3050 public function parse_helpplugname()
3052 $plugid = intGetVar('plugid');
3053 Entity::hsc($manager->getPluginNameFromPid($plugid));
3058 * AdminActions::parse_ilistaddnew()
3059 * Parse skinvar ilistaddnew
3064 public function parse_ilistaddnew()
3066 $blogid = intRequestVar('blogid');
3067 if ( intPostVar('start') == 0 )
3069 echo '<p><a href="index.php?action=createitem&blogid=' . $blogid . '">' . _ITEMLIST_ADDNEW . "</a></p>\n";
3075 * AdminActions::parse_importskininfo()
3076 * Parse skinvar importskininfo
3078 * @param string $type name of information for imported skin
3081 public function parse_importskininfo($type)
3086 echo Entity::hsc(requestVar('skininfo'));
3089 $dataArr = requestArray('skinnames');
3090 echo implode(' <em>' . _AND . '</em> ', $dataArr);
3093 $dataArr = requestArray('tpltnames');
3094 echo implode(' <em>' . _AND . '</em> ', $dataArr);
3097 $dataArr = requestArray('skinclashes');
3098 echo implode(' <em>' . _AND . '</em> ', $dataArr);
3101 $dataArr = requestArray('tpltclashes');
3102 echo implode(' <em>' . _AND . '</em> ', $dataArr);
3105 echo Entity::hsc(requestVar('skinfile'));
3108 echo Entity::hsc(requestVar('mode'));
3115 * AdminActions::parse_init()
3116 * some init stuff for all forms
3121 public function parse_init()
3126 if ( requestVar('action') == 'itemedit' )
3128 $authorid = Admin::$contents['authorid'];
3131 Admin::$blog->insertJavaScriptInfo($authorid);
3136 * AdminActions::parse_inputyesno()
3137 * Parse skinvar inputyesno
3139 * @param string $name
3140 * @param string $checkedval
3141 * @param string $tabindex
3142 * @param string $value1
3143 * @param string $value2
3144 * @param string $yesval
3145 * @param string $noval
3146 * @param string $isAdmin
3147 * @param string $template_name
3150 public function parse_inputyesno($name, $checkedval, $tabindex = 0, $value1 = 1, $value2 = 0, $yesval = _YES, $noval = _NO, $isAdmin = 0, $template_name = '')
3152 $this->parser->parse(listplug_input_yesno($name, $checkedval, $tabindex, $value1, $value2, $yesval, $noval, $isAdmin, $template_name));
3157 * AdminActions::parse_insertpluginfo()
3158 * Parse templatevar insertpluginfo
3160 public function parse_insertpluginfo($type)
3162 $option = Admin::getAdminaOption();
3166 return $option['pid'];
3169 return Entity::hsc($option['pfile']);
3176 * AdminActions::parse_insplugoptcontent()
3177 * Parse skinvar insplugoptcontent
3182 public function parse_insplugoptcontent()
3184 $option = Admin::getAdminaOption();
3186 $meta = NucleusPlugin::getOptionMeta($option['typeinfo']);
3187 if ( array_key_exists('access', $meta) && $meta['access'] != 'hidden' )
3190 listplug_plugOptionRow($option);
3197 * AdminActions::parse_iprangeinput()
3198 * Parse skinvar iprangeinput
3203 public function parse_iprangeinput()
3205 if ( requestVar('ip') )
3207 $iprangeVal = Entity::hsc(requestVar('ip'));
3208 echo "<input name=\"iprange\" type=\"radio\" value=\"{$iprangeVal}\" checked=\"checked\" id=\"ip_fixed\" />\n";
3209 echo "<label for=\"ip_fixed\">{$iprangeVal}</label><br />\n";
3210 echo '<input name="iprange" type="radio" value="custom" id="ip_custom" />' . "\n";
3211 echo '<label for="ip_custom">' . _BAN_IP_CUSTOM . '</label>' . "\n";
3212 echo "<input name=\"customiprange\" value=\"{$iprangeVal}\" maxlength=\"15\" size=\"15\" />\n";
3216 echo '<input name="iprange" value="custom" type="hidden" />' . "\n";
3217 echo '<input name="customiprange" value="" maxlength="15" size="15" />' . "\n";
3223 * AdminActions::parse_itemnavlist()
3224 * Parse skinvar itemnavlist
3229 public function parse_itemnavlist($template_name)
3231 global $CONF, $manager, $member;
3233 $query = "SELECT bshortname, cname, mname, ititle, ibody, inumber, idraft, itime"
3234 . " FROM %s, %s, %s, %s"
3235 . " WHERE iblog=bnumber AND iauthor=mnumber AND icat=catid";
3237 $query = sprintf($query, sql_table('item'), sql_table('blog'), sql_table('member'), sql_table('category'));
3239 if ( $this->skintype == 'itemlist' )
3242 if ( array_key_exists('blogid', $_REQUEST) )
3244 $blogid = intRequestVar('blogid');
3246 else if ( array_key_exists('itemid', $_REQUEST) )
3248 $itemid = intRequestVar('itemid');
3249 $item = &$manager->getItem($itemid, 1, 1);
3250 $blogid = (integer) $item['blogid'];
3252 $blog =& $manager->getBlog($blogid);
3254 $query .= " AND iblog={$blogid}";
3255 $template['now'] = $blog->getCorrectTime(time());
3257 // non-blog-admins can only edit/delete their own items
3258 if ( !$member->blogAdminRights($blogid) )
3260 $query .= ' AND iauthor = ' . $member->getID();
3263 elseif ( $this->skintype == 'browseownitems' )
3265 $query .= ' AND iauthor = ' . $member->getID();
3267 $template['now'] = time();
3270 // search through items
3271 $search = postVar('search');
3273 if ( !empty($search) )
3275 $query .= ' AND ((ititle LIKE ' . DB::quoteValue('%'.$search.'%') . ') '
3276 . ' OR (ibody LIKE ' . DB::quoteValue('%'.$search.'%') . ') '
3277 . ' OR (imore LIKE ' . DB::quoteValue('%'.$search.'%') . '))';
3280 if ( postVar('start') )
3282 $start = intPostVar('start');
3289 // amount of items to show
3290 if ( postVar('amount') )
3292 $amount = intPostVar('amount');
3296 $amount = (integer) $CONF['DefaultListSize'];
3303 $query .= ' ORDER BY itime DESC'
3304 . " LIMIT {$start},{$amount}";
3306 $resource = DB::getResult($query);
3307 if ( $resource->rowCount() > 0 )
3309 $template['action'] = $this->skintype;
3310 $template['start'] = $start;
3311 $template['amount'] = $amount;
3312 $template['minamount'] = 0;
3313 $template['maxamount'] = 1000;
3314 $template['blogid'] = $blogid;
3315 $template['search'] = $search;
3316 $template['itemid'] = 0;
3318 $template['content'] = 'itemlist';
3320 $this->parser->parse(listplug_navlist('item', $query, 'table', $template));
3324 /* TODO: nothing to be shown */
3326 $resource->closeCursor();
3332 * AdminActions::parse_itemtime()
3333 * date change on edit item
3335 * @param string $key key of PHP's getDate()
3338 public function parse_itemtime($key)
3343 $itemid = intRequestVar('itemid');
3344 $item =& $manager->getItem($itemid, 1, 1);
3348 $blog =& $manager->getBlog($item['blogid']);
3350 if ( $blog->convertBreaks() && requestVar('action') == 'itemedit' )
3352 $item['body'] = removeBreaks($item['body']);
3353 $item['more'] = removeBreaks($item['more']);
3357 $contents = array();
3358 if ( requestVar('action') == 'itemedit' )
3362 elseif ( requestVar('action') == 'createitem' )
3365 'contents' => &$contents,
3366 'blog' => &$this->blog
3368 $manager->notify('PreAddItemForm', $data);
3370 $itemtime = getdate($contents['timestamp']);
3371 echo $itemtime[$key];
