diff options
Diffstat (limited to 'phpBB/admin/admin_board.php')
-rw-r--r-- | phpBB/admin/admin_board.php | 162 |
1 files changed, 85 insertions, 77 deletions
diff --git a/phpBB/admin/admin_board.php b/phpBB/admin/admin_board.php index 56ddc946d7..ec5d4aeed1 100644 --- a/phpBB/admin/admin_board.php +++ b/phpBB/admin/admin_board.php @@ -8,120 +8,132 @@ * * $Id$ * - * ***************************************************************************/ -define('IN_PHPBB', 1); +/*************************************************************************** + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + ***************************************************************************/ -if( !empty($setmodules) ) +if ( !empty($setmodules) ) { + if ( !$acl->get_acl_admin('general') ) + { + return; + } + $file = basename(__FILE__); - $module['General']['Configuration'] = "$file?mode=config"; + $module['General']['Avatar_Setup'] = "$file?mode=avatars"; + $module['General']['Basic_Config'] = "$file?mode=basic"; + $module['General']['Cookie_Parameters'] = "$file?mode=cookies"; + $module['General']['Default_Settings'] = "$file?mode=gendefs"; + $module['Users']['Default_Settings'] = "$file?mode=userdefs"; return; } // // Let's set the root dir for phpBB // +define('IN_PHPBB', 1); $phpbb_root_path = "../"; require($phpbb_root_path . 'extension.inc'); require('pagestart.' . $phpEx); -include($phpbb_root_path . 'includes/functions_selects.'.$phpEx); + +if ( !$acl->get_acl_admin('general') ) +{ + return; +} // // Pull all config data // $sql = "SELECT * FROM " . CONFIG_TABLE; -if(!$result = $db->sql_query($sql)) -{ - message_die(CRITICAL_ERROR, "Could not query config information in admin_board", "", __LINE__, __FILE__, $sql); -} -else +$result = $db->sql_query($sql); + +while ( $row = $db->sql_fetchrow($result) ) { - while( $row = $db->sql_fetchrow($result) ) + $config_name = $row['config_name']; + $config_value = $row['config_value']; + $default_config[$config_name] = $config_value; + + $new[$config_name] = ( isset($HTTP_POST_VARS[$config_name]) ) ? $HTTP_POST_VARS[$config_name] : $default_config[$config_name]; + + if ( isset($HTTP_POST_VARS['submit']) ) { - $config_name = $row['config_name']; - $config_value = $row['config_value']; - $default_config[$config_name] = $config_value; - - $new[$config_name] = ( isset($HTTP_POST_VARS[$config_name]) ) ? $HTTP_POST_VARS[$config_name] : $default_config[$config_name]; - - if( isset($HTTP_POST_VARS['submit']) ) - { - $sql = "UPDATE " . CONFIG_TABLE . " SET - config_value = '" . str_replace("\'", "''", $new[$config_name]) . "' - WHERE config_name = '$config_name'"; - if( !$db->sql_query($sql) ) - { - message_die(GENERAL_ERROR, "Failed to update general configuration for $config_name", "", __LINE__, __FILE__, $sql); - } - } + $sql = "UPDATE " . CONFIG_TABLE . " SET + config_value = '" . str_replace("\'", "''", $new[$config_name]) . "' + WHERE config_name = '$config_name'"; + $db->sql_query($sql); } +} - if( isset($HTTP_POST_VARS['submit']) ) - { - $message = $lang['Config_updated'] . "<br /><br />" . sprintf($lang['Click_return_config'], "<a href=\"" . append_sid("admin_board.$phpEx") . "\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_admin_index'], "<a href=\"" . append_sid("index.$phpEx?pane=right") . "\">", "</a>"); +if ( isset($HTTP_POST_VARS['submit']) ) +{ + $message = $lang['Config_updated'] . "<br /><br />" . sprintf($lang['Click_return_config'], '<a href="' . "admin_board.$phpEx$SID" . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_admin_index'], '<a href="' . "index.