<?php

/*

 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between

 * Copyright (C) 2006-2007 Dan Fuhry

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

function page_Admin_UserManager()

{

  global $db, $session, $paths, $template, $plugins; // Common objects

  if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )

  {

    echo '<h3>Error: Not authenticated</h3><p>It looks like your administration session is invalid or you are not authorized to access this administration page. Please <a href="' . makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true) . '">re-authenticate</a> to continue.</p>';

    return;

  }

  //die('<pre>' . htmlspecialchars(print_r($_POST, true)) . '</pre>');

  if ( isset($_POST['action']['save']) )

  {

    #

    # BEGIN VALIDATION

    #

    $errors = array();

    if ( defined('ENANO_DEMO_MODE') )

    {

      $errors[] = 'Users cannot be modified or deleted in demo mode.';

    }

    $user_id = intval($_POST['user_id']);

    if ( empty($user_id) || $user_id == 1 )

      $errors[] = 'Invalid user ID.';

    if ( isset($_POST['delete_account']) && count($errors) < 1 )

    {

      $q = $db->sql_query('DELETE FROM '.table_prefix."users_extra WHERE user_id=$user_id;");

      if ( !$q )

        $db->_die();

      $q = $db->sql_query('DELETE FROM '.table_prefix."users WHERE user_id=$user_id;");

      if ( !$q )

        $db->_die();

      echo '<div class="info-box">The user account has been deleted.</div>';

    }

    else

    {

      if ( $session->user_id != $user_id )

      {

        $username = $_POST['username'];

        if ( !preg_match('#^'.$session->valid_username.'$#', $username) )

          $errors[] = 'The username you entered contains invalid characters.';

        $password = false;

        if ( $_POST['changing_pw'] == 'yes' )

        {

          $aes = new AESCrypt(AES_BITS, AES_BLOCKSIZE);

          $key_hex_md5 = $_POST['crypt_key'];

          $key_hex = $session->fetch_public_key($key_hex_md5);

          if ( $key_hex )

          {

            $key_bin = hexdecode($key_hex);

            $data_hex = $_POST['crypt_data'];

            $password = $aes->decrypt($data_hex, $key_bin, ENC_HEX);

          }

          else

          {

            $errors[] = 'Session manager denied public encryption key lookup request';

          }

        }

        $email = $_POST['email'];

        if ( !preg_match('/^(?:[\w\d]+\.?)+@((?:(?:[\w\d]\-?)+\.)+\w{2,4}|localhost)$/', $email) )

          $errors[] = 'You have entered an invalid e-mail address.';

        $real_name = $_POST['real_name'];

      }

      $signature = RenderMan::preprocess_text($_POST['signature'], true, true);

      $user_level = intval($_POST['user_level']);

      if ( $user_level < USER_LEVEL_MEMBER || $user_level > USER_LEVEL_ADMIN )

        $errors[] = 'Invalid user level';

      $imaddr_aim = htmlspecialchars($_POST['imaddr_aim']);

      $imaddr_msn = htmlspecialchars($_POST['imaddr_msn']);

      $imaddr_yahoo = htmlspecialchars($_POST['imaddr_yahoo']);

      $imaddr_xmpp = htmlspecialchars($_POST['imaddr_xmpp']);

      $homepage = htmlspecialchars($_POST['homepage']);

      $location = htmlspecialchars($_POST['location']);

      $occupation = htmlspecialchars($_POST['occupation']);

      $hobbies = htmlspecialchars($_POST['hobbies']);

      $email_public = ( isset($_POST['email_public']) ) ? '1' : '0';

      if ( !preg_match('/@([a-z0-9-]+)(\.([a-z0-9-\.]+))?/', $imaddr_msn) && !empty($imaddr_msn) )

      {

        $imaddr_msn = "$imaddr_msn@hotmail.com";

      }

      if ( substr($homepage, 0, 7) != 'http://' )

      {

        $homepage = "http://$homepage";

      }

      if ( !preg_match('/^http:\/\/([a-z0-9-.]+)([A-z0-9@#\$%\&:;<>,\.\?=\+\(\)\[\]_\/\\\\]*?)$/i', $homepage) )

      {

        $homepage = '';

      }

      if ( count($errors) < 1 )

      {

        $q = $db->sql_query('SELECT u.user_level FROM '.table_prefix.'users AS u WHERE u.user_id = ' . $user_id . ';');

        if ( !$q )

