ManageMembergroups.php 41 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209
  1. <?php
  2. /**
  3. * This file is concerned with anything in the Manage Membergroups admin screen.
  4. *
  5. * Simple Machines Forum (SMF)
  6. *
  7. * @package SMF
  8. * @author Simple Machines http://www.simplemachines.org
  9. * @copyright 2013 Simple Machines and individual contributors
  10. * @license http://www.simplemachines.org/about/smf/license.php BSD
  11. *
  12. * @version 2.1 Alpha 1
  13. */
  14. if (!defined('SMF'))
  15. die('No direct access...');
  16. /**
  17. * Main dispatcher, the entrance point for all 'Manage Membergroup' actions.
  18. * It forwards to a function based on the given subaction, default being subaction 'index', or, without manage_membergroup
  19. * permissions, then 'settings'.
  20. * Called by ?action=admin;area=membergroups.
  21. * Requires the manage_membergroups or the admin_forum permission.
  22. *
  23. * @uses ManageMembergroups template.
  24. * @uses ManageMembers language file.
  25. */
  26. function ModifyMembergroups()
  27. {
  28. global $context, $txt, $scripturl, $sourcedir;
  29. $subActions = array(
  30. 'add' => array('AddMembergroup', 'manage_membergroups'),
  31. 'delete' => array('DeleteMembergroup', 'manage_membergroups'),
  32. 'edit' => array('EditMembergroup', 'manage_membergroups'),
  33. 'index' => array('MembergroupIndex', 'manage_membergroups'),
  34. 'members' => array('MembergroupMembers', 'manage_membergroups', 'Groups.php'),
  35. 'settings' => array('ModifyMembergroupsettings', 'admin_forum'),
  36. );
  37. call_integration_hook('integrate_manage_membergroups', array(&$subActions));
  38. // Default to sub action 'index' or 'settings' depending on permissions.
  39. $_REQUEST['sa'] = isset($_REQUEST['sa']) && isset($subActions[$_REQUEST['sa']]) ? $_REQUEST['sa'] : (allowedTo('manage_membergroups') ? 'index' : 'settings');
  40. // Is it elsewhere?
  41. if (isset($subActions[$_REQUEST['sa']][2]))
  42. require_once($sourcedir . '/' . $subActions[$_REQUEST['sa']][2]);
  43. // Do the permission check, you might not be allowed her.
  44. isAllowedTo($subActions[$_REQUEST['sa']][1]);
  45. // Language and template stuff, the usual.
  46. loadLanguage('ManageMembers');
  47. loadTemplate('ManageMembergroups');
  48. // Setup the admin tabs.
  49. $context[$context['admin_menu_name']]['tab_data'] = array(
  50. 'title' => $txt['membergroups_title'],
  51. 'help' => 'membergroups',
  52. 'description' => $txt['membergroups_description'],
  53. );
  54. // Call the right function.
  55. $subActions[$_REQUEST['sa']][0]();
  56. }
  57. /**
  58. * Shows an overview of the current membergroups.
  59. * Called by ?action=admin;area=membergroups.
  60. * Requires the manage_membergroups permission.
  61. * Splits the membergroups in regular ones and post count based groups.
  62. * It also counts the number of members part of each membergroup.
  63. *
  64. * @uses ManageMembergroups template, main.
  65. */
  66. function MembergroupIndex()
  67. {
  68. global $txt, $scripturl, $context, $settings, $smcFunc, $sourcedir;
  69. $context['page_title'] = $txt['membergroups_title'];
  70. // The first list shows the regular membergroups.
  71. $listOptions = array(
  72. 'id' => 'regular_membergroups_list',
  73. 'title' => $txt['membergroups_regular'],
  74. 'base_href' => $scripturl . '?action=admin;area=membergroups' . (isset($_REQUEST['sort2']) ? ';sort2=' . urlencode($_REQUEST['sort2']) : ''),
  75. 'default_sort_col' => 'name',
  76. 'get_items' => array(
  77. 'file' => $sourcedir . '/Subs-Membergroups.php',
  78. 'function' => 'list_getMembergroups',
  79. 'params' => array(
  80. 'regular',
  81. ),
  82. ),
  83. 'columns' => array(
  84. 'name' => array(
  85. 'header' => array(
  86. 'value' => $txt['membergroups_name'],
  87. ),
  88. 'data' => array(
  89. 'function' => create_function('$rowData', '
  90. global $scripturl;
  91. // Since the moderator group has no explicit members, no link is needed.
  92. if ($rowData[\'id_group\'] == 3)
  93. $group_name = $rowData[\'group_name\'];
  94. else
  95. {
  96. $color_style = empty($rowData[\'online_color\']) ? \'\' : sprintf(\' style="color: %1$s;"\', $rowData[\'online_color\']);
  97. $group_name = sprintf(\'<a href="%1$s?action=admin;area=membergroups;sa=members;group=%2$d"%3$s>%4$s</a>\', $scripturl, $rowData[\'id_group\'], $color_style, $rowData[\'group_name\']);
  98. }
  99. // Add a help option for moderator and administrator.
  100. if ($rowData[\'id_group\'] == 1)
  101. $group_name .= sprintf(\' (<a href="%1$s?action=helpadmin;help=membergroup_administrator" onclick="return reqOverlayDiv(this.href);">?</a>)\', $scripturl);
  102. elseif ($rowData[\'id_group\'] == 3)
  103. $group_name .= sprintf(\' (<a href="%1$s?action=helpadmin;help=membergroup_moderator" onclick="return reqOverlayDiv(this.href);">?</a>)\', $scripturl);
  104. return $group_name;
  105. '),
  106. ),
  107. 'sort' => array(
  108. 'default' => 'CASE WHEN mg.id_group < 4 THEN mg.id_group ELSE 4 END, mg.group_name',
  109. 'reverse' => 'CASE WHEN mg.id_group < 4 THEN mg.id_group ELSE 4 END, mg.group_name DESC',
  110. ),
  111. ),
  112. 'icons' => array(
  113. 'header' => array(
  114. 'value' => $txt['membergroups_icons'],
  115. ),
  116. 'data' => array(
  117. 'db' => 'icons',
  118. ),
  119. 'sort' => array(
  120. 'default' => 'mg.icons',
  121. 'reverse' => 'mg.icons DESC',
  122. )
  123. ),
  124. 'members' => array(
  125. 'header' => array(
  126. 'value' => $txt['membergroups_members_top'],
  127. 'class' => 'centercol',
  128. ),
  129. 'data' => array(
  130. 'function' => create_function('$rowData', '
  131. global $txt;
  132. // No explicit members for the moderator group.
