in-portal
No OneTemporary
Actions

Subscribers

None

File Metadata

Created: Sat, Feb 1, 7:49 PM

in-portal
View Options

	Index: trunk/kernel/include/advsearch.php
	===================================================================
	--- trunk/kernel/include/advsearch.php (revision 34)
	+++ trunk/kernel/include/advsearch.php (revision 35)
	@@ -1,192 +1,194 @@
	<?php
	class clsAdvancedSearchResults extends clsItemCollection
	{
	var $ResultTable;
	var $FieldList;
	var $FieldWeight;
	var $WhereClauses;
	var $SourceTable;
	var $Relationships;
	var $Ignored_Words;
	var $CatClause;
	var $Keywords;
	var $Phrase = "";
	var $SearchType;
	var $RequiredRelevance;
	var $PctRelevance;
	var $PctPop;
	var $PctRating;

	function clsAdvancedSearchResults($SearchSource,$DataClass)
	{
	global $objConfig, $objSearchConfig;

	$this->clsItemCollection();
	$this->SourceTable = $SearchSource;
	$this->SetResultTable($SearchSource,$DataClass);
	$this->FieldList = array();
	$this->Relationships = array();
	$this->Ignored_Words = array();
	$this->WhereClauses = array();
	$this->FieldWeight = array();
	$this->Keywords = GetKeywords("");
	$this->SearchType = 0; //simple
	$this->RequiredRelevance=0;
	$this->PctRelevance = $objConfig->Get("SearchRel_DefaultKeyword")/100;
	$this->PctPop = $objConfig->Get("SearchRel_DefaultPop")/100;
	$this->PctRating = $objConfig->Get("SearchRel_DefaultRating")/100;
	if(!is_object($objSearchConfig))
	$objSearchConfig = new clsSearchConfigList();
	$objSearchConfig->Clear();
	$objSearchConfig->Query_Item("SELECT * FROM ".$objSearchConfig->SourceTable." WHERE TableName='$SearchSource' AND AdvancedSearch=1 ORDER BY DisplayOrder");
	}

	function SetResultTable($SearchSource,$DataClass)
	{
	global $objSession;

	- $this->ResultTable = $objSession->GetSessionKey()."_Search";
	+ //$this->ResultTable = $objSession->GetSessionKey()."_Search";
	+ $this->ResultTable = $objSession->GetSessionTable('Search', '');
	$this->classname= $DataClass;
	}

	function LoadSearchResults($Start=0,$PerPage=NULL)
	{
	if($PerPage)
	{
	$limit = "LIMIT $Start,$PerPage";
	}
	$sql = "SELECT * FROM ".$this->ResultTable." ".$limit;
	$this->Clear();
	$rs = $this->adodbConnection->Execute($sql);
	return $this->Query_Item($sql);
	}

	function SetCategoryClause($whereclause)
	{
	$this->CatClause=$whereclause;
	}

	function AddRelationship($JoinTable,$JoinExpression=NULL)
	{
	$this->Relationships[$JoinTable]=$JoinExpression;
	}

	function SetKeywords($keywords)
	{
	$this->Phrase=$keywords;
	$this->keywords = GetKeywords($keywords);
	}

	function AddAdvancedField($TableName,$FieldName,$Verb,$Value,$conj)
	{
	global $objSearchConfig;

	if(!is_object($objSearchConfig))
	$objSearchConfig = new clsSeachConfigList();

	$f = GetTablePrefix().$TableName.".".$FieldName;
	$FieldConfig = $objSearchConfig->GetItemByName($TableName,$FieldName);
	if(is_object($FieldConfig))
	{
	if(strlen($FieldConfig->Get("ForeignField"))>0)
	{
	$parts = explode(".",$FieldConfig->Get("ForeignField"));
	$Table = $parts[0];
	$Table = AddTablePrefix($Table);
	$Field = $parts[1];
	$join = $FieldConfig->Get("JoinClause");
	$join = str_replace("{ForeignTable}",$Table,$join);
	$join = str_replace("{LocalTable}",AddTablePrefix($TableName),$join);
	$this->AddRlationship($Table,$join);

	$FieldItem["where"] = $FieldConfig->GetWhereClause($Verb,$Value);
	$FieldItem["Field"] = $FieldConfig->Get("ForeignField");
	$FieldItem["Table"] = "";
	$FieldItem["conjuction"] = $conj;
	$FieldItem["weight"] = $FieldConfig->Get("Priority");
	}
	else
	{
	$FieldItem = array();
	$FieldItem["Table"] = AddTablePrefix($TableName);
	$FieldItem["Field"] = $FieldName;
	$FieldItem["where"] = $FieldConfig->GetWhereClause($Verb,$Value);
	$FieldItem["conjuction"] = $conj;
	$FieldItem["weight"] = $FieldConfig->Get("Priority");
	}
	$this->FieldList[] = $FieldItem;
	unset($FieldItem);
	}
	}

	/* ready to write the code to build the query and go */

	function BuildWhereClause()
	{
	$where = "";
	foreach($this->FieldList as $f)
	{
	$where .= " (".$f["where"].") ".$f["conjuction"];
	}
	return $where;
	}

	function PerformSearch($ItemType,$OrderBy=NULL,$InitTable=FALSE, $idlist=NULL)
	{
	static $SelectSQL, $OldItemType;
	global $objSession, $objItemTypes;

	$ctype = $objItemTypes->GetItem($ItemType);
	$idField = $ctype->Get("SourceTable")."Id";
	$this->SourceTable = AddTablePrefix($ctype->Get("SourceTable"));
	$result=0;
	$PopField = $ctype->Get("PopField");
	$RateField = $ctype->Get("RateField");
	$typestr = str_pad($ItemType,2,"0",STR_PAD_LEFT);
	$SelectSQL = "SELECT ".$this->SourceTable.".".$idField." as ItemId, ". $this->SourceTable.".Priority as Relevance, ResourceId, CONCAT($typestr) as ItemType, EditorsPick as EdPick FROM ".$this->SourceTable." ";

	foreach($this->Relationships as $JoinTable=>$OnClause)
	{
	$SelectSQL .= "LEFT JOIN $JoinTable ON ($OnClause) ";
	}
	$first=1;
	$WhereClause = $this->BuildWhereClause();
	if(strlen($WhereClause)>0)
	{
	$SelectSQL .= " WHERE ".$WhereClause;
	}
	$SelectSQL .= "GROUP BY $idField ";
	$this->adodbConnection->Execute("DROP TABLE ".$this->ResultTable);
	$full_sql = "CREATE TABLE ".$this->ResultTable." ".$indexSQL.$SelectSQL;
	+
	$this->adodbConnection->Execute($full_sql);
	//echo "<PRE>$full_sql</PRE>";
	}

	function BuildIndexes()
	{
	$sql = "ALTER TABLE ".$this->ResultTable." ADD INDEX (Relevance), ";
	$sql .="ADD INDEX (ItemId), ";
	$sql .="ADD INDEX (ItemType), ";
	$sql .=" ADD INDEX sorting (EdPick,Relevance)";
	$this->adodbConnection->Execute($sql);
	}

	function Result_IdList()
	{
	/* returns an array contain a resource ID list */
	$sql = "SELECT DISTINCT(ResourceId) FROM ".$this->ResultTable;
	$rs = $this->adodbConnection->Execute($sql);
	$result = array();
	while($rs && !$rs->EOF)
	{
	$result[] = $rs->fields["ResourceId"];
	$rs->MoveNext();
	}
	return $result;
	}

	function SetRelevence($ItemType, $IdField)
	{
	}
	}
	?>
	\ No newline at end of file

	Property changes on: trunk/kernel/include/advsearch.php
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.1
	\ No newline at end of property
	+1.2
	\ No newline at end of property
	Index: trunk/kernel/include/usersession.php
	===================================================================
	--- trunk/kernel/include/usersession.php (revision 34)
	+++ trunk/kernel/include/usersession.php (revision 35)
	@@ -1,1110 +1,1110 @@
	<?php

	class clsUserSession
	{
	//Common DB operation class variables
	var $m_dirtyFieldsMap = array();
	//Identity
	var $m_SessionKey;
	var $m_CurrentTempKey;
	var $m_PrevTempKey;
	//Required attributes
	var $m_LastAccessed;
	var $m_PortalUserId;
	var $m_Language;
	var $m_Theme;
	var $m_GroupId;
	var $adodbConnection;
	var $m_Errors;
	var $m_GroupList;
	var $PermCache;
	var $SysPermCache;
	var $PermCacheGroups;
	var $CurrentUser;
	var $UseTempKeys;

	function clsUserSession($id=NULL, $TempKeys=FALSE)
	{
	global $objConfig, $objLanguages, $objThemes, $m_var_list;

