-

-

-

-$mode = (isset($_REQUEST['mode'])) ? htmlspecialchars($_REQUEST['mode']) : '';

-$group_id = (isset($_REQUEST['g'])) ? intval($_REQUEST['g']) : '';

-if (isset($_POST['addgroup']))

- $action = 'addgroup';

-$start = (isset($_GET['start']) && $action == 'member') ? intval($_GET['start']) : 0;

-$start_mod = (isset($_GET['start']) && $action == 'leader') ? intval($_GET['start']) : 0;

-

-

-// Grab basic data for group, if group_id is set since it's used

-// in several places below

-

-

- case 'approve':

- if (!empty($_POST['mark']))

- {

- $id_ary = array_map('intval', $_POST['mark']);

-

- $sql = 'UPDATE ' . USER_GROUP_TABLE . '

- SET user_pending = 1

- WHERE user_id IN (' . implode(', ', $id_ary) . ")

- AND group_id = $group_id";

- $db->sql_query($sql);

-

- $sql = 'SELECT username

- FROM ' . USERS_TABLE . '

- WHERE user_id IN (' . implode(', ', $id_ary) . ')';

- $result = $db->sql_query($sql);

-

- $usernames = array();

- while ($row = $db->sql_fetchrow($result))

- {

- $usernames[] = $row['username'];

- }

- $db->sql_freeresult($result);

-

- add_log('admin', 'LOG_GROUP_APPROVE', $group_name, implode(', ', $usernames));

- unset($usernames);

- trigger_error($user->lang['USERS_APPROVED']);

- }

- case 'default':

- $id_ary = (!empty($_POST['mark'])) ? array_map('intval', $_POST['mark']) : false;

- switch (SQL_LAYER)

- case 'mysql':

- case 'mysql4':

- $start = 0;

- do

- {

- $sql = 'SELECT user_id

- FROM ' . USER_GROUP_TABLE . "

- WHERE group_id = $group_id

- ORDER BY user_id

- LIMIT $start, 200";

- $result = $db->sql_query($sql);

-

- $user_id_ary = array();

- if ($row = $db->sql_fetchrow($result))

- {

- do

- {

- $user_id_ary[] = $row['user_id'];

- }

- while ($row = $db->sql_fetchrow($result));

-

- $sql = 'UPDATE ' . USERS_TABLE . "

- SET group_id = $group_id, user_colour = '$group_colour', user_rank = $group_rank

- WHERE user_id IN (" . implode(', ', $user_id_ary) . ')';

- $db->sql_query($sql);

-

- $start = (sizeof($user_id_ary) < 200) ? 0 : $start + 200;

- }

- else

- {

- $start = 0;

- }

- $db->sql_freeresult($result);

- }

- while ($start);

- break;

-

- default:

- $sql = 'UPDATE ' . USERS_TABLE . "

- SET group_id = $group_id, user_colour = '$group_color', user_rank = $group_rank

- WHERE user_id IN (

- SELECT user_id

- FROM " . USER_GROUP_TABLE . "

- WHERE group_id = $group_id

- )";

- $db->sql_query($sql);

- break;

- add_log('admin', 'LOG_GROUP_DEFAULTS', $group_name);

-

- case 'addgroup':

- if ($group_type != GROUP_SPECIAL)

- {

- $group_name = (!empty($_POST['group_name'])) ? stripslashes(htmlspecialchars($_POST['group_name'])) : '';

- $group_type = (!empty($_POST['group_type'])) ? intval($_POST['group_type']) : '';

- }

- $group_description = (!empty($_POST['group_description'])) ? stripslashes(htmlspecialchars($_POST['group_description'])) : '';

- $group_colour2 = (!empty($_POST['group_colour'])) ? stripslashes(htmlspecialchars($_POST['group_colour'])) : '';

- $group_avatar2 = (!empty($_POST['group_avatar'])) ? stripslashes(htmlspecialchars($_POST['group_avatar'])) : '';

- $group_rank2 = (isset($_POST['group_rank'])) ? intval($_POST['group_rank']) : '';

-

- // Check data

- if (!strlen($group_name) || strlen($group_name) > 40)

- {

- $error[] = (!strlen($group_name)) ? $user->lang['GROUP_ERR_USERNAME'] : $user->lang['GROUP_ERR_USER_LONG'];