  133. return $rowData[\'id_group\'] == 3 ? $txt[\'membergroups_guests_na\'] : comma_format($rowData[\'num_members\']);
  134. '),
  135. 'class' => 'centercol',
  136. ),
  137. 'sort' => array(
  138. 'default' => 'CASE WHEN mg.id_group < 4 THEN mg.id_group ELSE 4 END, 1',
  139. 'reverse' => 'CASE WHEN mg.id_group < 4 THEN mg.id_group ELSE 4 END, 1 DESC',
  140. ),
  141. ),
  142. 'modify' => array(
  143. 'header' => array(
  144. 'value' => $txt['modify'],
  145. 'class' => 'centercol',
  146. ),
  147. 'data' => array(
  148. 'sprintf' => array(
  149. 'format' => '<a href="' . $scripturl . '?action=admin;area=membergroups;sa=edit;group=%1$d">' . $txt['membergroups_modify'] . '</a>',
  150. 'params' => array(
  151. 'id_group' => false,
  152. ),
  153. ),
  154. 'class' => 'centercol',
  155. ),
  156. ),
  157. ),
  158. 'additional_rows' => array(
  159. array(
  160. 'position' => 'below_table_data',
  161. 'value' => '<a class="button_link" href="' . $scripturl . '?action=admin;area=membergroups;sa=add;generalgroup">' . $txt['membergroups_add_group'] . '</a>',
  162. ),
  163. ),
  164. );
  165. require_once($sourcedir . '/Subs-List.php');
  166. createList($listOptions);
  167. // The second list shows the post count based groups.
  168. $listOptions = array(
  169. 'id' => 'post_count_membergroups_list',
  170. 'title' => $txt['membergroups_post'],
  171. 'base_href' => $scripturl . '?action=admin;area=membergroups' . (isset($_REQUEST['sort']) ? ';sort=' . urlencode($_REQUEST['sort']) : ''),
  172. 'default_sort_col' => 'required_posts',
  173. 'request_vars' => array(
  174. 'sort' => 'sort2',
  175. 'desc' => 'desc2',
  176. ),
  177. 'get_items' => array(
  178. 'file' => $sourcedir . '/Subs-Membergroups.php',
  179. 'function' => 'list_getMembergroups',
  180. 'params' => array(
  181. 'post_count',
  182. ),
  183. ),
  184. 'columns' => array(
  185. 'name' => array(
  186. 'header' => array(
  187. 'value' => $txt['membergroups_name'],
  188. ),
  189. 'data' => array(
  190. 'function' => create_function('$rowData', '
  191. global $scripturl;
  192. $colorStyle = empty($rowData[\'online_color\']) ? \'\' : sprintf(\' style="color: %1$s;"\', $rowData[\'online_color\']);
  193. return sprintf(\'<a href="%1$s?action=moderate;area=viewgroups;sa=members;group=%2$d"%3$s>%4$s</a>\', $scripturl, $rowData[\'id_group\'], $colorStyle, $rowData[\'group_name\']);
  194. '),
  195. ),
  196. 'sort' => array(
  197. 'default' => 'mg.group_name',
  198. 'reverse' => 'mg.group_name DESC',
  199. ),
  200. ),
  201. 'icons' => array(
  202. 'header' => array(
  203. 'value' => $txt['membergroups_icons'],
  204. ),
  205. 'data' => array(
  206. 'db' => 'icons',
  207. ),
  208. 'sort' => array(
  209. 'default' => 'CASE WHEN mg.id_group < 4 THEN mg.id_group ELSE 4 END, icons',
  210. 'reverse' => 'CASE WHEN mg.id_group < 4 THEN mg.id_group ELSE 4 END, icons DESC',
  211. )
  212. ),
  213. 'members' => array(
  214. 'header' => array(
  215. 'value' => $txt['membergroups_members_top'],
  216. 'class' => 'centercol',
  217. ),
  218. 'data' => array(
  219. 'db' => 'num_members',
  220. 'class' => 'centercol',
  221. ),
  222. 'sort' => array(
  223. 'default' => '1 DESC',
  224. 'reverse' => '1',
  225. ),
  226. ),
  227. 'required_posts' => array(
  228. 'header' => array(
  229. 'value' => $txt['membergroups_min_posts'],
  230. 'class' => 'centercol',
  231. ),
  232. 'data' => array(
  233. 'db' => 'min_posts',
  234. 'class' => 'centercol',
  235. ),
  236. 'sort' => array(
  237. 'default' => 'mg.min_posts',
  238. 'reverse' => 'mg.min_posts DESC',
  239. ),
  240. ),
  241. 'modify' => array(
  242. 'header' => array(
  243. 'value' => $txt['modify'],
  244. 'class' => 'centercol',
  245. ),
  246. 'data' => array(
  247. 'sprintf' => array(
  248. 'format' => '<a href="' . $scripturl . '?action=admin;area=membergroups;sa=edit;group=%1$d">' . $txt['membergroups_modify'] . '</a>',
  249. 'params' => array(
  250. 'id_group' => false,
  251. ),
  252. ),
  253. 'class' => 'centercol',
  254. ),
  255. ),
  256. ),
  257. 'additional_rows' => array(
  258. array(
  259. 'position' => 'below_table_data',
  260. 'value' => '<a class="button_link" href="' . $scripturl . '?action=admin;area=membergroups;sa=add;postgroup">' . $txt['membergroups_add_group'] . '</a>',
  261. ),
  262. ),
  263. );
  264. createList($listOptions);
  265. }
  266. /**
  267. * This function handles adding a membergroup and setting some initial properties.
  268. * Called by ?action=admin;area=membergroups;sa=add.
  269. * It requires the manage_membergroups permission.
  270. * Allows to use a predefined permission profile or copy one from another group.
  271. * Redirects to action=admin;area=membergroups;sa=edit;group=x.
  272. *
  273. * @uses the new_group sub template of ManageMembergroups.
  274. */
  275. function AddMembergroup()
  276. {
  277. global $context, $txt, $sourcedir, $modSettings, $smcFunc;
  278. // A form was submitted, we can start adding.
  279. if (isset($_POST['group_name']) && trim($_POST['group_name']) != '')
  280. {
  281. checkSession();
  282. validateToken('admin-mmg');
  283. $postCountBasedGroup = isset($_POST['min_posts']) && (!isset($_POST['postgroup_based']) || !empty($_POST['postgroup_based']));
  284. $_POST['group_type'] = !isset($_POST['group_type']) || $_POST['group_type'] < 0 || $_POST['group_type'] > 3 || ($_POST['group_type'] == 1 && !allowedTo('admin_forum')) ? 0 : (int) $_POST['group_type'];
  285. // @todo Check for members with same name too?
