forked from extern/egroupware
989 lines
39 KiB
PHP
989 lines
39 KiB
PHP
<?php
|
|
/**************************************************************************\
|
|
* phpGroupWare *
|
|
* http://www.phpgroupware.org *
|
|
* -------------------------------------------- *
|
|
* This program is free software; you can redistribute it and/or modify it *
|
|
* under the terms of the GNU General Public License as published by the *
|
|
* Free Software Foundation; either version 2 of the License, or (at your *
|
|
* option) any later version. *
|
|
\**************************************************************************/
|
|
|
|
/* $Id$ */
|
|
|
|
$d1 = strtolower(substr($phpgw_info["server"]["api_dir"],0,3));
|
|
$d2 = strtolower(substr($phpgw_info["server"]["server_root"],0,3));
|
|
if($d1 == "htt" || $d1 == "ftp" || $d2 == "htt" || $d2 == "ftp") {
|
|
echo "Failed attempt to break in via an old Security Hole!<br>\n";
|
|
exit;
|
|
} unset($d1);unset($d2);
|
|
|
|
// Since LDAP will return system accounts, there are a few we don't want to login.
|
|
$phpgw_info["server"]["global_denied_users"] = array('root' => True,
|
|
'bin' => True,
|
|
'daemon' => True,
|
|
'adm' => True,
|
|
'lp' => True,
|
|
'sync' => True,
|
|
'shutdown' => True,
|
|
'halt' => True,
|
|
'mail' => True,
|
|
'news' => True,
|
|
'uucp' => True,
|
|
'operator' => True,
|
|
'games' => True,
|
|
'gopher' => True,
|
|
'nobody' => True,
|
|
'xfs' => True,
|
|
'pgsql' => True,
|
|
'mysql' => True,
|
|
'postgres' => True,
|
|
'ftp' => True,
|
|
'gdm' => True,
|
|
'named' => True);
|
|
|
|
// I had to create this has a wrapper, becuase the phpgw.inc.php files needs it before the classes
|
|
// are finished loading (jengo)
|
|
function filesystem_separator()
|
|
{
|
|
if (PHP_OS == "Windows" || PHP_OS == "OS/2") {
|
|
return "\\";
|
|
} else {
|
|
return "/";
|
|
}
|
|
}
|
|
|
|
class common
|
|
{
|
|
var $phpgw;
|
|
var $iv = "";
|
|
var $key = "";
|
|
var $crypto;
|
|
|
|
// connect to the ldap server and return a handle
|
|
function ldapConnect($host = "", $dn = "", $passwd = "")
|
|
{
|
|
global $phpgw_info;
|
|
|
|
if (! $host) {
|
|
$host = $phpgw_info["server"]["ldap_host"];
|
|
}
|
|
|
|
if (! $dn) {
|
|
$dn = $phpgw_info["server"]["ldap_root_dn"];
|
|
}
|
|
|
|
if (! $passwd) {
|
|
$passwd = $phpgw_info["server"]["ldap_root_passwd"];
|
|
}
|
|
|
|
|
|
// connect to ldap server
|
|
if (! $ds = ldap_connect($host)) {
|
|
printf("<b>Error: Can't connect to LDAP server %s!</b><br>",$host);
|
|
return False;
|
|
}
|
|
|
|
// bind as admin, we not to able to do everything
|
|
if (! ldap_bind($ds,$dn,$passwd)) {
|
|
printf("<b>Error: Can't bind to LDAP server: %s!</b><br>",$dn);
|
|
return False;
|
|
}
|
|
|
|
return $ds;
|
|
}
|
|
|
|
function randomstring($size)
|
|
{
|
|
$s = "";
|
|
srand((double)microtime()*1000000);
|
|
$random_char = array("0","1","2","3","4","5","6","7","8","9","a","b","c","d","e","f",
|
|
"g","h","i","j","k","l","m","n","o","p","q","r","s","t","u","v",
|
|
"w","x","y","z","A","B","C","D","E","F","G","H","I","J","K","L",
|
|
"M","N","O","P","Q","R","S","T","U","V","W","X","Y","Z");
|
|
|
|
for ($i=0; $i<$size; $i++) {
|
|
$s .= $random_char[rand(1,61)];
|
|
}
|
|
return $s;
|
|
}
|
|
|
|
// Look at the note towards the top of this file (jengo)
|
|
function filesystem_separator()
|
|
{
|
|
return filesystem_separator();
|
|
}
|
|
|
|
function error_list($error)
|
|
{
|
|
$html_error = '<table border="0" width="50%"><tr><td align="right"><b>' . lang("error") . '</b>: </td><td align="left">' . $error[0] . '</td></tr>';
|
|
|
|
for ($i=1; $i<count($error); $i++) {
|
|
$html_error .= '<tr><td> </td><td align="left">' . $error[$i] . '</td></tr>';
|
|
}
|
|
return $html_error . '</table>';
|
|
}
|
|
|
|
function check_owner($record,$link,$label,$extravars = "")
|
|
{
|
|
global $phpgw, $phpgw_info;
|
|
|
|
$s = '<a href="' . $phpgw->link($link,$extravars) . '"> ' . lang($label) . ' </a>';
|
|
if (ereg("^[0-9]+$",$record)) {
|
|
if ($record != $phpgw_info["user"]["account_id"]) {
|
|
$s = " ";
|
|
}
|
|
} else {
|
|