3376 * AdminActions::parse_jstoolbaroptions()
3377 * Parse skinvar jstoolbaroptions
3382 public function parse_jstoolbaroptions()
3386 _SETTINGS_JSTOOLBAR_NONE,
3387 _SETTINGS_JSTOOLBAR_SIMPLE,
3388 _SETTINGS_JSTOOLBAR_FULL
3392 foreach ( $options as $option )
3394 $text = "<option value=\"%d\"%s>%s</option>\n";
3395 $extra = ($CONF['DisableJsTools'] == $i) ? ' selected="selected"' : '';
3396 echo sprintf($text, $i, $extra, $option);
3402 * AdminActions::parse_localeselectoptions()
3403 * Parse skinvar localeselectoptions
3408 public function parse_localeselectoptions()
3412 $locales = i18n::get_available_locale_list();
3414 $memid = intRequestVar('memberid');
3417 $mem =& $manager->getMember($memid);
3418 if ( !$mem->getLocale() || !in_array($mem->getLocale(), $locales) )
3420 echo "<option value=\"\" selected=\"selected\">" . Entity::hsc(_MEMBERS_USESITELANG) . "</option>\n";
3424 echo "<option value=\"\">" . Entity::hsc(_MEMBERS_USESITELANG) . "</option>\n";
3429 if ( !i18n::get_current_locale() || !in_array(i18n::get_current_locale(), $locales) )
3431 echo "<option value=\"\" selected=\"selected\">en_Latn_US</option>\n";
3435 echo "<option value=\"\">en_Latn_US</option>\n";
3438 foreach ( $locales as $locale )
3440 if ( $locale == 'en_Latn_US' )
3446 if ( $locale == $mem->getLocale() )
3448 echo "<option value=\"{$locale}\" selected=\"selected\">{$locale}</option>\n";
3452 echo "<option value=\"{$locale}\">{$locale}</option>\n";
3457 if ( $locale == i18n::get_current_locale() )
3459 echo "<option value=\"{$locale}\" selected=\"selected\">{$locale}</option>\n";
3463 echo "<option value=\"{$locale}\">{$locale}</option>\n";
3471 * AdminActions::parse_listplugplugoptionrow()
3472 * Parse templatevar listplugplugoptionrow
3474 * @param string $template_name name of template
3477 public function parse_listplugplugoptionrow($template_name = '')
3479 echo listplug_plugOptionRow(Admin::getAdminaOption(), $template_name);
3484 * AdminActions::parse_mediadirwarning()
3485 * Parse skinvar mediadirwarning
3490 public function parse_mediadirwarning()
3493 if ( !is_dir($DIR_MEDIA) )
3495 echo "<br /><b>" . _WARNING_NOTADIR . "</b>\n";
3497 if ( !is_readable($DIR_MEDIA) )
3499 echo "<br /><b>" . _WARNING_NOTREADABLE . "</b>\n";
3501 if ( !is_writeable($DIR_MEDIA) )
3503 echo "<br /><b>" . _WARNING_NOTWRITABLE . "</b>\n";
3509 * AdminActions::parse_movedistselect()
3510 * Parse skinvar movedistselect
3512 public function parse_movedistselect()
3514 $actionType = requestVar('action');
3515 switch ( $actionType )
3518 $this->selectBlog('destcatid', 'category');
3520 case 'batchcategory':
3521 $this->selectBlog('destblogid');
3524 if ( $this->skintype == 'itemmove' )
3526 $query = "SELECT icat as result FROM %s WHERE inumber=%d;";
3527 $query = sprintf($query, sql_table('item'), intRequestVar('itemid'));
3528 $catid = DB::getValue(sprintf($query, intRequestVar('itemid')));
3529 $this->selectBlog('catid', 'category', $catid, 10, 1);
3537 * AdminActions::parse_moveitemid()
3538 * Parse skinvar moveitemid
3543 public function parse_moveitemid()
3545 echo intRequestVar('itemid');
3550 * AdminActions::parse_newestcompare()
3551 * Parse skinvar newestcompare
3556 public function parse_newestcompare()
3560 $newestVersion = getLatestVersion();
3561 $newestCompare = str_replace('/', '.', $newestVersion);
3562 $currentVersion = str_replace(array('/', 'v'), array('.', ''), $nucleus['version']);
3564 if ( $newestVersion && version_compare($newestCompare, $currentVersion, '>') )
3566 echo '<br /><a style="color:red" href="http://nucleuscms.org/upgrade.php" title="' . _ADMIN_SYSTEMOVERVIEW_LATESTVERSION_TITLE . '">';
3567 echo _ADMIN_SYSTEMOVERVIEW_LATESTVERSION_TEXT . $newestVersion . '</a>';
3573 * AdminActions::parse_newmemberselect()
3574 * Parse skinvar newmemberselect
3576 * @param string $template_name name of template to use
3579 public function parse_newmemberselect($template_name = '')
3581 $blogid = intRequestVar('blogid');
3583 $query = "SELECT tmember FROM %s WHERE tblog=%d;";
3584 $query = sprintf($query, sql_table('team'), (integer) $blogid);
3585 $res = DB::getResult($query);
3588 foreach ( $res as $row )
3590 $tmem[] = intval($row['tmember']);
3593 $query = "SELECT mname as text, mnumber as value FROM %s WHERE mnumber NOT IN (%s);";
3594 $query = sprintf($query, sql_table('member'), implode(', ', $tmem));
3597 'name' => 'memberid',
3598 'tabindex' => 10000,
3601 $this->parser->parse(showlist($query, 'select', $template, $template_name));
3606 * AdminActions::parse_newpluginlist()
3607 * Parse skinvar newpluginlist
3612 public function parse_newpluginlist()
3614 $candidates = $this->newPlugCandidates;
3615 foreach ( $candidates as $name )
3617 echo '<option value="NP_' . $name . '">' . Entity::hsc($name) . "</option>\n";
3623 * AdminActions::parse_outputspecialdirs()
3624 * Parse skinvar outputspecialdirs
3626 * @param string $type type of setting for directory
3629 public function parse_outputspecialdirs($type)
3631 global $DIR_MEDIA, $DIR_NUCLEUS;
3636 echo Entity::hsc($DIR_NUCLEUS);
3639 echo Entity::hsc($DIR_MEDIA);
3646 * AdminActions::parse_passrequestvars()
3647 * Parse skinvar passrequestvars
3652 public function parse_passrequestvars()
3654 $passvar = Admin::getAdminpassvar();
3655 $oldaction = postVar('oldaction');
3657 if ( ($oldaction != 'logout')
3658 && ($oldaction != 'login')
3660 && !postVar('customaction') )
3668 * AdminActions::parse_pluginextras()
3669 * Parse skinvar pluginextras
3671 * @param string $type type of plugin context
3674 public function parse_pluginextras($type = 'global')
3681 $id = intRequestVar('memberid');
3682 $mem =& $manager->getMember($id);
3683 $manager->notify('MemberSettingsFormExtras', array('member' => &$mem));
3686 $id = intRequestVar('blogid');
3687 $blg =& $manager->getBlog($id);
3688 $manager->notify('BlogSettingsFormExtras', array('member' => &$blg));
3690 case 'createaccount':
3692 'type' => 'createaccount.php',
3694 'postlabel' => '<br />',
3696 'postfield' => '<br /><br />'
3698 $manager->notify('RegistrationFormExtraFields', $data);
3701 $manager->notify('GeneralSettingsFormExtras', array());
3708 * AdminActions::parse_pluginhelp()
3709 * Parse skinvar pluginhelp
3714 public function parse_pluginhelp()
3716 global $manager, $DIR_PLUGINS;
3718 $plugid = intGetVar('plugid');
3719 $plugName = $manager->getPluginNameFromPid($plugid);
3720 $plug =& $manager->getPlugin($plugName);
3722 if ( $plug->supportsFeature('HelpPage') > 0 )
3724 $helpfile = $DIR_PLUGINS . $plug->getShortName() . '/help.';
3725 if ( @file_exists($helpfile . 'php') )
3727 @include($helpfile . 'php');
3730 elseif ( @file_exists($helpfile . 'html') )