  286. $request = $smcFunc['db_query']('', '
  287. SELECT MAX(id_group)
  288. FROM {db_prefix}membergroups',
  289. array(
  290. )
  291. );
  292. list ($id_group) = $smcFunc['db_fetch_row']($request);
  293. $smcFunc['db_free_result']($request);
  294. $id_group++;
  295. $smcFunc['db_insert']('',
  296. '{db_prefix}membergroups',
  297. array(
  298. 'id_group' => 'int', 'description' => 'string', 'group_name' => 'string-80', 'min_posts' => 'int',
  299. 'icons' => 'string', 'online_color' => 'string', 'group_type' => 'int',
  300. ),
  301. array(
  302. $id_group, '', $smcFunc['htmlspecialchars']($_POST['group_name'], ENT_QUOTES), ($postCountBasedGroup ? (int) $_POST['min_posts'] : '-1'),
  303. '1#icon.png', '', $_POST['group_type'],
  304. ),
  305. array('id_group')
  306. );
  307. call_integration_hook('integrate_add_membergroup', array($id_group, $postCountBasedGroup));
  308. // Update the post groups now, if this is a post group!
  309. if (isset($_POST['min_posts']))
  310. updateStats('postgroups');
  311. // You cannot set permissions for post groups if they are disabled.
  312. if ($postCountBasedGroup && empty($modSettings['permission_enable_postgroups']))
  313. $_POST['perm_type'] = '';
  314. if ($_POST['perm_type'] == 'predefined')
  315. {
  316. // Set default permission level.
  317. require_once($sourcedir . '/ManagePermissions.php');
  318. setPermissionLevel($_POST['level'], $id_group, 'null');
  319. }
  320. // Copy or inherit the permissions!
  321. elseif ($_POST['perm_type'] == 'copy' || $_POST['perm_type'] == 'inherit')
  322. {
  323. $copy_id = $_POST['perm_type'] == 'copy' ? (int) $_POST['copyperm'] : (int) $_POST['inheritperm'];
  324. // Are you a powerful admin?
  325. if (!allowedTo('admin_forum'))
  326. {
  327. $request = $smcFunc['db_query']('', '
  328. SELECT group_type
  329. FROM {db_prefix}membergroups
  330. WHERE id_group = {int:copy_from}
  331. LIMIT {int:limit}',
  332. array(
  333. 'copy_from' => $copy_id,
  334. 'limit' => 1,
  335. )
  336. );
  337. list ($copy_type) = $smcFunc['db_fetch_row']($request);
  338. $smcFunc['db_free_result']($request);
  339. // Protected groups are... well, protected!
  340. if ($copy_type == 1)
  341. fatal_lang_error('membergroup_does_not_exist');
  342. }
  343. // Don't allow copying of a real priviledged person!
  344. require_once($sourcedir . '/ManagePermissions.php');
  345. loadIllegalPermissions();
  346. $request = $smcFunc['db_query']('', '
  347. SELECT permission, add_deny
  348. FROM {db_prefix}permissions
  349. WHERE id_group = {int:copy_from}',
  350. array(
  351. 'copy_from' => $copy_id,
  352. )
  353. );
  354. $inserts = array();
  355. while ($row = $smcFunc['db_fetch_assoc']($request))
  356. {
  357. if (empty($context['illegal_permissions']) || !in_array($row['permission'], $context['illegal_permissions']))
  358. $inserts[] = array($id_group, $row['permission'], $row['add_deny']);
  359. }
  360. $smcFunc['db_free_result']($request);
  361. if (!empty($inserts))
  362. $smcFunc['db_insert']('insert',
  363. '{db_prefix}permissions',
  364. array('id_group' => 'int', 'permission' => 'string', 'add_deny' => 'int'),
  365. $inserts,
  366. array('id_group', 'permission')
  367. );
  368. $request = $smcFunc['db_query']('', '
  369. SELECT id_profile, permission, add_deny
  370. FROM {db_prefix}board_permissions
  371. WHERE id_group = {int:copy_from}',
  372. array(
  373. 'copy_from' => $copy_id,
  374. )
  375. );
  376. $inserts = array();
  377. while ($row = $smcFunc['db_fetch_assoc']($request))
  378. $inserts[] = array($id_group, $row['id_profile'], $row['permission'], $row['add_deny']);
  379. $smcFunc['db_free_result']($request);
  380. if (!empty($inserts))
  381. $smcFunc['db_insert']('insert',
  382. '{db_prefix}board_permissions',
  383. array('id_group' => 'int', 'id_profile' => 'int', 'permission' => 'string', 'add_deny' => 'int'),
  384. $inserts,
  385. array('id_group', 'id_profile', 'permission')
  386. );
  387. // Also get some membergroup information if we're copying and not copying from guests...
  388. if ($copy_id > 0 && $_POST['perm_type'] == 'copy')
  389. {
  390. $request = $smcFunc['db_query']('', '
  391. SELECT online_color, max_messages, icons
  392. FROM {db_prefix}membergroups
  393. WHERE id_group = {int:copy_from}
  394. LIMIT 1',
  395. array(
  396. 'copy_from' => $copy_id,
  397. )
  398. );
  399. $group_info = $smcFunc['db_fetch_assoc']($request);
  400. $smcFunc['db_free_result']($request);
  401. // ...and update the new membergroup with it.
  402. $smcFunc['db_query']('', '
  403. UPDATE {db_prefix}membergroups
  404. SET
  405. online_color = {string:online_color},
  406. max_messages = {int:max_messages},
  407. icons = {string:icons}
  408. WHERE id_group = {int:current_group}',
  409. array(
  410. 'max_messages' => $group_info['max_messages'],
  411. 'current_group' => $id_group,
  412. 'online_color' => $group_info['online_color'],
  413. 'icons' => $group_info['icons'],
  414. )
  415. );
  416. }
  417. // If inheriting say so...
  418. elseif ($_POST['perm_type'] == 'inherit')
  419. {
  420. $smcFunc['db_query']('', '
  421. UPDATE {db_prefix}membergroups
  422. SET id_parent = {int:copy_from}
  423. WHERE id_group = {int:current_group}',
  424. array(
  425. 'copy_from' => $copy_id,
  426. 'current_group' => $id_group,
  427. )
  428. );
  429. }
  430. }
  431. // Make sure all boards selected are stored in a proper array.