if ($record != $phpgw_info["user"]["userid"]) {
|
|
$s = " ";
|
|
}
|
|
}
|
|
|
|
return $s;
|
|
}
|
|
|
|
function display_fullname($lid, $firstname, $lastname)
|
|
{
|
|
if (! $firstname && ! $lastname) {
|
|
$s = $lid;
|
|
}
|
|
if (! $firstname && $lastname) {
|
|
$s = $lastname;
|
|
}
|
|
if ($firstname && ! $lastname) {
|
|
$s = $firstname;
|
|
}
|
|
if ($firstname && $lastname) {
|
|
$s = "$lastname, $firstname";
|
|
}
|
|
return $s;
|
|
}
|
|
|
|
function grab_owner_name($id)
|
|
{
|
|
global $phpgw;
|
|
$phpgw->db->query("select account_lid,account_firstname,account_lastname from accounts where account_id=".$id,__LINE__,__FILE__);
|
|
$phpgw->db->next_record();
|
|
|
|
return $phpgw->common->display_fullname($phpgw->db->f("account_lid"),$phpgw->db->f("account_firstname"),$phpgw->db->f("account_lastname"));
|
|
}
|
|
|
|
function create_tabs($tabs, $selected, $fontsize = "")
|
|
{
|
|
global $phpgw_info;
|
|
$output_text = '<table border="0" cellspacing="0" cellpadding="0"><tr>';
|
|
$ir = $phpgw_info["server"]["images_dir"];
|
|
|
|
if ($fontsize) {
|
|
$fs = '<font size="' . $fontsize . '">';
|
|
$fse = '</font>';
|
|
}
|
|
|
|
$i = 1;
|
|
while ($tab = each($tabs)) {
|
|
if ($tab[0] == $selected) {
|
|
if ($i == 1) {
|
|
$output_text .= '<td align="right"><img src="' . $ir . '/tabs-start1.gif"></td>';
|
|
}
|
|
|
|
$output_text .= '<td align="left" background="' . $ir . '/tabs-bg1.gif"> <b><a href="'
|
|
. $tab[1]["link"] . '" class="tablink">' . $fs . $tab[1]["label"]
|
|
. $fse . '</a></b> </td>';
|
|
if ($i == count($tabs)) {
|
|
$output_text .= '<td align="left"><img src="' . $ir . '/tabs-end1.gif"></td>';
|
|
} else {
|
|
$output_text .= '<td align="left"><img src="' . $ir . '/tabs-sepr.gif"></td>';
|
|
}
|
|
} else {
|
|
if ($i == 1) {
|
|
$output_text .= '<td align="right"><img src="' . $ir . '/tabs-start0.gif"></td>';
|
|
}
|
|
$output_text .= '<td align="left" background="' . $ir . '/tabs-bg0.gif"> <b><a href="'
|
|
. $tab[1]["link"] . '" class="tablink">' . $fs . $tab[1]["label"] . $fse
|
|
. '</a></b> </td>';
|
|
if (($i + 1) == $selected) {
|
|
$output_text .= '<td align="left"><img src="' . $ir . '/tabs-sepl.gif"></td>';
|
|
} else if ($i == $selected || $i != count($tabs)) {
|
|
$output_text .= '<td align="left"><img src="' . $ir . '/tabs-sepm.gif"></td>';
|
|
} else if ($i == count($tabs)) {
|
|
if ($i == $selected) {
|
|
$output_text .= '<td align="left"><img src="' . $ir . '/tabs-end1.gif"></td>';
|
|
} else {
|
|
$output_text .= '<td align="left"><img src="' . $ir . '/tabs-end0.gif"></td>';
|
|
}
|
|
} else {
|
|
if ($i != count($tabs)) {
|
|
$output_text .= '<td align="left"><img src="' . $ir . '/tabs-sepr.gif"></td>';
|
|
}
|
|
}
|
|
}
|
|
$i++;
|
|
$output_text .= "\n";
|
|
}
|
|
$output_text .= "</table>\n";
|
|
return $output_text;
|
|
}
|
|
|
|
function show_icon(&$tpl, $td_width, $appname, $description = "")
|
|
{
|
|
global $phpgw_info, $colspan, $phpgw;
|
|
|
|
if ($appname && (($appname=="home" || $appname=="logout" || $appname == "print" || $appname == "preferences")
|
|
|| ($phpgw_info["user"]["apps"][$appname]))) {
|
|
|
|
if (isset($phpgw_info["flags"]["navbar_target"]) && $phpgw_info["flags"]["navbar_target"]) {
|
|
$target = ' target="' . $phpgw_info["flags"]["navbar_target"] . '"';
|
|
if ($appname == "logout") {
|
|
$target = ' target="_top"';
|
|
}
|
|
} else {
|
|
$target = "";
|
|
}
|
|
|
|
if (isset($colspan) && $colspan) {
|
|
$colspan++;
|
|
} else {
|
|
$colspan = 1;
|
|
}
|
|
|
|
if (!isset($description) || !$description) {
|
|
$description = $phpgw_info["apps"][$appname]["title"];
|
|
}
|
|
|
|
$urlbasename = $phpgw_info["server"]["webserver_url"];
|
|
|
|
if ($appname == "home") {
|
|
$output_text = "<A href=\"" . $phpgw->link($urlbasename."/index.php");
|
|
} elseif ($appname == "logout") {
|
|
$output_text = "<A href=\"" . $phpgw->link($urlbasename."/logout.php");
|
|
} elseif ($appname == "print") {
|
|
$output_text = "<A href=\"javascript:window.print();\"";
|
|
// Changed by Skeeter 03 Dec 00 2000 GMT
|
|
// This is to allow for the calendar app to have a default page view.
