source: trunk/admin.php @ 9428

Last change on this file since 9428 was 9368, checked in by plg, 13 years ago

bug 2202 fixed: invalidate_user_cache() must be called before any redirect in included files

  • Property svn:eol-style set to LF
File size: 9.3 KB
RevLine 
[217]1<?php
[354]2// +-----------------------------------------------------------------------+
[8728]3// | Piwigo - a PHP based photo gallery                                    |
[2297]4// +-----------------------------------------------------------------------+
[8728]5// | Copyright(C) 2008-2011 Piwigo Team                  http://piwigo.org |
[2297]6// | Copyright(C) 2003-2008 PhpWebGallery Team    http://phpwebgallery.net |
7// | Copyright(C) 2002-2003 Pierrick LE GALL   http://le-gall.net/pierrick |
8// +-----------------------------------------------------------------------+
9// | This program is free software; you can redistribute it and/or modify  |
10// | it under the terms of the GNU General Public License as published by  |
11// | the Free Software Foundation                                          |
12// |                                                                       |
13// | This program is distributed in the hope that it will be useful, but   |
14// | WITHOUT ANY WARRANTY; without even the implied warranty of            |
15// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU      |
16// | General Public License for more details.                              |
17// |                                                                       |
18// | You should have received a copy of the GNU General Public License     |
19// | along with this program; if not, write to the Free Software           |
20// | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, |
21// | USA.                                                                  |
22// +-----------------------------------------------------------------------+
[217]23
[9368]24// +-----------------------------------------------------------------------+
25// | Basic constants and includes                                          |
26// +-----------------------------------------------------------------------+
27
[364]28define('PHPWG_ROOT_PATH','./');
[393]29define('IN_ADMIN', true);
[808]30
[9368]31include_once(PHPWG_ROOT_PATH.'include/common.inc.php');
[1072]32include_once(PHPWG_ROOT_PATH.'admin/include/functions.php');
[1655]33include_once(PHPWG_ROOT_PATH.'admin/include/functions_plugins.inc.php');
[1072]34
[5933]35trigger_action('loc_begin_admin');
36
[808]37// +-----------------------------------------------------------------------+
[1072]38// | Check Access and exit when user status is not ok                      |
39// +-----------------------------------------------------------------------+
[9368]40
[1072]41check_status(ACCESS_ADMINISTRATOR);
42
[9368]43// +-----------------------------------------------------------------------+
44// | Direct actions                                                        |
45// +-----------------------------------------------------------------------+
46
[5067]47// tags
48if (isset($_GET['fckb_tags']))
49{
50  $query = '
51SELECT
[5189]52    id AS tag_id,
53    name AS tag_name
[5067]54  FROM '.TAGS_TABLE.'
55;';
[5189]56  echo json_encode(get_fckb_taglist($query));
[5067]57  exit();
58}
59
[5098]60// theme changer
61if (isset($_GET['change_theme']))
62{
[5123]63  $admin_themes = array('roma', 'clear');
[5098]64
65  $new_admin_theme = array_pop(
66    array_diff(
67      $admin_themes,
[5123]68      array($conf['admin_theme'])
[5098]69      )
70    );
71
[5139]72  conf_update_param('admin_theme', $new_admin_theme);
[5098]73
74  redirect('admin.php');
75}
76
[1072]77// +-----------------------------------------------------------------------+
[9368]78// | Synchronize user informations                                         |
[808]79// +-----------------------------------------------------------------------+
[9368]80
[8756]81if (mt_rand(0,9)==0)
82{
83  sync_users();
84}
[808]85
[817]86// +-----------------------------------------------------------------------+
[9368]87// | Variables init                                                        |
[817]88// +-----------------------------------------------------------------------+
[708]89
[9357]90// ?page=plugin-community-pendings is an clean alias of
91// ?page=plugin&section=community/admin.php&tab=pendings
[9358]92if (isset($_GET['page']) and preg_match('/^plugin-([^-]*)(?:-(.*))?$/', $_GET['page'], $matches))
[9357]93{
94  $_GET['page'] = 'plugin';
95  $_GET['section'] = $matches[1].'/admin.php';
96  if (isset($matches[2]))
97  {
98    $_GET['tab'] = $matches[2];
99  }
100}
101
[1705]102if (isset($_GET['page'])
[817]103    and preg_match('/^[a-z_]*$/', $_GET['page'])
[1705]104    and is_file(PHPWG_ROOT_PATH.'admin/'.$_GET['page'].'.php'))
[217]105{
[1705]106  $page['page'] = $_GET['page'];
[217]107}
[1705]108else
[217]109{
[1705]110  $page['page'] = 'intro';
[217]111}
[393]112
[1655]113$page['errors'] = array();
114$page['infos']  = array();
[8762]115$page['warnings']  = array();
[1655]116
[8168]117if (isset($_SESSION['page_infos']))
118{
119  $page['infos'] = array_merge($page['infos'], $_SESSION['page_infos']);
120  unset($_SESSION['page_infos']);
121}
122
[393]123$link_start = PHPWG_ROOT_PATH.'admin.php?page=';
[602]124$conf_link = $link_start.'configuration&amp;section=';
[9368]125
126// +-----------------------------------------------------------------------+
127// | Template init                                                         |
128// +-----------------------------------------------------------------------+