  432. $accesses = empty($_POST['boardaccess']) || !is_array($_POST['boardaccess']) ? array() : $_POST['boardaccess'];
  433. $changed_boards['allow'] = array();
  434. $changed_boards['deny'] = array();
  435. $changed_boards['ignore'] = array();
  436. foreach ($accesses as $group_id => $action)
  437. $changed_boards[$action][] = (int) $group_id;
  438. foreach (array('allow', 'deny') as $board_action)
  439. {
  440. // Only do this if they have special access requirements.
  441. if (!empty($changed_boards[$board_action]))
  442. $smcFunc['db_query']('', '
  443. UPDATE {db_prefix}boards
  444. SET {raw:column} = CASE WHEN {raw:column} = {string:blank_string} THEN {string:group_id_string} ELSE CONCAT({raw:column}, {string:comma_group}) END
  445. WHERE id_board IN ({array_int:board_list})',
  446. array(
  447. 'board_list' => $changed_boards[$board_action],
  448. 'blank_string' => '',
  449. 'group_id_string' => (string) $id_group,
  450. 'comma_group' => ',' . $id_group,
  451. 'column' => $board_action == 'allow' ? 'member_groups' : 'deny_member_groups',
  452. )
  453. );
  454. }
  455. // If this is joinable then set it to show group membership in people's profiles.
  456. if (empty($modSettings['show_group_membership']) && $_POST['group_type'] > 1)
  457. updateSettings(array('show_group_membership' => 1));
  458. // Rebuild the group cache.
  459. updateSettings(array(
  460. 'settings_updated' => time(),
  461. ));
  462. // We did it.
  463. logAction('add_group', array('group' => $_POST['group_name']), 'admin');
  464. // Go change some more settings.
  465. redirectexit('action=admin;area=membergroups;sa=edit;group=' . $id_group);
  466. }
  467. // Just show the 'add membergroup' screen.
  468. $context['page_title'] = $txt['membergroups_new_group'];
  469. $context['sub_template'] = 'new_group';
  470. $context['post_group'] = isset($_REQUEST['postgroup']);
  471. $context['undefined_group'] = !isset($_REQUEST['postgroup']) && !isset($_REQUEST['generalgroup']);
  472. $context['allow_protected'] = allowedTo('admin_forum');
  473. if (!empty($modSettings['deny_boards_access']))
  474. loadLanguage('ManagePermissions');
  475. $result = $smcFunc['db_query']('', '
  476. SELECT id_group, group_name
  477. FROM {db_prefix}membergroups
  478. WHERE (id_group > {int:moderator_group} OR id_group = {int:global_mod_group})' . (empty($modSettings['permission_enable_postgroups']) ? '
  479. AND min_posts = {int:min_posts}' : '') . (allowedTo('admin_forum') ? '' : '
  480. AND group_type != {int:is_protected}') . '
  481. ORDER BY min_posts, id_group != {int:global_mod_group}, group_name',
  482. array(
  483. 'moderator_group' => 3,
  484. 'global_mod_group' => 2,
  485. 'min_posts' => -1,
  486. 'is_protected' => 1,
  487. )
  488. );
  489. $context['groups'] = array();
  490. while ($row = $smcFunc['db_fetch_assoc']($result))
  491. $context['groups'][] = array(
  492. 'id' => $row['id_group'],
  493. 'name' => $row['group_name']
  494. );
  495. $smcFunc['db_free_result']($result);
  496. $request = $smcFunc['db_query']('', '
  497. SELECT b.id_cat, c.name AS cat_name, b.id_board, b.name, b.child_level
  498. FROM {db_prefix}boards AS b
  499. LEFT JOIN {db_prefix}categories AS c ON (c.id_cat = b.id_cat)
  500. ORDER BY board_order',
  501. array(
  502. )
  503. );
  504. $context['num_boards'] = $smcFunc['db_num_rows']($request);
  505. $context['categories'] = array();
  506. while ($row = $smcFunc['db_fetch_assoc']($request))
  507. {
  508. // This category hasn't been set up yet..
  509. if (!isset($context['categories'][$row['id_cat']]))
  510. $context['categories'][$row['id_cat']] = array(
  511. 'id' => $row['id_cat'],
  512. 'name' => $row['cat_name'],
  513. 'boards' => array()
  514. );
  515. // Set this board up, and let the template know when it's a child. (indent them..)
  516. $context['categories'][$row['id_cat']]['boards'][$row['id_board']] = array(
  517. 'id' => $row['id_board'],
  518. 'name' => $row['name'],
  519. 'child_level' => $row['child_level'],
  520. 'allow' => false,
  521. 'deny' => false
  522. );
  523. }
  524. $smcFunc['db_free_result']($request);
  525. // Now, let's sort the list of categories into the boards for templates that like that.
  526. $temp_boards = array();
  527. foreach ($context['categories'] as $category)
  528. {
  529. $temp_boards[] = array(
  530. 'name' => $category['name'],
  531. 'child_ids' => array_keys($category['boards'])
  532. );
  533. $temp_boards = array_merge($temp_boards, array_values($category['boards']));
  534. // Include a list of boards per category for easy toggling.
  535. $context['categories'][$category['id']]['child_ids'] = array_keys($category['boards']);
  536. }
  537. createToken('admin-mmg');
  538. }
  539. /**
  540. * Deleting a membergroup by URL (not implemented).
  541. * Called by ?action=admin;area=membergroups;sa=delete;group=x;session_var=y.
  542. * Requires the manage_membergroups permission.
  543. * Redirects to ?action=admin;area=membergroups.
  544. *
  545. * @todo look at this
  546. */
  547. function DeleteMembergroup()
  548. {
  549. global $sourcedir;
  550. checkSession('get');
  551. require_once($sourcedir . '/Subs-Membergroups.php');
  552. deleteMembergroups((int) $_REQUEST['group']);
  553. // Go back to the membergroup index.
  554. redirectexit('action=admin;area=membergroups;');
  555. }
  556. /**
  557. * Editing a membergroup.
  558. * Screen to edit a specific membergroup.
  559. * Called by ?action=admin;area=membergroups;sa=edit;group=x.
  560. * It requires the manage_membergroups permission.
  561. * Also handles the delete button of the edit form.
  562. * Redirects to ?action=admin;area=membergroups.
  563. *
  564. * @uses the edit_group sub template of ManageMembergroups.
