source: trunk/profile.php @ 5742

Last change on this file since 5742 was 5328, checked in by patdenice, 14 years ago

Feature 1533: admincan activate/deactivate user customization.

File size: 10.0 KB
Line 
1<?php
2// +-----------------------------------------------------------------------+
3// | Piwigo - a PHP based picture gallery                                  |
4// +-----------------------------------------------------------------------+
5// | Copyright(C) 2008-2010 Piwigo Team                  http://piwigo.org |
6// | Copyright(C) 2003-2008 PhpWebGallery Team    http://phpwebgallery.net |
7// | Copyright(C) 2002-2003 Pierrick LE GALL   http://le-gall.net/pierrick |
8// +-----------------------------------------------------------------------+
9// | This program is free software; you can redistribute it and/or modify  |
10// | it under the terms of the GNU General Public License as published by  |
11// | the Free Software Foundation                                          |
12// |                                                                       |
13// | This program is distributed in the hope that it will be useful, but   |
14// | WITHOUT ANY WARRANTY; without even the implied warranty of            |
15// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU      |
16// | General Public License for more details.                              |
17// |                                                                       |
18// | You should have received a copy of the GNU General Public License     |
19// | along with this program; if not, write to the Free Software           |
20// | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, |
21// | USA.                                                                  |
22// +-----------------------------------------------------------------------+
23
24// customize appearance of the site for a user
25// +-----------------------------------------------------------------------+
26// |                           initialization                              |
27// +-----------------------------------------------------------------------+
28
29if (!defined('PHPWG_ROOT_PATH'))
30{//direct script access
31  define('PHPWG_ROOT_PATH','./');
32  include_once(PHPWG_ROOT_PATH.'include/common.inc.php');
33
34  // +-----------------------------------------------------------------------+
35  // | Check Access and exit when user status is not ok                      |
36  // +-----------------------------------------------------------------------+
37  check_status(ACCESS_CLASSIC);
38
39  $userdata = $user;
40
41  trigger_action('loc_begin_profile');
42
43// Reset to default (Guest) custom settings
44  if (isset($_POST['reset_to_default']))
45  {
46    $fields = array(
47      'nb_image_line', 'nb_line_page', 'maxwidth', 'maxheight', 'expand',
48      'show_nb_comments', 'show_nb_hits', 'recent_period', 'show_nb_hits'
49      );
50
51    // Get the Guest custom settings
52    $query = '
53SELECT '.implode(',', $fields).'
54  FROM '.USER_INFOS_TABLE.'
55  WHERE user_id = '.$conf['default_user_id'].'
56;';
57    $result = pwg_query($query);
58    $default_user = pwg_db_fetch_assoc($result);
59    $userdata = array_merge($userdata, $default_user);
60  }
61
62  save_profile_from_post($userdata, $errors);
63
64  $title= l10n('Your Gallery Customization');
65  $page['body_id'] = 'theProfilePage';
66  include(PHPWG_ROOT_PATH.'include/page_header.php');
67
68  load_profile_in_template(
69    get_root_url().'profile.php', // action
70    make_index_url(), // for redirect
71    $userdata );
72
73  // +-----------------------------------------------------------------------+
74  // |                             errors display                            |
75  // +-----------------------------------------------------------------------+
76  if (count($errors) != 0)
77  {
78    $template->assign('errors', $errors);
79  }
80  $template->set_filename('profile', 'profile.tpl');
81  trigger_action('loc_end_profile');
82  $template->parse('profile');
83  include(PHPWG_ROOT_PATH.'include/page_tail.php');
84}
85
86//------------------------------------------------------ update & customization
87function save_profile_from_post($userdata, &$errors)
88{
89  global $conf;
90  $errors = array();
91
92  if (!isset($_POST['validate']))
93  {
94    return false;
95  }
96
97  $special_user = in_array($userdata['id'], array($conf['guest_id'], $conf['default_user_id']));
98  if ($special_user)
99  {
100    unset($_POST['mail_address'],
101          $_POST['password'],
102          $_POST['use_new_pwd'],
103          $_POST['passwordConf']
104          );
105  }
106
107  if ($conf['allow_user_customization'] or defined('IN_ADMIN'))
108  {
109    $int_pattern = '/^\d+$/';
110    if (empty($_POST['nb_image_line'])
111        or (!preg_match($int_pattern, $_POST['nb_image_line'])))
112    {
113      $errors[] = l10n('The number of images per row must be a not null scalar');
114    }
115
116    if (empty($_POST['nb_line_page'])
117        or (!preg_match($int_pattern, $_POST['nb_line_page'])))
118    {
119      $errors[] = l10n('The number of rows per page must be a not null scalar');
120    }
121
122    if ($_POST['maxwidth'] != ''
123        and (!preg_match($int_pattern, $_POST['maxwidth'])
124             or $_POST['maxwidth'] < 50))
125    {
126      $errors[] = l10n('Maximum width must be a number superior to 50');
127    }
128    if ($_POST['maxheight']
129         and (!preg_match($int_pattern, $_POST['maxheight'])
130               or $_POST['maxheight'] < 50))
131    {
