User management for the world wide web

Admin.php

<?php
require_once("GenieGate/Controller.php");
require_once("GenieGate/UserAccount.php");
require_once("GenieGate/View/Php.php");
require_once("GenieGate/Groups.php");
require_once("GenieGate/Properties.php");
require_once("GenieGate/Api/Login.php");
require_once("GenieGate/utils.php");
require_once("GenieGate/XMLImport.php");
require_once("GenieGate/View/XMLExport.php");
require_once("GenieGate/View/FlatFile.php");
require_once("GenieGate/View/VCard.php");
class GenieGate_Controller_Admin extends GenieGate_Controller {

  var $APP_NAME = "Admin";
  var $PM;
  var $UA;
  var $GM;
  var $DISPATCH = array(DO_USER_MAIN          => "do_user_main",
                        DO_GENERAL_SEARCH     => "do_general_search",
                        DO_USER_SEARCH        => "do_user_search",
                        DO_LOOKUP_UID         => "do_lookup_uid",
                        DO_UPDATE_USER        => "do_update_user",
                        DO_UPDATE_GROUP       => "do_update_group",
                        DO_DELETE_GROUP       => "do_delete_group",
                        DO_SHOW_CREATE_SCREEN => "do_show_create_screen",
                        DO_DELETE_USER        => "do_delete_user",
                        DO_EXPUNGE            => "do_expunge",
                        DO_GROUP_MAIN         => "do_group_main",
                        DO_SHOW_GROUP         => "do_show_group",
                        DO_CREATE_GROUP       => "do_create_group",
                        DO_CREATE_USER        => "do_create_user",
                        DO_SHOW_EDIT_PROP     => "do_show_edit_prop",
                        DO_ALTER_PROPERTY     => "do_alter_property",
                        DO_REMOVE_PROPERTY    => "do_remove_property",
                        DO_ADD_PROPERTY       => "do_add_property",
                        DO_LOGOUT             => "do_logout",
                        DO_EXPORT_MAIN        => "do_export_main",
                        DO_EXPORT             => "do_export",
                        DO_VCARD              => "do_vcard",
                        DO_IMPORT_XML         => "do_import_xml",
                        DO_PROPERTY_MAIN      => "do_property_main");

    function GenieGate_Controller_Admin(&$conf){
        parent::GenieGate_Controller($conf);      
        $this->GM = new GenieGate_Groups($this->DBH);
        $this->UA = new GenieGate_UserAccount($this->DBH,$this->GM);           
        $this->PM = new GenieGate_Properties($this->DBH); 
        $this->gl = new GenieGate_Api_Login($this->DBH);
        $this->gl->setPromptView($this->getView("login"));
        $this->gl->USE_HTTP_AUTH=FALSE; // No authentication via HTTP. (use form base only)
        $this->gl->login(array("admin"));    
        $this->addPlugins();
    }
    function run($method=FALSE){
        $view = parent::run();
        // Nothing found, do the default.
        if(! $view){
            $view = $this->do_main();
        }
        return($view);
    }
    function addListener(&$listener){ 
        parent::addListener($listener);
        $this->UA->addListener(&$listener);
        $this->GM->addListener(&$listener);
        $this->PM->addListener(&$listener);    
    }
  
    function do_logout(){
        $this->gl->logout();
        return($this->getView("login"));
    }

  function do_main(){
    $view = $this->getView("main");
    $view->param("STATS",$this->UA->getUserStats());
    return($view);
  }
  function do_general_search(){
    $kw = $_REQUEST[KEYWORDS];
    if(strlen($kw) == 0){
      return($this->do_main());
    }
    return($this->getView("search_result", 
              array(SEARCH_USERS => $this->UA->scanUsers($kw))
              )
       );  
  }
  function do_expunge(){
      $this->UA->expungeNonConfirmed();
      $view = $this->getView("message");
      $view->param("MESSAGE","User(s) removed");
      $view->param("NEXT","index.php?DO_USER_MAIN=1");
      return($view);
  }