          $db->_die();

        if ( $db->numrows() < 1 )

        {

          echo 'Couldn\'t select user data: no rows returned';

        }

        $row = $db->fetchrow();

        $existing_level =& $row['user_level'];

        $db->free_result();

        $to_update_users = array();

        if ( $user_id != $session->user_id )

        {

          $to_update_users['username'] = $username;

          if ( $password )

          {

            $password = $aes->encrypt($password, $session->private_key, ENC_HEX);

            $to_update_users['password'] = $password;

          }

          $to_update_users['email'] = $email;

          $to_update_users['real_name'] = $real_name;

        }

        $to_update_users['signature'] = $signature;

        $to_update_users['user_level'] = $user_level;

        if ( isset($_POST['account_active']) )

        {

          $to_update_users['account_active'] = "1";

        }

        else

        {

          $to_update_users['account_active'] = "0";

          $to_update_users['activation_key'] = sha1($session->dss_rand());

        }

        $to_update_users_extra = array();

        $to_update_users_extra['user_aim'] = $imaddr_aim;

        $to_update_users_extra['user_msn'] = $imaddr_msn;

        $to_update_users_extra['user_yahoo'] = $imaddr_yahoo;

        $to_update_users_extra['user_xmpp'] = $imaddr_xmpp;

        $to_update_users_extra['user_homepage'] = $homepage;

        $to_update_users_extra['user_location'] = $location;

        $to_update_users_extra['user_job'] = $occupation;

        $to_update_users_extra['user_hobbies'] = $hobbies;

        $to_update_users_extra['email_public'] = ( $email_public ) ? '1' : '0';

        $update_sql = '';

        foreach ( $to_update_users as $key => $unused_crap )

        {

          $value =& $to_update_users[$key];

          $value = $db->escape($value);

          $update_sql .= ( empty($update_sql) ? '' : ',' ) . "$key='$value'";

        }

        $update_sql = 'UPDATE '.table_prefix."users SET $update_sql WHERE user_id=$user_id;";

        $update_sql_extra = '';

        foreach ( $to_update_users_extra as $key => $unused_crap )

        {

          $value =& $to_update_users_extra[$key];

          $value = $db->escape($value);

          $update_sql_extra .= ( empty($update_sql_extra) ? '' : ',' ) . "$key='$value'";

        }

        $update_sql_extra = 'UPDATE '.table_prefix."users_extra SET $update_sql_extra WHERE user_id=$user_id;";

        if ( !$db->sql_query($update_sql) )

          $db->_die();

        if ( !$db->sql_query($update_sql_extra) )

          $db->_die();

        if ( $existing_level != $user_level )

        {

          // We need to update group memberships

          if ( $existing_level == USER_LEVEL_ADMIN ) 

          {

            $q = $db->sql_query('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,edit_summary,author,page_text) VALUES("security","u_from_admin",UNIX_TIMESTAMP(),"' . $db->escape($_SERVER['REMOTE_ADDR']) . '","' . $db->escape($session->username) . '","' . $db->escape($username) . '");');

            if ( !$q )

              $db->_die();

            $session->remove_user_from_group($user_id, GROUP_ID_ADMIN);

          }

          else if ( $existing_level == USER_LEVEL_MOD ) 

          {

            $q = $db->sql_query('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,edit_summary,author,page_text) VALUES("security","u_from_mod",UNIX_TIMESTAMP(),"' . $db->escape($_SERVER['REMOTE_ADDR']) . '","' . $db->escape($session->username) . '","' . $db->escape($username) . '");');

            if ( !$q )

              $db->_die();

            $session->remove_user_from_group($user_id, GROUP_ID_MOD);

          }

          if ( $user_level == USER_LEVEL_ADMIN )

          {

            $q = $db->sql_query('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,edit_summary,author,page_text) VALUES("security","u_to_admin",UNIX_TIMESTAMP(),"' . $db->escape($_SERVER['REMOTE_ADDR']) . '","' . $db->escape($session->username) . '","' . $db->escape($username) . '");');

            if ( !$q )

              $db->_die();

            $session->add_user_to_group($user_id, GROUP_ID_ADMIN, false);

          }

          else if ( $user_level == USER_LEVEL_MOD )

          {

            $q = $db->sql_query('INSERT INTO '.table_prefix.'logs(log_type,action,time_id,edit_summary,author,page_text) VALUES("security","u_to_mod",UNIX_TIMESTAMP(),"' . $db->escape($_SERVER['REMOTE_ADDR']) . '","' . $db->escape($session->username) . '","' . $db->escape($username) . '");');

            if ( !$q )