3732 @include($helpfile . 'html');
3736 echo '<p>' . _ERROR . ': ' . _ERROR_PLUGNOHELPFILE . "</p>\n";
3737 echo '<p><a href="index.php?action=pluginlist">(' . _BACK . ")</a></p>\n";
3742 * AdminActions::parse_pluginlistlist()
3743 * Parse skinvar pluginlistlist
3745 * @param string $template_name name of template to use
3748 public function parse_pluginlistlist($template_name = '')
3750 $query = "SELECT * FROM %s ORDER BY porder ASC;";
3751 $query = sprintf($query, sql_table('plugin'));
3753 $template['content'] = 'pluginlist';
3754 $template['tabindex'] = 10;
3756 $this->parser->parse(showlist($query, 'table', $template, $template_name));
3762 * AdminActions::parse_pluginoptions()
3763 * Parse skinvar pluginoptions
3765 * @param string $type type of plugin option
3768 public function parse_pluginoptions($context='global', $template_name='')
3770 global $itemid, $manager;
3775 $contextid = intRequestVar('memberid');
3778 $contextid = intRequestVar('blogid');
3781 $contextid = intRequestVar('catid');
3784 $contextid = $itemid;
3788 /* Actually registererd plugin options */
3789 $aIdToValue = array();
3790 $query = "SELECT oid, ovalue FROM %s WHERE ocontextid=%d;";
3791 $query = sprintf($query, sql_table('plugin_option'), (integer) $contextid);
3792 $res = DB::getResult($query);
3793 foreach ( $res as $row )
3795 $aIdToValue[$row['oid']] = $row['ovalue'];
3798 /* Currently available plugin options */
3799 $query = "SELECT * FROM %s, %s WHERE opid=pid and ocontext= %s ORDER BY porder, oid ASC;";
3800 $query = sprintf($query, sql_table('plugin_option_desc'), sql_table('plugin'), DB::quoteValue($context));
3801 $res = DB::getResult($query);
3804 foreach ($res as $row )
3806 if ( !array_key_exists($row['oid'], $aIdToValue) )
3808 $value = $row['odef'];
3812 $value = $aIdToValue[$row['oid']];
3816 'pid' => $row['pid'],
3817 'pfile' => $row['pfile'],
3818 'oid' => $row['oid'],
3820 'name' => $row['oname'],
3821 'description' => $row['odesc'],
3822 'type' => $row['otype'],
3823 'typeinfo' => $row['oextra'],
3824 'contextid' => $contextid,
3830 'context' => $context,
3831 'contextid' => $contextid,
3832 'options' => &$options
3834 $manager->notify('PrePluginOptionsEdit', $data);
3836 $template = array();
3837 if ( $template_name )
3839 $templates =& $manager->getTemplate($template_name);
3840 if ( !array_key_exists('INSERT_PLUGOPTION_TITLE', $templates) || empty($templates['INSERT_PLUGOPTION_TITLE']) )
3842 $template['title'] = "<tr>"
3843 . "<th colspan=\"2\"><%sprinttext(_PLUGIN_OPTIONS_TITLE, <|%insertpluginfo(name)%|>)%></th>"
3848 $template['title'] = $templates['INSERT_PLUGOPTION_TITLE'];
3851 if ( !array_key_exists('INSERT_PLUGOPTION_BODY', $templates) || empty($templates['INSERT_PLUGOPTION_BODY']) )
3853 $template['body'] = "<tr>"
3854 . "<%listplugplugoptionrow%>"
3859 $template['body'] = $templates['INSERT_PLUGOPTION_BODY'];
3865 foreach ( $options as $option )
3868 if ( $prevPid != $option['pid'] )
3870 $prevPid = $option['pid'];
3871 $this->parser->parse($template['title']);
3874 $meta = NucleusPlugin::getOptionMeta($option['typeinfo']);
3876 if ( @$meta['access'] != 'hidden' )
3878 $parsed = $this->parser->parse($template['body']);
3886 * AdminActions::parse_qmenuaddselect()
3887 * Parse skinvar qmanuaddselect
3889 * @param string $template_name name of template to use
3892 public function parse_qmenuaddselect($template_name = '')
3894 global $member, $blogid;
3895 $showAll = requestVar('showall');
3896 if ( $member->isAdmin() && ($showAll == 'yes') )
3898 // Super-Admins have access to all blogs! (no add item support though)
3899 $query = 'SELECT bnumber as value, bname as text FROM %s ORDER BY bname;';
3900 $query = sprintf($query, sql_table('blog'));
3904 $query = 'SELECT bnumber as value, bname as text FROM %s, %s WHERE tblog=bnumber and tmember=%d ORDER BY bname;';
3905 $query = sprintf($query, sql_table('blog'), sql_table('team'), (integer) $member->getID());
3908 $template['name'] = 'blogid';
3909 $template['tabindex'] = 15000;
3910 $template['extra'] = _QMENU_ADD_SELECT;
3911 $template['selected'] = 0;
3912 $template['shorten'] = 10;
3913 $template['shortenel'] = '';
3914 $template['javascript'] = 'onchange="return form.submit()"';
3916 $this->parser->parse(showlist($query, 'select', $template, $template_name));
3922 * AdminActions::parse_quickmenu()
3923 * Parse skinvar quickmenu
3925 * @param string $template_name name of template to use
3928 public function parse_quickmenu($template_name = '')
3931 $templates = array();
3933 if ( !empty($template_name) )
3935 $templates = & $manager->getTemplate($template_name);
3937 $pluginExtras = array();
3938 $manager->notify('QuickMenu', array('options' => &$pluginExtras));
3940 $template = array();
3941 if ( count($pluginExtras) > 0 )
3943 if ( !array_key_exists('PLUGIN_QUICKMENU_HEAD', $templates) || empty($templates['PLUGIN_QUICKMENU_HEAD']) )
3945 $template['head'] = "<h2><%text(_QMENU_PLUGINS)%></h2>\n"
3950 $template['head'] = $templates['PLUGIN_QUICKMENU_HEAD'];
3953 if ( !array_key_exists('PLUGIN_QUICKMENU_BODY', $templates) && empty($templates['PLUGIN_QUICKMENU_BODY']) )
3955 $template['body'] = "<li><a href=\"<%plugadminurl%>\" title=\"<%plugadmintooltip%>\"><%plugadmintitle%></a></li>\n";
3959 $template['body'] = $templates['PLUGIN_QUICKMENU_BODY'];
3962 if ( !array_key_exists('PLUGIN_QUICKMENU_FOOT', $templates) || empty($templates['PLUGIN_QUICKMENU_FOOT']) )
3964 $template['foot'] = "</ul>\n";
3968 $template['foot'] = $templates['PLUGIN_QUICKMENU_FOOT'];
3971 $this->parser->parse($template['head']);
3972 foreach ( $pluginExtras as $aInfo )
3975 'plugadminurl' => Entity::hsc($aInfo['url']),
3976 'plugadmintooltip' => Entity::hsc($aInfo['tooltip']),
3977 'plugadmintitle' => Entity::hsc($aInfo['title']),
3979 $this->parser->parse(Template::fill($template['body'], $data));
3981 $this->parser->parse($template['foot']);
3987 * AdminActions::parse_requestblogid()
3988 * Parse skinvar requestblogid
3993 public function parse_requestblogid()
3995 echo intRequestVar('blogid');
4000 * AdminActions::parse_requestiprange()
4001 * Parse skinvar requestiprange
4006 public function parse_requestiprange()
4008 if ( requestVar('iprange') )
4010 echo Entity::hsc(requestVar('iprange'));
4012 elseif ( requestVar('ip') )
4014 echo Entity::hsc(requestVar('ip'));
4020 * AdminActions::parse_selectlocalskinfiles()
4021 * Parse skinvar selectlocalskinfiles
4026 public function parse_selectlocalskinfiles()
4030 if ( !class_exists('SkinImport', FALSE) )
4032 include_libs('skinie.php');
4035 if ( !preg_match('#^admin#', $this->skintype) && $this->skintype != 'importAdmin' )