	$this->m_Errors = new clsErrorManager();
	$this->adodbConnection = GetADODBConnection();

	$this->PermCache = array();
	$this->PermCacheGroups ="";
	$this->UseTempKeys = $TempKeys;
	if(!$this->UseTempKeys \|\| strlen($id)==0)
	{
	//echo "with cookies";
	if( !isset($_SERVER['HTTP_REFERER']) ) $_SERVER['HTTP_REFERER'] = '';
	if(strlen($id) && (strstr($_SERVER['HTTP_REFERER'], $_SERVER['SERVER_NAME'].$objConfig->Get("Site_Path")) \|\| $_GET['destform'] == 'popup' \|\| $_GET['continue_sess'] == 1))
	{
	$this->Set("SessionKey",$id);
	return $this->LoadFromDatabase($id);
	}
	else
	{
	$this->Set("PortalUserId", 0);
	$this->Set("Language", $objLanguages->GetPrimary());
	$ThemeId = $m_var_list["theme"];
	$this->SetThemeName($ThemeId);
	//$this->Set("Theme", $objConfig->Get("Default_Theme"));
	$this->Set("GroupList",0);
	$this->Set("SessionKey","");
	$this->Set("GroupList",$objConfig->Get("User_GuestGroup"));
	}
	}
	else
	{
	//echo "without cookies";
	return $this->LoadFromTempKey($id);
	}
	}

	function CopyToNewSession()
	{
	$OldKey = $this->GetSessionKey();
	$this->GetNewSession();
	if($OldKey != $this->GetSessionKey())
	{
	$this->Set("PortalUserId",$this->Get("PortalUserId"));
	$this->Set("GroupId",$this->Get("GroupId"));
	$this->Set("GroupList",$this->Get("GroupList"));
	$this->Set("Language",$this->Get("Language"));
	$this->Set("tz",$this->Get("tz"));
	$this->Set("LastAccessed",date("U"));
	$this->Update();
	}
	}

	function Get($name)
	{
	$var = "m_" . $name;
	return isset($this->$var) ? $this->$var : '';
	}

	function Set($name, $value)
	{
	if (is_array($name))
	{
	for ($i=0; $i<sizeof($name); $i++)
	{ $var = "m_" . $name[$i];
	$this->$var = $value[$i];
	$this->m_dirtyFieldsMap[$name[$i]] = $value[$i];
	}
	}
	else
	{
	$var = "m_" . $name;
	$this->$var = $value;
	$this->m_dirtyFieldsMap[$name] = $value;
	//echo "Set: $var = $value <br>\n";
	}
	}

	function Validate()
	{
	$dataValid = true;
	if(!isset($this->m_LastAccessed))
	{
	$this->m_Errors->AddError("error.fieldIsRequired",'LastAccessed',"","",get_class($this),"Validate");
	$dataValid = false;
	}

	if(!isset($this->m_PortalUserId))
	{
	$this->m_Errors->AddError("error.fieldIsRequired",'PortalUserId',"","",get_class($this),"Validate");
	$dataValid = false;
	}

	if(!isset($this->m_Language))
	{
	$this->m_Errors->AddError("error.fieldIsRequired",'Language',"","",get_class($this),"Validate");
	$dataValid = false;
	}

	if(!isset($this->m_Theme))
	{
	$this->m_Errors->AddError("error.fieldIsRequired",'Theme',"","",get_class($this),"Validate");
	$dataValid = false;
	}

	return $dataValid;
	}

	function Delete()
	{
	if(!isset($this->m_SessionKey))
	{
	$this->m_Errors->AddError("error.AppError",NULL,'Internal error: Delete requires set id',"",get_class($this),"Delete");
	return false;
	}
	//Delete associated adata first
	$sql = sprintf("DELETE FROM ".GetTablePrefix()."SessionData WHERE SessionKey = '%s'", $this->Get("SessionKey"));
	$this->adodbConnection->Execute($sql);
	$sql = sprintf("DROP TABLE %s%s_search",GetTablePrefix(), $this->Get("SessionKey"));
	$this->adodbConnection->Execute($sql);
	$sql = sprintf("DELETE FROM ".GetTablePrefix()."UserSession WHERE SessionKey = '%s'", $this->Get("SessionKey"));
	$this->adodbConnection->Execute($sql);
	if ($this->adodbConnection->Execute($sql) === false)
	{
	$this->m_Errors->AddError("error.DatabaseError",NULL,$this->adodbConnection->ErrorMsg(),"",get_class($this),"Delete");
	return false;
	}
	$this->Set("SessionKey","");
	$this->Set("SessionDataLoaded",false);
	return true;
	}

	function Update()
	{
	global $objConfig;

	//$this->Set("LastAccessed",date("U"));
	$this->Set("IpAddress",$_SERVER["REMOTE_ADDR"]);
	if(!isset($this->m_SessionKey))
	{
	$this->m_Errors->AddError("error.AppError",NULL,'Internal error: Update requires set id',"",get_class($this),"Update");
	return false;
	}
	if(!is_numeric($this->Get("PortalUserId")))
	{
	$this->Set("PortalUserId",0);
	}
	if(!strlen($this->Get("GroupList")))
	{
	$this->Set("GroupList",$objConfig->Get("User_GuestGroup"));
	}
	if(count($this->m_dirtyFieldsMap) == 0)
	return true;
	$sql = "UPDATE ".GetTablePrefix()."UserSession SET ";
	$first = 1;
	foreach ($this->m_dirtyFieldsMap as $key => $value)
	{
	if($first)
	{
	$sql = sprintf("%s %s=%s",$sql,$key,$this->adodbConnection->qstr($value));
	$first = 0;
	}
	else
	{
	$sql = sprintf("%s, %s=%s",$sql,$key,$this->adodbConnection->qstr($value));
	}
	}
	$sql = sprintf("%s WHERE SessionKey = '%s'",$sql, $this->Get("SessionKey"));
	//echo $sql;
	if ($this->adodbConnection->Execute($sql) === false)
	{
	$this->m_Errors->AddError("error.DatabaseError",NULL,$this->adodbConnection->ErrorMsg(),"",get_class($this),"Update");
	return false;
	}
	return true;
	}

	function Create()
	{
	global $objConfig;

	$this->Set("LastAccessed", time());
	if(!is_numeric($this->Get("PortalUserId")))
	{
	$this->Set("PortalUserId",0);
	}
	if(!strlen($this->Get("GroupList")))
	{
	$this->Set("GroupList",$objConfig->Get("User_GuestGroup"));
	}
	$sql = "INSERT INTO ".GetTablePrefix()."UserSession (";
	$first = 1;
	foreach ($this->m_dirtyFieldsMap as $key => $value)
	{
	if($first)
	{
	$sql = sprintf("%s %s",$sql,$key);
	$first = 0;
	}
	else
	{
	$sql = sprintf("%s, %s",$sql,$key);
	}
	}
	$sql = sprintf('%s ) VALUES (',$sql);
	$first = 1;
	foreach ($this->m_dirtyFieldsMap as $key => $value)
	{
	if($first)
	{
	$sql = sprintf("%s %s",$sql,$this->adodbConnection->qstr($value));
	$first = 0;
	}
	else
	{
	$sql = sprintf("%s, %s",$sql,$this->adodbConnection->qstr($value));
	}
	}
	$sql = sprintf('%s)',$sql);
	//echo $sql."<br>\n";
	if ($this->adodbConnection->Execute($sql) === false)
	{
	$this->m_Errors->AddError("error.DatabaseError",NULL,$this->adodbConnection->ErrorMsg(),"",get_class($this),"Create");
	return false;
	}
	return true;
	}

	function LoadFromTempKey($id=NULL)
	{
	global $objLanguages, $objConfig,$m_var_list;
	$referer = $_SERVER["HTTP_REFERER"];
	//echo "Referer: $referer <br>\n";
	if(strlen($referer) && strpos($referer,"env="))
	{
	$keystart = strpos($referer,"env=")+4;
	$referer = substr($referer,$keystart);
	$keyend = strpos($referer,"-");
	$LastKey = substr($referer,0,$keyend);
	if(strlen($LastKey))
	{
	$sql = "SELECT * FROM ".GetTablePrefix()."UserSession WHERE (CurrentTempKey = '$id' OR PrevTempKey='$id' OR CurrentTempKey='$LastKey' OR PrevTempKey='$LastKey') ";
	}
	else
	$sql = "SELECT * FROM ".GetTablePrefix()."UserSession WHERE CurrentTempKey = '$id' AND PrevTempKey IS NULL";
	}
	else
	$sql = "SELECT * FROM ".GetTablePrefix()."UserSession WHERE CurrentTempKey = '$id' AND PrevTempKey IS NULL";

