source: extensions/community/main.inc.php @ 9372

<?php
/*
Plugin Name: Community
Version: auto
Description: Non admin users can add photos
Plugin URI: http://piwigo.org/ext/extension_view.php?eid=303
Author: plg
Author URI: http://piwigo.wordpress.com
*/

if (!defined('PHPWG_ROOT_PATH'))
{
  die('Hacking attempt!');
}

define('COMMUNITY_PATH' , PHPWG_PLUGINS_PATH.basename(dirname(__FILE__)).'/');

global $prefixeTable;
define('COMMUNITY_TABLE', $prefixeTable.'community');
define('COMMUNITY_PERMISSIONS_TABLE', $prefixeTable.'community_permissions');
define('COMMUNITY_PENDINGS_TABLE', $prefixeTable.'community_pendings');

/* Plugin admin */
add_event_handler('get_admin_plugin_menu_links', 'community_admin_menu');

function community_admin_menu($menu)
{
  array_push(
    $menu,
    array(
      'NAME' => 'Community',
      'URL'  => get_root_url().'admin.php?page=plugin-community'
      )
    );

  return $menu;
}

add_event_handler('loc_end_section_init', 'community_section_init');
function community_section_init()
{
  global $tokens, $page;
  
  if ($tokens[0] == 'add_photos')
  {
    $page['section'] = 'add_photos';
  }
}

add_event_handler('loc_end_index', 'community_index');
function community_index()
{
  global $page;
  
  if (isset($page['section']) and $page['section'] == 'add_photos')
  {
    include(COMMUNITY_PATH.'add_photos.php');
  }
}

add_event_handler('blockmanager_apply' , 'community_gallery_menu');
function community_gallery_menu($menu_ref_arr)
{
  global $conf, $user;

  // conditional : depending on community permissions, display the "Add
  // photos" link in the gallery menu
  
  // admins are not concerned about community permissions
  if (!is_admin())
  {
    // what are the user groups?
    $query = '
SELECT
    group_id
  FROM '.USER_GROUP_TABLE.'
  WHERE user_id = '.$user['id'].'
;';
    $user_group_ids = array_from_query($query, 'group_id');

    $query = '
SELECT
    COUNT(*)
  FROM '.COMMUNITY_PERMISSIONS_TABLE.'
  WHERE (type = \'any_visitor\')';

    if ($user['id'] != $conf['guest_id'])
    {
      $query.= '
    OR (type = \'any_registered_user\')
    OR (type = \'user\' AND user_id = '.$user['id'].')
    OR (type = \'group\' AND group_id IN ('.implode(',', $user_group_ids).'))
';
    }
    
    $query.= '
;';

    list($counter) = pwg_db_fetch_row(pwg_query($query));
    if (0 == $counter)
    {
      return;
    }
  }

  $menu = & $menu_ref_arr[0];

  if (($block = $menu->get_block('mbMenu')) != null )
  {
    load_language('plugin.lang', COMMUNITY_PATH);

    array_splice(
      $block->data,
      count($block->data),
      0,
      array(
        '' => array(
          'URL' => make_index_url(array('section' => 'add_photos')),
          'TITLE' => l10n('Upload your own photos'),
          'NAME' => l10n('Upload Photos')
          )
        )
      );
  }
}


add_event_handler('ws_invoke_allowed', 'community_switch_user_to_admin', EVENT_HANDLER_PRIORITY_NEUTRAL, 3);

function community_switch_user_to_admin($res, $methodName, $params)
{
  global $user;

  $methods_of_permission_level[1] = array(
    'pwg.categories.getList',
    'pwg.tags.getAdminList',
    'pwg.tags.add',
    'pwg.images.exist',
    'pwg.images.add',
    'pwg.images.setInfo',
    'pwg.images.addChunk',
    'pwg.images.checkUpload',
    );

  // permission_level 2 has all methods of level 1 + others
  $methods_of_permission_level[2] = array_merge(
    $methods_of_permission_level[1],
    array(
      'pwg.categories.add',
      'pwg.categories.setInfo',
      )
    );
    
  $query = '
SELECT
    permission_level
  FROM '.COMMUNITY_TABLE.'
  WHERE user_id = '.$user['id'].'
;';
  $result = pwg_query($query);
  if (1 == mysql_num_rows($result))
  {
    list($permission_level) = mysql_fetch_row($result);

    if (in_array($methodName, $methods_of_permission_level[$permission_level]))
    {
      $user['status'] = 'admin';
    }
  }

  return $res;
}

add_event_handler('delete_user', 'community_delete_user');
function community_delete_user($user_id)
{
  $query = '
DELETE
  FROM '.COMMUNITY_TABLE.'
  WHERE user_id = '.$user_id.'
;';
  pwg_query($query);
}

?>