Enano CMS (1.1.x): comparison plugins/SpecialGroups.php

equal deleted inserted replaced

-:ebe99e82a59a
+:473cc747022a
 $gid = ( isset ( $_POST['do_view_n'] ) ) ? intval($_POST['group_id_n']) : intval($_POST['group_id']);
 if ( empty($gid) || $gid < 1 )
 {
 die_friendly('Error', '<p>Hacking attempt</p>');
 }
-$q = $db->sql_query('SELECT group_name,group_type FROM '.table_prefix.'groups WHERE group_id=' . $gid . ';');
+$q = $db->sql_query('SELECT group_name,group_type,system_group FROM '.table_prefix.'groups WHERE group_id=' . $gid . ';');
 if ( !$q )
 {
-$db->_die();
+$db->_die('SpecialGroups.php, line ' . __LINE__);
 }
 $row = $db->fetchrow();
 $db->free_result();
 $members = array();
 $pending = array();
 WHERE m.group_id=' . $gid . '
 GROUP BY u.user_id
 ORDER BY m.is_mod DESC,u.username ASC;');
 if ( !$q )
 {
-$db->_die();
+$db->_die('SpecialGroups.php, line ' . __LINE__);
 }
 $is_member = false;
 $is_mod = false;
 $is_pending = false;
 case 'update':
 if(!in_array(intval($_POST['group_state']), Array(GROUP_CLOSED, GROUP_OPEN, GROUP_HIDDEN, GROUP_REQUEST)))
 {
 die_friendly('ERROR', '<p>Hacking attempt</p>');
 }
-$q = $db->sql_query('UPDATE '.table_prefix.'groups SET group_type=' . intval($_POST['group_state']) . ' WHERE group_id=' . intval( $_POST['group_id']) . ';');
+$q = $db->sql_query('SELECT group_type, system_group FROM '.table_prefix.'groups WHERE group_id=' . intval( $_POST['group_id']) . ';');
-if (!$q)
+if ( !$q )
-$db->_die();
+$db->_die('SpecialGroups.php, line ' . __LINE__);
-$row['group_type'] = $_POST['group_state'];
+$error = false;
-echo '<div class="info-box" style="margin-left: 0;">The group state was updated.</div>';
+if ( $db->numrows() < 1 )
+{
+echo '<div class="error-box" style="margin-left: 0;">The group you selected does not exist.</div>';
+$error = true;
+}
+$r = $db->fetchrow();
+if ( $r['system_group'] == 1 && ( intval($_POST['group_state']) == GROUP_OPEN || intval($_POST['group_state']) == GROUP_REQUEST ) )
+{
+echo '<div class="error-box" style="margin-left: 0;">Because this is a system group, you can\'t make it open or allow membership requests.</div>';
+$error = true;
+}
+if ( !$error )
+{
+$q = $db->sql_query('UPDATE '.table_prefix.'groups SET group_type=' . intval($_POST['group_state']) . ' WHERE group_id=' . intval( $_POST['group_id']) . ';');
+if (!$q)
+$db->_die('SpecialGroups.php, line ' . __LINE__);
+$row['group_type'] = $_POST['group_state'];
+echo '<div class="info-box" style="margin-left: 0;">The group state was updated.</div>';
+}
 break;
 case 'adduser':
 $username = $_POST['add_username'];
 $mod = ( isset($_POST['add_mod']) ) ? '1' : '0';
 $q = $db->sql_query('SELECT user_id FROM '.table_prefix.'users WHERE username=\'' . $db->escape($username) . '\';');
 if (!$q)
-$db->_die();
+$db->_die('SpecialGroups.php, line ' . __LINE__);
 if ($db->numrows() < 1)
 {
 echo '<div class="error-box">The username you entered could not be found.</div>';
 break;
 }
 $uid = intval($r['user_id']);
 // Check if the user is already in the group, and if so, only update modship
 $q = $db->sql_query('SELECT member_id,is_mod FROM '.table_prefix.'group_members WHERE user_id=' . $uid . ' AND group_id=' . intval($_POST['group_id']) . ';');
 if ( !$q )
-$db->_die();
+$db->_die('SpecialGroups.php, line ' . __LINE__);
 if ( $db->numrows() > 0 )
 {
 $r = $db->fetchrow();
 if ( (string) $r['is_mod'] != $mod )
 {
 $q = $db->sql_query('UPDATE '.table_prefix.'group_members SET is_mod=' . $mod . ' WHERE member_id=' . $r['member_id'] . ';');
 if ( !$q )
-$db->_die();
+$db->_die('SpecialGroups.php, line ' . __LINE__);
 foreach ( $members as $i => $member )
 {
 if ( $member['member_id'] == $r['member_id'] )
 $members[$i]['is_mod'] = (int)$mod;
