1027 lines
33 KiB
PHP
1027 lines
33 KiB
PHP
<?php
|
|
/** \file include\db_user.php
|
|
* \brief DI webinterface database functions
|
|
* \author Rob Schalken, Core|Vision
|
|
* \version 1.0
|
|
* \date 17-10-2008
|
|
*
|
|
* This file contains the user database functions. This file is always included.
|
|
*/
|
|
|
|
/**
|
|
* User right verification
|
|
*
|
|
* Inputs:
|
|
* - user_id: User database id
|
|
* - right: The right which must be verified
|
|
* - skip_date: Skip date verification
|
|
* - skip_current: Skip current user
|
|
*
|
|
* Return: 1 (OK)/ 0(Error)
|
|
*/
|
|
function db_ver_right_user($user_id, $right, $skip_date = 0, $skip_current = 0) {
|
|
// Initial return value
|
|
$result = FALSE;
|
|
|
|
if( is_numeric($user_id) ) {
|
|
// query to retrieve user information
|
|
$row_user = db_fetch_user($user_id, NULL, TRUE);
|
|
}
|
|
else if( is_array($user_id) && isset($user_id['id']) ) {
|
|
$row_user = $user_id;
|
|
$user_id = $row_user['id'];
|
|
}
|
|
else return FALSE;
|
|
|
|
if (!$skip_current) {
|
|
// Check for the requested rights
|
|
if( in_array($right, $row_user['rechten']) ) $result = TRUE;
|
|
}
|
|
else {
|
|
$result = TRUE;
|
|
}
|
|
|
|
// Now it is clear that the user has the requested right, now let's see if the
|
|
// customer (and all its adjacent primair relations) still has the rights (up the pyramid)
|
|
// Exceptions here are the only user rights
|
|
global $user_only_rights;
|
|
if( $result && !in_array($right, $user_only_rights) ) {
|
|
// Search all relations (up the pyramid)
|
|
$relations = db_search_relations($row_user['klant'], "", "up", 1);
|
|
|
|
if (is_array($relations)) {
|
|
foreach ($relations as $relation) {
|
|
if ($result) {
|
|
if (!in_array($right, $relation['rechten'])) {
|
|
// Reset result
|
|
$result = FALSE;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// The rights are available, let's check if the begin/end date are valid!!
|
|
if (($result) && (!$skip_date)) {
|
|
$result = valid_timestamp($row_user['begin'], $row_user['eind'], 1);
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
|
|
/**
|
|
* User extra_right verification
|
|
*
|
|
* Inputs:
|
|
* - user_id: User database id
|
|
* - extra_right: The extra_right which must be verified
|
|
*
|
|
* Return: 1 (OK)/ 0(Error)
|
|
*/
|
|
function db_ver_extra_right_user($user_id, $extra_right) {
|
|
// Query to retrieve user extra rights
|
|
$valid_extra_right = db_fetch_data("SELECT find_in_set('" . $extra_right . "',extra_rechten) as valid FROM gebruiker WHERE id='" . $user_id . "'");
|
|
|
|
// Valid?
|
|
$result = ((is_array($valid_extra_right)) && ($valid_extra_right[0]['valid'])) ? TRUE : FALSE;
|
|
|
|
return $result;
|
|
}
|
|
|
|
|
|
/**
|
|
* Search all users which match current db id customer (down the pyramid)
|
|
*
|
|
* - user: User name (filter)
|
|
*
|
|
* Return: Multidimensional array containing all users from all primair and secundair customers
|
|
*/
|
|
function db_search_users($user = "") {
|
|
global $_PAGE_INFO;
|
|
|
|
// Initial return value
|
|
$result = "";
|
|
|
|
// Search for all underlying customers
|
|
$found_customers = db_search_customers();
|
|
|
|
// Add own id to array => when not in array
|
|
$found_cust = 0;
|
|
if (is_array($found_customers)) {
|
|
foreach ($found_customers as $found_customer) {
|
|
if ($found_customer['id'] == $_PAGE_INFO['login']['customer']['id']) {
|
|
$found_cust = 1;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!$found_cust) {
|
|
$current_customer = db_fetch_customer($_PAGE_INFO['login']['customer']['id'],1);
|
|
array_push($found_customers, $current_customer);
|
|
}
|
|
|
|
if (!empty($found_customers)) {
|
|
$result = array();
|
|
if (is_array($found_customers)) {
|
|
foreach ($found_customers as $found_customer) {
|
|
$found_users = db_fetch_users($found_customer['id'], $user);
|
|
if (is_array($found_users)) {
|
|
foreach ($found_users as $found_user) {
|
|
array_push($result, $found_user);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