$phpEx$SID?pane=right" . '">', '</a>'); - message_die(GENERAL_MESSAGE, $message); - } + message_die(MESSAGE, $message); } -$style_select = style_select($new['default_style'], 'default_style', "../templates"); -$lang_select = language_select($new['default_lang'], 'default_lang', "../language"); +$style_select = style_select($new['default_style'], 'default_style', '../templates'); +$lang_select = language_select($new['default_lang'], 'default_lang', '../language'); $timezone_select = tz_select($new['board_timezone'], 'board_timezone'); -$disable_board_yes = ( $new['board_disable'] ) ? "checked=\"checked\"" : ""; -$disable_board_no = ( !$new['board_disable'] ) ? "checked=\"checked\"" : ""; +$disable_board_yes = ( $new['board_disable'] ) ? 'checked="checked"' : ''; +$disable_board_no = ( !$new['board_disable'] ) ? 'checked="checked"' : ''; -$cookie_secure_yes = ( $new['cookie_secure'] ) ? "checked=\"checked\"" : ""; -$cookie_secure_no = ( !$new['cookie_secure'] ) ? "checked=\"checked\"" : ""; +$cookie_secure_yes = ( $new['cookie_secure'] ) ? 'checked="checked"' : ''; +$cookie_secure_no = ( !$new['cookie_secure'] ) ? 'checked="checked"' : ''; $html_tags = $new['allow_html_tags']; -$override_user_style_yes = ( $new['override_user_style'] ) ? "checked=\"checked\"" : ""; -$override_user_style_no = ( !$new['override_user_style'] ) ? "checked=\"checked\"" : ""; +$override_user_style_yes = ( $new['override_user_style'] ) ? 'checked="checked"' : ''; +$override_user_style_no = ( !$new['override_user_style'] ) ? 'checked="checked"' : ''; -$html_yes = ( $new['allow_html'] ) ? "checked=\"checked\"" : ""; -$html_no = ( !$new['allow_html'] ) ? "checked=\"checked\"" : ""; +$html_yes = ( $new['allow_html'] ) ? 'checked="checked"' : ''; +$html_no = ( !$new['allow_html'] ) ? 'checked="checked"' : ''; -$bbcode_yes = ( $new['allow_bbcode'] ) ? "checked=\"checked\"" : ""; -$bbcode_no = ( !$new['allow_bbcode'] ) ? "checked=\"checked\"" : ""; +$bbcode_yes = ( $new['allow_bbcode'] ) ? 'checked="checked"' : ''; +$bbcode_no = ( !$new['allow_bbcode'] ) ? 'checked="checked"' : ''; -$activation_none = ( $new['require_activation'] == USER_ACTIVATION_NONE ) ? "checked=\"checked\"" : ""; -$activation_user = ( $new['require_activation'] == USER_ACTIVATION_SELF ) ? "checked=\"checked\"" : ""; -$activation_admin = ( $new['require_activation'] == USER_ACTIVATION_ADMIN ) ? "checked=\"checked\"" : ""; +$activation_none = ( $new['require_activation'] == USER_ACTIVATION_NONE ) ? 'checked="checked"' : ''; +$activation_user = ( $new['require_activation'] == USER_ACTIVATION_SELF ) ? 'checked="checked"' : ''; +$activation_admin = ( $new['require_activation'] == USER_ACTIVATION_ADMIN ) ? 'checked="checked"' : ''; -$board_email_form_yes = ( $new['board_email_form'] ) ? "checked=\"checked\"" : ""; -$board_email_form_no = ( !$new['board_email_form'] ) ? "checked=\"checked\"" : ""; +$board_email_form_yes = ( $new['board_email_form'] ) ? 'checked="checked"' : ''; +$board_email_form_no = ( !$new['board_email_form'] ) ? 'checked="checked"' : ''; -$gzip_yes = ( $new['gzip_compress'] ) ? "checked=\"checked\"" : ""; -$gzip_no = ( !$new['gzip_compress'] ) ? "checked=\"checked\"" : ""; +$gzip_yes = ( $new['gzip_compress'] ) ? 'checked="checked"' : ''; +$gzip_no = ( !$new['gzip_compress'] ) ? 'checked="checked"' : ''; -$privmsg_on = ( !$new['privmsg_disable'] ) ? "checked=\"checked\"" : ""; -$privmsg_off = ( $new['privmsg_disable'] ) ? "checked=\"checked\"" : ""; +$privmsg_on = ( !$new['privmsg_disable'] ) ? 'checked="checked"' : ''; +$privmsg_off = ( $new['privmsg_disable'] ) ? 