|
|
} elseif ($appname == "calendar") {
|
|
if(isset($phpgw_info["user"]["preferences"]["common"]["defaultcalendar"]))
|
|
$view = $phpgw_info["user"]["preferences"]["common"]["defaultcalendar"];
|
|
else
|
|
$view = "index.php";
|
|
$output_text = "<A href=\"" . $phpgw->link($urlbasename."/$appname/".$view);
|
|
// end change
|
|
} else {
|
|
$output_text = "<A href=\"" . $phpgw->link($urlbasename."/$appname/index.php");
|
|
}
|
|
$output_text .= "\"$target>";
|
|
|
|
if ($phpgw_info["user"]["preferences"]["common"]["navbar_format"] != "text") {
|
|
if ($appname != "home" && $appname != "logout" && $appname != "print") {
|
|
$output_text .= "<img src=\"" . $phpgw_info["server"]["webserver_url"]
|
|
. "/" . $appname . "/templates/".$phpgw_info["server"]["template_set"]."/images" . "/navbar.gif\" border=0 alt=\"" . lang($description) . "\">";
|
|
} else {
|
|
$output_text .= "<img src=\"" . $phpgw_info["server"]["images_dir"]."/$appname.gif\" border=0 alt=\"" . lang($description) . "\">";
|
|
}
|
|
}
|
|
|
|
if (ereg("text",$phpgw_info["user"]["preferences"]["common"]["navbar_format"])) {
|
|
$output_text .= "<br><font size=\"-2\">" . lang($description) . "</font>";
|
|
}
|
|
$output_text .= "</A>";
|
|
$tpl->set_var("td_align","center");
|
|
$tpl->set_var("td_width",$td_width);
|
|
$tpl->set_var("colspan",1);
|
|
$tpl->set_var("value",$output_text);
|
|
$tpl->parse("navbar_columns","navbar_column",True);
|
|
}
|
|
}
|
|
|
|
function navbar($force = False)
|
|
{
|
|
global $cd,$phpgw,$phpgw_info,$colspan,$PHP_SELF;
|
|
|
|
if (($phpgw_info["user"]["preferences"]["common"]["useframes"] && $phpgw_info["server"]["useframes"] == "allowed")
|
|
|| ($phpgw_info["server"]["useframes"] == "always")) {
|
|
if (! $force) {
|
|
return False;
|
|
}
|
|
}
|
|
|
|
$tpl = new Template($phpgw_info["server"]["template_dir"]);
|
|
$tpl->set_file(array("navbar" => "navbar.tpl",
|
|
"navbar_row" => "navbar_row.tpl",
|
|
"navbar_column" => "navbar_column.tpl"
|
|
));
|
|
|
|
$urlbasename = $phpgw_info["server"]["webserver_url"];
|
|
|
|
if (ereg("text",$phpgw_info["user"]["preferences"]["common"]["navbar_format"])) {
|
|
$td_width = "7%";
|
|
} else {
|
|
$td_width = "3%";
|
|
}
|
|
|
|
// This is hardcoded for right now
|
|
if ($phpgw_info["user"]["preferences"]["common"]["navbar_format"] == "text") {
|
|
$tpl->set_var("tr_color","FFFFFF");
|
|
} else {
|
|
$tpl->set_var("tr_color",$phpgw_info["theme"]["navbar_bg"]);
|
|
}
|
|
|
|
$tpl->set_var("td_align","left");
|
|
$tpl->set_var("td_width","");
|
|
$tpl->set_var("value"," " . $phpgw_info["user"]["fullname"] . " - "
|
|
. lang($phpgw->common->show_date(time(),"l")) . " "
|
|
. lang($phpgw->common->show_date(time(),"F")) . " "
|
|
. $phpgw->common->show_date(time(),"d, Y"));
|
|
$tpl->parse("navbar_columns","navbar_column",True);
|
|
|
|
if ($phpgw_info["user"]["preferences"]["common"]["navbar_format"] == "text") {
|
|
$tabs[1]["label"] = "home";
|
|
$tabs[1]["link"] = $phpgw->link($phpgw_info["server"]["webserver_url"] . "/index.php");
|
|
|
|
if ($PHP_SELF == $phpgw_info["server"]["webserver_url"] . "/index.php") {
|
|
$selected = 1;
|
|
}
|
|
|
|
$i = 2;
|
|
|
|
while ($permission = each($phpgw_info["user"]["apps"])) {
|
|
if ($phpgw_info["apps"][$permission[0]]["status"] != 2) {
|
|
$tabs[$i]["label"] = $permission[0];
|
|
$tabs[$i]["link"] = $phpgw->link($phpgw_info["server"]["webserver_url"] . "/" . $permission[0] . "/index.php");
|
|
if (ereg($permission[0],$PHP_SELF)) {
|
|
$selected = $i;
|
|
}
|
|
$i++;
|
|
}
|
|
}
|
|
|
|
$tabs[$i]["label"] = "preferences";
|
|
$tabs[$i]["link"] = $phpgw->link($phpgw_info["server"]["webserver_url"] . "/preferences/index.php");
|
|
if ($PHP_SELF == $phpgw_info["server"]["webserver_url"] . "/preferences/index.php") {
|
|
$selected = $i;
|
|
}
|
|
$i++;
|
|
|
|
$tabs[$i]["label"] = "logout";
|
|
$tabs[$i]["link"] = $phpgw->link($phpgw_info["server"]["webserver_url"] . "/logout.php");
|
|
|
|
$tpl->set_var("td_align","center");
|
|
$tpl->set_var("td_width",$td_width);
|
|
$tpl->set_var("colspan",1);
|
|
$tpl->set_var("value",$this->create_tabs($tabs,$selected,-1));
|
|
$tpl->parse("navbar_columns","navbar_column",True);
|
|
|
|
} else {
|
|
|
|
$this->show_icon(&$tpl,$td_width,"home","home");
|
|
$this->show_icon(&$tpl,$td_width,"print","print");
|
|
|
|
while ($permission = each($phpgw_info["user"]["apps"])) {
|
|
if ($phpgw_info["apps"][$permission[0]]["status"] != 2) {
|
|
$this->show_icon(&$tpl,$td_width,$permission[0]);
|
|
}
|
|
}
|
|
|
|
$this->show_icon(&$tpl,$td_width,"preferences","Preferences");
|
|
$this->show_icon(&$tpl,$td_width,"logout","Logout");
|
|
|
|
} // end else