return array_sort($result, "gebruikersnaam");
|
|
}
|
|
|
|
/**
|
|
* Fetch user data which match customer database id or gebruikersnaam
|
|
*
|
|
* Inputs:
|
|
* - user: User name or db id
|
|
* - customer: Customer id to which the user is connected (only needed when search by user name)
|
|
* - id: 1 = User db id/0 = gebruikersnaam
|
|
|
|
* Return: Array containing user information
|
|
*/
|
|
function db_fetch_user($user, $customer_id, $db_id = 0) {
|
|
// Fetch user info (unique)
|
|
if (!$db_id) {
|
|
$row_user = db_fetch_data("SELECT * FROM gebruiker WHERE gebruikersnaam='" . specialchars($user) . "' AND klant='" . $customer_id . "' and id > 0", 1);
|
|
}
|
|
else {
|
|
$row_user = db_fetch_data("SELECT * FROM gebruiker WHERE id='" . $user . "'", 1);
|
|
}
|
|
|
|
// Parse into result
|
|
if (!empty($row_user)) {
|
|
$user = $row_user[0];
|
|
|
|
// Split up datetime value
|
|
$user['begin_datum'] = strip_time($user['begin']);
|
|
$user['begin_tijd'] = strip_date($user['begin']);
|
|
$user['eind_datum'] = strip_time($user['eind']);
|
|
$user['eind_tijd'] = strip_date($user['eind']);
|
|
|
|
// Remove eind/begin values
|
|
unset($user['begin']);
|
|
unset($user['eind']);
|
|
|
|
// Put the user rights in a single array
|
|
db_merge_rights("gebruiker", $user);
|
|
|
|
// Parse result
|
|
return $user;
|
|
}
|
|
else return FALSE;
|
|
}
|
|
|
|
|
|
/**
|
|
* Fetch user data (name, customer)
|
|
*
|
|
* Inputs:
|
|
* - user_id: User id
|
|
|
|
* Return: Array containing user information
|
|
*/
|
|
function db_fetch_user_info($user_id) {
|
|
// Fetch user info (unique)
|
|
$row_user = db_fetch_data("SELECT klant.klantnaam,klant.bedrijfsnaam,gebruiker.gebruikersnaam FROM klant,gebruiker WHERE gebruiker.id='" . $user_id . "' AND gebruiker.klant=klant.id", 1);
|
|
|
|
// Parse into result
|
|
if (!empty($row_user)) {
|
|
// Parse result
|
|
return $row_user[0];
|
|
}
|
|
else return FALSE;
|
|
}
|
|
|
|
/**
|
|
* Fetch current user i18n from database
|
|
*
|
|
* Return: user i18n
|
|
*/
|
|
function db_fetch_i18n($customer_id) {
|
|
// Query to retrieve klantnaam id (unique)
|
|
$row_user = db_fetch_data("SELECT i18n FROM gebruiker WHERE id='" . $customer_id . "'");
|
|
|
|
return (is_array($row_user)) ? $row_user[0]['i18n'] : "";
|
|
}
|
|
|
|
/**
|
|
* Fetch users data which match customer id and user with wildcard!!!!
|
|
*
|
|
* Inputs:
|
|
* - customer_id: Customer id
|
|
* - user: user name, filled with wildcards
|
|
*
|
|
* Return: Multidimensional array containing all users information
|
|
*/
|
|
function db_fetch_users($customer_id, $user = "") {
|
|
// Initial return value
|
|
$result = FALSE;
|
|
|
|
// Fetch customer info
|
|
$query = "SELECT * FROM gebruiker WHERE klant='" . $customer_id . "'";
|
|
$query .= " AND id > 0";
|
|
if( $user ) {
|
|
$query .= " AND ((gebruikersnaam LIKE '%" . specialchars($user) . "%') ";
|
|
|
|
// Search also in the following combinations
|
|
$concats = array( array("voorletters","' '","achternaam"),
|
|
array("voornaam","' '","achternaam"));
|
|
|
|
foreach($concats as $concat) {
|
|
$query .= " OR (CONCAT(";
|
|
for ($i = 0; $i < sizeof($concat); $i++) {
|
|
if ($i) {
|
|
$query .= ",";
|
|
}
|
|
$query .= $concat[$i];
|
|
}
|
|
$query .= ") LIKE '%" . specialchars($user) . "%')";
|
|
}
|
|
$query .= ")";
|
|
}
|
|
|
|
// Order by gebruikersnaam
|
|
$query .= " ORDER BY gebruikersnaam";
|
|
|
|
$row_users = db_fetch_data($query);
|
|
|
|
// Parse into result
|
|
if( is_array($row_users) ) {
|
|
$result = array();
|
|
|
|
foreach( $row_users as $row_user ) {
|
|
// Split up datetime value
|
|
$row_user['begin_datum'] = strip_time($row_user['begin']);
|
|
$row_user['begin_tijd'] = strip_date($row_user['begin']);
|
|
$row_user['eind_datum'] = strip_time($row_user['eind']);
|
|
$row_user['eind_tijd'] = strip_date($row_user['eind']);
|
|
|
|
// Remove eind/begin values
|
|
unset($row_user['begin']);
|
|
unset($row_user['eind']);
|
|
|
|
// Put the user rights in a single array