              $db->_die();

            $session->add_user_to_group($user_id, GROUP_ID_MOD, false);

          }

        }

        echo '<div class="info-box">Your changes have been saved.</div>';

      }

    }

    if ( count($errors) > 0 )

    {

      echo '<div class="error-box">

              <b>Your request could not be processed due to the following validation errors:</b>

              <ul>

                <li>' . implode("</li>\n        <li>", $errors) . '</li>

              </ul>

            </div>';

      $form = new Admin_UserManager_SmartForm();

      $form->user_id = $user_id;

      $form->username = $username;

      $form->email = $email;

      $form->real_name = $real_name;

      $form->signature = $signature;

      $form->user_level = $user_level;

      $form->im = array(

          'aim' => $imaddr_aim,

          'yahoo' => $imaddr_yahoo,

          'msn' => $imaddr_msn,

          'xmpp' => $imaddr_xmpp

        );

      $form->contact = array(

          'homepage' => $homepage,

          'location' => $location,

          'job' => $occupation,

          'hobbies' => $hobbies

        );

      $form->email_public = ( isset($_POST['email_public']) );

      $form->account_active = ( isset($_POST['account_active']) );

      echo $form->render();

      return false;

    }

    #

    # END VALIDATION

    #

  }

  else if ( isset($_POST['action']['go']) || ( isset($_GET['src']) && $_GET['src'] == 'get' ) )

  {

    if ( isset($_GET['user']) )

    {

      $username =& $_GET['user'];

    }

    else if ( isset($_POST['username']) )

    {

      $username =& $_POST['username'];

    }

    else

    {

      echo 'No username provided';

      return false;

    }

    $q = $db->sql_query('SELECT u.user_id AS authoritative_uid, u.username, u.email, u.real_name, u.signature, u.account_active, u.user_level, x.* FROM '.table_prefix.'users AS u

                           LEFT JOIN '.table_prefix.'users_extra AS x

                             ON ( u.user_id = x.user_id OR x.user_id IS NULL )

                           WHERE ( lcase(u.username) = \'' . $db->escape(strtolower($username)) . '\' OR u.username = \'' . $db->escape($username) . '\' ) AND u.user_id != 1;');

    if ( !$q )

      $db->_die();

    if ( $db->numrows() < 1 )

    {

      echo '<div class="error-box">The username you entered could not be found.</div>';

    }

    else

    {

      $row = $db->fetchrow();

      $row['user_id'] = $row['authoritative_uid'];

      $form = new Admin_UserManager_SmartForm();

      $form->user_id   = $row['user_id'];

      $form->username  = $row['username'];

      $form->email     = $row['email'];

      $form->real_name = $row['real_name'];

      $form->signature = $row['signature'];

      $form->user_level= $row['user_level'];

      $form->account_active = ( $row['account_active'] == 1 );

      $form->email_public   = ( $row['email_public'] == 1 );

      $form->im = array(

          'aim' => $row['user_aim'],

          'yahoo' => $row['user_yahoo'],

          'msn' => $row['user_msn'],

          'xmpp' => $row['user_xmpp']

        );

      $form->contact = array(

          'homepage' => $row['user_homepage'],

          'location' => $row['user_location'],

          'job'      => $row['user_job'],

          'hobbies'  => $row['user_hobbies'],

        );

      $form->email_public = ( $row['email_public'] == 1 );

      $html = $form->render();

      if ( !$html )

      {

        echo 'Internal error: form processor returned false';

      }

      else

      {

        echo $html;

      }

      return true;

    }

  }

  else if ( isset($_POST['action']['clear_sessions']) )

  {

    if ( defined('ENANO_DEMO_MODE') )

    {

      echo '<div class="error-box">Sorry Charlie, no can do. You might mess up other people logged into the demo site.</div>';

    }

    else

    {

      // Get the current session information so the user doesn't get logged out

      $aes = new AESCrypt(AES_BITS, AES_BLOCKSIZE);

      $sk = md5(strrev($session->sid_super));

      $qb = $db->sql_query('SELECT session_key,salt,auth_level,source_ip,time FROM '.table_prefix.'session_keys WHERE session_key=\''.$sk.'\' AND user_id='.$session->user_id.' AND auth_level='.USER_LEVEL_ADMIN);

      if ( !$qb )

