upload.php

Go to the documentation of this file.

<?php
/*
 * @author Anakeen
 * @license http://creativecommons.org/licenses/by-nc-sa/2.0/fr/ Anakeen - licence CC
 * @package FDL
*/
/**
 * Generated Header (not documented yet)
 *
 * @author Anakeen 2000
 * @version $Id: upload.php,v 1.10 2004/03/22 15:21:40 eric Exp $
 * @license http://creativecommons.org/licenses/by-nc-sa/2.0/fr/ Anakeen - licence CC
 * @package FDL
 * @subpackage ACCESS
 */
/**
 */
// ---------------------------------------------------------------
// $Id: upload.php,v 1.10 2004/03/22 15:21:40 eric Exp $
// $Source: /home/cvsroot/anakeen/freedom/core/Action/Access/upload.php,v $
// ---------------------------------------------------------------
include_once ("Class.QueryDb.php");
include_once ("Class.Application.php");
include_once ("Class.User.php");
include_once ("Class.Acl.php");
include_once ("Class.Domain.php");
include_once ("Class.MailAccount.php");
include_once ("Class.Permission.php");
include_once ("Lib.Http.php");
// -----------------------------------
function upload(&$action)
{
    // -----------------------------------
    global $_FILES;
    $action->log->debug("UPLOAD");
    // select the first user if not set
    // What user are we working on ? ask session.
    $filename = ($_FILES["upfile"]["tmp_name"]);
    
    if (!file_exists($filename)) {
        $action->ExitError("File not found : $filename : " . $_FILES["upfile"]["name"]);
    }
    $content = file($filename);
    
    $tnewacl = array();
    while (list($k, $v) = each($content)) {
        switch (substr($v, 0, 1)) {
            case "U":
                changeuser($action, substr($v, 2));
                break;

            case "A":
                changeacl($action, substr($v, 2));
                break;
        }
    }
    
    redirect($action, "ACCESS", "USER_ACCESS");
}

function changeuser(&$action, $line, $verbose = false)
{
    
    $col = explode("|", $line);
    // eric.brison@local|hb7Qj/yFqxCGs|eric|brison|N|all@local;
    list($uname, $udom) = explode("@", $col[0]);
    $udom = chop($udom);
    $use = new User($action->dbaccess);
    $domain = new Domain($action->dbaccess);
    $domain->Set($udom);
    
    $use->SetLogin($uname, $domain->iddomain);
    $use->password = $col[1];
    $use->firstname = $col[2];
    $use->lastname = $col[3];
    $use->isgroup = $col[4];
    if ($use->IsAffected()) {
        $err = $use->Modify(true);
        if ($err != "") print $err;
        
        if ($verbose) printf(_("user %s %s has been modified\n") , $use->firstname, $use->lastname);
    } else {
        $use->iddomain = $domain->iddomain;
        $use->login = $uname;
        $err = $use->Add(true);
        if ($err != "") print $err;
        if ($verbose) printf(_("user %s %s has been added\n") , $use->firstname, $use->lastname);
    }
    // add mail account if needed
    if ($use->iddomain != 1) {
        $mailapp = new Application();
        if ($mailapp->Exists("MAILADMIN")) {
            $mailapp->Set("MAILADMIN", $action->parent);
            $uacc = new MailAccount($mailapp->GetParam("MAILDB") , $use->id);
            $uacc->iddomain = $use->iddomain;
            $uacc->iduser = $use->id;
            $uacc->login = $use->login;
            if ($uacc->isAffected()) $uacc->Modify(true);
            else $uacc->Add(true);
        }
    }
    // add group
    $groups = explode(";", $col[5]);
    
    $group = new Group($action->dbaccess, $use->id);
    if ($group->isAffected()) $group->delete(true);
    
    while (list($kg, $gd) = each($groups)) {
        
        list($grname, $grdomain) = explode("@", $gd);
        
        $gr = new User($action->dbaccess);
        $gd = new Domain($action->dbaccess);
        $grdomain = chop($grdomain);
        $gd->Set($grdomain);
        
        $gr->SetLogin($grname, $gd->iddomain);
        if ($gr->IsAffected()) {
            $group->iduser = $use->id;
            $group->idgroup = $gr->id;
            $group->add(true);
        }
    }
}
function changeacl(&$action, $line, $verbose = false)
{
    // INCIDENT|all@cir.fr|INCIDENT_READ;INCIDENT
    $col = explode("|", $line);
    if (!is_array($col)) continue;
    if (count($col) != 3) continue;
    if (substr($line, 0, 1) == "#") continue; // comment line
    $app = new Application($action->dbaccess);
    $app->Set($col[0], $action->parent);
    
    list($uname, $udom) = explode("@", $col[1]);
    $udom = chop($udom);
    
    $use = new User($action->dbaccess);
    $domain = new Domain($action->dbaccess);
    $domain->Set($udom);
    
    $use->SetLogin($uname, $domain->iddomain);
    // update the permission in database
    // first remove then add
    $perm = new Permission($action->dbaccess, array(
        $use->id,
        $app->id
    ));
    if (!$perm->IsAffected()) {
        $perm->Affect(array(
            "id_user" => $use->id,
            "id_application" => $app->id
        ));
    }
    $taclname = explode(";", $col[2]);
    
    if (count($taclname) > 0) {
        $perm->Delete();
        $taclid = array();
        foreach ($taclname as $aclname) {
            $unp = false; // is negative privilege ?
            $aclname = chop($aclname);
            if (substr($aclname, 0, 1) == "-") {
                $aclname = substr($aclname, 1);
                $unp = true;
            };
            // search acl id
            $acl = new Acl($action->dbaccess);
            $acl->Set($aclname, $app->id);
            
            if ($acl->id == "") continue;
            
            if ($unp) {
                $taclid[] = - $acl->id;
            } else {
                $taclid[] = $acl->id;
            }
        }
        
        foreach ($taclid as $aclid) {
            $perm->id_acl = $aclid;
            
            if ($aclid != 0) {
                //print "ADD "."-".$perm->id_application."-". $perm->id_user."-". $perm->id_acl."<BR>";
                $err = $perm->Add();
                if ($err != "") print $err;
                if ($verbose) printf(_("add acl %s for %s %s\n") , $perm->id_acl, $use->firstname, $use->lastname);
            }
        }
    }
}
?>