|
|
|
|
$tpl->parse("navbar_rows","navbar_row",True);
|
|
|
|
if (isset($phpgw_info["user"]["apps"]["admin"]) && isset($phpgw_info["user"]["preferences"]["common"]["show_currentusers"])) {
|
|
if ($phpgw_info["server"]["showpoweredbyon"] != "top") {
|
|
$phpgw->db->query("select count(*) from phpgw_sessions");
|
|
$phpgw->db->next_record();
|
|
$tpl->set_var("td_align","right");
|
|
$tpl->set_var("td_width","");
|
|
$tpl->set_var("tr_color",$phpgw_info["theme"]["bg_color"]);
|
|
$tpl->set_var("value",'<a href="' . $phpgw->link($urlbasename."/admin/currentusers.php")
|
|
. '"> ' . lang("Current users") . ': ' . $phpgw->db->f(0) . '</a>');
|
|
$tpl->set_var("colspan",($colspan+1));
|
|
$tpl->parse("navbar_columns","navbar_column");
|
|
$tpl->parse("navbar_rows","navbar_row",True);
|
|
}
|
|
}
|
|
|
|
if ($phpgw_info["server"]["showpoweredbyon"] == "top") {
|
|
if ( ! $phpgw_info["user"]["preferences"]["common"]["show_currentusers"]) {
|
|
$tpl->set_var("td_align","left");
|
|
$tpl->set_var("td_width","");
|
|
$tpl->set_var("tr_color",$phpgw_info["theme"]["bg_color"]);
|
|
$tpl->set_var("value",lang("Powered by phpGroupWare version x",$phpgw_info["server"]["version"]));
|
|
$tpl->set_var("colspan",$colspan);
|
|
$tpl->parse("navbar_columns","navbar_column");
|
|
$tpl->parse("navbar_rows","navbar_row",True);
|
|
}
|
|
}
|
|
|
|
if ($phpgw_info["server"]["showpoweredbyon"] == "top"
|
|
&& isset($phpgw_info["user"]["apps"]["admin"])
|
|
&& isset($phpgw_info["user"]["preferences"]["common"]["show_currentusers"])) {
|
|
|
|
$tpl->set_var("td_align","left");
|
|
$tpl->set_var("td_width","");
|
|
$tpl->set_var("tr_color",$phpgw_info["theme"]["bg_color"]);
|
|
$tpl->set_var("value",lang("Powered by phpGroupWare version x",$phpgw_info["server"]["version"]));
|
|
$tpl->set_var("colspan",1);
|
|
$tpl->parse("navbar_columns","navbar_column");
|
|
|
|
$phpgw->db->query("select count(*) from phpgw_sessions");
|
|
$phpgw->db->next_record();
|
|
$tpl->set_var("td_align","right");
|
|
$tpl->set_var("td_width","");
|
|
$tpl->set_var("value",'<a href="' . $phpgw->link($urlbasename."/admin/currentusers.php")
|
|
. '"> ' . lang("Current users") . ': ' . $phpgw->db->f(0) . '</a>');
|
|
$tpl->set_var("colspan",($colspan--));
|
|
$tpl->parse("navbar_columns","navbar_column",True);
|
|
$tpl->parse("navbar_rows","navbar_row",True);
|
|
}
|
|
|
|
$tpl->pparse("out","navbar");
|
|
|
|
// Make the wording a little more user friendly
|
|
if ($phpgw_info["user"]["lastpasswd_change"] == 0) {
|
|
echo "<br><center>" . lang("You are required to change your password "
|
|
. "during your first login");
|
|
echo "<br> Click this image on the navbar: <img src=\"".$phpgw_info["server"]["webserver_url"]."/preferences/templates/".$phpgw_info["server"]["template_set"]."/images/navbar.gif\">";
|
|
echo "</center>";
|
|
} else if ($phpgw_info["user"]["lastpasswd_change"] < time() - (86400*30)) {
|
|
echo "<br><CENTER>" . lang("it has been more then x days since you "
|
|
. "changed your password",30) . "</CENTER>";
|
|
}
|
|
if (isset($cd) && $cd) {
|
|
echo "<center>" . check_code($cd) . "</center>";
|
|
}
|
|
|
|
unset($colspan);
|
|
|
|
/**************************************************************************\
|
|
* Load the app include files if the exists *
|
|
\**************************************************************************/
|
|
/* Then the include file */
|
|
if (file_exists ($phpgw_info["server"]["app_inc"]."/header.inc.php")) {
|
|
include($phpgw_info["server"]["app_inc"]."/header.inc.php");
|
|
}
|
|
}
|
|
|
|
function phpgw_header() {
|
|
global $phpgw, $phpgw_info, $HTMLCOMPLAINT;
|
|
|
|
echo "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\"> ";
|
|
echo "<HTML LANG=\"en\">";
|
|
echo "<HEAD>";
|
|
echo "<TITLE>".$phpgw_info["server"]["site_title"]."</TITLE>";
|
|
echo "<META http-equiv=\"Content-Type\" content=\"text/html; charset=\"".$phpgw->translation->translate("charset")."\">";
|
|
echo "<STYLE type=\"text/css\">";
|
|
echo " a {text-decoration:none;}";
|
|
echo " <!--";
|
|
echo " A:link{text-decoration:none}";
|
|
echo " A:visted{text-decoration:none}";
|
|
echo " A:active{text-decoration:none}";
|
|
echo " body { margin-top: 0px; margin-right: 0px; margin-left: 0px}";
|
|
echo " .tablink";
|
|
echo " {";
|
|
echo " color: #000000;";
|
|
echo " }";
|
|
echo " -->";
|
|
echo "</STYLE>";
|
|
echo "</HEAD>";
|
|
if ($phpgw_info["server"]["htmlcompliant"]) {
|
|
echo ("<BODY BGCOLOR=\"".$phpgw_info["theme"]["bg_color"]."\" ALINK=\"".$phpgw_info["theme"]["alink"]."\" LINK=\"".$phpgw_info["theme"]["link"]."\" VLINK=\"".$phpgw_info["theme"]["vlink"]."\">\n");
|
|