|
|
db_merge_rights("gebruiker", $row_user);
|
|
|
|
// Parse result
|
|
if( !$rights || db_ver_rights($rights, $row_user['rechten']) ) {
|
|
$result[] = $row_user;
|
|
}
|
|
}
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Store new user
|
|
*
|
|
* Inputs:
|
|
* - user_array: Array containing all user info
|
|
*
|
|
* Return: 1 (OK)/ 0(Error)
|
|
*/
|
|
function db_store_user($user_array) {
|
|
// Default return value
|
|
$result = FALSE;
|
|
|
|
// Fetch the user rights fields
|
|
$right_fields = db_fetch_rights("gebruiker");
|
|
|
|
// Query storing new customer
|
|
$query = "INSERT INTO gebruiker (";
|
|
$query .= "klant, gebruikersnaam, paswoord, pin, verificatie, begin, eind, functie, achternaam, voorletters, voornaam, adres, alarmnr, mobielnr,";
|
|
$query .= "telefoonnr_prive, telefoonnr_werk, email, mtinfo_versie, i18n, tz, gedetacheerd";
|
|
foreach( $right_fields as $field => $rights ) $query .= ",`" . $field . "`";
|
|
$query .= ") VALUES (";
|
|
$query .= "'" . specialchars($user_array['klant']) . "',";
|
|
$query .= "'" . specialchars($user_array['gebruikersnaam']) . "',";
|
|
$query .= "'" . ($user_array['paswoord']) . "',";
|
|
if( isset($user_array['pin']) && strlen($user_array['pin']) ) {
|
|
$query .= "'" . specialchars($user_array['pin']) . "',";
|
|
}
|
|
else {
|
|
$query .= "NULL,";
|
|
}
|
|
$query .= "'" . ($user_array['verificatie']) . "',";
|
|
if (strlen($user_array['begin_datum'])) {
|
|
$query .= "'" . ($user_array['begin_datum'] . " " . $user_array['begin_tijd']) . "',";
|
|
}
|
|
else {
|
|
$query .= "NULL,";
|
|
}
|
|
if (strlen($user_array['eind_datum'])) {
|
|
$query .= "'" . ($user_array['eind_datum'] . " " . $user_array['eind_tijd']) . "',";
|
|
}
|
|
else {
|
|
$query .= "NULL,";
|
|
}
|
|
$query .= "'" . specialchars($user_array['functie']) . "',";
|
|
$query .= "'" . specialchars($user_array['achternaam']) . "',";
|
|
$query .= "'" . specialchars($user_array['voorletters']) . "',";
|
|
$query .= "'" . specialchars($user_array['voornaam']) . "',";
|
|
$query .= "'" . specialchars($user_array['adres']) . "',";
|
|
$query .= "'" . specialchars($user_array['alarmnr']) . "',";
|
|
$query .= "'" . specialchars($user_array['mobielnr']) . "',";
|
|
$query .= "'" . specialchars($user_array['telefoonnr_prive']). "',";
|
|
$query .= "'" . specialchars($user_array['telefoonnr_werk']) . "',";
|
|
$query .= "'" . specialchars($user_array['email']) . "',";
|
|
if (strlen($user_array['mtinfo_versie'])) {
|
|
$query .= "'" . ($user_array['mtinfo_versie']) . "',";
|
|
}
|
|
else {
|
|
$query .= "NULL,";
|
|
}
|
|
$query .= "'" . ($user_array['i18n']) . "',";
|
|
$query .= "'" . ($user_array['tz']) . "',";
|
|
$query .= "'" . ($user_array['gedetacheerd']) . "'";
|
|
foreach( $right_fields as $field => $rights ) {
|
|
$query .= ",'";
|
|
$user_rights = array();
|
|
if( $user_array['rechten'] ) foreach( $rights as $right ) {
|
|
if( in_array($right, $user_array['rechten']) )
|
|
$user_rights[] = $right;
|
|
}
|
|
$query .= implode(",", $user_rights);
|
|
$query .= "'";
|
|
}
|
|
$query .= ")";
|
|
|
|
if (db_store_data($query)) {
|
|
// Log user-user action
|
|
$new_user = db_fetch_user($user_array['gebruikersnaam'], $user_array['klant']);
|
|
db_log_user_user($new_user['id'], "menu:gebruikers:nieuw", serialize($user_array));
|
|
|
|
// Result OK
|
|
$result = 1;
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Update exisiting user
|
|
*
|
|
* Inputs:
|
|
* - user_array: Array containing all user info
|
|
*
|
|
* Return: 1 (OK)/ 0(Error)
|
|
*/
|
|
function db_update_user($user_array) {
|
|
// Default return value
|
|
$result = FALSE;
|
|
|
|
// Fetch the user rights fields
|
|
$right_fields = db_fetch_rights("gebruiker");
|
|
|
|
// Retrieve original data => logging
|
|
$orig_user_data = db_fetch_user($user_array['id'], "", 1);
|
|
|
|
// Query updating user
|
|
$query = "UPDATE gebruiker SET ";
|
|
$query .= "klant='" . ($user_array['klant']) . "',";
|
|