4037 $skindir = $DIR_SKINS;
4041 $skindir = "{$DIR_SKINS}admin/";
4044 $candidates = SkinImport::searchForCandidates($skindir);
4045 foreach ( $candidates as $skinname => $skinfile )
4047 $skinfile = Entity::hsc($skinfile);
4048 $skinname = Entity::hsc($skinname);
4049 echo "<option value=\"{$skinfile}\">{$skinname}</option>\n";
4056 * AdminActions::parse_skineditallowedlist()
4057 * Parse skinvar skineditallowedlist
4059 * @param string $type type of skin
4060 * @param string $template_name name of template
4063 public function parse_skineditallowedlist($type, $template_name = '')
4068 $query = "SELECT bshortname, bname FROM %s;";
4070 'content' => 'shortblognames'
4072 $query = sprintf($query, sql_table('blog'));
4075 if ( !preg_match('#^admin#', $this->skintype) )
4077 $query = "SELECT tdname as name, tddesc as description FROM %s WHERE tdname NOT LIKE 'admin/%%';";
4081 $query = "SELECT tdname as name, tddesc as description FROM %s WHERE tdname LIKE 'admin/%%';";
4084 'content' => 'shortnames'
4086 $query = sprintf($query, sql_table('template_desc'));
4090 $this->parser->parse(showlist($query, 'table', $show, $template_name));
4095 * AdminActions::parse_skinielist()
4096 * Parse skinvar skinielist
4098 * @param string $type type of skin
4099 * @param string $template_name name of template to use
4102 public function parse_skinielist($type, $template_name = '')
4106 $templates = array();
4107 if ( $template_name )
4109 $templates =& $manager->getTemplate($template_name);
4111 if ( !array_key_exists('SKINIE_EXPORT_LIST', $templates) || empty($templates['SKINIE_EXPORT_LIST']) )
4114 . "<input type=\"checkbox\" name=\"<%typeid%>\" id=\"<%expid%>\" />\n"
4115 . "<label for=\"<%expid%>\"><%expname%></label>\n"
4117 . "<td><%expdesc%></td>\n"
4123 $template = $templates['SKINIE_EXPORT_LIST'];
4129 if ( !preg_match('#^admin#', $this->skintype) )
4131 $res = DB::getResult('SELECT * FROM ' . sql_table('skin_desc'). " WHERE sdname NOT LIKE 'admin/%%';");
4135 $res = DB::getResult('SELECT * FROM ' . sql_table('skin_desc'). " WHERE sdname LIKE 'admin/%%';");
4137 foreach ( $res as $row )
4140 'typeid' => 'skin[' . $row['sdnumber'] . ']',
4141 'expid' => 'skinexp' . $row['sdnumber'],
4142 'expname' => Entity::hsc($row['sdname']),
4143 'expdesc' => Entity::hsc($row['sddesc'])
4145 echo Template::fill($template, $data);
4149 if ( !preg_match('#^admin#', $this->skintype) )
4151 $res = DB::getResult('SELECT * FROM '.sql_table('template_desc'). " WHERE tdname NOT LIKE 'admin/%%';");
4155 $res = DB::getResult('SELECT * FROM '.sql_table('template_desc'). " WHERE tdname LIKE 'admin/%%';");
4157 foreach ( $res as $row )
4160 'typeid' => 'template[' . $row['tdnumber'] . ']',
4161 'expid' => 'templateexp' . $row['tdnumber'],
4162 'expname' => Entity::hsc($row['tdname']),
4163 'expdesc' => Entity::hsc($row['tddesc'])
4165 echo Template::fill($template, $data);
4173 * AdminActions::parse_skinoverview()
4174 * Parse skinvar skinoverview
4176 * @param string $template_name name of template to use
4179 public function parse_skinoverview($template_name = '')
4183 $template = array();
4184 if ( !preg_match('#^admin#', $this->skintype) )
4186 $query = "SELECT * FROM %s WHERE sdname NOT LIKE 'admin/%%' ORDER BY sdname;";
4187 $template['editaction'] = 'skinedit';
4188 $template['cloneaction'] = 'skinclone';
4189 $template['deleteaction'] = 'skindelete';
4190 $template['edittypeaction'] = 'skinedittype';
4191 $template['default'] = $CONF['BaseSkin'];
4195 $query = "SELECT * FROM %s WHERE sdname LIKE 'admin/%%' ORDER BY sdname;";
4196 $template['editaction'] = 'adminskinedit';
4197 $template['cloneaction'] = 'adminskinclone';
4198 $template['deleteaction'] = 'adminskindelete';
4199 $template['edittypeaction'] = 'adminskinedittype';
4200 $template['default'] = $CONF['AdminSkin'];
4202 $query = sprintf($query, sql_table('skin_desc'));
4204 $template['tabindex'] = 10;
4205 $template['content'] = 'skinlist';
4207 $this->parser->parse(showlist($query, 'table', $template, $template_name));
4213 * AdminActions::parse_skintypehelp()
4214 * Check editing skintypehelp
4219 public function parse_skintypehelp()
4221 $nowSkinType = strtolower(trim(requestVar('type')));
4222 $pageAction = strtolower(trim(requestVar('action')));
4223 if ( preg_match('/^admin.*/', $pageAction) )
4225 $regularType = self::$default_skin_types;
4226 unset($regularType['memberedit']);
4227 unset($regularType['login']);
4228 $regularType = array_keys($regularType);
4232 /* TODO: use Skin class */
4233 $regularType = array(
4245 if ( in_array($nowSkinType, $regularType) )
4247 help('skinpart' . $nowSkinType);
4251 help('skinpartspecial');
4257 * AdminActions::parse_specialskinlist()
4258 * Parse skinvar specialskinlist
4260 * @param string $template_name name of template to use
4263 public function parse_specialskinlist($template_name = '')
4265 global $CONF, $manager;
4267 $template = array();
4269 $skinid = intRequestVar('skinid');
4271 if ( !preg_match('#^admin#', $this->skintype) )
4273 $skin =& $manager->getSkin($skinid);
4274 $template['editaction'] = 'skinedittype';
4275 $template['removeaction'] = 'skinremovetype';
4279 $skin =& $manager->getSkin($skinid, 'AdminActions');
4280 $template['editaction'] = 'adminskinedittype';
4281 $template['removeaction'] = 'adminskinremovetype';
4283 $normal_types = $skin->getDefaultTypes();
4284 $available_types = $skin->getAvailableTypes();
4286 $special_skintypes = array();
4287 foreach( $available_types as $skintype => $skinname )
4289 if ( !array_key_exists($skintype, $normal_types) )
4291 $special_skintypes[] = array(
4292 'skintype' => $skintype,
4293 'skintypename' => $skinname
4298 if ( sizeof($special_skintypes) > 0 )
4300 $template['tabindex'] = 75;
4301 $template['skinid'] = $skin->getID();
4302 $template['skinname'] = $skin->getName();
4303 $this->parser->parse(showlist($special_skintypes, 'list_specialskinlist', $template, $template_name));
4307 /* TODO: nothing to be shown */
4314 * AdminActions::parse_sprinttext()
4317 * @param string $which
4318 * @param string $val
4321 public function parse_sprinttext($which, $val)
4323 if ( !defined($which) )
4329 $base = constant($which);
4332 if ( preg_match('#[^<|%].*[^%|>]#', $val, $matchies) )
4334 if ( !preg_match('#[(].*[^)]#', $matchies[0], $args) )
4336 $met = 'parse_' . $matchies[0];
4340 $arg = trim($args[0], '()');
4341 $met = 'parse_' . substr($matchies[0], 0, strpos($matchies[0], '('));
4344 if ( method_exists($this, $met) )
4346 $value = call_user_func(array(&$this, $met), $arg);
4350 if ( !isset($value) || empty($value) )
4354 echo sprintf($base, $value);