	$result = $this->adodbConnection->Execute($sql);
	if ($result === false)
	{
	$this->m_Errors->AddError("error.DatabaseError",NULL,$this->adodbConnection->ErrorMsg(),"",get_class($this),"LoadFromDatabase");
	return false;
	}
	$data = $result->fields;
	if (is_array($data))
	{
	foreach($data as $field => $value)
	{
	$mname = "m_" . $field;
	$this->$mname = $data[$field];
	}

	if($this->Get("CurrentTempKey")) {
	$this->Set("PrevTempKey",$this->Get("CurrentTempKey"));
	$this->UseTempKeys=TRUE;
	}

	if (!$this->Get("CurrentTempKey") \|\| !strstr($_SERVER['HTTP_REFERER'], $_SERVER['SERVER_NAME'].$objConfig->Get("Site_Path"))) {
	//$this->Set("PrevTempKey",$this->Get("CurrentTempKey"));
	//$this->Set("CurrentTempKey",$this->GetUniqueKey());
	$this->UseTempKeys=FALSE;
	$this->Set("PortalUserId", 0);
	$this->Set("Language", $objLanguages->GetPrimary());
	$ThemeId = $m_var_list["theme"];
	$this->SetThemeName($ThemeId);
	//$this->Set("Theme", $objConfig->Get("Default_Theme"));
	$this->Set("GroupList",0);
	$this->Set("SessionKey","");
	$this->Set("GroupList",$objConfig->Get("User_GuestGroup"));
	}
	//$this->UseTempKeys=TRUE;
	$this->Update();
	return true;
	}
	else
	{
	$this->Set("PortalUserId", 0);
	$this->Set("Language", $objLanguages->GetPrimary());
	$ThemeId = $m_var_list["theme"];
	$this->SetThemeName($ThemeId);
	//$this->Set("Theme", $objConfig->Get("Default_Theme"));
	$this->Set("GroupList",0);
	$this->Set("SessionKey","");
	$this->Set("GroupList",$objConfig->Get("User_GuestGroup"));
	$this->Set("CurrentTempKey",$this->GetUniqueKey());
	return false;
	}
	}

	function LoadFromDatabase($id)
	{
	if(!isset($id))
	{
	$this->m_Errors->AddError("error.AppError",NULL,'Internal error: LoadFromDatabase id',"",get_class($this),"LoadFromDatabase");
	return false;
	}
	$sql = sprintf("SELECT * FROM ".GetTablePrefix()."UserSession WHERE SessionKey = '%s'",$id);

	$result = $this->adodbConnection->Execute($sql);
	if ($result === false)
	{
	$this->m_Errors->AddError("error.DatabaseError",NULL,$this->adodbConnection->ErrorMsg(),"",get_class($this),"LoadFromDatabase");
	return false;
	}
	$data = $result->fields;
	if (is_array($data))
	{
	foreach($data as $field => $value)
	{
	$mname = "m_" . $field;
	$this->$mname = $data[$field];
	}
	return true;
	}
	else
	{
	return false;
	}
	}

	function Login($userLogin, $userPassword)
	{
	global $expired, $objConfig;

	if($userLogin=="root")
	{
	$rootpass = $objConfig->Get("RootPass");
	if($rootpass!=$userPassword)
	{
	return FALSE;
	}
	else
	{
	if(!strlen($this->GetSessionKey()))
	$this->GetNewSession();
	$this->Set("PortalUserId",-1);
	$this->Update();
	return TRUE;
	}
	}
	else
	{
	$pre = GetTablePrefix();
	$sql = "SELECT *,MD5(".$pre."PortalUser.Password) as md5pw FROM ".$pre."PortalUser LEFT JOIN ".$pre."UserGroup USING (PortalUserId) "
	."LEFT JOIN ".$pre."PortalGroup ON (".$pre."UserGroup.GroupId=".$pre."PortalGroup.GroupId)
	WHERE
	".$pre."PortalUser.Login='$userLogin' AND ".$pre."PortalUser.Status=1
	AND (".$pre."PortalUser.Password='$userPassword' OR MD5(".$pre."PortalUser.Password)='$userPassword' OR ".$pre."PortalUser.Password='".md5($userPassword)."')
	ORDER BY ".$pre."UserGroup.PrimaryGroup DESC, ".$pre."PortalGroup.Personal DESC";
	//echo $sql."<br>\n";
	$result = $this->adodbConnection->Execute($sql);

	if ($result === false)
	{
	$this->m_Errors->AddError("error.DatabaseError",NULL,$this->adodbConnection->ErrorMsg(),"",get_class($this),"Login");
	return false;
	}
	if($result->EOF)
	return false;
	}
	if(!strlen($this->GetSessionKey()))
	{
	$this->GetNewSession();
	}

	$this->Set("PortalUserId", $result->fields["PortalUserId"]);
	if(strlen($result->fields["tz"])>0)
	$this->Set("tz",$result->fields["tz"]);
	$PrimaryGroup=0;
	$PersonalGroup=0;
	$GroupList = array();
	while($result && !$result->EOF)
	{
	$skipadd=0;
	$g = $result->fields["GroupId"];

	if($result->fields["PrimaryGroup"]==1)
	{
	$PrimaryGroup = $g;
	$skipadd=1;
	}
	if($result->fields["Personal"]==1)
	{
	$PersonalGroup=$g;
	$skipadd=0;
	}
	if(!$skipadd)
	$GroupList[] = $g;
	$result->MoveNext();
	}
	$extra_groups = implode(",",$GroupList);
	if($PrimaryGroup)
	$extra_groups = $PrimaryGroup.",".$extra_groups;
	if($PersonalGroup)
	{
	$this->Set("GroupId",$PersonalGroup);
	//$extra_groups .= ",".$PersonalGroup;
	}
	else
	{
	$this->Set("GroupId",$PrimaryGroup);
	}

	$this->Set("GroupList", $extra_groups);
	$this->Set("LastAccessed",date("U"));
	$this_login = $this->GetPersistantVariable("ThisLogin");
	$this->SetPersistantVariable("LastLogin", $this_login);
	$this->SetPersistantVariable("ThisLogin", time());
	$this->ResetSysPermCache();
	$this->PermCache = array();
	$this->Update();
	return true;
	}

	function Logout()
	{
	global $objConfig;

	$this->Set("PortalUserId", 0);
	$this->Set("GroupId", $objConfig->Get("User_GuestGroup"));
	#$this->SetPersistantVariable("LastLogin", time());
	$this->Set("GroupList",$objConfig->Get("User_GuestGroup"));
	$this->Set("IpAddress",$_SERVER['REMOTE_ADDR']);
	$this->DeleteSessionData($this->GetSessionKey());
	$this->Update();
	$this->Delete();
	$this->ResetSysPermCache();
	$this->PermCache = array();
	}

	function SetVariable( $variableName, $variableValue)
	{
	global $objConfig, $FrontEnd;

	$objConfig->Set($variableName,$variableValue,2);

	//if(!(int)$FrontEnd==1)
	//{
	$sessionkey = $this->GetSessionKey();
	$sql = "SELECT * FROM ".GetTablePrefix()."SessionData WHERE VariableName='$variableName' AND SessionKey='$sessionkey'";
	$rs = $this->adodbConnection->Execute($sql);
	if($rs && !$rs->EOF)
	{
	$sql = "UPDATE ".GetTablePrefix()."SessionData SET VariableValue='$variableValue' WHERE VariableName='$variableName' AND SessionKey='$sessionkey'";
	}
	else
	$sql = "INSERT INTO ".GetTablePrefix()."SessionData (VariableName,VariableValue,SessionKey) VALUES ('$variableName','$variableValue','$sessionkey')";

	$this->adodbConnection->Execute($sql);
	// echo "<BR>UPDATE: $sql<BR>";
	//}
	}

	function SetPersistantVariable($variableName, $variableValue)
	{
	global $objConfig;

	$userid = (int)$this->Get("PortalUserId");

	if($userid > 0)
	{
	if(!is_object($this->CurrentUser))
	$this->CurrentUser = $objUsers->GetItem($this->Get("PortalUserId"));
	if(!$this->CurrentUser->VarsLoaded)
	$this->CurrentUser->LoadPersistantVars();