  565. */
  566. function EditMembergroup()
  567. {
  568. global $context, $txt, $sourcedir, $modSettings, $smcFunc, $settings;
  569. $_REQUEST['group'] = isset($_REQUEST['group']) && $_REQUEST['group'] > 0 ? (int) $_REQUEST['group'] : 0;
  570. if (!empty($modSettings['deny_boards_access']))
  571. loadLanguage('ManagePermissions');
  572. // Make sure this group is editable.
  573. if (!empty($_REQUEST['group']))
  574. {
  575. $request = $smcFunc['db_query']('', '
  576. SELECT id_group
  577. FROM {db_prefix}membergroups
  578. WHERE id_group = {int:current_group}' . (allowedTo('admin_forum') ? '' : '
  579. AND group_type != {int:is_protected}') . '
  580. LIMIT {int:limit}',
  581. array(
  582. 'current_group' => $_REQUEST['group'],
  583. 'is_protected' => 1,
  584. 'limit' => 1,
  585. )
  586. );
  587. list ($_REQUEST['group']) = $smcFunc['db_fetch_row']($request);
  588. $smcFunc['db_free_result']($request);
  589. }
  590. // Now, do we have a valid id?
  591. if (empty($_REQUEST['group']))
  592. fatal_lang_error('membergroup_does_not_exist', false);
  593. // Can this group moderate any boards?
  594. $request = $smcFunc['db_query']('', '
  595. SELECT COUNT(id_board)
  596. FROM {db_prefix}moderator_groups
  597. WHERE id_group = {int:current_group}',
  598. array(
  599. 'current_group' => $_REQUEST['group'],
  600. )
  601. );
  602. // Why don't we have a $smcFunc['db_result'] function?
  603. $result = $smcFunc['db_fetch_row']($request);
  604. $context['is_moderator_group'] = ($result[0] > 0);
  605. $smcFunc['db_free_result']($request);
  606. // The delete this membergroup button was pressed.
  607. if (isset($_POST['delete']))
  608. {
  609. checkSession();
  610. validateToken('admin-mmg');
  611. require_once($sourcedir . '/Subs-Membergroups.php');
  612. deleteMembergroups($_REQUEST['group']);
  613. redirectexit('action=admin;area=membergroups;');
  614. }
  615. // A form was submitted with the new membergroup settings.
  616. elseif (isset($_POST['save']))
  617. {
  618. // Validate the session.
  619. checkSession();
  620. validateToken('admin-mmg');
  621. // Can they really inherit from this group?
  622. if (isset($_POST['group_inherit']) && $_POST['group_inherit'] != -2 && !allowedTo('admin_forum'))
  623. {
  624. $request = $smcFunc['db_query']('', '
  625. SELECT group_type
  626. FROM {db_prefix}membergroups
  627. WHERE id_group = {int:inherit_from}
  628. LIMIT {int:limit}',
  629. array(
  630. 'inherit_from' => $_POST['group_inherit'],
  631. 'limit' => 1,
  632. )
  633. );
  634. list ($inherit_type) = $smcFunc['db_fetch_row']($request);
  635. $smcFunc['db_free_result']($request);
  636. }
  637. // Set variables to their proper value.
  638. $_POST['max_messages'] = isset($_POST['max_messages']) ? (int) $_POST['max_messages'] : 0;
  639. $_POST['min_posts'] = isset($_POST['min_posts']) && isset($_POST['group_type']) && $_POST['group_type'] == -1 && $_REQUEST['group'] > 3 ? abs($_POST['min_posts']) : ($_REQUEST['group'] == 4 ? 0 : -1);
  640. $_POST['icons'] = (empty($_POST['icon_count']) || $_POST['icon_count'] < 0) ? '' : min((int) $_POST['icon_count'], 99) . '#' . $_POST['icon_image'];
  641. $_POST['group_desc'] = isset($_POST['group_desc']) && ($_REQUEST['group'] == 1 || (isset($_POST['group_type']) && $_POST['group_type'] != -1)) ? trim($_POST['group_desc']) : '';
  642. $_POST['group_type'] = !isset($_POST['group_type']) || $_POST['group_type'] < 0 || $_POST['group_type'] > 3 || ($_POST['group_type'] == 1 && !allowedTo('admin_forum')) ? 0 : (int) $_POST['group_type'];
  643. $_POST['group_hidden'] = empty($_POST['group_hidden']) || $_POST['min_posts'] != -1 || $_REQUEST['group'] == 3 ? 0 : (int) $_POST['group_hidden'];
  644. $_POST['group_inherit'] = $_REQUEST['group'] > 1 && $_REQUEST['group'] != 3 && (empty($inherit_type) || $inherit_type != 1) ? (int) $_POST['group_inherit'] : -2;
  645. //@todo Don't set online_color for the Moderators group?
  646. // Do the update of the membergroup settings.
  647. $smcFunc['db_query']('', '
  648. UPDATE {db_prefix}membergroups
  649. SET group_name = {string:group_name}, online_color = {string:online_color},
  650. max_messages = {int:max_messages}, min_posts = {int:min_posts}, icons = {string:icons},
  651. description = {string:group_desc}, group_type = {int:group_type}, hidden = {int:group_hidden},
  652. id_parent = {int:group_inherit}
  653. WHERE id_group = {int:current_group}',
  654. array(
  655. 'max_messages' => $_POST['max_messages'],
  656. 'min_posts' => $_POST['min_posts'],
  657. 'group_type' => $_POST['group_type'],
  658. 'group_hidden' => $_POST['group_hidden'],
  659. 'group_inherit' => $_POST['group_inherit'],
  660. 'current_group' => (int) $_REQUEST['group'],
  661. 'group_name' => $smcFunc['htmlspecialchars']($_POST['group_name']),
  662. 'online_color' => $_POST['online_color'],
  663. 'icons' => $_POST['icons'],
  664. 'group_desc' => $_POST['group_desc'],
  665. )
  666. );
  667. call_integration_hook('integrate_save_membergroup', array((int) $_REQUEST['group']));
  668. // Time to update the boards this membergroup has access to.
  669. if ($_REQUEST['group'] == 2 || $_REQUEST['group'] > 3)
  670. {
  671. $accesses = empty($_POST['boardaccess']) || !is_array($_POST['boardaccess']) ? array() : $_POST['boardaccess'];
  672. $changed_boards['allow'] = array();
  673. $changed_boards['deny'] = array();
  674. $changed_boards['ignore'] = array();
  675. foreach ($accesses as $group_id => $action)
  676. $changed_boards[$action][] = (int) $group_id;
  677. foreach (array('allow', 'deny') as $board_action)
  678. {
  679. // Find all board this group is in, but shouldn't be in.