- }

-

- if (strlen($group_description) > 255)

- {

- $error[] = $user->lang['GROUP_ERR_DESC_LONG'];

- }

-

- if ($group_type < GROUP_OPEN || $group_type > GROUP_FREE)

- {

- $error[] = $user->lang['GROUP_ERR_TYPE'];

- }

-

- // Update DB

- if (!sizeof($error))

- // Update group preferences

- $sql_ary = array(

- 'group_name' => (string) $group_name,

- 'group_description' => (string) $group_description,

- 'group_type' => (int) $group_type,

- 'group_rank' => (int) $group_rank2,

- 'group_colour' => (string) $group_colour2,

- );

-

- $sql = ($action == 'edit') ? 'UPDATE ' . GROUPS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $sql_ary) . " WHERE group_id = $group_id" : 'INSERT INTO ' . GROUPS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary);

- $db->sql_query($sql);

-

- if ($group_id && ($group_colour != $group_colour2 || $group_rank != $group_rank2 || $group_avatar != $group_avatar2))

- {

- $sql_ary = array(

- 'user_rank' => (string) $group_rank2,

- 'user_colour' => (string) $group_colour2,

- );

-

- $sql = 'UPDATE ' . USERS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $sql_ary) . "

- WHERE group_id = $group_id";

- $db->sql_query($sql);

- }

-

- $log = ($action == 'edit') ? 'LOG_GROUP_UPDATED' : 'LOG_GROUP_CREATED';

- add_log('admin', $log, $group_name);

-

-

- $group_colour = &$group_colour2;

- $group_rank = &$group_rank2;

- $group_avatar = &$group_avatar2;

-<h1><?php echo $user->lang['MANAGE'] . ' : <i>' . $group_name . '</i>'; ?></h1>

- $username_ary = (!empty($_POST['usernames'])) ? array_unique(explode("\n", $_POST['usernames'])) : '';

- if (!$username_ary)

- {

- trigger_error($user->lang['NO_USERS']);

- }

-

- $sql_where = array();

- foreach ($username_ary as $username)

- {

- if ($username = trim($username))

- {

- $sql_where[] = "'$username'";

- }

- }

- unset($username_ary);

-

- // Grab the user ids

- $sql = 'SELECT user_id, username

- FROM ' . USERS_TABLE . '

- WHERE username IN (' . implode(', ', $sql_where) . ')';

- $result = $db->sql_query($sql);

-

- if (!($row = $db->sql_fetchrow($result)))

- $id_ary = $username_ary = array();

- do

- {

- $username_ary[$row['user_id']] = $row['username'];

- $id_ary[] = $row['user_id'];

- }

- while ($row = $db->sql_fetchrow($result));

- $db->sql_freeresult($result);

-

- // Remove users who are already members of this group

- $sql = 'SELECT user_id, group_leader

- FROM ' . USER_GROUP_TABLE . '

- WHERE user_id IN (' . implode(', ', $id_ary) . ")

- AND group_id = $group_id";

- $result = $db->sql_query($sql);

-

- $add_id_ary = $update_id_ary = array();

- if ($row = $db->sql_fetchrow($result))

- {

- do

- {

- $add_id_ary[] = $row['user_id'];

-

- if ($action == 'addleaders' && !$row['group_leader'])

- {

- $update_id_ary[] = $row['user_id'];

- }

- }

- while ($row = $db->sql_fetchrow($result));

- }

- $db->sql_freeresult($result);

-

- // Do all the users exist in this group?

- $add_id_ary = array_diff($id_ary, $add_id_ary);

- unset($id_ary);

-

- // If we have no users

- if (!sizeof($add_id_ary) && !sizeof($update_id_ary))

- {

- trigger_error($user->lang['GROUP_USERS_EXIST']);

- }

-

- if (sizeof($add_id_ary))

- {

- $group_leader = ($action == 'addleaders') ? 1 : 0;

-

- // Insert the new users

- switch (SQL_LAYER)

- {

- case 'mysql':

- case 'mysql4':

- $sql = 'INSERT INTO ' . USER_GROUP_TABLE . " (user_id, group_id, group_leader)

- VALUES " . implode(', ', preg_replace('#^([0-9]+)$#', "(\\1, $group_id, $group_leader)", $add_id_ary));

- $db->sql_query($sql);

- break;

