makary/phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-06-28 22:28:51 +00:00
Code Issues Projects Releases Packages Wiki Activity

Updated

Browse source 
git-svn-id: file:///svn/phpbb/trunk@2738 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
Paul S. Owen 2002-07-25 14:26:52 +00:00
parent 38f9c9acfe
commit 4d0b2c9167
1 changed files with 64 additions and 58 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

130
phpBB/admin/admin_disallow.php
View file

@ -23,27 +23,41 @@ define('IN_PHPBB', 1);
if( !empty($setmodules) ) if( !empty($setmodules) )
{ {
if ( !$acl->get_acl_admin('user') )
{
return;
}
$filename = basename(__FILE__); $filename = basename(__FILE__);
$module['Users']['Disallow'] = $filename . $SID; $module['Users']['Disallow'] = $filename . $SID;
return; return;
} }
define('IN_PHPBB', 1);
// //
// Include required files, get $phpEx and check permissions // Include files
// //
$phpbb_root_path = "../"; $phpbb_root_path = '../';
require($phpbb_root_path . 'extension.inc'); require($phpbb_root_path . 'extension.inc');
require('pagestart.' . $phpEx); require('pagestart.' . $phpEx);
//
// Do we have user admin permissions?
//
if ( !$acl->get_acl_admin('user') )
{
return;
}
if( isset($HTTP_POST_VARS['add_name']) ) if( isset($HTTP_POST_VARS['add_name']) )
{ {
include($phpbb_root_path . 'includes/functions_validate.'.$phpEx); include($phpbb_root_path . 'includes/functions_validate.'.$phpEx);
$disallowed_user = ( isset($HTTP_POST_VARS['disallowed_user']) ) ? $HTTP_POST_VARS['disallowed_user'] : $HTTP_GET_VARS['disallowed_user']; $disallowed_user = ( isset($HTTP_POST_VARS['disallowed_user']) ) ? $HTTP_POST_VARS['disallowed_user'] : $HTTP_GET_VARS['disallowed_user'];
$disallowed_user = preg_replace( '/\*/', '%', $disallowed_user ); $disallowed_user = str_replace('*', '%', $disallowed_user);
if( !validate_username($disallowed_user) ) if ( !validate_username($disallowed_user) )
{ {
$message = $lang['Disallowed_already']; $message = $lang['Disallowed_already'];
} }
@ -52,16 +66,15 @@ if( isset($HTTP_POST_VARS['add_name']) )
$sql = "INSERT INTO " . DISALLOW_TABLE . " (disallow_username) $sql = "INSERT INTO " . DISALLOW_TABLE . " (disallow_username)
VALUES('" . str_replace("\'", "''", $disallowed_user) . "')"; VALUES('" . str_replace("\'", "''", $disallowed_user) . "')";
$result = $db->sql_query( $sql ); $result = $db->sql_query( $sql );
if ( !$result )
{
message_die(GENERAL_ERROR, "Could not add disallowed user.", "",__LINE__, __FILE__, $sql);
}
$message = $lang['Disallow_successful']; $message = $lang['Disallow_successful'];
} }
$message .= "<br /><br />" . sprintf($lang['Click_return_disallowadmin'], "<a href=\"" . append_sid("admin_disallow.$phpEx") . "\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_admin_index'], "<a href=\"" . append_sid("index.$phpEx?pane=right") . "\">", "</a>"); $message .= '<br /><br />' . sprintf($lang['Click_return_disallowadmin'], '<a href="' . "admin_disallow.$phpEx$SID" . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_admin_index'], '<a href="' . "index.$phpEx$SID&amp;pane=right" . '">', '</a>');
message_die(GENERAL_MESSAGE, $message); add_admin_log('log_disallow_add', str_replace('%', '*', $disallowed_user));
message_die(MESSAGE, $message);
} }
else if( isset($HTTP_POST_VARS['delete_name']) ) else if( isset($HTTP_POST_VARS['delete_name']) )
{ {
@ -69,15 +82,13 @@ else if( isset($HTTP_POST_VARS['delete_name']) )
$sql = "DELETE FROM " . DISALLOW_TABLE . " $sql = "DELETE FROM " . DISALLOW_TABLE . "
WHERE disallow_id = $disallowed_id"; WHERE disallow_id = $disallowed_id";
$result = $db->sql_query($sql); $db->sql_query($sql);
if( !$result )
{
message_die(GENERAL_ERROR, "Couldn't removed disallowed user.", "",__LINE__, __FILE__, $sql);
}