  680. $request = $smcFunc['db_query']('', '
  681. SELECT id_board, {raw:column}
  682. FROM {db_prefix}boards
  683. WHERE FIND_IN_SET({string:current_group}, {raw:column}) != 0' . (empty($changed_boards[$board_action]) ? '' : '
  684. AND id_board NOT IN ({array_int:board_access_list})'),
  685. array(
  686. 'current_group' => (int) $_REQUEST['group'],
  687. 'board_access_list' => $changed_boards[$board_action],
  688. 'column' => $board_action == 'allow' ? 'member_groups' : 'deny_member_groups',
  689. )
  690. );
  691. while ($row = $smcFunc['db_fetch_assoc']($request))
  692. $smcFunc['db_query']('', '
  693. UPDATE {db_prefix}boards
  694. SET {raw:column} = {string:member_group_access}
  695. WHERE id_board = {int:current_board}',
  696. array(
  697. 'current_board' => $row['id_board'],
  698. 'member_group_access' => implode(',', array_diff(explode(',', $row['member_groups']), array($_REQUEST['group']))),
  699. 'column' => $board_action == 'allow' ? 'member_groups' : 'deny_member_groups',
  700. )
  701. );
  702. $smcFunc['db_free_result']($request);
  703. // Add the membergroup to all boards that hadn't been set yet.
  704. if (!empty($changed_boards[$board_action]))
  705. $smcFunc['db_query']('', '
  706. UPDATE {db_prefix}boards
  707. SET {raw:column} = CASE WHEN {raw:column} = {string:blank_string} THEN {string:group_id_string} ELSE CONCAT({raw:column}, {string:comma_group}) END
  708. WHERE id_board IN ({array_int:board_list})
  709. AND FIND_IN_SET({int:current_group}, {raw:column}) = 0',
  710. array(
  711. 'board_list' => $changed_boards[$board_action],
  712. 'blank_string' => '',
  713. 'current_group' => (int) $_REQUEST['group'],
  714. 'group_id_string' => (string) (int) $_REQUEST['group'],
  715. 'comma_group' => ',' . $_REQUEST['group'],
  716. 'column' => $board_action == 'allow' ? 'member_groups' : 'deny_member_groups',
  717. )
  718. );
  719. }
  720. }
  721. // Remove everyone from this group!
  722. if ($_POST['min_posts'] != -1)
  723. {
  724. $smcFunc['db_query']('', '
  725. UPDATE {db_prefix}members
  726. SET id_group = {int:regular_member}
  727. WHERE id_group = {int:current_group}',
  728. array(
  729. 'regular_member' => 0,
  730. 'current_group' => (int) $_REQUEST['group'],
  731. )
  732. );
  733. $request = $smcFunc['db_query']('', '
  734. SELECT id_member, additional_groups
  735. FROM {db_prefix}members
  736. WHERE FIND_IN_SET({string:current_group}, additional_groups) != 0',
  737. array(
  738. 'current_group' => (int) $_REQUEST['group'],
  739. )
  740. );
  741. $updates = array();
  742. while ($row = $smcFunc['db_fetch_assoc']($request))
  743. $updates[$row['additional_groups']][] = $row['id_member'];
  744. $smcFunc['db_free_result']($request);
  745. foreach ($updates as $additional_groups => $memberArray)
  746. updateMemberData($memberArray, array('additional_groups' => implode(',', array_diff(explode(',', $additional_groups), array((int) $_REQUEST['group'])))));
  747. }
  748. elseif ($_REQUEST['group'] != 3)
  749. {
  750. // Making it a hidden group? If so remove everyone with it as primary group (Actually, just make them additional).
  751. if ($_POST['group_hidden'] == 2)
  752. {
  753. $request = $smcFunc['db_query']('', '
  754. SELECT id_member, additional_groups
  755. FROM {db_prefix}members
  756. WHERE id_group = {int:current_group}
  757. AND FIND_IN_SET({int:current_group}, additional_groups) = 0',
  758. array(
  759. 'current_group' => (int) $_REQUEST['group'],
  760. )
  761. );
  762. $updates = array();
  763. while ($row = $smcFunc['db_fetch_assoc']($request))
  764. $updates[$row['additional_groups']][] = $row['id_member'];
  765. $smcFunc['db_free_result']($request);
  766. foreach ($updates as $additional_groups => $memberArray)
  767. updateMemberData($memberArray, array('additional_groups' => implode(',', array_merge(explode(',', $additional_groups), array((int) $_REQUEST['group'])))));
  768. $smcFunc['db_query']('', '
  769. UPDATE {db_prefix}members
  770. SET id_group = {int:regular_member}
  771. WHERE id_group = {int:current_group}',
  772. array(
  773. 'regular_member' => 0,
  774. 'current_group' => $_REQUEST['group'],
  775. )
  776. );
  777. }
  778. // Either way, let's check our "show group membership" setting is correct.
  779. $request = $smcFunc['db_query']('', '
  780. SELECT COUNT(*)
  781. FROM {db_prefix}membergroups
  782. WHERE group_type > {int:non_joinable}',
  783. array(
  784. 'non_joinable' => 1,
  785. )
  786. );
  787. list ($have_joinable) = $smcFunc['db_fetch_row']($request);
  788. $smcFunc['db_free_result']($request);
  789. // Do we need to update the setting?
  790. if ((empty($modSettings['show_group_membership']) && $have_joinable) || (!empty($modSettings['show_group_membership']) && !$have_joinable))
  791. updateSettings(array('show_group_membership' => $have_joinable ? 1 : 0));
  792. }
  793. // Do we need to set inherited permissions?
  794. if ($_POST['group_inherit'] != -2 && $_POST['group_inherit'] != $_POST['old_inherit'])
  795. {
  796. require_once($sourcedir . '/ManagePermissions.php');
  797. updateChildPermissions($_POST['group_inherit']);
  798. }
  799. // Finally, moderators!