	$this->CurrentUser->SetPersistantVariable($variableName, $variableValue);
	}
	else
	$this->SetVariable($variableName,$variableValue);
	}

	function GetPersistantVariable($variableName)
	{
	global $objConfig, $objUsers;

	if(is_numeric($this->Get("PortalUserId")))
	{
	if(!is_object($this->CurrentUser))
	$this->CurrentUser = $objUsers->GetItem($this->Get("PortalUserId"));
	if(!$this->CurrentUser->VarsLoaded)
	$this->CurrentUser->LoadPersistantVars();
	$val = $this->CurrentUser->GetPersistantVariable($variableName);
	}
	if(!strlen($val))
	$val = $objConfig->Get($variableName);
	return $val;
	}

	function GetVariable($variableName)
	{
	global $objConfig;

	return $objConfig->Get($variableName);
	}

	function LoadSessionData()
	{
	global $objConfig, $objUsers;

	if(is_numeric($this->Get("PortalUserId")))
	{
	if(!is_object($this->CurrentUser))
	$this->CurrentUser = $objUsers->GetItem($this->Get("PortalUserId"));
	if(!$this->CurrentUser->VarsLoaded)
	$this->CurrentUser->LoadPersistantVars();

	$sql = "SELECT VariableName, VariableValue FROM ".GetTablePrefix()."SessionData where SessionKey='" . $this->Get("SessionKey") . "'";
	//echo $sql."<br>\n";
	$result = $this->adodbConnection->Execute($sql);
	while ($result && !$result->EOF)
	{
	$data = $result->fields;
	//echo "<PRE>"; print_r($data); echo "</PRE>";
	$objConfig->Set($data["VariableName"],$data["VariableValue"],FALSE);
	$result->MoveNext();
	}
	}
	if((int)$this->GetPersistantVariable("Language"))
	$this->Set("Language",$objConfig->Get("Language"));
	$this->DeleteExpiredSessions();
	return true;
	}

	function DeleteSessionData($key)
	{
	$sql = "DELETE FROM ".GetTablePrefix()."SessionData WHERE SessionKey='$key'";
	$this->adodbConnection->Execute($sql);
	}

	function SaveSessionData()
	{
	global $objConfig;

	//echo "Saving Session Data..<br>\n";
	if($this->SessionEnabled())
	{
	$data = $objConfig->GetDirtySessionValues(2); //session data
	//echo "<PRE>"; print_r($data); echo "</PRE>";
	$sessionkey = $this->GetSessionKey();
	foreach($data as $field=>$value)
	{
	$sql = "UPDATE ".GetTablePrefix()."SessionData SET VariableValue='$value' WHERE VariableName='$field' AND SessionKey='$sessionkey'";
	$this->adodbConnection->Execute($sql);
	//echo $sql."<br>\n";

	if($this->adodbConnection->Affected_Rows()==0)
	{
	$sql = "INSERT INTO ".GetTablePrefix()."SessionData (VariableName,VariableValue,SessionKey) VALUES ('$field','$value','$sessionkey')";
	$this->adodbConnection->Execute($sql);
	}
	// echo $sql."<br>\n";
	}
	}
	}

	function DeleteEditTables()
	{
	$tables = $this->adodbConnection->MetaTables();
	$sql = "SHOW TABLES";
	//echo "<PRE>";print_r($tables); echo "</PRE>";
	for($i=0;$i<count($tables);$i++)
	{
	$t = strtoupper($tables[$i]);
	$p = strtoupper(GetTablePrefix()."ses_ad");
	$k = substr($t,0,strlen($p));

	if($k == $p && strpos($t,"FD_")>0)
	{
	$key = "AD".strtoupper(substr($t,strlen($p),strpos($t,"FD_")-strlen($p)))."FD";
	$sql = "SELECT * FROM ".GetTablePrefix()."UserSession WHERE SessionKey='$key'";
	//echo $sql."<br>\n";
	$rs = $this->adodbConnection->Execute($sql);
	if(!$rs \|\| $rs->EOF)
	{
	//echo "Dropping Table $tables[$i] <br>\n";
	@$this->adodbConnection->Execute("DROP TABLE ".$tables[$i]);
	}
	}
	}
	}

	function DeleteExpiredSessions()
	{
	global $objConfig;

	$cutoff = time()-$objConfig->Get("SessionTimeout");
	$thiskey = $this->GetSessionKey();
	$sql = "SELECT SessionKey from ".GetTablePrefix()."UserSession WHERE LastAccessed<$cutoff AND SessionKey != '$thiskey'";
	$result = $this->adodbConnection->Execute($sql);
	$keys = array();
	while ($result && !$result->EOF)
	{
	$keys[] = "SessionKey='" . $result->fields["SessionKey"] . "'";
	$result->MoveNext();
	}
	if(count($keys)>0)
	{
	$keywhere = implode(" OR ", $keys);
	$sql = "DELETE FROM ".GetTablePrefix()."SessionData WHERE $keywhere";
	//echo $sql;
	$this->adodbConnection->Execute($sql);
	$this->adodbConnection->Execute("DELETE FROM ".GetTablePrefix()."UserSession WHERE LastAccessed<$cutoff");
	$this->DeleteEditTables();
	}
	}

	function SetSysPermCache()
	{
	unset($this->SysPermCache);
	$GroupList = $this->Get("GroupList");

	if(strlen($GroupList) && $GroupList !="0")
	{
	$this->SysPermCache = array();
	$sql = "SELECT * FROM ".GetTablePrefix()."Permissions WHERE Type=1 AND PermissionValue=1 AND GroupId IN (".$GroupList.")";
	//echo $sql."<br>\n";
	$rs = $this->adodbConnection->Execute($sql);

	while($rs && !$rs->EOF)
	{
	$val = $rs->fields["PermissionValue"];
	if($val==1)
	$this->SysPermCache[$rs->fields["Permission"]] = 1;
	$PermList[] = $rs->fields["Permission"];
	$rs->MoveNext();
	}
	if( isset($PermList) && count($PermList) > 0) // I think this is never issued (comment by Alex)
	$this->SetVariable("SysPerm",implode(",",$PermList));
	}
	}

	function GetSysPermCache()
	{
	$perms = trim($this->GetVariable("SysPerm"));
	if(!strlen($perms))
	{
	$this->SetSysPermCache();
	}
	else
	{
	$p = explode(",",$perms);

	$this->SysPermCache = array();
	for($i=0;$i<count($p);$i++)
	{
	$n = $p[$i];
	$this->SysPermCache[$n]=1;
	}
	}
	}

	function SysPermCacheLoaded()
	{
	return (isset($this->SysPermCache));
	}

	function ResetSysPermCache()
	{
	// echo "Resetting Perm Cache<br>\n";
	$this->SetVariable("SysPerm","");
	unset($this->SysPermCache);
	//$this->SysPermCache=array();
	}

	function HasSystemPermission($PermissionName)
	{
	global $objGroups;

	if($this->Get("PortalUserId")==-1 && ($PermissionName=="ADMIN" \|\| $PermissionName=="LOGIN"))
	return TRUE;
	//echo "Looking up $PermissionName:".$this->Get("GroupList")."<br>\n";
	//echo $this->Get("GroupList")." - ".$this->PermCacheGroups;
	$GroupList = $this->Get("GroupList");
	if(substr($GroupList,-1)==",")
	{
	$GroupList = substr($GroupList,0,-1);
	$this->Set("GroupList",$GroupList);
	}
	if($this->Get("GroupList")!=$this->PermCacheGroups)
	$this->ResetSysPermCache();
	if(!$this->SysPermCacheLoaded())
	{
	//echo "Loading Perm Cache<br>\n";
	$this->GetSysPermCache();
	$this->PermCacheGroups = $this->Get("GroupList");
	}
	//echo "SysPerm $PermissionName: ". $this->SysPermCache[$PermissionName]."<br>\n";
	return isset($this->SysPermCache[$PermissionName]) ? $this->SysPermCache[$PermissionName] == 1 : false;
	}

	function HasCatPermission($PermissionName,$CatId=NULL)
	{
	global $objCatList, $objUsers;

	$PermSet =FALSE;
	$Value = 0;
	if($this->Get("PortalUserId")==-1)
	return TRUE;
	if(!strlen($PermissionName))
	return FALSE;
	$GroupList = $this->Get("GroupList");
	if(substr($GroupList,-1)==",")
	{
	$GroupList = substr($GroupList,0,-1);
	$this->Set("GroupList",$GroupList);
	}
	if(!strlen($this->Get("SessionKey")))
	$this->Set("GroupId",0);
	if(strlen(trim($GroupList)))
	{
	if(strlen($this->Get("GroupId")))
	{
	$GroupList = $this->Get("GroupId").",".$GroupList;
	}
	}
	else
	{
	$GroupList = $this->Get("GroupId");
	}

	if($CatId == NULL)
	{
	$CatId = $objCatList->CurrentCategoryID();
	}

	$Cat = &$objCatList->GetCategory($CatId);