$query .= "gebruikersnaam='" . specialchars($user_array['gebruikersnaam']) . "',";
|
|
if( isset($user_array['paswoord']) && strlen($user_array['paswoord']) ) {
|
|
// (only set when changed)
|
|
$query .= "paswoord='" . ($user_array['paswoord']) . "',";
|
|
}
|
|
if( isset($user_array['pin']) ) {
|
|
if( strlen($user_array['pin']) ) {
|
|
// MD5 encrypted to maintain compatibility with MTinfo Secure
|
|
$query .= "pin='" . $user_array['pin'] . "',";
|
|
}
|
|
else {
|
|
$query .= "pin=NULL,";
|
|
}
|
|
}
|
|
$query .= "verificatie='" . ($user_array['verificatie']) . "',";
|
|
if (strlen($user_array['begin_datum'])) {
|
|
$query .= "begin='" . ($user_array['begin_datum'] . " " . $user_array['begin_tijd']) . "',";
|
|
}
|
|
else {
|
|
$query .= "begin=NULL,";
|
|
}
|
|
if (strlen($user_array['eind_datum'])) {
|
|
$query .= "eind='" . ($user_array['eind_datum'] . " " . $user_array['eind_tijd']) . "',";
|
|
}
|
|
else {
|
|
$query .= "eind=NULL,";
|
|
}
|
|
$query .= "functie='" . specialchars($user_array['functie']) . "',";
|
|
$query .= "achternaam='" . specialchars($user_array['achternaam']) . "',";
|
|
$query .= "voorletters='" . specialchars($user_array['voorletters']) . "',";
|
|
$query .= "voornaam='" . specialchars($user_array['voornaam']) . "',";
|
|
$query .= "adres='" . specialchars($user_array['adres']) . "',";
|
|
$query .= "alarmnr='" . specialchars($user_array['alarmnr']) . "',";
|
|
$query .= "mobielnr='" . specialchars($user_array['mobielnr']) . "',";
|
|
$query .= "telefoonnr_werk='" . specialchars($user_array['telefoonnr_werk']) . "',";
|
|
$query .= "telefoonnr_prive='" . specialchars($user_array['telefoonnr_prive']). "',";
|
|
$query .= "email='" . specialchars($user_array['email']) . "',";
|
|
$query .= "i18n='" . ($user_array['i18n']) . "',";
|
|
$query .= "n_login='" . ($user_array['n_login']) . "',";
|
|
$query .= "t_login='" . ($user_array['t_login']) . "',";
|
|
if (strlen($user_array['mtinfo_versie'])) {
|
|
$query .= "mtinfo_versie='" . ($user_array['mtinfo_versie']) . "',";
|
|
}
|
|
else {
|
|
$query .= "mtinfo_versie=NULL,";
|
|
}
|
|
$query .= "tz='" . ($user_array['tz']) . "',";
|
|
$query .= "gedetacheerd='" . ($user_array['gedetacheerd']) . "' ";
|
|
foreach( $right_fields as $field => $rights ) {
|
|
$query .= ",`" . $field . "`='";
|
|
$user_rights = array();
|
|
if( $user_array['rechten'] ) foreach( $rights as $right ) {
|
|
if( in_array($right, $user_array['rechten']) )
|
|
$user_rights[] = $right;
|
|
}
|
|
$query .= implode(",", $user_rights);
|
|
$query .= "'";
|
|
}
|
|
$query .= "WHERE id='" . ($user_array['id']) . "'";
|
|
|
|
if (db_store_data($query)) {
|
|
// Result OK
|
|
$result = TRUE;
|
|
}
|
|
|
|
if ($result) {
|
|
// Initial value
|
|
$changed = FALSE;
|
|
|
|
// Get new data
|
|
$new_data = db_fetch_user($user_array['id'], "", 1);
|
|
|
|
// Changed?
|
|
if ((is_array($orig_user_data)) && (is_array($new_data))) {
|
|
foreach($orig_user_data as $key => $item) {
|
|
$changed = ($new_data[$key] != $item) ? TRUE : $changed;
|
|
}
|
|
}
|
|
|
|
if ($changed) {
|
|
// Log user-user action
|
|
db_log_user_user($user_array['id'], "menu:gebruikers:wijzigen", serialize($user_array));
|
|
}
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Update exisiting user's password
|
|
*
|
|
* Inputs:
|
|
* - user_id User id
|
|
* - password_hash Hashed password
|
|
*
|
|
* Return: 1 (OK)/ 0(Error)
|
|
*/
|
|
function db_update_user_password($user_id, $password_hash) {
|
|
// Query updating user
|
|
$query = "UPDATE gebruiker SET paswoord='" . $password_hash . "' WHERE id=" . $user_id;
|
|
|
|
return db_store_data($query);
|
|
}
|
|
|
|
|
|
/**
|
|
* Delete user
|
|
*
|
|
* Inputs:
|
|
* - user_id: User database id
|
|
*
|
|
* Return: 1 (OK)/ 0(Error)
|
|
*/
|
|
function db_delete_user($user_id) {
|
|
// Initial return value
|
|
$result = 0;
|
|
|
|
// Start transaction
|
|
db_start_transaction();
|
|
|
|
// Delete user
|
|
$query = "DELETE FROM gebruiker WHERE id='" . $user_id . "'";
|
|
db_store_data($query);