} else {
|
|
echo ("<BODY BGCOLOR=\"".$phpgw_info["theme"]["bg_color"]."\">\n");
|
|
}
|
|
if ((! isset($phpgw_info["flags"]["nonavbar"]) || ! $phpgw_info["flags"]["nonavbar"]) && ! $phpgw_info["flags"]["navbar_target"]) {
|
|
$this->navbar();
|
|
}
|
|
}
|
|
|
|
function phpgw_footer()
|
|
{
|
|
global $phpgw, $phpgw_info, $HTMLCOMPLAINT;
|
|
include($phpgw_info["server"]["api_dir"] . "/footer.inc.php");
|
|
|
|
// Clean up mcrypt
|
|
if (is_object($this->crypto)) {
|
|
$this->crypto->cleanup();
|
|
unset($this->crypto);
|
|
}
|
|
}
|
|
|
|
function hex2bin($data)
|
|
{
|
|
$len = strlen($data);
|
|
return pack("H" . $len, $data);
|
|
}
|
|
|
|
function encrypt($data) {
|
|
global $phpgw_info, $phpgw;
|
|
|
|
$data = serialize($data);
|
|
return $phpgw->crypto->encrypt($data);
|
|
}
|
|
|
|
function decrypt($data) {
|
|
global $phpgw_info, $phpgw;
|
|
|
|
$data = $phpgw->crypto->decrypt($data);
|
|
return unserialize($data);
|
|
}
|
|
|
|
function des_cryptpasswd($userpass, $random)
|
|
{
|
|
$lcrypt = "{crypt}";
|
|
$password = crypt($userpass);
|
|
$ldappassword = sprintf("%s%s", $lcrypt, $password);
|
|
|
|
return $ldappassword;
|
|
}
|
|
|
|
function md5_cryptpasswd($userpass, $random)
|
|
{
|
|
$bsalt = "$1$";
|
|
$esalt = "$"; // patch
|
|
$lcrypt = "{crypt}";
|
|
// $modsalt = sprintf("%s%s", $bsalt, $random);
|
|
$modsalt = sprintf("%s%s%s", $bsalt, $random, $esalt); // patch
|
|
$password = crypt($userpass, $modsalt);
|
|
$ldappassword = sprintf("%s%s", $lcrypt, $password);
|
|
|
|
return $ldappassword;
|
|
}
|
|
|
|
function encrypt_password($password)
|
|
{
|
|
global $phpgw, $phpgw_info;
|
|
|
|
if ($phpgw_info["server"]["ldap_encryption_type"] == "DES") {
|
|
$salt = $this->randomstring(2);
|
|
$e_password = $this->des_cryptpasswd($password, $salt);
|
|
}
|
|
if ($phpgw_info["server"]["ldap_encryption_type"] == "MD5") {
|
|
// $salt = $this->randomstring(9);
|
|
$salt = $this->randomstring(8); // patch
|
|
$e_password = $this->md5_cryptpasswd($password, $salt);
|
|
}
|
|
return $e_password;
|
|
}
|
|
|
|
|
|
function hook($location = ""){
|
|
global $phpgw, $phpgw_info;
|
|
|
|
/* First include the apps own hook file */
|
|
$appname = $phpgw_info["flags"]["currentapp"];
|
|
$f = $phpgw_info["server"]["server_root"] . "/" . $appname . "/inc/hook_".$phpgw_info["flags"]["currentapp"];
|
|
if ($location != ""){$f .= "_".$location.".inc.php";}else{$f .= ".inc.php";}
|
|
if (file_exists($f)) {include($f);}
|
|
|
|
/* Then add the rest */
|
|
reset ($phpgw_info["user"]["app_perms"]);
|
|
while (list (, $appname) = each ($phpgw_info["user"]["app_perms"])){
|
|
if ($appname != "" || $appname != $phpgw_info["flags"]["currentapp"]){
|
|
$f = $phpgw_info["server"]["server_root"] . "/" . $appname . "/inc/hook_".$phpgw_info["flags"]["currentapp"];
|
|
if ($location != ""){$f .= "_".$location.".inc.php";}else{$f .= ".inc.php"; }
|
|
if (file_exists($f)) {include($f);}
|
|
}
|
|
}
|
|
}
|
|
|
|
function appsession($data = "##NOTHING##") {
|
|
global $phpgw_info, $phpgw;
|
|
|
|
if ($data == "##NOTHING##") { /* This allows the user to put "" as the value. */
|
|
$phpgw->db->query("select content from phpgw_app_sessions where sessionid = '"
|
|
.$phpgw_info["user"]["sessionid"]."' and loginid = '"
|
|
.$phpgw_info["user"]["userid"]."' and app = '"
|
|
.$phpgw_info["flags"]["currentapp"] . "'",__LINE__,__FILE__);
|
|
if($phpgw->db->num_rows()) {
|
|
$phpgw->db->next_record();
|
|
$data = $phpgw->db->f("content");
|
|
$data = $this->decrypt($data);
|
|
return $data;
|
|
}
|
|
} else {
|
|
$data = $this->encrypt($data);
|
|
$phpgw->db->query("select * from phpgw_app_sessions where sessionid = '"
|
|
. $phpgw_info["user"]["sessionid"] . "' and app = '"
|
|
. $phpgw_info["flags"]["currentapp"] . "'",__LINE__,__FILE__);
|
|
if ($phpgw->db->num_rows()==0) {
|
|
$phpgw->db->query("INSERT INTO phpgw_app_sessions (sessionid,loginid,app,content)"
|
|
." VALUES ('".$phpgw_info["user"]["sessionid"]."','"
|
|
.$phpgw_info["user"]["userid"]
|
|
."','".$phpgw_info["flags"]["currentapp"]."','".$data."');",__LINE__,__FILE__);
|
|
} else {
|
|
$phpgw->db->query("update phpgw_app_sessions set content = '$data' where sessionid = '"
|
|
.$phpgw_info["user"]["sessionid"]."' and loginid = '"
|
|
.$phpgw_info["user"]["userid"]."'",__LINE__,__FILE__);
|
|
}
|
|
$data = $this->decrypt($data);
|
|
return $data;
|
|
}
|
|
}
|
|
|
|
// This function will add preferences for the specified app to the phpgw_info[] array
|
|
// i(knecke) had moved this function phpgw_accounts_* class preferences
|
|
/*
|
|
function read_preferences($app_name)
|
|
{
|
|
global $phpgw, $phpgw_info;
|
|