	$Value="";
	for($p=0;$p<count($this->PermCache);$p++)
	{
	$pItem = $this->PermCache[$p];
	if($pItem["perm"]==$PermissionName && $pItem["cat"]==$CatId)
	{
	$Value=$pItem["value"];
	break;
	}
	}
	if(is_object($Cat) && !is_numeric($Value))
	{
	$Value = 0;
	$CatList = $Cat->Get("ParentPath");
	$CatList = substr($CatList,1,-1);
	$CatList = str_replace("\|",",",$CatList);
	if(strlen($CatList))
	{
	$CatList ="0,".$CatList;
	}
	else
	$CatList = "0";
	$sql = "SELECT * FROM ".GetTablePrefix()."Permissions WHERE Permission LIKE '$PermissionName' AND CatId IN ($CatList) AND GroupId IN ($GroupList)";
	// echo $sql."<br>\n";
	$rs = $this->adodbConnection->Execute($sql);
	$PermValue = array();
	while($rs && !$rs->EOF)
	{
	$index = $rs->fields["CatId"];
	if(!is_numeric($PermValue[$index]))
	$PermValue[$index] = $rs->fields["PermissionValue"];
	$rs->MoveNext();
	}
	$cats = array_reverse(explode(",",$CatList));
	for($c=0;$c<count($cats);$c++)
	{
	$index = $cats[$c];
	if(is_numeric($PermValue[$index]))
	{
	$Value = $PermValue[$index];
	break;
	}
	}
	$perm = array();
	$perm["perm"] = $PermissionName;
	$perm["cat"] = $CatId;
	$perm["value"] = $Value;
	array_push($this->PermCache, $perm);
	}
	//echo $GroupList." Has Permission $PermissionName = $Value<br>\n";
	return $Value;
	}

	function HasCatPermInList($PermList,$CatId=NULL, $System=FALSE)
	{
	$value = 0;
	if(strlen($PermList))
	{
	$plist = explode(",",$PermList);
	$value=0;
	for($p=0;$p<count($plist);$p++)
	{
	if($this->HasCatPermission($plist[$p]))
	{
	$value = 1;
	break;
	}
	else
	{
	if($System)
	{
	if($this->HasSystemPermission($plist[$p]))
	{
	$value = 1;
	break;
	}
	}
	}
	}
	}
	return $value;
	}

	function GetACLClause()
	{
	$GroupList = $this->Get("GroupList");
	if(strlen($GroupList))
	$Groups = explode(",",$GroupList);
	$acl_where = "";
	if(@count($Groups)>0 && is_array($Groups))
	{
	$acl_where = array();
	for($i=0;$i<count($Groups);$i++)
	{
	$g = $Groups[$i];
	if(strlen($g)>0)
	$acl_where[] = "(FIND_IN_SET($g,acl) OR ((NOT FIND_IN_SET($g,dacl)) AND acl='')) ";
	}
	if(count($acl_where))
	{
	$acl_where = "(".implode(" OR ",$acl_where).")";
	}
	else
	$acl_where = "(FIND_IN_SET(0,acl))";
	}
	else
	$acl_where = "(FIND_IN_SET(0,acl))";
	return $acl_where;
	}

	function GetEditTable($base_table)
	{
	$prefix = GetTablePrefix();
	if(strlen($prefix))
	{
	if(substr($base_table,0,strlen($prefix))!=$prefix)
	$base_table = $prefix.$base_table;
	}
	$table = $prefix."ses_".$this->GetSessionKey()."_edit_".$base_table;
	//echo "Table: $table <br>\n";
	return $table;
	}

	function GetSessionTable($base_table,$name)
	{
	$prefix = GetTablePrefix();
	if(strlen($prefix))
	{
	if(substr($base_table,0,strlen($prefix))!=$prefix)
	$base_table = $prefix.$base_table;
	}
	$table = $prefix."ses_".$this->GetSessionKey()."_".$name.$base_table;
	//echo "Table: $table <br>\n";
	return $table;
	}

	function GetSearchTable($base_table="")
	{
	$prefix = GetTablePrefix();
	if(strlen($base_table))
	{
	if(strlen($prefix))
	{
	if(substr($base_table,0,strlen($prefix))!=$prefix)
	$base_table = $prefix.$base_table;
	}
	$table = $prefix."ses_".$this->GetSessionKey()."_search_".$base_table;
	}
	else
	- $table = $prefix."ses_".$this->GetSessionKey()."_search";
	+ $table = $this->GetSessionTable('Search',''); //$prefix."ses_".$this->GetSessionKey()."_search";
	return $table;
	}

	function GetTotalSessions()
	{
	# $time = time() - 900;
	$sql = "SELECT count(*) as SesCount FROM ".GetTablePrefix()."UserSession";
	$result = $this->adodbConnection->Execute($sql);
	if ($result === false)
	{
	$this->m_Errors->AddError("error.DatabaseError",NULL,$this->adodbConnection->ErrorMsg(),"",get_class($this),"GetTotalSessions");
	return false;
	}
	return $result->fields["SesCount"];
	}

	function Query_UserSession($whereClause,$orderByClause)
	{
	$resultSet = array();
	$sql = "SELECT ".GetTablePrefix()."* FROM ".GetTablePrefix()."UserSession ";
	if(isset($whereClause))
	$sql = sprintf('%s WHERE %s',$sql,$whereClause);
	if(isset($orderByClause))
	$sql = sprintf('%s ORDER BY %s',$sql,$orderByClause);
	$result = $this->adodbConnection->Execute($sql);
	if ($result === false)
	{
	$this->m_Errors->AddError("error.DatabaseError",NULL,$this->adodbConnection->ErrorMsg(),"",get_class($this),"Query_UserSession");
	return false;
	}
	while (!$result->EOF)
	{
	$item = new clsUserSession(NULL);
	$item->Set("SessionKey",$result->fields["SessionKey"]);
	$item->Set("LastAccessed", $result->fields["LastAccessed"]);
	$item->Set("PortalUserId", $result->fields["PortalUserId"]);
	$item->Set("Language", $result->fields["Language"]);
	$item->Set("Theme" , $result->fields["Theme"]);
	array_push($resultSet,$item);
	$result->MoveNext();
	}
	return $resultSet;
	}

	function GetUniqueKey()
	{
	while(true)
	{
	/* create the new session key here */
	mt_srand(100000000*(double)microtime());
	$sessionId=strtoupper(sprintf("AD%xFD",mt_rand(100000000,999999999))); //9 digit hex session id
	$query = "select SessionKey from ".GetTablePrefix()."UserSession ";
	$query .= "where SessionKey='$sessionId' OR CurrentTempKey='$sessionId' OR PrevTempKey='$sessionId'";
	$rs = $this->adodbConnection->Execute($query);
	if($rs->EOF)
	break;
	if($i>100)
	{
	return "";
	}
	$i++;
	}
	//echo "Getting Unique Key: $sessionId<br>";
	return $sessionId;
	}

	function GetNewSession()
	{
	global $sessionId, $objConfig, $objLanguages, $m_var_list;

	$i=0;

	if($this->Get("PortalUserId")>0 \|\| $objConfig->Get("GuestSessions")==1)
	{
	//echo "Creating Session<br>\n";
	$sessionId = $this->GetUniqueKey();
	$this->Set("SessionKey", $sessionId);
	$this->Set("CurrentTempKey",$sessionId);
	if($m_var_list["lang"])
	{
	$this->Set("Language",$m_var_list["lang"]);
	}
	else
	$this->Set("Language", $objLanguages->GetPrimary());
	$this->SetThemeName();
	//$this->Set("Theme", $objConfig->Get("Default_Theme"));
	$this->UpdateAccessTime();
	$this->Set("IpAddress", $_SERVER['REMOTE_ADDR'] );
	$this->Create();
	}
	else
	$this->Set("SessionKey","");
	}

	function SessionEnabled()
	{
	$res = FALSE;
	$key = $this->GetSessionKey();
	if(strlen($key)>0)
	$res = TRUE;
	return $res;
	}

	function GetSessionKey()
	{
	return $this->Get("SessionKey");
	}

	function SetThemeName($id=0)
	{
	global $objThemes;

	if($id==0)
	$id = $objThemes->GetPrimaryTheme();