  800. $moderator_string = isset($_POST['group_moderators']) ? trim($_POST['group_moderators']) : '';
  801. $smcFunc['db_query']('', '
  802. DELETE FROM {db_prefix}group_moderators
  803. WHERE id_group = {int:current_group}',
  804. array(
  805. 'current_group' => $_REQUEST['group'],
  806. )
  807. );
  808. if ((!empty($moderator_string) || !empty($_POST['moderator_list'])) && $_POST['min_posts'] == -1 && $_REQUEST['group'] != 3)
  809. {
  810. // Get all the usernames from the string
  811. if (!empty($moderator_string))
  812. {
  813. $moderator_string = strtr(preg_replace('~&amp;#(\d{4,5}|[2-9]\d{2,4}|1[2-9]\d);~', '&#$1;', htmlspecialchars($moderator_string), ENT_QUOTES), array('&quot;' => '"'));
  814. preg_match_all('~"([^"]+)"~', $moderator_string, $matches);
  815. $moderators = array_merge($matches[1], explode(',', preg_replace('~"[^"]+"~', '', $moderator_string)));
  816. for ($k = 0, $n = count($moderators); $k < $n; $k++)
  817. {
  818. $moderators[$k] = trim($moderators[$k]);
  819. if (strlen($moderators[$k]) == 0)
  820. unset($moderators[$k]);
  821. }
  822. // Find all the id_member's for the member_name's in the list.
  823. $group_moderators = array();
  824. if (!empty($moderators))
  825. {
  826. $request = $smcFunc['db_query']('', '
  827. SELECT id_member
  828. FROM {db_prefix}members
  829. WHERE member_name IN ({array_string:moderators}) OR real_name IN ({array_string:moderators})
  830. LIMIT ' . count($moderators),
  831. array(
  832. 'moderators' => $moderators,
  833. )
  834. );
  835. while ($row = $smcFunc['db_fetch_assoc']($request))
  836. $group_moderators[] = $row['id_member'];
  837. $smcFunc['db_free_result']($request);
  838. }
  839. }
  840. else
  841. {
  842. $moderators = array();
  843. foreach ($_POST['moderator_list'] as $moderator)
  844. $moderators[] = (int) $moderator;
  845. $group_moderators = array();
  846. if (!empty($moderators))
  847. {
  848. $request = $smcFunc['db_query']('', '
  849. SELECT id_member
  850. FROM {db_prefix}members
  851. WHERE id_member IN ({array_int:moderators})
  852. LIMIT {int:num_moderators}',
  853. array(
  854. 'moderators' => $moderators,
  855. 'num_moderators' => count($moderators),
  856. )
  857. );
  858. while ($row = $smcFunc['db_fetch_assoc']($request))
  859. $group_moderators[] = $row['id_member'];
  860. $smcFunc['db_free_result']($request);
  861. }
  862. }
  863. // Found some?
  864. if (!empty($group_moderators))
  865. {
  866. $mod_insert = array();
  867. foreach ($group_moderators as $moderator)
  868. $mod_insert[] = array($_REQUEST['group'], $moderator);
  869. $smcFunc['db_insert']('insert',
  870. '{db_prefix}group_moderators',
  871. array('id_group' => 'int', 'id_member' => 'int'),
  872. $mod_insert,
  873. array('id_group', 'id_member')
  874. );
  875. }
  876. }
  877. // There might have been some post group changes.
  878. updateStats('postgroups');
  879. // We've definitely changed some group stuff.
  880. updateSettings(array(
  881. 'settings_updated' => time(),
  882. ));
  883. // Log the edit.
  884. logAction('edited_group', array('group' => $_POST['group_name']), 'admin');
  885. redirectexit('action=admin;area=membergroups');
  886. }
  887. // Fetch the current group information.
  888. $request = $smcFunc['db_query']('', '
  889. SELECT group_name, description, min_posts, online_color, max_messages, icons, group_type, hidden, id_parent
  890. FROM {db_prefix}membergroups
  891. WHERE id_group = {int:current_group}
  892. LIMIT 1',
  893. array(
  894. 'current_group' => (int) $_REQUEST['group'],
  895. )
  896. );
  897. if ($smcFunc['db_num_rows']($request) == 0)
  898. fatal_lang_error('membergroup_does_not_exist', false);
  899. $row = $smcFunc['db_fetch_assoc']($request);
  900. $smcFunc['db_free_result']($request);
  901. $row['icons'] = explode('#', $row['icons']);
  902. $context['group'] = array(
  903. 'id' => $_REQUEST['group'],
  904. 'name' => $row['group_name'],
  905. 'description' => htmlspecialchars($row['description']),
  906. 'editable_name' => $row['group_name'],
  907. 'color' => $row['online_color'],
  908. 'min_posts' => $row['min_posts'],
  909. 'max_messages' => $row['max_messages'],
  910. 'icon_count' => (int) $row['icons'][0],
  911. 'icon_image' => isset($row['icons'][1]) ? $row['icons'][1] : '',
  912. 'is_post_group' => $row['min_posts'] != -1,
  913. 'type' => $row['min_posts'] != -1 ? 0 : $row['group_type'],
  914. 'hidden' => $row['min_posts'] == -1 ? $row['hidden'] : 0,
  915. 'inherited_from' => $row['id_parent'],
  916. 'allow_post_group' => $_REQUEST['group'] == 2 || $_REQUEST['group'] > 4,
  917. 'allow_delete' => $_REQUEST['group'] == 2 || $_REQUEST['group'] > 4,
  918. 'allow_protected' => allowedTo('admin_forum'),
  919. );
  920. // Get any moderators for this group
  921. $request = $smcFunc['db_query']('', '
  922. SELECT mem.id_member, mem.real_name
  923. FROM {db_prefix}group_moderators AS mods
  924. INNER JOIN {db_prefix}members AS mem ON (mem.id_member = mods.id_member)
  925. WHERE mods.id_group = {int:current_group}',
  926. array(
  927. 'current_group' => $_REQUEST['group'],
  928. )
  929. );
  930. $context['group']['moderators'] = array();
  931. while ($row = $smcFunc['db_fetch_assoc']($request))
  932. $context['group']['moderators'][$row['id_member']] = $row['real_name'];
  933. $smcFunc['db_free_result']($request);
  934. $context['group']['moderator_list'] = empty($context['group']['moderators']) ? '' : '&quot;' . implode('&quot;, &quot;', $context['group']['moderators']) . '&quot;';
  935. if (!empty($context['group']['moderators']))
  936. list ($context['group']['last_moderator_id']) = array_slice(array_keys($context['group']['moderators']), -1);
  937. // Get a list of boards this membergroup is allowed to see.