$sql = "select preference_name,preference_value, preference_appname from preferences where "
|
|
. "preference_owner='".$phpgw_info["user"]["account_id"]."' AND preference_appname='$app_name'";
|
|
|
|
$phpgw->db->query($sql,__LINE__,__FILE__);
|
|
while($phpgw->db->next_record()) {
|
|
$phpgw_info["user"]["preferences"][$phpgw->db->f("preference_appname")][$phpgw->db->f("preference_name")] = $phpgw->db->f("preference_value");
|
|
}
|
|
}
|
|
|
|
// Add a new preference.
|
|
// i(knecke) had moved this function phpgw_accounts_* class preferences
|
|
function preferences_add($account_id,$var,$app_name,$value = "")
|
|
{
|
|
if ($value) {
|
|
global $phpgw;
|
|
$phpgw->db->query("insert into preferences (preference_owner,preference_name,"
|
|
. "preference_value,preference_appname) values ('$account_id','$var','$value','"
|
|
. "$app_name')",__LINE__,__FILE__);
|
|
} else {
|
|
global $$var, $phpgw;
|
|
$phpgw->db->query("insert into preferences (preference_owner,preference_name,"
|
|
. "preference_value,preference_appname) values ('$account_id','$var','". $$var
|
|
. "','$app_name')",__LINE__,__FILE__);
|
|
}
|
|
|
|
}
|
|
|
|
// i(knecke) had moved this function phpgw_accounts_* class preferences
|
|
function preferences_delete($method,$account_id,$var = "", $var2 = "")
|
|
{
|
|
global $phpgw;
|
|
|
|
switch ($method)
|
|
{
|
|
case "all": $phpgw->db->query("delete from preferences where preference_owner='"
|
|
. "$account_id'",__LINE__,__FILE__); break;
|
|
// I may take this one out in the future. If you need it, let me know. (jengo)
|
|
case "notheme": $phpgw->db->query("delete from preferences where preference_owner='"
|
|
. "$account_id' and preference_name != 'theme'",__LINE__,__FILE__); break;
|
|
case "onlyvar": $phpgw->db->query("delete from preferences where preference_owner='"
|
|
. "$account_id' and preference_name='$var'",__LINE__,__FILE__); break;
|
|
case "byapp": $phpgw->db->query("delete from preferences where preference_owner='"
|
|
. "$account_id' and preference_appname='$var'",__LINE__,__FILE__); break;
|
|
case "byappnotheme": $phpgw->db->query("delete from preferences where preference_owner='"
|
|
. "$account_id' and preference_appname='$var' and preference_name !='theme'",__LINE__,__FILE__); break;
|
|
case "byappvar": $phpgw->db->query("delete from preferences where preference_owner='"
|
|
. "$account_id' and preference_appname='".substr($var,0,strpos($var,"|"))."' "
|
|
. "and preference_name='".substr($var,strpos($var,"|")+1)."'",__LINE__,__FILE__); break;
|
|
case "byappvar_single": $phpgw->db->query("delete from preferences where preference_owner='"
|
|
. "$account_id' and preference_appname='$var' "
|
|
. "and preference_name='$var2'",__LINE__,__FILE__); break;
|
|
|
|
default: return;
|
|
}
|
|
}
|
|
|
|
// i(knecke) had moved this function phpgw_accounts_* class preferences
|
|
function preferences_update($account_id,$var,$app_name)
|
|
{
|
|
$this->preferences_delete("onlyvar",$account_id,$var);
|
|
$this->preferences_add($account_id,$var,$app_name);
|
|
}
|
|
*/
|
|
|
|
function show_date($t = "", $format = "")
|
|
{
|
|
global $phpgw_info;
|
|
|
|
if (! $t)
|
|
$t = time();
|
|
|
|
$t = $t + ((60*60) * $phpgw_info["user"]["preferences"]["common"]["tz_offset"]);
|
|
|
|
if (! $format) {
|
|
$format = $phpgw_info["user"]["preferences"]["common"]["dateformat"] . " - ";
|
|
if ($phpgw_info["user"]["preferences"]["common"]["timeformat"] == "12") {
|
|
$format .= "h:i:s a";
|
|
} else {
|
|
$format .= "H:i:s";
|
|
}
|
|
}
|
|
return date($format,$t);
|
|
}
|
|
|
|
function dateformatorder($yearstr,$monthstr,$daystr,$add_seperator = False)
|
|
{
|
|
global $phpgw_info;
|
|
$dateformat = strtolower($phpgw_info["user"]["preferences"]["common"]["dateformat"]);
|
|
$sep = substr($phpgw_info["user"]["preferences"]["common"]["dateformat"],1,1);
|
|
|
|
$dlarr[strpos($dateformat,'y')] = $yearstr;
|
|
$dlarr[strpos($dateformat,'m')] = $monthstr;
|
|
$dlarr[strpos($dateformat,'d')] = $daystr;
|
|
ksort($dlarr);
|
|
|
|
if ($add_seperator) {
|
|
return (implode($sep,$dlarr));
|
|
} else {
|
|
return (implode(" ",$dlarr));
|
|
}
|
|
}
|
|
|
|
function formattime($hour,$min,$sec="")
|
|
{
|
|
global $phpgw_info;
|
|
|
|
$h12 = $hour;
|
|
if ($phpgw_info["user"]["preferences"]["common"]["timeformat"] == "12") {
|
|
if ($hour > 12)
|
|
$ampm = " pm";
|
|
else
|
|
$ampm = " am";
|
|
$h12 %= 12;
|
|
if ($h12 == 0 && $hour)
|
|
$h12 = 12;
|
|
if ($h12 == 0 && ! $hour)
|
|
$h12 = 0;
|
|
} else
|
|
$h12 = $hour;
|
|
|
|
if ($sec)
|
|
$sec = ":$sec";
|
|
|
|
return "$h12:$min$sec$ampm";
|
|
}
|
|
|
|
// This will be moved into the applications area.