-

- case 'mssql':

- case 'sqlite':

- $sql = 'INSERT INTO ' . USER_GROUP_TABLE . " (user_id, group_id, group_leader)

- " . implode(' UNION ALL ', preg_replace('#^([0-9]+)$#', "(\\1, $group_id, $group_leader)", $add_id_ary));

- $db->sql_query($sql);

- break;

-

- default:

- foreach ($add_id_ary as $user_id)

- {

- $sql = 'INSERT INTO ' . USER_GROUP_TABLE . " (user_id, group_id, group_leader)

- VALUES ($user_id, $group_id, $group_leader)";

- $db->sql_query($sql);

- }

- break;

- }

-

- $sql = 'UPDATE ' . USERS_TABLE . "

- SET user_permissions = ''

- WHERE user_id IN (" . implode(', ', $add_id_ary) . ')';

- $db->sql_query($sql);

- }

-

- $usernames = array();

- if (sizeof($update_id_ary))

- {

- $sql = 'UPDATE ' . USER_GROUP_TABLE . '

- SET group_leader = 1

- WHERE user_id IN (' . implode(', ', $update_id_ary) . ")

- AND group_id = $group_id";

- $db->sql_query($sql);

-

- foreach ($update_id_ary as $id)

- {

- $usernames[] = $username_ary[$id];

- }

- }

- else

- {

- foreach ($add_id_ary as $id)

- {

- $usernames[] = $username_ary[$id];

- }

- }

- unset($username_ary);

-

- // Update user settings (color, rank) if applicable

- // TODO

- // Do not update users who are not approved

- if (!empty($_POST['default']))

- $sql = 'UPDATE ' . USERS_TABLE . "

- SET group_id = $group_id, user_colour = '$group_colour', user_rank = " . intval($group_rank) . "

- WHERE user_id IN (" . implode(', ', array_merge($add_id_ary, $update_id_ary)) . ")";

- $db->sql_query($sql);

- unset($update_id_ary);

- unset($add_id_ary);

- $log = ($mode == 'addleaders') ? 'LOG_MODS_ADDED' : 'LOG_USERS_ADDED';

- add_log('admin', $log, $group_name, implode(', ', $usernames));

-

- $message = ($mode == 'addleaders') ? 'GROUP_MODS_ADDED' : 'GROUP_USERS_ADDED';

-

- <td class="cat" colspan="5" align="right">Select option: <select name="action"><option value="approve">Approve</option><option value="default">Default</option><option value="delete">Delete</option></select> &nbsp; <input class="btnmain" type="submit" name="update" value="<?php echo $user->lang['UPDATE_MARKED']; ?>" /> &nbsp; <input class="btnmain" type="submit" name="update" value="<?php echo $user->lang['UPDATE_ALL']; ?>" />&nbsp;</td>

- <td class="cat" colspan="5" align="right">Select option: <select name="action"><option value="approve">Approve</option><option value="default">Default</option><option value="delete">Delete</option></select> &nbsp; <input class="btnmain" type="submit" name="update" value="<?php echo $user->lang['UPDATE_MARKED']; ?>" /> &nbsp; <input class="btnmain" type="submit" name="update" value="<?php echo $user->lang['UPDATE_ALL']; ?>" />&nbsp;</td>

- <td class="cat" colspan="5" align="right">Create new group: <input class="post" type="text" name="group_name" maxlength="30" /> <input class="btnmain" type="submit" name="addgroup" value="<?php echo $user->lang['SUBMIT']; ?>" /></td>

- echo ($row['group_type'] != GROUP_SPECIAL) ? "<a href=\"admin_groups.$phpEx$SID&amp;mode=$mode&amp;&amp;action=delete&amp;g=$group_id\">" . $user->lang['DELETE'] . '</a>' : $user->lang['DELETE'];

-/***************************************************************************

- * functions_ucp.php

- * -------------------

- * begin : Saturday, Feb 13, 2001

- * copyright : (C) 2001 The phpBB Group

- * email : support@phpbb.com

- *

- * $Id$

- *

- ***************************************************************************/

-

-/***************************************************************************

- *

- * This program is free software; you can redistribute it and/or modify

- * it under the terms of the GNU General Public License as published by

- * the Free Software Foundation; either version 2 of the License, or

- * (at your option) any later version.

- *

- ***************************************************************************/

-