|
|
|
|
// Delete project user
|
|
$query = "DELETE FROM project_gebruiker WHERE gebruiker='" . $user_id . "'";
|
|
db_store_data($query);
|
|
|
|
// Delete contact person (this should be empty => not possible to delete contact person)
|
|
$query = "DELETE FROM klant_contact WHERE gebruiker='" . $user_id . "'";
|
|
db_store_data($query);
|
|
|
|
// Commit transaction
|
|
if (db_commit_transaction()) {
|
|
// Log user-user action
|
|
db_log_user_user($user_id, "menu:gebruikers:verwijderen");
|
|
|
|
// Parse result
|
|
$result = 1;
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
|
|
/**
|
|
* Delete user log files (called by the garbage collector)
|
|
* Inputs:
|
|
* - timeout: Max time it may take
|
|
* - limit: Max delete items each time
|
|
*
|
|
* Return: Array containing time and affected rows
|
|
*/
|
|
function db_delete_user_logs($timeout, $limit = 100) {
|
|
GLOBAL $_PAGE_INFO;
|
|
|
|
// Initial values
|
|
$affected = 0;
|
|
|
|
// Get start time;
|
|
$start = microtime_float();
|
|
|
|
// All log_x tables
|
|
$log_x = array("log_gebruiker_faq",
|
|
"log_gebruiker_gebruiker",
|
|
"log_gebruiker_klant",
|
|
"log_gebruiker_project",
|
|
"log_gebruiker_zkl");
|
|
|
|
// All log tables
|
|
$log_table = array("log_gebruiker",
|
|
"project_gebruiker",
|
|
"klant_contact");
|
|
|
|
|
|
//
|
|
// Initial values
|
|
//
|
|
$user_ids = "";
|
|
$user_max = "";
|
|
$end = $start;
|
|
$first = TRUE;
|
|
|
|
//
|
|
// Get all user ids => Create array and determine max value
|
|
//
|
|
$user_max = db_fetch_data("SELECT max(id) as id FROM gebruiker");
|
|
$rows = db_fetch_data("SELECT id FROM gebruiker ORDER BY id ASC");
|
|
|
|
if (is_array($rows)) {
|
|
$user_ids = "(";
|
|
for($i=0; $i <= $user_max[0]['id']; $i++) {
|
|
$found = FALSE;
|
|
for($k=0; (($k < sizeof($rows)) && (!$found)); $k++) {
|
|
$found = ($rows[$k]['id'] == $i) ? TRUE : $found;
|
|
}
|
|
|
|
if (!$found) {
|
|
if (!$first) {
|
|
$user_ids .= ",";
|
|
}
|
|
|
|
// Clear flag
|
|
$first = FALSE;
|
|
|
|
// Add id
|
|
$user_ids .= $i;
|
|
}
|
|
}
|
|
$user_ids .= ")";
|
|
}
|
|
|
|
// Entries found
|
|
if (!$first) {
|
|
do {
|
|
// Initial value
|
|
$finished = 1;
|
|
|
|
for ($j = 0; $j < 2; $j++) {
|
|
// Define active table
|
|
if ($j) {
|
|
// Select log tables
|
|
$active_table = "log_table";
|
|
$tables = $log_table;
|
|
}
|
|
else {
|
|
// Select log_x tables
|
|
$active_table = "log_x";
|
|
$tables = $log_x;
|
|
|
|
// Get min id from log_gebruiker
|
|
$log_gebruiker_min_id = db_fetch_data("SELECT MIN(id) as id FROM log_gebruiker");
|
|
}
|
|
|
|
// all log files
|
|
foreach($tables as $table) {
|
|
// Delete entries from table
|
|
if ($active_table == "log_x") {
|
|
//
|
|
// Handle log_x tables
|
|
//
|
|
$query = "SELECT log_gebruiker.id FROM " . $table. ",log_gebruiker WHERE " . $table . ".id=log_gebruiker.id AND log_gebruiker.gebruiker <= " . $user_max[0]['id'] . " AND log_gebruiker.gebruiker IN " . $user_ids . " LIMIT " . ($limit - $affected) . "";
|
|
$rows = db_fetch_data($query);
|
|
if (is_array($rows)) {
|
|
foreach($rows as $row) {
|
|
// Delete from log_x
|
|
$query = "DELETE FROM " . $table . " WHERE id='" . $row['id'] . "'";
|
|
db_store_data($query);
|
|
// Delete from log_gebruiker
|
|
$query = "DELETE FROM log_gebruiker WHERE id='" . $row['id'] . "'";
|
|
db_store_data($query);
|
|
}
|
|
}
|
|
|
|
// Finished?
|
|
$affected += (is_array($rows)) ? (sizeof($rows)) : 0;
|
|
$finished = ($affected >= $limit) ? 1 : 0;
|
|
|
|
if (!$finished) {
|
|
//
|
|
// Also delete non log_gebruiker linked entries
|
|
//
|
|
$query = "SELECT " . $table . ".id FROM " . $table . " ";
|
|
$query .= "WHERE " . $table . ".id < " . $log_gebruiker_min_id[0]['id'] . " LIMIT " . ($limit - $affected) . "";
|
|
$rows = db_fetch_data($query);
|
|
|
|
if (is_array($rows)) {
|
|
foreach($rows as $row) {
|
|
// Delete from log_x
|
|
$query = "DELETE FROM " . $table . " WHERE id='" . $row['id'] . "'";
|
|
db_store_data($query);
|
|
}
|
|
}
|
|
|
|
// Finished?