  938. $context['boards'] = array();
  939. if ($_REQUEST['group'] == 2 || $_REQUEST['group'] > 3)
  940. {
  941. $request = $smcFunc['db_query']('', '
  942. SELECT b.id_cat, c.name as cat_name, b.id_board, b.name, b.child_level,
  943. FIND_IN_SET({string:current_group}, b.member_groups) != 0 AS can_access, FIND_IN_SET({string:current_group}, b.deny_member_groups) != 0 AS cannot_access
  944. FROM {db_prefix}boards AS b
  945. LEFT JOIN {db_prefix}categories AS c ON (c.id_cat = b.id_cat)
  946. ORDER BY board_order',
  947. array(
  948. 'current_group' => (int) $_REQUEST['group'],
  949. )
  950. );
  951. $context['categories'] = array();
  952. while ($row = $smcFunc['db_fetch_assoc']($request))
  953. {
  954. // This category hasn't been set up yet..
  955. if (!isset($context['categories'][$row['id_cat']]))
  956. $context['categories'][$row['id_cat']] = array(
  957. 'id' => $row['id_cat'],
  958. 'name' => $row['cat_name'],
  959. 'boards' => array()
  960. );
  961. // Set this board up, and let the template know when it's a child. (indent them..)
  962. $context['categories'][$row['id_cat']]['boards'][$row['id_board']] = array(
  963. 'id' => $row['id_board'],
  964. 'name' => $row['name'],
  965. 'child_level' => $row['child_level'],
  966. 'allow' => !(empty($row['can_access']) || $row['can_access'] == 'f'),
  967. 'deny' => !(empty($row['cannot_access']) || $row['cannot_access'] == 'f'),
  968. );
  969. }
  970. $smcFunc['db_free_result']($request);
  971. // Now, let's sort the list of categories into the boards for templates that like that.
  972. $temp_boards = array();
  973. foreach ($context['categories'] as $category)
  974. {
  975. $temp_boards[] = array(
  976. 'name' => $category['name'],
  977. 'child_ids' => array_keys($category['boards'])
  978. );
  979. $temp_boards = array_merge($temp_boards, array_values($category['boards']));
  980. // Include a list of boards per category for easy toggling.
  981. $context['categories'][$category['id']]['child_ids'] = array_keys($category['boards']);
  982. }
  983. $max_boards = ceil(count($temp_boards) / 2);
  984. if ($max_boards == 1)
  985. $max_boards = 2;
  986. }
  987. // Get a list of all the image formats we can select.
  988. $imageExts = array('png', 'jpg', 'jpeg', 'bmp', 'gif');
  989. // Scan the directory.
  990. $context['possible_icons'] = array();
  991. if ($files = scandir($settings['default_theme_dir'] . '/images/membericons'))
  992. {
  993. // Loop through every file in the directory.
  994. foreach ($files as $value)
  995. {
  996. // Grab the image extension.
  997. $ext = pathinfo($settings['default_theme_dir'] . '/images/membericons/' . $value, PATHINFO_EXTENSION);
  998. // If the extension is not empty, and it is valid,
  999. if (!empty($ext) && in_array($ext, $imageExts))
  1000. {
  1001. // Get the size of the image.
  1002. $image_info = getimagesize($settings['default_theme_dir'] . '/images/membericons/' . $value);
  1003. // If this is bigger than 128 in width or 32 in height, skip this one.
  1004. if ($image_info == false || $image_info[0] > 128 || $image_info[1] > 32)
  1005. continue;
  1006. // Else it's valid. Add it in.
  1007. else
  1008. $context['possible_icons'][] = $value;
  1009. }
  1010. }
  1011. }
  1012. // Insert our JS, if we have possible icons.
  1013. if (!empty($context['possible_icons']))
  1014. loadJavascriptFile('icondropdown.js', array('validate' => true));
  1015. // Finally, get all the groups this could be inherited off.
  1016. $request = $smcFunc['db_query']('', '
  1017. SELECT id_group, group_name
  1018. FROM {db_prefix}membergroups
  1019. WHERE id_group != {int:current_group}' .
  1020. (empty($modSettings['permission_enable_postgroups']) ? '
  1021. AND min_posts = {int:min_posts}' : '') . (allowedTo('admin_forum') ? '' : '
  1022. AND group_type != {int:is_protected}') . '
  1023. AND id_group NOT IN (1, 3)
  1024. AND id_parent = {int:not_inherited}',
  1025. array(
  1026. 'current_group' => (int) $_REQUEST['group'],
  1027. 'min_posts' => -1,
  1028. 'not_inherited' => -2,
  1029. 'is_protected' => 1,
  1030. )
  1031. );
  1032. $context['inheritable_groups'] = array();
  1033. while ($row = $smcFunc['db_fetch_assoc']($request))
  1034. $context['inheritable_groups'][$row['id_group']] = $row['group_name'];
  1035. $smcFunc['db_free_result']($request);
  1036. call_integration_hook('integrate_view_membergroup');
  1037. $context['sub_template'] = 'edit_group';
  1038. $context['page_title'] = $txt['membergroups_edit_group'];
  1039. createToken('admin-mmg');
  1040. }
  1041. /**
  1042. * Set some general membergroup settings and permissions.
  1043. * Called by ?action=admin;area=membergroups;sa=settings
  1044. * Requires the admin_forum permission (and manage_permissions for changing permissions)
  1045. * Redirects to itself.
  1046. *
  1047. * @uses membergroup_settings sub template of ManageMembergroups.
  1048. */
  1049. function ModifyMembergroupsettings()
  1050. {
  1051. global $context, $sourcedir, $scripturl, $modSettings, $txt;
  1052. $context['sub_template'] = 'show_settings';
  1053. $context['page_title'] = $txt['membergroups_settings'];
  1054. // Needed for the settings functions.
  1055. require_once($sourcedir . '/ManageServer.php');
  1056. // Don't allow assignment of guests.
  1057. $context['permissions_excluded'] = array(-1);
  1058. // Only one thing here!
  1059. $config_vars = array(
  1060. array('permissions', 'manage_membergroups'),
  1061. );
  1062. call_integration_hook('integrate_modify_membergroup_settings', array(&$config_vars));
  1063. if (isset($_REQUEST['save']))
  1064. {
  1065. checkSession();
  1066. call_integration_hook('integrate_save_membergroup_settings');
  1067. // Yeppers, saving this...
  1068. saveDBSettings($config_vars);
  1069. redirectexit('action=admin;area=membergroups;sa=settings');
  1070. }
  1071. // Some simple context.
  1072. $context['post_url'] = $scripturl . '?action=admin;area=membergroups;save;sa=settings';
  1073. $context['settings_title'] = $txt['membergroups_settings'];
  1074. // We need this for the in-line permissions
  1075. createToken('admin-mp');
  1076. prepareDBSettingContext($config_vars);
  1077. }
  1078. ?>