  function do_user_search(){
    $email = $_POST[EMAIL];
    $name = $_POST[NAME];
    $from = $_POST[DATE_FROM];
    $to = $_POST[DATE_TO];
    return($this->getView("search_result", 
              array(SEARCH_USERS => $this->UA->searchUsers($email,$name,$from,$to)))
       );
  }
  function do_update_user(){    
    $user[uid] = $_POST[uid];
    if(! $this->UA->lookupUid($user[uid])){
      $err = $this->getView("general_error");
      $err->param("ERRORS",array("User \"$user[uid]\" does not exist"));
      return($err);
    }
    $user[name]     = $_POST[name];
    $user[email]    = $_POST[email];
    $user[password] = $_POST[password];
    $groups = array();
    if(is_array($_POST[GIDS])){      // PHP seems to introduce duplicates in multiple form variables.
      foreach($_POST[GIDS] as $l){
          $groups[$l] = 1;
      }
    }
    // Root user ALWAYS belongs to admin.
    if($user[uid] == "root"){
        $groups[admin] = 1;
    }
    $errors = $this->UA->checkNewUserFields($user,FALSE);
    if(count($errors)){
      $view = $this->getView("general_error");
      $view->param("ERRORS",$errors);
      return($view);
    }
    $this->UA->updateUserAccount($user[uid],$user);
    $this->GM->setMember($user[uid],array_keys($groups));

    $this->storePropertySettings($user[uid]);

    $view = $this->getView("message",array(MESSAGE => "User modification complete"));
    $view->param("NEXT","index.php?DO_USER_MAIN=1");
    return($view);
  }
  function do_user_main(){
    return($this->getView("user-main",array(STATS => $this->UA->getUserStats())));
  }
  function do_show_create_screen(){
    $errors = array();
    $uid = $_POST[UID];
    $ev = $this->getView("general_error");
    if(! $uid){
      array_push($errors,"Must supply a user ID");
    }
    $user = $this->UA->lookupUid($uid);
    if($user){
      array_push($errors,"User ID \"$uid\" already exists");
      $ev->param("ERRORS",$errors);
      return($ev);
    }
    if(strlen($uid) > 8){
      array_push($errors,"User ID must be under 8 characters");
    }
    if(preg_match("/\W/",$uid)){
      array_push($errors,"User ID must consist of only letters and numbers (no punctuation)");
    }
    if(count($errors)){
      $ev->param("ERRORS",$errors);
      return($ev);
    }
    $user[GROUPS] = $this->GM->getMemberGroups($user[uid]);
    $view = $this->getView("user-create");
    $view->param("UID",$uid);
    $all = $this->GM->getAllGroups();   
    $view->param("GROUPS",$this->GM->getAllGroups());
    $view->param("PUBLIC_PROP_NAMES",$this->PM->getSectionProperties("genie.form.Public"));
    $view->param("INTERNAL_PROP_NAMES",$this->PM->getSectionProperties("genie.form.Private"));
    return($view);
  }
  function do_delete_user(){
    $confirm = $_REQUEST[CONFIRM];    
    $errors = array();
    if($confirm != "Y"){
        array_push($errors,"Need to check the Confirm dialog box");           
    }
    $uid = $_REQUEST[UID];
    if($uid == "root"){
        array_push($errors,"Can not remove root user");           
    }
    if(count($errors)){
        $ev = $this->getView("general_error");
        $ev->param("ERRORS",$errors);
        return($ev);
    }
    $batch = array();    
    $next = "index.php?DO_USER_MAIN=1";
    if(is_array($uid)){
      $next = "index.php"; // the NEXT link in the message goes to main.
      // Deal with PHP's weird array duplicate problem.
      foreach($uid as $i){
          if($i != "root"){
              $batch[$i] = TRUE;
          }
      }           
    }else{
      $batch[$uid] = TRUE;
    }
    
    foreach($batch as $u => $t){
      $this->GM->setMember($u,array());
      $this->UA->removeUser($u,"",FALSE);
      $this->PM->removeUser("genie.form.Public",$u);
      $this->PM->removeUser("genie.form.Private",$u);
    }
    $view = $this->getView("message");
    $view->param("MESSAGE","User(s) removed");
    $view->param("NEXT",$next);
    return($view);
  }
  function do_create_user(){
    $user[uid] = $_POST[uid];
    $user[name]     = $_POST[name];
    $user[email]    = $_POST[email];
    $user[password] = $_POST[password];
    $addg = $_POST[GIDS]; // Groups to be added to.
   