129
[2342]130$title = l10n('Piwigo Administration'); // for include/page_header.php
131$page['page_banner'] = '<h1>'.l10n('Piwigo Administration').'</h1>';
[850]132$page['body_id'] = 'theAdminPage';
[393]133
[817]134$template->set_filenames(array('admin' => 'admin.tpl'));
[614]135
[2216]136$template->assign(
[817]137  array(
[5098]138    'USERNAME' => $user['username'],
[6365]139    'ENABLE_SYNCHRONIZATION' => $conf['enable_synchronization'],
[1029]140    'U_SITE_MANAGER'=> $link_start.'site_manager',
[1727]141    'U_HISTORY_STAT'=> $link_start.'stats',
[1004]142    'U_FAQ'=> $link_start.'help',
143    'U_SITES'=> $link_start.'remote_site',
144    'U_MAINTENANCE'=> $link_start.'maintenance',
[1091]145    'U_NOTIFICATION_BY_MAIL'=> $link_start.'notification_by_mail',
[1894]146    'U_CONFIG_GENERAL'=> $link_start.'configuration',
[1004]147    'U_CONFIG_DISPLAY'=> $conf_link.'default',
[2434]148    'U_CONFIG_EXTENTS'=> $link_start.'extend_for_templates',
[2488]149    'U_CONFIG_MENUBAR'=> $link_start.'menubar',
[5357]150    'U_CONFIG_LANGUAGES' => $link_start.'languages_installed',
[5153]151    'U_CONFIG_THEMES'=> $link_start.'themes_installed',
[1004]152    'U_CATEGORIES'=> $link_start.'cat_list',
153    'U_MOVE'=> $link_start.'cat_move',
154    'U_CAT_OPTIONS'=> $link_start.'cat_options',
[1058]155    'U_CAT_UPDATE'=> $link_start.'site_update&amp;site=1',
[1042]156    'U_RATING'=> $link_start.'rating',
[8423]157    'U_RECENT_SET'=> $link_start.'batch_manager&amp;cat=recent',
[8394]158    'U_BATCH'=> $link_start.'batch_manager',
[1119]159    'U_TAGS'=> $link_start.'tags',
[1004]160    'U_THUMBNAILS'=> $link_start.'thumbnail',
161    'U_USERS'=> $link_start.'user_list',
162    'U_GROUPS'=> $link_start.'group_list',
[1866]163    'U_PERMALINKS'=> $link_start.'permalinks',
[1082]164    'U_RETURN'=> make_index_url(),
[2574]165    'U_ADMIN'=> PHPWG_ROOT_PATH.'admin.php',
[3522]166    'U_LOGOUT'=> PHPWG_ROOT_PATH.'index.php?act=logout',
[2574]167    'U_PLUGINS'=> $link_start.'plugins_list',
[5089]168    'U_ADD_PHOTOS' => $link_start.'photos_add',
[5098]169    'U_CHANGE_THEME' => PHPWG_ROOT_PATH.'admin.php?change_theme=1',
[5997]170    'U_PENDING_COMMENTS' => $link_start.'comments',
[817]171    )
172  );
[1058]173
[9368]174// +-----------------------------------------------------------------------+
175// | Plugin menu                                                           |
176// +-----------------------------------------------------------------------+
177
[2144]178$plugin_menu_links = trigger_event('get_admin_plugin_menu_links', array() );
179
180function UC_name_compare($a, $b)
181{
182  return strcmp(strtolower($a['NAME']), strtolower($b['NAME']));
183}
184usort($plugin_menu_links, 'UC_name_compare');
[2216]185$template->assign('plugin_menu_items', $plugin_menu_links);
[1655]186
[792]187// +-----------------------------------------------------------------------+
[9368]188// | Refresh permissions                                                   |
[792]189// +-----------------------------------------------------------------------+
[817]190
[1945]191// Only for pages witch change permissions
[1952]192if (
193    in_array($page['page'],
194      array(
195        'site_manager', // delete site
196        'site_update',  // ?only POST
197        'cat_list',     // delete cat
198        'cat_modify',   // delete cat; public/private; lock/unlock
199        'cat_move',     // ?only POST
200        'cat_options',  // ?only POST; public/private; lock/unlock
201        'cat_perm',     // ?only POST
[2107]202        'picture_modify', // ?only POST; associate/dissociate
[1952]203        'user_perm',
204        'group_perm',
205        'group_list',   // delete group
206      )
207    )
[9127]208    or ( !empty($_POST) and in_array($page['page'],
[8756]209        array(
210          'batch_manager',  // associate/dissociate; delete; set level
[9127]211          'user_list',    // group assoc; user level
[8756]212        )
213      )
214    )
[1952]215  )
[1945]216{
[1978]217  invalidate_user_cache();
[1945]218}
219
[9368]220// +-----------------------------------------------------------------------+
221// | Include specific page                                                 |
222// +-----------------------------------------------------------------------+
223
224include(PHPWG_ROOT_PATH.'admin/'.$page['page'].'.php');
225
226// +-----------------------------------------------------------------------+
227// | Errors, Infos & Warnings                                              |
228// +-----------------------------------------------------------------------+
229
230$template->assign('ACTIVE_MENU', get_active_menu($page['page']));
231
232if (count($page['errors']) != 0)
233{
234  $template->assign('errors', $page['errors']);
235}
236
237if (count($page['infos']) != 0)
238{
239  $template->assign('infos', $page['infos']);
240}
241
242if (count($page['warnings']) != 0)
243{
244  $template->assign('warnings', $page['warnings']);
245}
246
247// +-----------------------------------------------------------------------+
248// | Sending html code                                                     |
249// +-----------------------------------------------------------------------+
250
251// Add the Piwigo Official menu
252$template->assign( 'pwgmenu', pwg_URL() );
253
254include(PHPWG_ROOT_PATH.'include/page_header.php');
255
256trigger_action('loc_end_admin');
257
258$template->pparse('admin');
259
[1978]260include(PHPWG_ROOT_PATH.'include/page_tail.php');
[362]261?>
Note: See TracBrowser for help on using the repository browser.