4359 * AdminActions::parse_systemsettings()
4360 * Parse skinvar systemsettings
4362 * @param string $type type of settings for system
4363 * @param string $template_name name of template to use
4366 public function parse_systemsettings($type = 'phpinfo', $template_name = '')
4368 global $manager, $member, $CONF, $nucleus;
4370 $member->isAdmin() or Admin::disallow();
4372 $enable = _ADMIN_SYSTEMOVERVIEW_ENABLE;
4373 $disable = _ADMIN_SYSTEMOVERVIEW_DISABLE;
4380 case 'sqlserverinfo':
4381 echo DB::getAttribute(PDO::ATTR_SERVER_VERSION);
4383 case 'sqlclientinfo':
4384 echo DB::getAttribute(PDO::ATTR_CLIENT_VERSION);
4386 case 'magicquotesgpc':
4387 echo ini_get('magic_quotes_gpc') ? 'On' : 'Off';
4389 case 'magicquotesruntime':
4390 echo ini_get('magic_quotes_runtime') ? 'On' : 'Off';
4392 case 'registerglobals':
4393 echo ini_get('register_globals') ? 'On' : 'Off';
4396 $templates = array();
4397 if ( $template_name )
4399 $templates =& $manager->getTemplate($template_name);
4401 if ( !array_key_exists('SYSTEMINFO_GDSETTINGS', $templates) || empty($templates['SYSTEMINFO_GDSETTINGS']) )
4403 $template = "<tr>\n"
4404 . "<td><%key%></td>\n"
4405 . "<td><%value%></td>\n"
4410 $template = $templates['SYSTEMINFO_GDSETTINGS'];
4413 $gdinfo = gd_info();
4415 foreach ( $gdinfo as $key => $value )
4417 if ( is_bool($value) )
4419 $value = $value ? $enable : $disable;
4423 $value = Entity::hsc($value);
4429 echo Template::fill($template, $data);
4434 phpinfo(INFO_MODULES);
4435 $im = ob_get_contents();
4437 echo ( i18n::strpos($im, 'mod_rewrite') !== FALSE ) ? $enable : $disable;
4439 case 'nucleusversion':
4440 echo getNucleusVersion() / 100 . '(' . $nucleus['version'] . ')';
4442 case 'nucleuspatchlevel':
4443 echo getNucleusPatchLevel();
4449 echo $CONF['ItemURL'];
4451 case 'alertonheaderssent':
4452 echo $CONF['alertOnHeadersSent'] ? $enable : $disable;
4454 case 'nucleuscodename':
4455 if ( $nucleus['codename'] != '' )
4457 echo ' "' . $nucleus['codename'] . '"';
4460 case 'versioncheckurl':
4461 echo sprintf(_ADMIN_SYSTEMOVERVIEW_VERSIONCHECK_URL, getNucleusVersion(), getNucleusPatchLevel());
4468 * AdminActions::parse_templateoverview()
4469 * Parse skinvar templateoverview
4471 * @param string $template_name name of template to use
4474 public function parse_templateoverview($template_name = '')
4476 if ( !preg_match('#^admin#', $this->skintype) )
4478 $query = "SELECT * FROM %s WHERE tdname NOT LIKE 'admin/%%' ORDER BY tdname;";
4479 $template['deleteaction'] = 'templatedelete';
4480 $template['editaction'] = 'templateedit';
4481 $template['cloneaction'] = 'templateclone';
4485 $query = "SELECT * FROM %s WHERE tdname LIKE 'admin/%%' ORDER BY tdname;";
4486 $template['deleteaction'] = 'admintemplatedelete';
4487 $template['editaction'] = 'admintemplateedit';
4488 $template['cloneaction'] = 'admintemplateclone';
4490 $query = sprintf($query, sql_table('template_desc'));
4492 $template['tabindex'] = 10;
4493 $template['content'] = 'templatelist';
4495 $this->parser->parse(showlist($query, 'table', $template, $template_name));
4501 * AdminActions::parse_ticket()
4507 public function parse_ticket()
4510 $manager->addTicketHidden();
4515 * AdminActions::parse_versioncheckurl()
4516 * Parse skinvar versioncheckurl
4521 public function parse_versioncheckurl()
4523 echo sprintf(_ADMIN_SYSTEMOVERVIEW_VERSIONCHECK_URL, getNucleusVersion(), getNucleusPatchLevel());
4528 * AdminActions::parse_yrbloglist()
4529 * Parse skinvar yrbloglist
4531 * @param string $template_name name of template to use
4534 public function parse_yrbloglist($template_name = '')
4537 $showAll = requestVar('showall');
4539 if ( $member->isAdmin() && ($showAll == 'yes') )
4541 // Super-Admins have access to all blogs! (no add item support though)
4542 $query = "SELECT bnumber, bname, 1 as tadmin, burl, bshortname"
4544 . " ORDER BY bnumber;";
4545 $query = sprintf($query, sql_table('blog'));
4549 $query = "SELECT bnumber, bname, tadmin, burl, bshortname"
4551 . " WHERE tblog=bnumber and tmember=%d"
4552 . " ORDER BY bnumber;";
4553 $query = sprintf($query, sql_table('blog'), sql_table('team'), (integer) $member->getID());
4556 $resource = DB::getResult($query);
4557 if ( ($showAll != 'yes') && $member->isAdmin() )
4559 $query = 'SELECT COUNT(*) as result FROM ' . sql_table('blog');
4560 $total = DB::getValue($query);
4562 if ( $total > $resource->rowCount() )
4564 echo '<p><a href="index.php?action=overview&showall=yes">' . _OVERVIEW_SHOWALL . '</a></p>';
4568 if ( $resource->rowCount() > 0 )
4570 $template['content'] = 'bloglist';
4571 $template['superadmin'] = $member->isAdmin();
4573 $this->parser->parse(showlist($resource, 'table', $template, $template_name));
4574 $resource->closeCursor();
4576 echo '<h2>' . _OVERVIEW_YRDRAFTS . '</h2>';
4578 $query = 'SELECT ititle, inumber, bshortname FROM %s, %s '
4579 . 'WHERE iauthor=%d AND iblog=bnumber AND idraft=1;';
4580 $query = sprintf($query, sql_table('item'), sql_table('blog'), (integer) $member->getID());
4582 $resource = DB::getResult($query);
4583 if ( $resource->rowCount() > 0 )
4585 $template['content'] = 'draftlist';
4586 $this->parser->parse(showlist($resource, 'table', $template, $template_name));
4590 echo _OVERVIEW_NODRAFTS;
4595 echo _OVERVIEW_NOBLOGS;
4597 $resource->closeCursor();
4603 * AdminActions::checkCondition()
4604 * Checks conditions for if statements
4606 * @param string $field type of <%if%>
4607 * @param string $name property of field
4608 * @param string $value value of property
4609 * @return boolean condition
4611 protected function checkCondition($field, $name='', $value = '')
4613 global $CONF, $archiveprevexists, $archivenextexists, $blog, $catid, $itemidnext, $itemidprev, $manager, $member;
4623 $blog =& $manager->getBlog($blogid);
4627 $blogid = getBlogIDFromCatID($catid);
4628 $blog =& $manager->getBlog($blogid);
4630 elseif ( intRequestVar('catid') )
4632 $catid = intRequestVar('catid');
4633 $blogid = getBlogIDFromCatID($catid);
4634 $blog =& $manager->getBlog($blogid);
4641 $condition = ($blog && $this->ifCategory($name, $value));
4644 $condition = $member->isLoggedIn();
4647 $condition = $member->isLoggedIn() && $this->ifOnTeam($name);
4650 $condition = $member->isLoggedIn() && $this->ifAdmin($name);
4653 $condition = $member->isLoggedIn() && $member->isAdmin();
4655 case 'allowloginedit':
4656 $condition = $member->isLoggedIn() && ($CONF['AllowLoginEdit'] || $member->isAdmin());
4659 $condition = ($itemidnext != '');
4662 $condition = ($itemidprev != '');
4664 case 'archiveprevexists':
4665 $condition = ($archiveprevexists == true);
4667 case 'archivenextexists':