	$Theme = $objThemes->GetItem($id);
	$name = $Theme->Get("Name");
	$this->Set("Theme",$name);
	//$this->Update();
	}

	function ValidSession($SessionKey=NULL)
	{
	global $objConfig;

	$a = $this->Get("LastAccessed");
	$cutoff = time()-$objConfig->Get("SessionTimeout");
	//echo $a." ".$cutoff."<br>";
	//$ip = ($_SERVER['REMOTE_ADDR'] == $this->Get("IpAddress"));
	//echo $this->Get("IpAddress");
	//$ip = TRUE;
	if ($a < $cutoff) {
	//$this->UpdateAccessTime();
	}
	return ($a >= $cutoff);


	}

	function UpdateAccessTime()
	{
	$now = time();
	$this->Set("LastAccessed",$now);
	}

	function InSpamControl($ResourceId,$DataType=NULL)
	{
	static $ClearStat;

	if(!$ClearStat)
	$this->PurgeSpamControl();
	$ClearStat=1;
	if(strlen($DataType))
	$DataType="'".$DataType."'";
	$sql = "SELECT count(*) as SpamCount FROM ".GetTablePrefix()."SpamControl WHERE ItemResourceId=$ResourceId AND DataType=$DataType";
	if($this->Get("PortalUserId")==0)
	{
	$sql .= " AND PortalUserId=0 AND IPaddress='".$_SERVER["REMOTE_ADDR"]."'";
	}
	else
	{
	$sql .= " AND PortalUserId=".$this->Get("PortalUserId");
	}
	$rs = $this->adodbConnection->Execute($sql);
	$value = (int)$rs->fields["SpamCount"];
	if($value>0)
	{
	return TRUE;
	}
	else
	return FALSE;
	}

	function AddToSpamControl($ResourceId,$secstoexpire,$DataType=NULL)
	{
	$expire = adodb_date("U") + $secstoexpire;
	if(strlen($DataType))
	$DataType = "'".$DataType."'";
	$sql = "INSERT INTO ".GetTablePrefix()."SpamControl (ItemResourceId,IPaddress,Expire,PortalUserId,DataType) VALUES (";
	$sql .= $ResourceId.",'".$_SERVER["REMOTE_ADDR"]."',$expire,".$this->Get("PortalUserId").",$DataType)";
	//echo $sql;
	$this->adodbConnection->Execute($sql);
	}

	function PurgeSpamControl()
	{
	$sql = "DELETE FROM ".GetTablePrefix()."SpamControl WHERE Expire<".adodb_date("U");

	$this->adodbConnection->Execute($sql);
	}

	}/* clsUserSession */

	?>

	Property changes on: trunk/kernel/include/usersession.php
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.1
	\ No newline at end of property
	+1.2
	\ No newline at end of property
	Index: trunk/kernel/frontaction.php
	===================================================================
	--- trunk/kernel/frontaction.php (revision 34)
	+++ trunk/kernel/frontaction.php (revision 35)
	@@ -1,831 +1,828 @@
	<?php
	switch($Action)
	{
	case "m_login":
	// if($objSession->ValidSession())
	// $objSession->Logout();
	//echo $objSession->GetSessionKey()."<br>\n";
	if ($objConfig->Get("CookieSessions") == 1 && $_COOKIE["CookiesTest"] != "1") {
	$FormError["login"]["login_user"] = language("lu_cookies_error");
	}
	else {
	$MissingCount = SetMissingDataErrors("login");
	if($MissingCount==2)
	{
	$FormError["login"]["login_user"]= language("lu_ferror_loginboth");
	unset($FormError["login"]["login_password"]);
	}
	if($MissingCount==0)
	{
	if($_POST["login_user"]=="root")
	{
	$FormError["login"]["login_user"]= language("lu_access_denied");
	}
	else
	{
	if ($objSession->Login($_POST["login_user"], md5($_POST["login_password"])) == FALSE)
	{
	$FormError["login"]["login_password"] = language("lu_incorrect_login");
	}
	else
	{

	if(!headers_sent() && ($_POST["usercookie"]==1 \|\| $_GET["usercookie"]==1))
	{
	$c = $_POST["login_user"]."\|";
	$pw = $_POST["login_password"];
	if(strlen($pw)<31)
	$pw = md5($pw);

	$c .= $pw;

	setcookie("login",$c,time()+2592000);
	}
	$dest = $_POST["dest"];
	if(!strlen($dest))
	$dest = $_GET["dest"];
	if(!strlen($dest))
	$dest = $_POST["DestTemplate"];
	if(!strlen($dest))
	$dest = $_GET["DestTemplate"];
	if(strlen($dest))
	{
	$var_list["t"] = $dest;
	//header("Location: ../../index.php?env=" . BuildEnv());
	}

	// echo "DEST: ".$t; die();
	}
	}
	}
	}
	break;
	case "m_forgotpw":
	$MissingCount = SetMissingDataErrors("forgotpw");
	if($MissingCount==0)
	{
	$username = $_POST["username"];
	$email = $_POST["email"];
	$found = FALSE;
	if(strlen($username))
	{
	$u = $objUsers->GetItemByField("Login",$username);
	if(is_object($u))
	$found = ($u->Get("Login")==$username && $u->Get("Status")==1) && strlen($u->Get("Password"));
	}
	else if(strlen($email))
	{
	$u = $objUsers->GetItemByField("Email",$email);
	if(is_object($u))
	$found = ($u->Get("Email")==$email && $u->Get("Status")==1) && strlen($u->Get("Password"));
	}
	if($found)
	{
	$newpw = makepassword();
	$u->Set("Password",$newpw);
	$u->Update();
	$u->SendUserEventMail("USER.PSWD",$u->Get("PortalUserId"));
	$u->SendAdminEventMail("USER.PSWD");
	$u->Set("Password",md5($newpw));
	$u->Update();
	$u->Clean();
	}
	else
	{
	if(!strlen($username) && !strlen($email))
	{
	$FormError["forgotpw"]["username"] = language("lu_ferror_forgotpw_nodata");
	$MissingCount++;
	}
	else
	{
	if(strlen($username))
	$FormError["forgotpw"]["username"] = language("lu_ferror_unknown_username");
	if(strlen($email))
	$FormError["forgotpw"]["email"] = language("lu_ferror_unknown_email");
	$MissingCount++;
	}
	if(strlen($_GET["error"]))
	$var_list["t"] = $_GET["error"];
	}
	}
	else
	if(strlen($_GET["error"]))
	$var_list["t"] = $_GET["error"];
	break;
	case "m_subscribe_confirm":
	$t = "";
	$SubscribeAddress = $_POST["subscribe_email"];
	if(!ValidEmail($SubscribeAddress)&& strlen($SubscribeAddress))
	{
	$t = $_GET["Error"];
	$SubscribeError = "lu_invalid_emailaddress";
	}
	else
	{
	if((int)$objConfig->Get("User_SubscriberGroup")>0)
	{
	$g = $objGroups->GetItem($objConfig->Get("User_SubscriberGroup"));
	if(is_object($g))
	{
	$email = $_POST["subscribe_email"];
	if(strlen($email)>0)
	{
	$u = $objUsers->GetItemByField("Email",$email);

	if(is_object($u))
	{
	if($u->CheckBanned())
	{
	$t = $_GET["Error"];
	$SubscribeError ="lu_subscribe_banned";
	}
	else
	{
	if($u->IsInGroup($g->Get("GroupId")))
	{
	$t = $_GET["Unsubscribe"];
	}
	else
	$t = $_GET["Subscribe"];
	}
	}
	else
	$t = $_GET["Subscribe"];
	}
	else
	{
	$t = $_GET["Error"];
	$SubscribeError ="lu_subscribe_no_address";
	}
	}
	else
	{
	$t = $_GET["Error"];
	$SubscribeError ="lu_subscribe_unknown_error";
	}
	}
	}
	if(strlen($t))
	{
	$var_list["t"] = $t;
	$var_list_update["t"] = $t;
	}
	break;
	case "m_subscribe":
	//phpinfo(INFO_VARIABLES);
	if($_POST["buttons"][0]==language("lu_button_yes"))
	{
	$SubscribeAddress = $_POST["subscribe_email"];
	if(strlen($SubscribeAddress)>0)
	{
	if(ValidEmail($SubscribeAddress))
	{
	$GroupId = (int)$objConfig->Get("User_SubscriberGroup");
	if ($GroupId)
	{
	$g = $objGroups->GetItem($GroupId);
	$u = $objUsers->GetItemByField("Email",$SubscribeAddress);
	if(is_object($u))
	{
	if(strtolower($u->Get("Email"))==strtolower($SubscribeAddress))
	{
	$bExists = TRUE;
	}
	else
	$bExists = FALSE;
	}
	if($bExists)
	{
	$g->AddUser($u->Get("PortalUserId"));
	}
	else
	{
	$u = new clsPortalUser(NULL);
	$u->Set("Email",$SubscribeAddress);
	$u->Set("ip",$_SERVER['REMOTE_ADDR']);
	$u->Set("CreatedOn",date("U"));
	$u->Set("Status",1);
	if(!$u->CheckBanned())
	{
	$u->Create();
	$g->AddUser($u->Get("PortalUserId"),1);
	}
	else
	$SubscribeResult = "lu_subscribe_banned";
	}
	$SubscribeResult = "lu_subscribe_success";
	$u->SendUserEventMail("USER.SUBSCRIBE",$u->Get("PortalUserId"));
	$u->SendAdminEventMail("USER.SUBSCRIBE");
	if(strlen($_GET["Subscribe"])>0)
	$var_list["t"] = $_GET["Subscribe"];
	}
	}
	else
	{
	$SubscribeResult = "lu_invalid_emailaddress";
	}
	}
	else
	$SubscribeResult = "lu_subscribe_missing_address";
	}