|
|
function check_code($code)
|
|
{
|
|
$s = "<br>";
|
|
switch ($code)
|
|
{
|
|
case 13: $s .= lang("Your message has been sent");break;
|
|
case 14: $s .= lang("New entry added sucessfully");break;
|
|
case 15: $s .= lang("Entry updated sucessfully"); break;
|
|
case 16: $s .= lang("Entry has been deleted sucessfully"); break;
|
|
case 18: $s .= lang("Password has been updated"); break;
|
|
case 19: $s .= lang("Session has been killed"); break;
|
|
case 27: $s .= lang("Account has been updated"); break;
|
|
case 28: $s .= lang("Account has been created"); break;
|
|
case 29: $s .= lang("Account has been deleted"); break;
|
|
case 30: $s .= lang("Your settings have been updated"); break;
|
|
case 31: $s .= lang("Group has been added"); break;
|
|
case 32: $s .= lang("Group has been deleted"); break;
|
|
case 33: $s .= lang("Group has been updated"); break;
|
|
case 34: $s .= lang("Account has been deleted") . "<p>"
|
|
. lang("Error deleting x x directory",lang("users")," ".lang("private")." ")
|
|
. ",<br>" . lang("Please x by hand",lang("delete")) . "<br><br>"
|
|
. lang("To correct this error for the future you will need to properly set the")
|
|
. "<br>" . lang("permissions to the files/users directory")
|
|
. "<br>" . lang("On *nix systems please type: x","chmod 707 "
|
|
. $phpgw_info["server"]["files_dir"] . "/users/");
|
|
break;
|
|
case 35: $s .= lang("Account has been updated") . "<p>"
|
|
. lang("Error renaming x x directory",lang("users"),
|
|
" ".lang("private")." ")
|
|
. ",<br>" . lang("Please x by hand",
|
|
lang("rename")) . "<br><br>"
|
|
. lang("To correct this error for the future you will need to properly set the")
|
|
. "<br>" . lang("permissions to the files/users directory")
|
|
. "<br>" . lang("On *nix systems please type: x","chmod 707 "
|
|
. $phpgw_info["server"]["files_dir"] . "/users/");
|
|
break;
|
|
case 36: $s .= lang("Account has been created") . "<p>"
|
|
. lang("Error creating x x directory",lang("users"),
|
|
" ".lang("private")." ")
|
|
. ",<br>" . lang("Please x by hand",
|
|
lang("create")) . "<br><br>"
|
|
. lang("To correct this error for the future you will need to properly set the")
|
|
. "<br>" . lang("permissions to the files/users directory")
|
|
. "<br>" . lang("On *nix systems please type: x","chmod 707 "
|
|
. $phpgw_info["server"]["files_dir"] . "/users/");
|
|
break;
|
|
case 37: $s .= lang("Group has been added") . "<p>"
|
|
. lang("Error creating x x directory",lang("groups")," ")
|
|
. ",<br>" . lang("Please x by hand",
|
|
lang("create")) . "<br><br>"
|
|
. lang("To correct this error for the future you will need to properly set the")
|
|
. "<br>" . lang("permissions to the files/users directory")
|
|
. "<br>" . lang("On *nix systems please type: x","chmod 707 "
|
|
. $phpgw_info["server"]["files_dir"] . "/groups/");
|
|
break;
|
|
case 38: $s .= lang("Group has been deleted") . "<p>"
|
|
. lang("Error deleting x x directory",lang("groups")," ")
|
|
. ",<br>" . lang("Please x by hand",
|
|
lang("delete")) . "<br><br>"
|
|
. lang("To correct this error for the future you will need to properly set the")
|
|
. "<br>" . lang("permissions to the files/users directory")
|
|
. "<br>" . lang("On *nix systems please type: x","chmod 707 "
|
|
. $phpgw_info["server"]["files_dir"] . "/groups/");
|
|
break;
|
|
case 39: $s .= lang("Group has been updated") . "<p>"
|
|
. lang("Error renaming x x directory",lang("groups")," ")
|
|
. ",<br>" . lang("Please x by hand",
|
|
lang("rename")) . "<br><br>"
|
|
. lang("To correct this error for the future you will need to properly set the")
|
|
. "<br>" . lang("permissions to the files/users directory")
|
|
. "<br>" . lang("On *nix systems please type: x","chmod 707 "
|
|
. $phpgw_info["server"]["files_dir"] . "/groups/");
|
|
break;
|
|
case 40: $s .= lang("You have not entered a\nBrief Description").".";
|
|
break;
|
|
case 41: $s .= lang("You have not entered a\nvalid time of day.");