    if(! $addg){
      $addg = array();
    }
    $groups = array();
    foreach($addg as $l){
      $groups[$l] = 1;
    }
    $mv = FALSE;
    $errors = $this->UA->createUserAccount($user,$mv);
    if(count($errors)){
      $view = $this->getView("general_error");
      $view->param("ERRORS",$errors);
      return($view);
    }
    $this->GM->setMember($user[uid],array_keys($groups));
                  
    $view = $this->getView("message");
    $view->param("MESSAGE","Created user \"$user[uid]\"");
    $view->param("NEXT","index.php?DO_USER_MAIN=1");
    $this->storePropertySettings($user[uid]);
    return($view);
  }

  // Get the property settings.
    function storePropertySettings($uid){
        $prop = array();
        $ip = $this->PM->getSection("genie.form.Private",$uid);
        $pp = $this->PM->getSection("genie.form.Public",$uid);
        foreach($_POST as $k => $v) {
            list($c,$n) = explode(":",$k,2);
            if($c == "PUBP"){
                if(strlen($v)){
                    if($pp->isProperty($n)){
                        $pp->setProperty($n,$v);
                    }
                }
            }
            if($c == "INTP"){
                if(strlen($v)){
                    if($ip->isProperty($n)){
                        $ip->setProperty($n,$v);
                    }
                }
            }   
        }   
  }

  function do_lookup_uid(){
    $uid = $_GET[UID];
    if(! $uid){
      $uid = $_POST[UID];
    }
    if(! $uid){
      return($this->do_user_main());
    }
    $user = $this->UA->lookupUid($uid);
    if(! $user){
      return($this->getView("general_error",array(ERRORS => array("No such user: $uid"))));
    }
    $user[GROUPS] = $this->GM->getMemberGroups($user[uid]);
    $view = $this->getView("user-edit");
    $view->param("USER",$user);
    $view->param("GROUPS",$this->GM->getAllGroups());
    
    $ip = $this->PM->getSection("genie.form.Public",$uid);
    $view->param("PUBP",&$ip);
    $pp = $this->PM->getSection("genie.form.Private",$uid);
    $view->param("INTP",&$pp);

    return($view);
  }

  function do_group_main(){
    $view = $this->getView("group-main");
    $view->param("GROUPS",$this->GM->getAllGroups());
    return($view);
  }
    function do_create_group(){
        $gid = $_POST[GID];    
        if(! $gid){
            return($this->do_group_main());     
        }
        $errors = array();
        if(preg_match("/\W/",$gid)){
            array_push($errors,"Group ID must consist of letters and numbers (no puctuation)");
        }
        $ginfo = $this->GM->getGroupName($gid);
        if($ginfo){
            array_push($errors,"Group ID [$gid] has already been taken");
        }
        if(count($errors)){
            $view = $this->getView("general_error");
            $view->param("ERRORS",$errors);
            return($view);
        }
        $view = $this->getView("message");
        $name = $_POST[NAME];    
        $this->GM->setGroup($gid,$name,FALSE);
        $view->param("MESSAGE","Group [$gid] - [$name] created");
        $view->param("NEXT","index.php?DO_GROUP_MAIN=1");
        return($view);
    }
  function do_show_group(){
    $gid = $_REQUEST[GID];
    if(! strlen($gid)){
      return($this->do_group_main());
    }
    $view = $this->getView("group-edit");
    $members = $this->GM->getMembers($gid);
    $view->param("GROUP",$this->GM->getGroupName($gid));
    $view->param("MEMBERS", &$members );
    return($view);
  }  
  function do_update_group(){       
    $can_signup = $_POST[SELF_ADMIN] == "Y";
    $name = $_POST[NAME];
    $gid = $_POST[GID];
    if($gid == "admin"){
        $can_signup = FALSE; // Never allow this to be self-signup.
    }
    $this->GM->setGroup($gid,$name,$can_signup);
    $view = $this->getView("message");
    $view->param("MESSAGE","Saved changes to $gid");
    $view->param("NEXT","index.php?DO_GROUP_MAIN=1");
    return($view);
  }
  function do_delete_group(){
    $confirm = $_REQUEST[CONFIRM];
    $errors = array();
    if($confirm != "Y"){
        array_push($errors,"Need to check the Confirm dialog box");
    }    
    $gid = $_POST[GID];
    if($gid == "admin"){
        array_push($errors,"Can't delete this group.");
    }
    if(! $gid) {
        array_push($errors,"Invalid Group ID");
    }
    if(count($errors)){
        $ev = $this->getView("general_error");
        $ev->param("ERRORS",$errors);
        return($ev);
    }    
    $view = $this->getView("message");
    $this->GM->removeGroup($gid);
    $view->param("MESSAGE","Removed $gid ");
    $view->param("NEXT","index.php?DO_GROUP_MAIN=1");
    return($view);
  }
  
  function do_property_main(){
    $view = $this->getView("prop-main");
    