4668 $condition = ($archivenextexists == true);
4671 $condition = (($name == $this->skintype) || ($name == requestVar('action')));
4674 $condition = $this->ifHasPlugin($name, $value);
4677 $condition = (Admin::getAdminAction() == $name);
4679 case 'adminoldaction':
4680 $condition = (Admin::getAdminAction() == $name);
4682 case 'addresschange':
4683 $condition = ($this->ifAddresscange());
4685 case 'bechangepass':
4686 $condition = ($this->beChangePassword());
4688 case 'skincandidates':
4689 $condition = ($this->ifSkincandidates());
4692 $condition = requestVar('nameclashes');
4694 case 'existsnewplugin':
4695 $condition = ($this->existsNewPlugin());
4702 $condition = (boolean) ($member->getAutosave() == $value);
4709 $condition = (Admin::$blog->getSetting($name) == $value);
4711 case 'itemproperty':
4716 if ( array_key_exists($name, Admin::$contents) )
4718 $condition = (boolean) (Admin::$contents[$name] == $value);
4722 $condition = $manager->pluginInstalled("NP_{$field}") && $this->ifPlugin($field, $name, $value);
4729 * AdminActions::_ifHasPlugin()
4730 * hasplugin,PlugName
4731 * -> checks if plugin exists
4732 * hasplugin,PlugName,OptionName
4733 * -> checks if the option OptionName from plugin PlugName is not set to 'no'
4734 * hasplugin,PlugName,OptionName=value
4735 * -> checks if the option OptionName from plugin PlugName is set to value
4737 * @param string $name name of plugin
4738 * @param string $value
4741 private function ifHasPlugin($name, $value)
4745 // (pluginInstalled method won't write a message in the actionlog on failure)
4746 if ( $manager->pluginInstalled("NP_{$name}") )
4748 $plugin =& $manager->getPlugin("NP_{$name}");
4749 if ( $plugin != NULL )
4757 list($name2, $value2) = preg_split('#=#', $value, 2);
4758 if ( $value2 == "" && $plugin->getOption($name2) != 'no' )
4762 else if ( $plugin->getOption($name2) == $value2 )
4773 * AdminActions::beChangePassword()
4778 private function beChangePassword()
4780 return intRequestVar('bNeedsPasswordChange');
4784 * AdminActions::ifSkincandidates()
4785 * Checks if a plugin exists and call its doIf function
4791 private function ifSkincandidates()
4794 $candidates = SKINIMPORT::searchForCandidates($DIR_SKINS);
4795 return (count($candidates) > 0);
4799 * AdminActions::ifPlugin()
4800 * Checks if a plugin exists and call its doIf function
4802 * @param string $name name of plugin
4803 * @param string $key
4804 * @param string $value
4807 private function ifPlugin($name, $key = '', $value = '')
4811 $plugin =& $manager->getPlugin("NP_{$name}");
4817 $params = func_get_args();
4818 array_shift($params);
4820 return call_user_func_array(array(&$plugin, 'doIf'), $params);
4824 * AdminActions::ifCategory()
4825 * Different checks for a category
4827 * @param string $key key for information of category
4828 * @param string $value value for information of category
4831 private function ifCategory($key = '', $value='')
4833 global $blog, $catid;
4835 // when no parameter is defined, just check if a category is selected
4836 if (($key != 'catname' && $key != 'catid') || ($value == ''))
4838 return $blog->isValidCategory($catid);
4841 // check category name
4842 if ( $key == 'catname' )
4844 $value = $blog->getCategoryIdFromName($value);
4845 if ($value == $catid)
4847 return $blog->isValidCategory($catid);
4851 // check category id
4852 if (($key == 'catid') && ($value == $catid))
4854 return $blog->isValidCategory($catid);
4861 * AdminActions::ifOnTeam()
4862 * Checks if a member is on the team of a blog and return his rights
4864 * @param string $blogName name of weblog
4867 private function ifOnTeam($blogName = '')
4869 global $blog, $member, $manager;
4871 // when no blog found
4872 if ( ($blogName == '') && !is_object($blog) )
4877 // explicit blog selection
4878 if ($blogName != '')
4880 $blogid = getBlogIDFromName($blogName);
4883 if (($blogName == '') || !$manager->existsBlogID($blogid))
4886 $blogid = $blog->getID();
4888 return $member->teamRights($blogid);
4892 * AdminActions::ifAdmin()
4893 * Checks if a member is admin of a blog
4895 * @param string $blogName name of weblog
4898 private function ifAdmin($blogName = '')
4900 global $blog, $member, $manager;
4902 // when no blog found
4903 if (($blogName == '') && (!is_object($blog)))
4908 // explicit blog selection
4909 if ($blogName != '')
4911 $blogid = getBlogIDFromName($blogName);
4914 if (($blogName == '') || !$manager->existsBlogID($blogid))
4917 $blogid = $blog->getID();
4920 return $member->isBlogAdmin($blogid);
4924 * AdminActions::ifAddresscange()
4925 * Check e-Mail address is changed
4930 private function ifAddresscange()
4934 $key = $this->objAdmin->sessionVar("{$CONF['CookiePrefix']}ackey");
4939 $info = MEMBER::getActivationInfo($key);
4944 $mem =& $manager->getMember($info->vmember);
4949 if ( $info->vtype == 'addresschange' )
4958 * AdminActions::customHelp()
4959 * shows a link to custom help file
4962 * @param string $tplName
4963 * @param string $url
4964 * @param string $iconURL
4965 * @param string $alt
4966 * @param string $title
4970 private function customHelp($id, $tplName = '', $url = '', $iconURL = '', $alt = '', $title = '', $onclick = '')
4972 echo $this->customHelpHtml($id, $tplName, $url, $iconURL, $alt, $title, $onclick);
4977 * AdminActions::customHelp()
4978 * shows a link to custom help file
4981 * @param string $tplName
4982 * @param string $url
4983 * @param string $iconURL
4984 * @param string $alt
4985 * @param string $title
4989 static function customHelplink($id, $tplName = '', $url = '', $title = '', $onclick = '')
4991 global $CONF, $manager;
4993 $templates = array();
4997 $templates =& $manager->getTemplate($tplName);
5000 if ( !array_key_exists('ADMIN_CUSTOMHELPLINK_ANCHOR', $templates) || empty($templates['ADMIN_CUSTOMHELPLINK_ANCHOR']) )
5002 $template = "<a href=\"<%helpurl%>#<%helptarget%>\" title=\"<%title%>\" <%onclick%>>\n";
5006 $template = $templates['ADMIN_CUSTOMHELPLINK_ANCHOR'];
5011 $url = $CONF['AdminURL'] . 'documentation/customHelp.html';
5014 if ( empty($onclick) )
5016 $onclick = 'onclick="if (event && event.preventDefault) event.preventDefault(); return help(this.href);"';
5018 elseif ( preg_match('#^onclick#', $onclick) )
5020 $onclick = $onclick;
5024 $onclick = 'onclick="' . $onclick . '"';
5029 'helptarget' => $id,
5030 'onclick' => $onclick,
5031 'title' => (isset($title) && !empty($title)) ? $title : _HELP_TT,
5033 return Template::fill($template, $data);
5038 * AdminActions::customHelpHtml()
5040 private function customHelpHtml($id, $tplName = '', $url = '', $iconURL = '', $alt = '', $title = '', $onclick = '')