|
|
$affected += (is_array($rows)) ? (sizeof($rows)) : 0;
|
|
$finished = ($affected >= $limit) ? 1 : 0;
|
|
}
|
|
}
|
|
else {
|
|
//
|
|
// Handle log tables (with and without id)
|
|
//
|
|
$fields = db_fetch_set($table, "id");
|
|
|
|
// Table contains id field?
|
|
if (is_array($fields)) {
|
|
$query = "SELECT gebruiker FROM " . $table . " WHERE gebruiker <= " . $user_max[0]['id'] . " AND gebruiker IN " . $user_ids . " LIMIT " . ($limit - $affected) . "";
|
|
$rows = db_fetch_data($query);
|
|
if (is_array($rows)) {
|
|
foreach($rows as $row) {
|
|
// Delete from log tables
|
|
$query = "DELETE FROM " . $table . " WHERE id='" . $row['id'] . "'";
|
|
db_store_data($query);
|
|
}
|
|
}
|
|
|
|
// Finished?
|
|
$affected += (is_array($rows)) ? (sizeof($rows)) : 0;
|
|
$finished = ($affected >= $limit) ? 1 : 0;
|
|
}
|
|
else {
|
|
$query = "DELETE FROM " . $table . " WHERE ";
|
|
$query .= "gebruiker <= " . $user_max[0]['id'] . " AND ";
|
|
$query .= "gebruiker IN " . $user_ids . " LIMIT " . ($limit - $affected) . "";
|
|
db_store_data($query);
|
|
|
|
// Finished?
|
|
$affected += mysql_affected_rows($_PAGE_INFO['mysql_db_resource']['default']);
|
|
$finished = ($affected >= $limit) ? 1 : 0;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Get end time
|
|
$end = microtime_float();
|
|
} while((!$finished) && (($end - $start) < $timeout));
|
|
}
|
|
|
|
// Return info
|
|
return array(time => ($end - $start), affected => $affected);
|
|
}
|
|
|
|
|
|
/**
|
|
* Get user name
|
|
*/
|
|
function getUser($id = "") {
|
|
global $_PAGE_INFO;
|
|
|
|
// Initial value
|
|
$result = "";
|
|
|
|
// Default value
|
|
$get_id = (!strlen($id)) ? $_PAGE_INFO['login']['user']['id'] : $id;
|
|
|
|
// Get user info
|
|
$user = db_fetch_user($get_id, "", 1);
|
|
|
|
// Firstname available? => first letters?
|
|
if (strlen($user['voornaam'])) {
|
|
$result .= $user['voornaam'];
|
|
}
|
|
else if (strlen($user['voorletters'])) {
|
|
$result .= $user['voorletters'];
|
|
}
|
|
|
|
// Last name available?
|
|
if (strlen($user['achternaam'])) {
|
|
if (strlen($result)) {
|
|
$result .= " ";
|
|
}
|
|
$result .= $user['achternaam'];
|
|
}
|
|
|
|
// No first/last name => login
|
|
if (!strlen($result)) {
|
|
$result = $user['gebruikersnaam'];
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Returns the logged in user's or signed in profile's full name
|
|
*
|
|
* @param int $id The id of the user or profile
|
|
* @param string $userTable The name of the user table
|
|
* @return null|string The name of the logged in user or profile. Null if it could not be retrieved.
|
|
*/
|
|
function getUserOrProfileName($id, $userTable)
|
|
{
|
|
if ($userTable == 'gebruiker_profiel') {
|
|
$userFullName = getUserProfileName($id);
|
|
} else {
|
|
$userFullName = getUser($id);
|
|
}
|
|
|
|
return $userFullName;
|
|
}
|
|
|
|
/**
|
|
* Returns the user profile's full name associated with the provided profile id
|
|
* @param int $id The profile id to get the name for
|
|
* @return null|string The full name of the profile or null if the profile does not exist
|
|
*/
|
|
function getUserProfileName($id)
|
|
{
|
|
// Get the profile
|
|
$profile = db_fetch_profile($id);
|
|
|
|
if ($profile) {
|
|
$name = $profile['voornaam'];
|
|
|
|
// Add a space between the first and last name if the first name contains any characters
|
|
if (strlen($name)) {
|
|
$name .= ' ';
|
|
}
|
|
|
|
$name .= $profile['achternaam'];
|
|
|
|
return $name;
|
|
} else {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Send security notification to user
|
|
*
|
|
* Inputs:
|
|
* - user_id: User database id
|
|
* - action: Action => Login, user profile changed
|
|
*/
|
|
function userSecurityNotification($user_id, $value = array(action => "login")) {
|
|
GLOBAL $_PAGE_INFO;
|
|
|
|
// Initial values
|
|
$subject = "";
|
|
$content = "";
|
|
|
|
// Get user/company info
|
|
$user_info = db_fetch_user($user_id, "", 1);
|
|
$cust_info = db_fetch_customer($user_info['klant'], 1);
|
|
|
|
// Define Subject
|
|
$subject .= "MTinfo " . _("security notification");
|
|
|
|