$message .= $lang['Disallowed_deleted'] . "<br /><br />" . sprintf($lang['Click_return_disallowadmin'], "<a href=\"" . append_sid("admin_disallow.$phpEx") . "\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_admin_index'], "<a href=\"" . append_sid("index.$phpEx?pane=right") . "\">", "</a>"); $message .= $lang['Disallowed_deleted'] . '<br /><br />' . sprintf($lang['Click_return_disallowadmin'], '<a href="' . "admin_disallow.$phpEx$SID" . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_admin_index'], '<a href="' . "index.$phpEx$SID&amp;pane=right" . '">', '</a>');
message_die(GENERAL_MESSAGE, $message); add_admin_log('log_disallow_delete');
message_die(MESSAGE, $message);
} }
@ -87,56 +98,51 @@ else if( isset($HTTP_POST_VARS['delete_name']) )
$sql = "SELECT * $sql = "SELECT *
FROM " . DISALLOW_TABLE; FROM " . DISALLOW_TABLE;
$result = $db->sql_query($sql); $result = $db->sql_query($sql);
if( !$result )
if ( $row = $db->sql_fetchrow($result) )
{ {
message_die(GENERAL_ERROR, "Couldn't get disallowed users.", "", __LINE__, __FILE__, $sql ); $disallow_select = '';
} do
{
$disallowed = $db->sql_fetchrowset($result); $disallow_select .= '<option value="' . $row['disallow_id'] . '">' . str_replace('%', '*', $row['disallow_username']) . '</option>';
}
// while ( $row = $db->sql_fetchrow($result) );
// Ok now generate the info for the template, which will be put out no matter
// what mode we are in.
//
$disallow_select = '<select name="disallowed_id">';
if( trim($disallowed) == "" )
{
$disallow_select .= '<option value="">' . $lang['no_disallowed'] . '</option>';
} }
else else
{ {
$user = array(); $disallow_select = '<option value="">' . $lang['No_disallowed'] . '</option>';
for( $i = 0; $i < count($disallowed); $i++ )
{
$disallowed[$i]['disallow_username'] = preg_replace('/%/', '*', $disallowed[$i]['disallow_username']);
$disallow_select .= '<option value="' . $disallowed[$i]['disallow_id'] . '">' . $disallowed[$i]['disallow_username'] . '</option>';
}
} }
$disallow_select .= '</select>'; //
// Output page
$template->set_filenames(array( //
"body" => "admin/disallow_body.tpl") page_header($lang['Users']);
);
?>
$template->assign_vars(array(
"S_DISALLOW_SELECT" => $disallow_select, <h1><?php echo $lang['Disallow_control']; ?></h1>
"S_FORM_ACTION" => append_sid("admin_disallow.$phpEx"),
<p><?php echo $lang['Disallow_explain']; ?></p>
"L_INFO" => $output_info,
"L_DISALLOW_TITLE" => $lang['Disallow_control'], <form method="post" action="<?php echo "admin_disallow.$phpEx$SID"; ?>"><table class="bg" width="80%" cellspacing="1" cellpadding="4" border="0" align="center">
"L_DISALLOW_EXPLAIN" => $lang['Disallow_explain'], <tr>
"L_DELETE" => $lang['Delete_disallow'], <th colspan="2"><?php echo $lang['Add_disallow_title']; ?></th>
"L_DELETE_DISALLOW" => $lang['Delete_disallow_title'], </tr>
"L_DELETE_EXPLAIN" => $lang['Delete_disallow_explain'], <tr>
"L_ADD" => $lang['Add_disallow'], <td class="row1"><?php echo $lang['Username']; ?><br /><span class="gensmall"><?php echo $lang['Add_disallow_explain']; ?></span></td>
"L_ADD_DISALLOW" => $lang['Add_disallow_title'], <td class="row2"><input type="text" name="disallowed_user" size="30" />&nbsp;<input type="submit" name="add_name" value="<?php echo $lang['Add_disallow']; ?>" class="mainoption" /></td>
"L_ADD_EXPLAIN" => $lang['Add_disallow_explain'], </tr>
"L_USERNAME" => $lang['Username']) <tr>
); <th colspan="2"><?php echo $lang['Delete_disallow_title']; ?></th>
</tr>
$template->pparse("body"); <tr>
<td class="row1"><?php echo $lang['Username']; ?><br /><span class="gensmall"><?php echo $lang['Delete_disallow_explain']; ?></span></td>
<td class="row2"><select name="disallowed_id"><?php echo $disallow_select; ?></select>&nbsp;<input type="submit" name="delete_name" value="<?php echo $lang['Delete']; ?>" class="liteoption" /></td>
</tr>
</table></form>
<?php
page_footer();
?> ?>