      {

        die('Error selecting session key info block B: '.$db->get_error());

      }

      if ( $db->numrows($qb) < 1 )

      {

        die('Error: cannot read admin session info block B, aborting table clear process');

      }

      $qa = $db->sql_query('SELECT session_key,salt,auth_level,source_ip,time FROM '.table_prefix.'session_keys WHERE session_key=\''.md5($session->sid).'\' AND user_id='.$session->user_id.' AND auth_level='.USER_LEVEL_MEMBER);

      if ( !$qa )

      {

        die('Error selecting session key info block A: '.$db->get_error());

      }

      if ( $db->numrows($qa) < 1 )

      {

        die('Error: cannot read user session info block A, aborting table clear process');

      }

      $ra = $db->fetchrow($qa);

      $rb = $db->fetchrow($qb);

      $db->free_result($qa);

      $db->free_result($qb);

      $db->sql_query('DELETE FROM '.table_prefix.'session_keys;');

      $db->sql_query('INSERT INTO '.table_prefix.'session_keys( session_key,salt,user_id,auth_level,source_ip,time ) VALUES( \''.$ra['session_key'].'\', \''.$ra['salt'].'\', \''.$session->user_id.'\', \''.$ra['auth_level'].'\', \''.$ra['source_ip'].'\', '.$ra['time'].' ),( \''.$rb['session_key'].'\', \''.$rb['salt'].'\', \''.$session->user_id.'\', \''.$rb['auth_level'].'\', \''.$rb['source_ip'].'\', '.$rb['time'].' )');

      echo '<div class="info-box">The session key table has been cleared. Your database should be a little bit smaller now.</div>';

    }

  }

  echo '<form action="' . makeUrlNS('Special', 'Administration', 'module=' . $paths->cpage['module'], true) . '" method="post" enctype="multipart/form-data" onsubmit="if ( !submitAuthorized ) return false;">';

  echo '<h3>User administration panel</h3>';

  echo '<p>From this panel you can modify or delete user accounts.</p>';

  echo '<table border="0">

          <tr>

            <td><b>Search for user:</b><br />

                <small>If your browser supports AJAX, this will provide suggestions for you.</small>

                </td>

            <td style="width: 10px;"></td>

            <td>' . $template->username_field('username') . '</td>

            <td>

              <input type="submit" name="action[go]" value="Go &raquo;" />

            </td>

          </tr>

        </table>';

  echo '<h3>Clear session key table</h3>';

  echo '<p>It\'s a good idea to clean out your session keys table every once in a while, since this helps to reduce database size. During this process you will be logged off and (hopefully) logged back on automatically. If you do this, all users besides you will be logged off, so be sure to do this at a time when traffic is low.</p>';

  echo '<p><input type="submit" name="action[clear_sessions]" value="Clear session keys" /></p>';

  echo '</form>';

  if(isset($_GET['action']) && isset($_GET['user']))

  {

    switch($_GET['action'])

    {

      case "activate":

        $e = $db->sql_query('SELECT activation_key FROM '.table_prefix.'users WHERE username=\'' . $db->escape($_GET['user']) . '\'');

        if($e)

        {

          $row = $db->fetchrow();

          $db->free_result();

          if($session->activate_account($_GET['user'], $row['activation_key'])) { echo '<div class="info-box">The user account "'.$_GET['user'].'" has been activated.</div>'; $db->sql_query('DELETE FROM '.table_prefix.'logs WHERE time_id=' . $db->escape($_GET['logid'])); }

          else echo '<div class="warning-box">The user account "'.$_GET['user'].'" has NOT been activated, possibly because the account is already active.</div>';

        } else echo '<div class="error-box">Error activating account: '.mysql_error().'</div>';

        break;

      case "sendemail":

        if($session->send_activation_mail($_GET['user'])) { echo '<div class="info-box">The user "'.$_GET['user'].'" has been sent an e-mail with an activation link.</div>'; $db->sql_query('DELETE FROM '.table_prefix.'logs WHERE time_id=' . $db->escape($_GET['logid'])); }

        else echo '<div class="error-box">The user account "'.$_GET['user'].'" has not been activated, probably because of a bad SMTP configuration.</div>';

        break;

      case "deny":

        $e = $db->sql_query('DELETE FROM '.table_prefix.'logs WHERE log_type=\'admin\' AND action=\'activ_req\' AND edit_summary=\'' . $db->escape($_GET['user']) . '\';');