5042 global $CONF, $manager;
5044 $templates = array();
5048 $templates =& $manager->getTemplate($tplName);
5050 if ( !array_key_exists('ADMIN_CUSTOMHELPLINK_ICON', $templates) || !empty($templates['ADMIN_CUSTOMHELPLINK_ICON']) )
5052 $template = "<img src=\"<%iconurl%>\" <%width%><%height%>alt=\"<%alt%>\" title=\"<%title%>\" /></a>\n";
5056 $template = $templates['ADMIN_CUSTOMHELPLINK_ICON'];
5059 if ( empty($iconURL) )
5061 $iconURL = $CONF['AdminURL'] . 'documentation/icon-help.gif';
5064 if ( function_exists('getimagesize') )
5066 $size = getimagesize($iconURL);
5067 $width = 'width="' . $size[0] . '" ';
5068 $height = 'height="' . $size[1] . '" ';
5072 'iconurl' => $iconURL,
5074 'height' => $height,
5075 'alt' => (isset($alt) && !empty($alt)) ? $alt : _HELP_TT,
5076 'title' => (isset($title) && !empty($title)) ? $title : _HELP_TT,
5079 $icon = Template::fill($template, $data);
5080 $help = $this->customHelplink($id, $tplName, $url, $title, $onclick);
5082 return $help . $icon;
5086 * AdminActions::existsNewPlugin()
5087 * Check exists new plugin
5090 * @return boolean exists or not
5092 private function existsNewPlugin()
5094 global $DIR_PLUGINS;
5096 $query = "SELECT * FROM %s;";
5097 $query = sprintf($query, sql_table('plugin'));
5098 $res = DB::getResult($query);
5100 $installed = array();
5101 foreach( $res as $row )
5103 $installed[] = $row['pfile'];
5106 $files = scandir($DIR_PLUGINS);
5108 $candidates = array();
5109 foreach ( $files as $file )
5111 if ( preg_match("#^(NP_.*)\.php$#", $file, $matches) )
5113 if ( !in_array($matches[1], $installed) )
5115 $candidates[] = preg_replace("#^NP_#", "", $matches[1]);
5119 $this->newPlugCandidates = $candidates;
5120 return (count($candidates) > 0);
5124 * AdminActions::pagehead()
5125 * Output admin page head
5130 public function parse_pagehead()
5132 global $member, $nucleus, $CONF, $manager;
5134 $extrahead = Admin::getAdminextrahead();
5136 'extrahead' => &$extrahead,
5137 'action' => Admin::getAdminAction()
5139 $manager->notify('AdminPrePageHead', $data);
5141 $content = $this->parser->skin->getContentFromDB('pagehead');
5144 $baseUrl = Entity::hsc($CONF['SkinsURL']);
5148 if ( !array_key_exists('AdminCSS', $CONF) )
5150 DB::execute("INSERT INTO " . sql_table('config') . " VALUES ('AdminCSS', 'original')");
5151 $CONF['AdminCSS'] = 'original';
5155 /* HTTP 1.1 application for no caching */
5156 header("Cache-Control: no-cache, must-revalidate");
5157 header("Expires: Sat, 26 Jul 1997 05:00:00 GMT");
5159 $root_element = 'html';
5160 $charset = i18n::get_current_charset();
5161 $locale = preg_replace('#_#', '-', i18n::get_current_locale());
5162 $xml_version_info = self::$xml_version_info;
5163 $formal_public_identifier = self::$formal_public_identifier;
5164 $system_identifier = self::$system_identifier;
5165 $xhtml_namespace = self::$xhtml_namespace;
5167 echo "<?xml version=\"{$xml_version_info}\" encoding=\"{$charset}\" ?>\n";
5168 echo "<!DOCTYPE {$root_element} PUBLIC \"{$formal_public_identifier}\" \"{$system_identifier}\">\n";
5169 echo "<{$root_element} xmlns=\"{$xhtml_namespace}\" xml:lang=\"{$locale}\" lang=\"{$locale}\">\n";
5171 echo '<title>' . Entity::hsc($CONF['SiteName']) . " - Admin</title>\n";
5174 echo "<link rel=\"stylesheet\" title=\"Nucleus Admin Default\" type=\"text/css\" href=\"{$baseUrl}admin/defaultadmin/styles/admin_{$CONF["AdminCSS"]}.css\" />\n";
5176 echo "<link rel=\"stylesheet\" title=\"Nucleus Admin Default\" type=\"text/css\" href=\"{$baseUrl}admin/defaultadmin/styles/addedit.css\" />\n";
5177 echo "<script type=\"text/javascript\" src=\"{$baseUrl}javascripts/edit.js\"></script>\n";
5178 echo "<script type=\"text/javascript\" src=\"{$baseUrl}javascripts/admin.js\"></script>\n";
5179 echo "<script type=\"text/javascript\" src=\"{$baseUrl}javascripts/compatibility.js\"></script>\n";
5180 echo "{$extrahead}\n";
5183 echo "<div id=\"adminwrapper\">\n";
5184 echo "<div class=\"header\">\n";
5185 echo '<h1>' . Entity::hsc($CONF['SiteName']) . "</h1>\n";
5187 echo "<div id=\"container\">\n";
5188 echo "<div id=\"content\">\n";
5189 echo "<div class=\"loginname\">\n";
5191 if ( !$member->isLoggedIn() )
5193 echo '<a href="index.php?action=showlogin" title="Log in">' . _NOTLOGGEDIN . "</a><br />\n";
5197 echo _LOGGEDINAS . ' ' . $member->getDisplayName() ." - <a href='index.php?action=logout'>" . _LOGOUT. "</a><br />\n";
5198 echo "<a href='index.php?action=overview'>" . _ADMINHOME . "</a> - ";
5201 echo "<a href='".$CONF['IndexURL']."'>"._YOURSITE."</a><br />\n";
5204 if ( !array_key_exists('codename', $nucleus) || empty($nucleus['codename']) )
5206 $codenamestring = '';
5210 $codenamestring = ' "' . $nucleus['codename'].'"';
5213 if ( $member->isLoggedIn() && $member->isAdmin() )
5215 $checkURL = sprintf(_ADMIN_SYSTEMOVERVIEW_VERSIONCHECK_URL, getNucleusVersion(), getNucleusPatchLevel());
5216 echo '<a href="' . $checkURL . '" title="' . _ADMIN_SYSTEMOVERVIEW_VERSIONCHECK_TITLE . '">Nucleus CMS ' . $nucleus['version'] . $codenamestring . '</a>';
5218 $newestVersion = getLatestVersion();
5219 $newestCompare = str_replace('/', '.', $newestVersion);
5220 $currentVersion = str_replace(array('/','v'), array('.',''), $nucleus['version']);
5222 if ( $newestVersion && version_compare($newestCompare, $currentVersion) > 0 )
5225 echo '<a style="color:red" href="http://nucleuscms.org/upgrade.php" title="' . _ADMIN_SYSTEMOVERVIEW_LATESTVERSION_TITLE . '">';
5226 echo _ADMIN_SYSTEMOVERVIEW_LATESTVERSION_TEXT . $newestVersion;
5232 echo "Nucleus CMS {$nucleus['version']}{$codenamestring}";
5239 $this->parser->parse($content);
5246 * AdminActionss::pagefoot()
5247 * Output admin page foot include quickmenu
5252 public function parse_pagefoot()
5254 global $action, $member, $manager, $blogid;
5257 'action' => Admin::getAdminAction()
5259 $manager->notify('AdminPrePageFoot', $data);
5261 $content = $this->parser->skin->getContentFromDB('pagefoot');
5264 if ( $member->isLoggedIn() && ($action != 'showlogin') )
5266 echo '<h2>' . _LOGOUT . "</h2>\n";
5268 echo '<li><a href="index.php?action=overview">' . _BACKHOME . "</a></li>\n";
5269 echo '<li><a href="index.php?action=logout">' . _LOGOUT . "</a></li>\n";
5273 echo "<div class=\"foot\">\n";
5274 echo '<a href="' . _ADMINPAGEFOOT_OFFICIALURL . '">Nucleus CMS</a> © 2002-' . date('Y') . ' ' . _ADMINPAGEFOOT_COPYRIGHT;
5276 echo '<a href="' . _ADMINPAGEFOOT_DONATEURL . '">' . _ADMINPAGEFOOT_DONATE . "</a>\n";
5279 echo "<div id=\"quickmenu\">\n";
5281 if ( ($action != 'showlogin') && ($member->isLoggedIn()) )
5284 echo '<li><a href="index.php?action=overview">' . _QMENU_HOME . "</a></li>\n";