	if(!strlen($SubscribeResult))
	$SubscribeResult = "lu_subscribe_success";
	break;
	case "m_unsubscribe":

	if($_POST["buttons"][0]==language("lu_button_yes"))
	{
	$MissingCount = SetMissingDataErrors("m_unsubscribe");

	if($MissingCount==0)
	{
	$email = $_POST["subscribe_email"];
	$u = $objUsers->GetItemByField("Email",$email);
	if(is_object($u))
	{
	if(strtolower($u->Get("Email"))==strtolower($email))
	{
	$GroupId = (int)$objConfig->Get("User_SubscriberGroup");
	if($u->PrimaryGroup()==$GroupId)
	{
	$u_gorup_list = $u->GetGroupList();

	if (count($u_gorup_list) > 1) {
	$u->RemoveFromGroup($GroupId);
	}
	else {
	$u->RemoveFromAllGroups();
	$u->Delete();
	}
	}
	else
	{
	$u->RemoveFromGroup($GroupId);
	}
	}
	}
	if(strlen($_GET["Subscribe"])>0)
	$var_list["t"] = $_GET["Subscribe"];
	}
	}

	break;
	case "m_logout":
	// $objSession->Logout();
	//unset($objSession);
	//$objSession = new clsUserSession();
	// $var_list_update["t"] = "index";
	// setcookie("login","",time()-3600);
	break;
	case "m_register":
	$MissingCount = SetMissingDataErrors("m_register");

	if(!$objConfig->Get("User_Password_Auto"))
	{
	if(($_POST["password"] != $_POST["passwordverify"]) \|\| !strlen($_POST["passwordverify"]))
	{
	$MissingCount++;
	$FormError["m_register"]["passwordverify"] = language("lu_ferror_pswd_mismatch");
	}
	}

	if(strlen($_POST["password"])>30)
	{
	// echo "VAR: ".$_POST["password"]; die();
	$MissingCount++;
	$FormError["m_register"]["password"] = language("lu_ferror_pswd_toolong");
	}

	if (strlen($_POST['password']) < $objConfig->Get("Min_Password"))
	{
	$MissingCount++;
	$FormError["m_register"]["password"] = language("lu_ferror_pswd_tooshort");
	}

	$u = $objUsers->GetItemByField("Login",$_POST["username"]);

	if(is_object($u))
	{
	if($u->Get("Login")==$_POST["username"])
	{
	$MissingCount++;
	$FormError["m_register"]["username"] = language("lu_user_exists");
	}
	}

	if (strlen($_POST['username']) < $objConfig->Get("Min_UserName"))
	{
	$MissingCount++;
	$FormError["m_register"]["username"] = language("lu_ferror_username_tooshort");
	}

	if(!$MissingCount)
	{
	$CreatedOn = adodb_date("U");
	$GroupId = $objConfig->Get("User_NewGroup");
	$Status=0;

	/* determine the status of new users */
	switch ($objConfig->Get("User_Allow_New"))
	{
	case "1":
	$Status=1;
	break;
	case "3":
	$Status=2;
	break;
	}

	/* set Destination template */
	$var_list["t"] = strlen($_GET["dest"])? $_GET["dest"] : "index";

	if($Status>0)
	{
	if($objConfig->Get("User_Password_Auto"))
	{
	$password = makepassword();
	}
	else
	$password = $_POST["password"];

	$_POST["dob"] = $_POST["dob_month"]."/".$_POST["dob_day"]."/".$_POST["dob_year"];
	$dob = DateTimestamp($_POST["dob"],GetDateFormat());
	$ip = $_SERVER['REMOTE_ADDR'];

	$u = &$objUsers->Add_User($_POST["username"], md5($password), $_POST["email"], $CreatedOn, $_POST["firstname"], $_POST["lastname"], $Status, $_POST["phone"], $_POST["street"], $_POST["city"], $_POST["state"], $_POST["zip"], $_POST["country"], $dob, $ip, TRUE);

	if(!is_object($u))
	{
	$RuleId=$u;
	$r = $objBanList->GetItem($RuleId);
	$err = $r->Get("ErrorTag");

	if(strlen($err))
	{
	$FormError["m_register"][$r->Get("ItemField")] = language($err);
	$MissingCount++;
	}
	}
	else
	{
	$u->Set("Password",$password);
	$u->Clean();
	if($GroupId>0)
	{
	$g = $objGroups->GetItem($GroupId);
	$g->AddUser($u->Get("PortalUserId"),1);
	}

	$custom = $_POST["custom"];
	if(is_array($custom))
	{
	for($x=0;$x<count($custom);$x++)
	{
	$u->SetCustomField($custom[$x],$_POST[$custom[$x]]);
	}
	$u->SaveCustomFields();
	}

	if($Status==1)
	{
	if($objConfig->Get("User_Password_Auto"))
	{
	$u->SendUserEventMail("USER.VALIDATE",$u->Get("PortalUserId"));
	$u->SendAdminEventMail("USER.VALIDATE");
	}
	else
	{
	$doLoginNow = true;
	$u->SendUserEventMail("USER.ADD",$u->Get("PortalUserId"));
	$u->SendAdminEventMail("USER.ADD");
	}
	}
	else
	{
	$u->SendUserEventMail("USER.ADD.PENDING",$u->Get("PortalUserId"));
	$u->SendAdminEventMail("USER.ADD.PENDING");
	}

	if ($doLoginNow)
	$objSession->Login($_POST["username"], md5($password));

	}
	}
	}
	break;
	case "m_add_friend":
	$id = $_GET["UserId"];
	$userid = $objSession->Get("PortalUserId");
	if($id!=$userid)
	{
	$u =& $objUsers->GetItem($id);
	$u->AddFavorite($userid);
	}
	break;
	case "m_del_friend":
	$id = $_GET["UserId"];
	$userid = $objSession->Get("PortalUserId");
	$u =& $objUsers->GetItem($id);
	$u->DeleteFavorite();
	break;
	case "m_acctinfo":
	// phpinfo(INFO_VARIABLES);
	$MissingCount = SetMissingDataErrors("m_acctinfo");
	$UserId = $_GET["UserId"];
	if($UserId != $objSession->Get("PortalUserId"))
	{
	$MissingCount++;
	$FormError["m_acctinfo"]["UserId"] = language("lu_ferror_m_profile_userid");
	}
	if(strlen($_POST["password"])>0)
	{
	if(($_POST["password"] != $_POST["passwordverify"]) \|\| !strlen($_POST["passwordverify"]))
	{
	$MissingCount++;
	$FormError["m_acctinfo"]["passwordverify"] = language("lu_ferror_pswd_mismatch");
	}

	if(strlen($_POST["password"])>30)
	{
	// echo "VAR: ".$_POST["password"]; die();
	$MissingCount++;
	$FormError["m_acctinfo"]["password"] = language("lu_ferror_pswd_toolong");
	}