132      $errors[] = l10n('Maximum height must be a number superior to 50');
133    }
134    // periods must be integer values, they represents number of days
135    if (!preg_match($int_pattern, $_POST['recent_period'])
136        or $_POST['recent_period'] <= 0)
137    {
138      $errors[] = l10n('Recent period must be a positive integer value') ;
139    }
140  }
141
142  if (isset($_POST['mail_address']))
143  {
144    // if $_POST and $userdata have are same email
145    // validate_mail_address allows, however, to check email
146    $mail_error = validate_mail_address($userdata['id'], $_POST['mail_address']);
147    if (!empty($mail_error))
148    {
149      $errors[] = $mail_error;
150    }
151  }
152
153  if (!empty($_POST['use_new_pwd']))
154  {
155    // password must be the same as its confirmation
156    if ($_POST['use_new_pwd'] != $_POST['passwordConf'])
157    {
158      $errors[] = l10n('New password confirmation does not correspond');
159    }
160
161    if ( !defined('IN_ADMIN') )
162    {// changing password requires old password
163      $query = '
164  SELECT '.$conf['user_fields']['password'].' AS password
165    FROM '.USERS_TABLE.'
166    WHERE '.$conf['user_fields']['id'].' = \''.$userdata['id'].'\'
167  ;';
168      list($current_password) = pwg_db_fetch_row(pwg_query($query));
169
170      if ($conf['pass_convert']($_POST['password']) != $current_password)
171      {
172        $errors[] = l10n('Current password is wrong');
173      }
174    }
175  }
176
177  if (count($errors) == 0)
178  {
179    // mass_updates function
180    include_once(PHPWG_ROOT_PATH.'admin/include/functions.php');
181
182    if (isset($_POST['mail_address']))
183    {
184      // update common user informations
185      $fields = array($conf['user_fields']['email']);
186
187      $data = array();
188      $data{$conf['user_fields']['id']} = $userdata['id'];
189      $data{$conf['user_fields']['email']} = $_POST['mail_address'];
190
191      // password is updated only if filled
192      if (!empty($_POST['use_new_pwd']))
193      {
194        array_push($fields, $conf['user_fields']['password']);
195        // password is encrpyted with function $conf['pass_convert']
196        $data{$conf['user_fields']['password']} =
197          $conf['pass_convert']($_POST['use_new_pwd']);
198      }
199      mass_updates(USERS_TABLE,
200                   array('primary' => array($conf['user_fields']['id']),
201                         'update' => $fields),
202                   array($data));
203    }
204
205    if ($conf['allow_user_customization'] or defined('IN_ADMIN'))
206    {
207      // update user "additional" informations (specific to Piwigo)
208      $fields = array(
209        'nb_image_line', 'nb_line_page', 'language', 'maxwidth', 'maxheight',
210        'expand', 'show_nb_comments', 'show_nb_hits', 'recent_period', 'theme'
211        );
212
213      $data = array();
214      $data['user_id'] = $userdata['id'];
215
216      foreach ($fields as $field)
217      {
218        if (isset($_POST[$field]))
219        {
220          $data[$field] = $_POST[$field];
221        }
222      }
223      mass_updates(USER_INFOS_TABLE,
224                   array('primary' => array('user_id'), 'update' => $fields),
225                   array($data));
226    }
227    trigger_action( 'save_profile_from_post', $userdata['id'] );
228
229    if (!empty($_POST['redirect']))
230    {
231      redirect($_POST['redirect']);
232    }
233  }
234  return true;
235}
236
237
238function load_profile_in_template($url_action, $url_redirect, $userdata)
239{
240  global $template, $conf;
241
242  $template->set_filename('profile_content', 'profile_content.tpl');
243
244  $template->assign('radio_options',
245    array(
246      'true' => l10n('Yes'),
247      'false' => l10n('No')));
248
249  $template->assign(
250    array(
251      'USERNAME'=>stripslashes($userdata['username']),
252      'EMAIL'=>get_email_address_as_display_text(@$userdata['email']),
253      'ALLOW_USER_CUSTOMIZATION'=>$conf['allow_user_customization'],
254      'NB_IMAGE_LINE'=>$userdata['nb_image_line'],
255      'NB_ROW_PAGE'=>$userdata['nb_line_page'],
256      'RECENT_PERIOD'=>$userdata['recent_period'],
257      'MAXWIDTH'=>@$userdata['maxwidth'],
258      'MAXHEIGHT'=>@$userdata['maxheight'],
259      'EXPAND' =>$userdata['expand'] ? 'true' : 'false',
260      'NB_COMMENTS'=>$userdata['show_nb_comments'] ? 'true' : 'false',
261      'NB_HITS'=>$userdata['show_nb_hits'] ? 'true' : 'false',
262      'REDIRECT' => $url_redirect,
263      'F_ACTION'=>$url_action,
264      ));
265
266  $template->assign('template_selection', $userdata['theme']);
267  $template->assign('template_options', get_pwg_themes());
268
269  foreach (get_languages() as $language_code => $language_name)
270  {
271    if (isset($_POST['submit']) or $userdata['language'] == $language_code)
272    {
273      $template->assign('language_selection', $language_code);
274    }
275    $language_options[$language_code] = $language_name;
276  }
277
278  $template->assign('language_options', $language_options);
279
280  $special_user = in_array($userdata['id'], array($conf['guest_id'], $conf['default_user_id']));
281  $template->assign('SPECIAL_USER', $special_user);
282  $template->assign('IN_ADMIN', defined('IN_ADMIN'));
283
284  // allow plugins to add their own form data to content
285  trigger_action( 'load_profile_in_template', $userdata );
286
287  $template->assign_var_from_handle('PROFILE_CONTENT', 'profile_content');
288}
289?>
Note: See TracBrowser for help on using the repository browser.