// Define content
|
|
$content .= "<html>";
|
|
$content .= "<header>";
|
|
$content .= "</header>";
|
|
$content .= "<body style=\"background:#F2F2F2;\">";
|
|
$content .= "<br><br><table width=\"100%\" border=\"\"><th width=\"22%\"></th><th width=\"56%\"></th><th width=\"22%\"></th>";
|
|
$content .= "<tr><td></td><td style=\"background:white;\">";
|
|
$content .= "<center>";
|
|
$content .= "<br><a href=\"" . $_PAGE_INFO['ini']['report']['website'] . "\"><img style=\"text-decoration:none\" ;src=\"" . $_SESSION[$_PAGE_INFO['id']]['base'] . SKIN_DIR . $_SESSION[$_PAGE_INFO['id']]['skin'] . "/" . $_PAGE_INFO['ini']['report']['header_logo'] . "\" alt=\"\"></a>";
|
|
|
|
switch($value['action']) {
|
|
// User profile
|
|
case "user_profile":
|
|
$user_info_changer = db_fetch_user($value['changed_by'], "", 1);
|
|
$cust_info_changer = db_fetch_customer($user_info_changer['klant'], 1);
|
|
|
|
$content .= "<br><br><p style=font-family:Verdana;font-size:23px;font-weight:bold;>";
|
|
$content .= ucfirst(_("Your user profile has been changed"));
|
|
$content .= "</p>";
|
|
$content .= "<p style=font-family:Verdana;font-size:18px;>";
|
|
$content .= ucfirst(_("The following items have been changed by")) . " " . getUser($value['changed_by']) . " (" . $cust_info_changer['bedrijfsnaam'] . ")";
|
|
$content .= "<center>";
|
|
$content .= "<table><tr><td></td><td>";
|
|
if (is_array($value['items'])) {
|
|
foreach($value['items'] as $item) {
|
|
$content .= "- " . ucfirst(_("user:" . $item)) . "<br>";
|
|
}
|
|
}
|
|
$content .= "</td><td></td></tr><br><tr></tr></table>";
|
|
$content .= "</center>";
|
|
$content .= "</p><br><br>";
|
|
break;
|
|
// Login
|
|
default:
|
|
$content .= "<br><br><p style=font-family:Verdana;font-size:23px;font-weight:bold;>";
|
|
$content .= ucfirst(_("there has has been some activity on your MTinfo 3000 account"));
|
|
$content .= "</p><br><br>";
|
|
break;
|
|
}
|
|
|
|
$content .= "</center>";
|
|
$content .= "</td><td></td></tr>";
|
|
$content .= "<tr><td></td><td style=\"background:white;\">";
|
|
$content .= "<center>";
|
|
$content .= "<br><br><p style=font-family:Verdana;font-size:18px;>" . ucfirst(_("this is a security notification for MTinfo 3000 user")) . ":<br><br>" . getUser($user_id) . " (" . $cust_info['bedrijfsnaam'] . ")";
|
|
$content .= "<br><br>(IP: " . ((isset($_SERVER['HTTP_X_FORWARDED_FOR'])) ? $_SERVER['HTTP_X_FORWARDED_FOR'] : $_SERVER['REMOTE_ADDR']) . ", Browser: " . ucfirst(strtolower(browser())) . ")</p><br><br>";
|
|
$content .= "</center>";
|
|
$content .= "</td><td></td></tr>";
|
|
$content .= "</td><td></td></tr>";
|
|
$content .= "<tr><td></td><td style=\"background:white;\">";
|
|
$content .= "<center>";
|
|
$content .= "<br><br><p style=font-family:Verdana;font-size:16px;>" . ucfirst(_("if this activity is your own then there's no need to respond, otherwise")) . ":</p>";
|
|
$content .= "<table><tr><td></td><td><p style=font-family:Verdana;font-size:14px;>1. " . ucfirst(_("scan your computer for viruses or malware")) . "</p>";
|
|
$content .= "<p style=font-family:Verdana;font-size:14px;>2. " . ucfirst(_("contact1")) . " <a href=\"mailto:info@dualinventive.com\">Dual Inventive</a></p></td><td></td></tr><br><tr></tr></table>";
|
|
$content .= "</center>";
|
|
$content .= "</td></tr>";
|
|
$content .= "</table>";
|
|
$content .= "</body>";
|
|
$content .= "</html>";
|
|
|
|
// Send email
|
|
send_mail(((isset($value['overrule_email'])) ? $value['overrule_email'] : $user_info['email']), "", "", $_PAGE_INFO['ini']['report']['no-reply'], $subject, $content);
|
|
}
|
|
|
|
/**
|
|
* Get user profile
|
|
*/
|
|
function db_fetch_profile($id) {
|
|
$result = null;
|
|
|
|
|
|
$query = "SELECT * FROM gebruiker_profiel WHERE id='" . $id. "'";
|
|
|
|
$result = db_fetch_files_by_query($query, "gebruiker_profiel", TRUE);
|
|
|
|
// Rename document entry to pass (default functionality)
|
|
if (isset($result[0]['document'])) {
|
|
$result[0]['pas'] = $result[0]['document'];
|
|
unset($result[0]['document']);
|
|
}
|
|
|
|
if( $result ) return $result[0];
|
|
else return FALSE;