|
|
break;
|
|
case 42: $s .= lang("You have not entered a\nvalid date.");
|
|
break;
|
|
default: return "";
|
|
}
|
|
return $s;
|
|
}
|
|
|
|
function phpgw_error($error,$line = "", $file = "")
|
|
{
|
|
echo "<p><b>phpGroupWare internal error:</b><p>$error";
|
|
if ($line) {
|
|
echo "Line: $line";
|
|
}
|
|
if ($file) {
|
|
echo "File: $file";
|
|
}
|
|
echo "<p>Your session has been halted.";
|
|
exit;
|
|
}
|
|
|
|
|
|
function create_phpcode_from_array($array)
|
|
{
|
|
while (list($key, $val) = each($array)) {
|
|
if (is_array($val)) {
|
|
while (list($key2, $val2) = each($val)) {
|
|
if (is_array($val2)) {
|
|
while (list($key3, $val3) = each ($val2)) {
|
|
if (is_array($val3)) {
|
|
while (list($key4, $val4) = each ($val3)) {
|
|
$s .= '$phpgw_info["' . $key . '"]["' . $key2 . '"]["' . $key3 . '"]["' .$key4 . '"]="' . $val4 . '";';
|
|
$s .= "\n";
|
|
}
|
|
} else {
|
|
$s .= '$phpgw_info["' . $key . '"]["' . $key2 . '"]["' . $key3 . '"]="' . $val3 . '";';
|
|
$s .= "\n";
|
|
}
|
|
}
|
|
} else {
|
|
$s .= '$phpgw_info["' . $key .'"]["' . $key2 . '"]="' . $val2 . '";';
|
|
$s .= "\n";
|
|
}
|
|
}
|
|
} else {
|
|
$s .= '$phpgw_info["' . $key . '"]="' . $val . '";';
|
|
$s .= "\n";
|
|
}
|
|
}
|
|
return $s;
|
|
}
|
|
|
|
|
|
// This will return the full phpgw_info array, used for debugging
|
|
function debug_phpgw_info()
|
|
{
|
|
global $phpgw_info;
|
|
|
|
while (list($key, $val) = each($phpgw_info)) {
|
|
if (is_array($val)) {
|
|
while (list($key2, $val2) = each($val)) {
|
|
if (is_array($val2)) {
|
|
while (list($key3, $val3) = each ($val2)) {
|
|
if (is_array($val3)) {
|
|
while (list($key4, $val4) = each ($val3)) {
|
|
echo "phpgw_info[$key][$key2][$key3][$key4]=$val4<br>";
|
|
}
|
|
} else {
|
|
echo "phpgw_info[$key][$key2][$key3]=$val3<br>";
|
|
}
|
|
}
|
|
} else {
|
|
echo "phpgw_info[$key][$key2]=$val2<br>";
|
|
}
|
|
}
|
|
} else {
|
|
echo "phpgw_info[$key]=$val<br>";
|
|
}
|
|
}
|
|
}
|
|
|
|
// This will return a list of functions in the API
|
|
function debug_list_core_functions()
|
|
{
|
|
global $phpgw_info;
|
|
|
|
echo "<br><b>core functions</b><br>";
|
|
echo "<pre>";
|
|
chdir($phpgw_info["server"]["include_root"]."/phpgwapi");
|
|
system("grep -r '^[ \t]*function' *");
|
|
echo "</pre>";
|
|
}
|
|
|
|
function common_()
|
|
{
|
|
global $phpgw, $phpgw_info;
|
|
$phpgw_info["server"]["dir_separator"] = $this->filesystem_separator();
|
|
}
|
|
|
|
}
|
|
|
|
|
|
class hooks
|
|
{
|
|
function read()
|
|
{
|
|
global $phpgw;
|
|
$db = $phpgw->db;
|
|
|
|
$db->query("select * from phpgw_hooks");
|
|
while ($db->next_record()) {
|
|
$return_array[$db->f("hook_id")]["app"] = $db->f("hook_appname");
|
|
$return_array[$db->f("hook_id")]["location"] = $db->f("hook_location");
|
|
$return_array[$db->f("hook_id")]["filename"] = $db->f("hook_filename");
|
|
}
|
|
return $return_array;
|
|
}
|
|
|
|
function proccess($type,$where = "")
|
|
{
|
|
global $phpgw_info, $phpgw;
|
|
|
|
$currentapp = $phpgw_info["flags"]["currentapp"];
|
|
$type = strtolower($type);
|
|
|
|
if ($type != "location" && $type != "app") {
|
|
return False;
|
|
}
|
|
|
|
// Add a check to see if that location/app has a hook
|
|
// This way it doesn't have to loop everytime
|
|
|
|
while ($hook = each($phpgw_info["hooks"])) {
|
|
if ($type == "app") {
|
|
if ($hook[1]["app"] == $currentapp) {
|
|
$include_file = $phpgw_info["server"]["server_root"] . "/"
|
|
. $currentapp . "/hooks/"
|
|
. $hook[1]["app"] . $hook[1]["filename"];
|
|
include($include_file);
|
|
}
|
|
|
|
} else if ($type == "location") {
|
|
if ($hook[1]["location"] == $where) {
|
|
$include_file = $phpgw_info["server"]["server_root"] . "/"
|
|
. $hook[1]["app"] . "/hooks/"
|
|
. $hook[1]["filename"];
|
|
if (! is_file($include_file)) {
|
|
$phpgw->common->phpgw_error("Failed to include hook: $include_file");
|
|
} else {
|
|
include($include_file);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|