5287 echo '<h2>' . _QMENU_ADD . "</h2>\n";
5288 echo "<form method=\"get\" action=\"index.php\">\n";
5290 echo "<input type=\"hidden\" name=\"action\" value=\"createitem\" />\n";
5292 $showAll = requestVar('showall');
5294 if ( ($member->isAdmin()) && ($showAll == 'yes') )
5296 // Super-Admins have access to all blogs! (no add item support though)
5297 $query = "SELECT bnumber as value, bname as text FROM %s ORDER BY bname;";
5298 $query = sprintf($query, sql_table('blog'));
5302 $query = "SELECT bnumber as value, bname as text FROM %s, %s WHERE tblog=bnumber and tmember=%d ORDER BY bname;";
5303 $query = sprintf($query, sql_table('blog'), sql_table('team'), (integer) $member->getID());
5305 $template['name'] = 'blogid';
5306 $template['tabindex'] = 15000;
5307 $template['extra'] = _QMENU_ADD_SELECT;
5308 $template['selected'] = $blogid;
5309 $template['shorten'] = 10;
5310 $template['shortenel'] = '';
5311 $template['javascript'] = 'onchange="return form.submit()"';
5312 $this->parser->parse(showlist($query, 'select', $template));
5317 echo "<h2>{$member->getDisplayName()}</h2>\n";
5319 echo '<li><a href="index.php?action=editmembersettings">' . _QMENU_USER_SETTINGS . "</a></li>\n";
5320 echo '<li><a href="index.php?action=browseownitems">' . _QMENU_USER_ITEMS . "</a></li>\n";
5321 echo '<li><a href="index.php?action=browseowncomments">' . _QMENU_USER_COMMENTS . "</a></li>\n";
5324 if ( $member->isAdmin() )
5326 echo '<h2>' . _QMENU_MANAGE . "</h2>\n";
5328 echo '<li><a href="index.php?action=actionlog">' . _QMENU_MANAGE_LOG . "</a></li>\n";
5329 echo '<li><a href="index.php?action=settingsedit">' . _QMENU_MANAGE_SETTINGS . "</a></li>\n";
5330 echo '<li><a href="index.php?action=systemoverview">' . _QMENU_MANAGE_SYSTEM . "</a></li>\n";
5331 echo '<li><a href="index.php?action=usermanagement">' . _QMENU_MANAGE_MEMBERS . "</a></li>\n";
5332 echo '<li><a href="index.php?action=createnewlog">' . _QMENU_MANAGE_NEWBLOG . "</a></li>\n";
5333 echo '<li><a href="index.php?action=backupoverview">' . _QMENU_MANAGE_BACKUPS . "</a></li>\n";
5334 echo '<li><a href="index.php?action=pluginlist">' . _QMENU_MANAGE_PLUGINS . "</a></li>\n";
5337 echo "<h2>" . _QMENU_LAYOUT . "</h2>\n";
5339 echo '<li><a href="index.php?action=skinoverview">' . _QMENU_LAYOUT_SKINS . "</a></li>\n";
5340 echo '<li><a href="index.php?action=templateoverview">' . _QMENU_LAYOUT_TEMPL . "</a></li>\n";
5341 echo '<li><a href="index.php?action=skinieoverview">' . _QMENU_LAYOUT_IEXPORT . "</a></li>\n";
5345 $data = array('options' => array());
5346 $manager->notify('QuickMenu', $data);
5348 if ( count($data['options']) > 0 )
5350 echo "<h2>" . _QMENU_PLUGINS . "</h2>\n";
5352 foreach ( $data['options'] as $option )
5354 echo '<li><a href="' . Entity::hsc($option['url']) . '" title="' . Entity::hsc($option['tooltip']) . '">' . Entity::hsc($option['title']) . "</a></li>\n";
5359 else if ( ($action == 'activate') || ($action == 'activatesetpwd') )
5362 echo '<h2>' . _QMENU_ACTIVATE . '</h2>' . _QMENU_ACTIVATE_TEXT;
5366 echo '<h2>' . _QMENU_INTRO . '</h2>' . _QMENU_INTRO_TEXT;
5369 echo "<!-- quickmenu -->\n";
5372 echo "<!-- content -->\n";
5375 echo "<!-- container -->\n";
5378 echo "<!-- adminwrapper -->\n";
5386 $this->parser->parse($content);
5393 * AdminActions::selectBlog()
5394 * Inserts a HTML select element with choices for all blogs to which the user has access
5395 * mode = 'blog' => shows blognames and values are blogids
5396 * mode = 'category' => show category names and values are catids
5398 * @param string $name
5399 * @param string $mode
5400 * @param integer $selected
5401 * @param integer $tabindex
5402 * @param integer $showNewCat
5403 * @param integer $iForcedBlogInclude ID for weblog always included
5404 * @param $iForcedBlogInclude
5405 * ID of a blog that always needs to be included, without checking if the
5406 * member is on the blog team (-1 = none)
5409 private function selectBlog($name, $mode='blog', $selected = 0, $tabindex = 0, $showNewCat = 0, $iForcedBlogInclude = -1)
5411 global $member, $CONF;
5413 // 0. get IDs of blogs to which member can post items (+ forced blog)
5414 $aBlogIds = array();
5415 if ( $iForcedBlogInclude != -1 )
5417 $aBlogIds[] = intval($iForcedBlogInclude);
5420 if ( $member->isAdmin() && array_key_exists('ShowAllBlogs', $CONF) && $CONF['ShowAllBlogs'] )
5422 $query = "SELECT bnumber FROM %s ORDER BY bname;";
5423 $query = sprintf($query, sql_table('blog'));
5427 $query = "SELECT bnumber FROM %s, %s WHERE tblog=bnumber AND tmember=%d;";
5428 $query = sprintf($query, sql_table('blog'), sql_table('team'), (integer) $member->getID());
5431 $rblogids = DB::getResult($query);
5432 foreach ( $rblogids as $row )
5434 if ( $row['bnumber'] != $iForcedBlogInclude )
5436 $aBlogIds[] = intval($row['bnumber']);
5440 if ( count($aBlogIds) == 0 )
5445 echo "<select name=\"{$name}\" tabindex=\"{$tabindex}\">\n";
5447 // 1. select blogs (we'll create optiongroups)
5448 // (only select those blogs that have the user on the team)
5449 $queryBlogs = "SELECT bnumber, bname FROM %s WHERE bnumber in (%s) ORDER BY bname;";
5450 $queryBlogs = sprintf($queryBlogs, sql_table('blog'), implode(',', $aBlogIds));
5451 $blogs = DB::getResult($queryBlogs);
5453 if ( $mode == 'category' )
5455 if ( $blogs->rowCount() > 1 )
5459 foreach ( $blogs as $rBlog )
5461 if ( isset($multipleBlogs) && !empty($multipleBlogs) )
5463 echo '<optgroup label="' . Entity::hsc($rBlog['bname']) . "\">\n";
5466 // show selection to create new category when allowed/wanted
5469 // check if allowed to do so
5470 if ( $member->blogAdminRights($rBlog['bnumber']) )
5472 echo '<option value="newcat-' . $rBlog['bnumber'] . '">' . _ADD_NEWCAT . "</option>\n";
5476 // 2. for each category in that blog
5477 $catQuery = "SELECT cname, catid FROM %s WHERE cblog=%d ORDER BY cname ASC;";
5478 $catQuery = sprintf($catQuery, sql_table('category'), (integer) $rBlog['bnumber']);
5479 $categories = DB::getResult($catQuery);
5480 foreach ( $categories as $rCat )
5482 if ( $rCat['catid'] == $selected )
5484 $selectText = ' selected="selected" ';
5490 echo '<option value="' . $rCat['catid'] . '" ' . $selectText . '>' . Entity::hsc($rCat['cname']) . "</option>\n";
5493 if ( isset($multipleBlogs) && !empty($multipleBlogs) )
5501 foreach ( $blogs as $rBlog )
5503 echo '<option value="' . $rBlog['bnumber'] . '"';
5504 if ( $rBlog['bnumber'] == $selected )
5506 echo '<option value="' . $rBlog['bnumber'] . '" selected="selected">' . Entity::hsc($rBlog['bname']) . "</option>\n";
5510 echo '<option value="' . $rBlog['bnumber'] . '">' . Entity::hsc($rBlog['bname']) . "</option>\n";