 }
 $db->free_result();
 $q = $db->sql_query('INSERT INTO '.table_prefix.'group_members(group_id,user_id,is_mod) VALUES(' . intval($_POST['group_id']) . ', ' . $uid . ', ' . $mod . ');');
 if (!$q)
-$db->_die();
+$db->_die('SpecialGroups.php, line ' . __LINE__);
 echo '<div class="info-box">The user "' . $username . '" has been added to this usergroup.</div>';
 $q = $db->sql_query('SELECT u.username,u.email,u.reg_time,m.member_id,m.user_id,m.is_mod,COUNT(c.comment_id)
 FROM '.table_prefix.'users AS u
 LEFT JOIN '.table_prefix.'group_members AS m
 AND u.user_id=' . $uid . '
 GROUP BY u.user_id
 ORDER BY m.is_mod DESC,u.username ASC
 LIMIT 1;');
 if ( !$q )
-$db->_die();
+$db->_die('SpecialGroups.php, line ' . __LINE__);
 $r = $db->fetchrow();
 $members[] = $r;
 $db->free_result();
 {
 if ( isset($_POST['del_user'][$member['member_id']]) )
 {
 $q = $db->sql_query('DELETE FROM '.table_prefix.'group_members WHERE member_id=' . $member['member_id'] . ';');
 if (!$q)
-$db->_die();
+$db->_die('SpecialGroups.php, line ' . __LINE__);
 unset($members[$i]);
 }
 }
 break;
 case 'pending':
 {
 if ( isset ( $_POST['do_appr_pending'] ) )
 {
 $q = $db->sql_query('UPDATE '.table_prefix.'group_members SET pending=0 WHERE member_id=' . $member['member_id'] . ';');
 if (!$q)
-$db->_die();
+$db->_die('SpecialGroups.php, line ' . __LINE__);
 $members[] = $member;
 unset($pending[$i]);
 continue;
 }
 elseif ( isset ( $_POST['do_reject_pending'] ) )
 {
 $q = $db->sql_query('DELETE FROM '.table_prefix.'group_members WHERE member_id=' . $member['member_id'] . ';');
 if (!$q)
-$db->_die();
+$db->_die('SpecialGroups.php, line ' . __LINE__);
 unset($pending[$i]);
 }
 }
 }
 echo '<div class="info-box">Pending members status updated successfully.</div>';
 if ( isset($_GET['act']) && $_GET['act'] == 'update' && !$is_member && $row['group_type'] == GROUP_OPEN )
 {
 $q = $db->sql_query('INSERT INTO '.table_prefix.'group_members(group_id,user_id) VALUES(' . $gid . ', ' . $session->user_id . ');');
 if (!$q)
-$db->_die();
+$db->_die('SpecialGroups.php, line ' . __LINE__);
 echo '<div class="info-box">You have been added to this group.</div>';
 $q = $db->sql_query('SELECT u.username,u.email,u.reg_time,m.member_id,m.user_id,m.is_mod,COUNT(c.comment_id)
 FROM '.table_prefix.'users AS u
 LEFT JOIN '.table_prefix.'group_members AS m
 AND u.user_id=' . $session->user_id . '
 GROUP BY u.user_id
 ORDER BY m.is_mod DESC,u.username ASC
 LIMIT 1;');
 if ( !$q )
-$db->_die();
+$db->_die('SpecialGroups.php, line ' . __LINE__);
 $r = $db->fetchrow();
 $members[] = $r;
 $db->free_result();
 if ( isset($_GET['act']) && $_GET['act'] == 'update' && !$is_member && $row['group_type'] == GROUP_REQUEST && !$is_pending )
 {
 $q = $db->sql_query('INSERT INTO '.table_prefix.'group_members(group_id,user_id,pending) VALUES(' . $gid . ', ' . $session->user_id . ', 1);');
 if (!$q)
-$db->_die();
+$db->_die('SpecialGroups.php, line ' . __LINE__);
 echo '<div class="info-box">A request has been sent to the moderator(s) of this group to add you.</div>';
 }
 $state_btns = ( $can_do_admin_stuff ) ?
 '<label><input type="radio" name="group_state" value="' . GROUP_HIDDEN . '" ' . (( $row['group_type'] == GROUP_HIDDEN ) ? 'checked="checked"' : '' ) . ' /> Hidden group</label>
 <tr>
 <th colspan="2">Group information</th>
 </tr>
 <tr>
 <td class="row2">Group name:</td>
-<td class="row1">' . $row['group_name'] . '</td>
+<td class="row1">' . $row['group_name'] . ( $row['system_group'] == 1 ? ' (system group)' : '' ) . '</td>
 </tr>
 <tr>
 <td class="row2">Membership status:</td>
 <td class="row1">' . $status . '</td>
 </tr>

changeset 204	473cc747022a
parent 194	bf0fdec102e9
child 317	f8356d9c3481