|
|
}
|
|
|
|
/**
|
|
* Store user profile
|
|
*/
|
|
function db_store_profile($info) {
|
|
global $_RELEASE;
|
|
|
|
if(is_array($info)){
|
|
// store user profile info
|
|
$query = "INSERT INTO gebruiker_profiel (achternaam,voornaam,mobielnr,email,functie,bedrijf,dvp,pas_mimetype,uuid, status, ehbo, n_login,t_login) VALUES (";
|
|
$query .= (isset($info['lastname'])) ? "'" . specialchars($info['lastname']) . "'," : "NULL" . ",";
|
|
$query .= (isset($info['firstname'])) ? "'" . specialchars($info['firstname']) . "'," : "NULL" . ",";
|
|
$query .= (isset($info['mobilenr'])) ? "'" . specialchars($info['mobilenr']) . "'," : "NULL" . ",";
|
|
$query .= (isset($info['email'])) ? "'" . specialchars($info['email']) . "'," : "NULL" . ",";
|
|
$query .= (isset($info['function'])) ? "'" . specialchars($info['function']) . "'," : "NULL" . ",";
|
|
$query .= (isset($info['company'])) ? "'" . specialchars($info['company']) . "'," : "NULL" . ",";
|
|
$query .= (isset($info['dvpnumber'])) ? "'" . specialchars($info['dvpnumber']) . "'," : "NULL" . ",";
|
|
$query .= (isset($info['pas_mimetype'])) ? "'" . specialchars($info['pas_mimetype']) . "'," : "NULL" . ",";
|
|
$query .= (isset($info['uuid'])) ? "'" . specialchars($info['uuid']) . "'," : "NULL" . ",";
|
|
$query .= (isset($info['status'])) ? "'" . specialchars($info['status']) . "'," : "'actief' " . ",";
|
|
$query .= (isset($info['firstaid'])) ? "'" . specialchars($info['firstaid']) . "'," : "'no' " . ",";
|
|
$query .= "0,";
|
|
$query .= "UNIX_TIMESTAMP(NOW()))";
|
|
}else{
|
|
return false;
|
|
}
|
|
|
|
if( db_store_data($query) ){
|
|
|
|
// save off the identifier for the new document
|
|
$id = db_fetch_last_id();
|
|
|
|
// Check if dvp photo must be stored on filesystem
|
|
if($info['dvpphoto_1'] != -1){
|
|
$table = "gebruiker_profiel";
|
|
|
|
$upload_dir = realpath($_RELEASE[((is_ReleaseCandidate()) ? 'rc' : 'release')]['upload'] . strtolower($table));
|
|
|
|
// upload directory should exist, so the error is never triggered in a release environment
|
|
if( !$upload_dir ) {
|
|
trigger_error("Cannot save document: path \"" . $upload_dir . "\" is invalid, expanded from \"" . $_RELEASE[((is_ReleaseCandidate()) ? 'rc' : 'release')]['upload'] . strtolower($table) . "\"", E_USER_ERROR);
|
|
return FALSE;
|
|
}
|
|
|
|
|
|
// Open/create handle
|
|
$handle = fopen($upload_dir . "/" . $id, "w");
|
|
|
|
// Write document data to file
|
|
fwrite($handle, specialchars($info['dvpphoto_1']));
|
|
|
|
// Close handle
|
|
fclose($handle);
|
|
}
|
|
}else{
|
|
return false;
|
|
}
|
|
|
|
return $id;
|
|
}
|
|
|
|
/**
|
|
* Update user profile (only company/function)
|
|
*/
|
|
function db_update_profile($info) {
|
|
|
|
if(is_array($info)){
|
|
// store user profile info
|
|
$query = "UPDATE gebruiker_profiel set functie='" . specialchars($info['function']) . "',bedrijf='" . specialchars($info['company']) . "', ehbo='" . specialchars($info['firstaid']) . "' where id='" . specialchars($info['profile_id']) . "'";
|
|
}else{
|
|
return false;
|
|
}
|
|
|
|
if( !db_store_data($query) ){
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Delete user profile (set status field)
|
|
*/
|
|
function db_delete_profile($id) {
|
|
|
|
// store user profile info
|
|
$query = "UPDATE gebruiker_profiel set status='inactief' , n_login=UNIX_TIMESTAMP(NOW()) where id='" . $id . "'";
|
|
|
|
if( !db_store_data($query) ){
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
|
|
/**
|
|
* Search profile (dvp number)
|
|
*/
|
|
function db_search_profile($dvp_number){
|
|
|
|
$result = null;
|
|
|
|
$result = db_fetch_data("SELECT * FROM gebruiker_profiel WHERE dvp='" . $dvp_number . "' ORDER BY t_login DESC");
|
|
|
|
return $result[0];
|
|
}
|
|
|
|
/**
|
|
* Store dvp number (dvp number)
|
|
*/
|
|
function db_store_dvp_number($dvp_number){
|
|
global $_PAGE_INFO;
|
|
$result = null;
|
|
|
|
$result = db_fetch_data("UPDATE gebruiker SET dvp='". $dvp_number ."' where id='" . $_SESSION[$_PAGE_INFO['id']]['login']['user']['id'] . "'");
|
|
|
|
return $result[0];
|
|
}
|
|
|
|
|
|
?>
|