    $view->param("INTERNAL_PROP",$this->PM->getSectionProperties("genie.form.Private"));
    $view->param("PUBLIC_PROP",$this->PM->getSectionProperties("genie.form.Public"));
    return($view);
  }


  function do_vcard(){
      header("Content-Type: text/directory");
      $view = new GenieGate_View_VCard($_REQUEST[UID],$this->UA,$this->PM);
      return($view);
  }

  function do_show_edit_prop(){
    $view = $this->getView("prop-edit");
    $sect = "genie.form." . $_GET[SECT];
    $prop = $_GET[PROP];
    $diz = $this->PM->getDescription($sect,$prop);
    $view->param("SECT",$_GET[SECT]);
    $view->param("DIZ",$this->PM->getDescription($sect));
    $view->param("LABEL",$diz);
    $view->param("PROP",$prop);
    return($view);
  }
  function do_alter_property(){
    $sect = "genie.form." . $_POST[SECT];
    $prop = $_POST[PROP];
    $label = $_POST[LABEL];
    $this->PM->changePropertyLabel($sect,$prop,$label);
    $view = $this->getView("message");
    $view->param("MESSAGE","Property $prop has been altered");
    $view->param("NEXT","index.php?DO_PROPERTY_MAIN=1");
    return($view);
  }

  function do_remove_property(){
    $sect = "genie.form." . $_POST[SECT];
    $prop =  $_POST[PROP];      
    if($_POST[CONFIRM] != "Y"){
      $view = $this->getView("general_error");
      $view->param("ERRORS",array("Must click the Confirm checkbox"));
      return($view);
    }
    $this->PM->undefineProperty($sect,$prop);
    $view = $this->getView("message");
    $view->param("MESSAGE","Property $prop has been removed, from all members.");
    $view->param("NEXT","index.php?DO_PROPERTY_MAIN=1");
    return($view);
  }

  function do_add_property(){
    $sect = "genie.form." . $_POST[SECT];
    $prop = $_POST[PROP];
    $label = $_POST[LABEL];
    $errors = array();
    if(preg_match("/[^\w\.]/",$prop)){
      array_push($errors,"Property names must be alphanumeric");
    }
    if($this->PM->getPropertyId($sect,$prop)){
      array_push($errors,"Property $prop already exists");
    }
    if(count($errors)){
      $view = $this->getView("general_error");
      $view->param("ERRORS",$errors);
      return($view);
    }
    $this->PM->createProperty($sect,$prop,$label);
    $view = $this->getView("message");
    $view->param("NEXT","index.php?DO_PROPERTY_MAIN=1");
    $view->param("MESSAGE","Property [$prop] created with label: \"$label\"");
    return($view);
  }

  function do_export_main(){
      return($this->getView("export-main"));
  }

  function do_export() {      
      if($_GET[FORMAT] == "XML"){
          $xml = new GenieGate_XMLWriter(TRUE,TRUE);
          $view = new GenieGate_View_XMLExport($xml,$this->UA,$this->GM,$this->PM);
          return($view);
      }
      header("Content-Type: text/plain");
      $view = new GenieGate_View_FlatFile($this->DBH,$_GET[FORMAT]);      
      return($view);
  }


  function do_import_xml(){
      $fn = $_FILES[XML][tmp_name];
      $eview = $this->getView("general_error");
      if(! is_uploaded_file($fn)){          
          $eview->param("ERRORS",array("File was not uploaded properly"));        
          return($eview);
      }
      if($_FILES[XML][error]){
          $eview->param("ERRORS",array("File was not uploaded properly"));        
          return($eview);
      }
      $fh = fopen($fn,"r");
      $importer = new GenieGate_XMLImport($this->DBH,$this->UA,$this->GM,$this->PM);
      while($data = fread($fh,4096)){
          $importer->more($data);
      }
      $importer->finish();
      $view = $this->getView("import-complete");
      $view->param("IMPORTER",$importer);
      return($view);
  }


}
?>

---

Documentation generated by DoxyGen