'checked="checked"' : ''; -$prune_yes = ( $new['prune_enable'] ) ? "checked=\"checked\"" : ""; -$prune_no = ( !$new['prune_enable'] ) ? "checked=\"checked\"" : ""; +$prune_yes = ( $new['prune_enable'] ) ? 'checked="checked"' : ''; +$prune_no = ( !$new['prune_enable'] ) ? 'checked="checked"' : ''; -$smile_yes = ( $new['allow_smilies'] ) ? "checked=\"checked\"" : ""; -$smile_no = ( !$new['allow_smilies'] ) ? "checked=\"checked\"" : ""; +$smile_yes = ( $new['allow_smilies'] ) ? 'checked="checked"' : ''; +$smile_no = ( !$new['allow_smilies'] ) ? 'checked="checked"' : ''; -$sig_yes = ( $new['allow_sig'] ) ? "checked=\"checked\"" : ""; -$sig_no = ( !$new['allow_sig'] ) ? "checked=\"checked\"" : ""; +$sig_yes = ( $new['allow_sig'] ) ? 'checked="checked"' : ''; +$sig_no = ( !$new['allow_sig'] ) ? 'checked="checked"' : ''; -$namechange_yes = ( $new['allow_namechange'] ) ? "checked=\"checked\"" : ""; -$namechange_no = ( !$new['allow_namechange'] ) ? "checked=\"checked\"" : ""; +$namechange_yes = ( $new['allow_namechange'] ) ? 'checked="checked"' : ''; +$namechange_no = ( !$new['allow_namechange'] ) ? 'checked="checked"' : ''; -$avatars_local_yes = ( $new['allow_avatar_local'] ) ? "checked=\"checked\"" : ""; -$avatars_local_no = ( !$new['allow_avatar_local'] ) ? "checked=\"checked\"" : ""; -$avatars_remote_yes = ( $new['allow_avatar_remote'] ) ? "checked=\"checked\"" : ""; -$avatars_remote_no = ( !$new['allow_avatar_remote'] ) ? "checked=\"checked\"" : ""; -$avatars_upload_yes = ( $new['allow_avatar_upload'] ) ? "checked=\"checked\"" : ""; -$avatars_upload_no = ( !$new['allow_avatar_upload'] ) ? "checked=\"checked\"" : ""; +$avatars_local_yes = ( $new['allow_avatar_local'] ) ? 'checked="checked"' : ''; +$avatars_local_no = ( !$new['allow_avatar_local'] ) ? 'checked="checked"' : ''; +$avatars_remote_yes = ( $new['allow_avatar_remote'] ) ? 'checked="checked"' : ''; +$avatars_remote_no = ( !$new['allow_avatar_remote'] ) ? 'checked="checked"' : ''; +$avatars_upload_yes = ( $new['allow_avatar_upload'] ) ? 'checked="checked"' : ''; +$avatars_upload_no = ( !$new['allow_avatar_upload'] ) ? 'checked="checked"' : ''; -$smtp_yes = ( $new['smtp_delivery'] ) ? "checked=\"checked\"" : ""; -$smtp_no = ( !$new['smtp_delivery'] ) ? "checked=\"checked\"" : ""; +$smtp_yes = ( $new['smtp_delivery'] ) ? 'checked="checked"' : ''; +$smtp_no = ( !$new['smtp_delivery'] ) ? 'checked="checked"' : ''; $template->set_filenames(array( "body" => "admin/board_config_body.tpl") @@ -131,10 +143,8 @@ $template->set_filenames(array( // Escape any quotes in the site description for proper display in the text // box on the admin page // -$new['site_desc'] = str_replace('"', '"', $new['site_desc']); -$new['sitename'] = str_replace('"', '"', strip_tags($new['sitename'])); $template->assign_vars(array( - "S_CONFIG_ACTION" => append_sid("admin_board.$phpEx"), + "S_CONFIG_ACTION" => "admin_board.$phpEx$SID", "L_YES" => $lang['Yes'], "L_NO" => $lang['No'], @@ -232,8 +242,8 @@ $template->assign_vars(array( "SERVER_NAME" => $new['server_name'], "SCRIPT_PATH" => $new['script_path'], "SERVER_PORT" => $new['server_port'], - "SITENAME" => $new['sitename'], - "SITE_DESCRIPTION" => $new['site_desc'], + "SITENAME" => htmlentities($new['sitename']), + "SITE_DESCRIPTION" => htmlentities($new['site_desc']), "S_DISABLE_BOARD_YES" => $disable_board_yes, "S_DISABLE_BOARD_NO" => $disable_board_no, "ACTIVATION_NONE" => USER_ACTIVATION_NONE, @@ -309,8 +319,6 @@ $template->assign_vars(array( "COPPA_FAX" => $new['coppa_fax']) ); -$template->pparse("body"); - include('page_footer_admin.'.$phpEx); -?> +?>
\ No newline at end of file |