	if (strlen($_POST['password']) < $objConfig->Get("Min_Password"))
	{
	$MissingCount++;
	$FormError["m_acctinfo"]["password"] = language("lu_ferror_pswd_tooshort");
	}
	}
	if(!$MissingCount)
	{
	/* save profile */
	$u =& $objUsers->GetItem($UserId);
	$status = $u->Get("Status");
	$_POST["dob"] = $_POST["dob_month"]."/".$_POST["dob_day"]."/".$_POST["dob_year"];
	$dob = DateTimestamp($_POST["dob"], GetDateFormat());
	if(strlen($_POST["password"])>0)
	{
	$password = md5($_POST["password"]);
	}
	else
	$password = "";
	$objUsers->Edit_User($UserId, $_POST["username"], $password, $_POST["email"], 0,
	$_POST["firstname"], $_POST["lastname"], $status, $_POST["phone"],
	$_POST["street"], $_POST["city"], $_POST["state"], $_POST["zip"],
	$_POST["country"], $dob);
	}
	break;
	case "m_profile":
	$userid = $objSession->Get("PortalUserId");
	if($userid>0)
	{
	$u = $objUsers->GetItem($userid);
	foreach($_POST as $field=>$value)
	{
	if(substr($field,0,3)=="pp_")
	{
	$objSession->SetPersistantVariable($field,$value);
	}
	}
	}
	break;
	case "m_set_lang":
	$lang = $_GET["lang"];
	$LangId = 0;
	if(strlen($lang))
	{
	$l = $objLanguages->GetItemByField("PackName",$lang);
	if(is_object($l))
	{
	$LangId = $l->Get("LanguageId");
	}
	}
	if($LangId)
	{
	if($objSession->Get("PortalUserId")>0)
	{
	$objSession->SetPersistantVariable("Language",$LangId);
	}
	$objSession->Set("Language",$LangId);
	$objSession->Update();
	$m_var_list_update["lang"] = $LangId;
	$m_var_list["lang"] = $LangId;
	}
	break;

	case "m_set_theme":
	$id = $_POST["ThemeId"];
	if(!is_numeric($id))
	$id = $_GET["ThemeId"];
	if($id)
	{
	$objSession->SetThemeName($id);
	$m_var_list["t"] = "index";
	$m_var_list_update["theme"] = $id;
	$m_var_list["theme"] = $id;
	unset($CurrentTheme);
	}
	break;

	case "m_sort_cats":
	$objSession->SetVariable("Category_Sortfield",$_POST["cat_field_sort"]);
	$objSession->SetVariable("Category_Sortorder",$_POST["cat_sort_order"]);
	break;
	case "m_add_cat_confirm":
	// phpinfo(INFO_VARIABLES);
	$perm = 0;
	$CategoryId=$objCatList->CurrentCategoryID();
	if ($objSession->HasCatPermission("CATEGORY.ADD.PENDING"))
	$perm = 2;
	if ($objSession->HasCatPermission("CATEGORY.ADD"))
	$perm = 1;
	if ($perm == 0)
	{
	$MissingCount++;
	$FormError["m_addcat"]["name"] = language("lu_ferror_no_access");
	}
	else
	{
	$MissingCount = SetMissingDataErrors("m_addcat");
	if(is_array($_FILES))
	{
	foreach($_FILES as $field => $file)
	{
	$allowed = TRUE;
	if(strlen($_POST["imagetypes"][$field]))
	{
	$types = explode(",",strtolower($_POST["imagetypes"][$field]));
	if(is_array($types))
	{
	if(count($types)>0)
	{
	$path_parts = pathinfo($file["name"]);
	$ext = $path_parts["extension"];
	$allowed = in_array($ext,$types);
	if(!$allowed)
	{
	$MissingCount++;
	$FormError["m_addcat"][$field] = language("lu_ferror_wrongtype");
	}
	}
	}
	}
	$maxsize = (int)$_POST["maxsize"][$field];
	if($maxsize>0 && $allowed && $file["size"]>$maxsize)
	{
	$allowed = FALSE;
	$MissingCount++;
	$FormError["m_addcat"][$field] = language("lu_ferror_toolarge");
	}
	}
	}
	if($MissingCount==0)
	{
	$CreatedOn = date("U");
	$name = $_POST["name"];
	$desc = $_POST["description"];
	$metadesc = $_POST["meta_description"];
	$keywords = $_POST["meta_keywords"];
	$parent = $objCatList->CurrentCategoryID();
	$cat =& $objCatList->Add($parent, $name, inp_escape($desc,0), $CreatedOn,
	0, $perm, 2, 2, 2, 0, $keywords,$metadesc);
	$cat->UpdateCachedPath();
	$cat->Update();
	$cat->UpdateACL();
	$objCatList->UpdateMissingCacheData();

	if(strlen($_GET["Confirm"]))
	{
	$var_list["t"] = $_GET["Confirm"];
	}
	else
	$var_list["t"] = $_GET["DestTemplate"];
	}
	}
	break;
	case "m_front_review_add":
	if($objSession->InSpamControl($_POST["ItemId"]))
	{
	$StatusMessage["review"] = language("la_Review_AlreadyReviewed");
	}
	else
	{
	$objReviews = new clsItemReviewList();
	$Status = $objConfig->Get("Review_DefaultStatus");
	$CreatedOn = adodb_date("U");
	$html = (int)$objConfig->Get("Review_Html");
	$ReviewText = inp_escape($_POST["review_text"],$html);

	$r = $objReviews->AddReview($CreatedOn,$ReviewText,$Status, $IPAddress,
	0, $_POST["ItemId"], $_POST["ItemType"], $objSession->Get("PortalUserId"));
	foreach($ItemTypes as $type=>$id)
	{
	if($id==$_POST["ItemType"])
	{
	$ValName = $type."_ReviewDelay_Value";
	$IntName = $type."_ReviewDelay_Interval";
	break;
	}
	}
	if(strlen($ValName) && strlen($IntName))
	{
	$exp_secs = $objConfig->Get($ValName) * $objConfig->Get($IntName);
	$objSession->AddToSpamControl($_POST["ItemId"],$exp_secs);
	if(is_object($r))
	{
	if($Status)
	{
	$StatusMessage["review"] = language("la_Review_Added");
	}
	else
	$StatusMessage["review"] = language("la_Review_Pending");
	}
	else
	$StatusMessage["review"] = language("la_Review_Error");
	}
	else
	$StatusMessage["error"] = language("la_ConfigError_Review");
	}
	break;
	case "m_suggest_email":
	$cutoff = time()+(int)$objConfig->Get("Suggest_MinInterval");
	$email = $_POST["suggest_email"];

	if (strlen($email))
	{
	if(ValidEmail($email))
	{
	$sql = "SELECT * FROM ".GetTablePrefix()."SuggestMail WHERE email='".inp_escape($email,0)."' and sent<".$cutoff;
	$adodbConnection = GetADODBConnection();
	$rs = $adodbConnection->Execute($sql);

	$rs = false;

	if($rs && !$rs->EOF)
	{
	if(strlen($_GET["Error"])>0)
	$var_list["t"] = $_GET["Error"];
	$suggest_result = "$email ".language("lu_already_suggested ")." ".LangDate($rs->fields["sent"]);
	}
	else
	{
	$Event =& $objMessageList->GetEmailEventObject("USER.SUGGEST");
	if(is_object($Event))
	{
	if($Event->Get("Enabled")=="1")
	{
	$Event->Item = $this;
	$Event->SendToAddress($email);

	$sql = "INSERT INTO ".GetTablePrefix()."SuggestMail (email,sent) VALUES ('".inp_escape($email,0)."','".time()."')";

	$rs = $adodbConnection->Execute($sql);
	$suggest_result=language("lu_suggest_success")." ".$email;
	}
	}
	$e =& $objMessageList->GetEmailEventObject("USER.SUGGEST",1);

	if($e->Get("Enabled")==1)
	$e->SendAdmin();

	if(strlen($_GET["Confirm"])>0)
	$var_list["t"] = $_GET["Confirm"];
	}
	}
	else
	{
	if(strlen($_GET["Error"])>0)
	$var_list["t"] = $_GET["Error"];
	$suggest_result=language("lu_invalid_emailaddress");
	}
	}
	else
	{
	if(strlen($_GET["Error"])>0)
	$var_list["t"] = $_GET["Error"];
	$suggest_result=language("lu_suggest_no_address");
	}
	break;
	case "m_simple_search":
	$keywords = $_POST["keywords"];
	$type = $objItemTypes->GetTypeByName("Category");
	$objSearch = new clsSearchResults("Category","clsCategory");

	if(strlen($keywords))
	{
	$objSearchList = new clsSearchLogList();
	$objSearchList->UpdateKeyword($keywords,0);

	$objSearch->SetKeywords($keywords);
	$objSearch->AddSimpleFields();
	if(is_numeric($objConfig->Get("SearchRel_Pop_category")))
	$objSearch->PctPop = ($objConfig->Get("SearchRel_Pop_category")/100);
	if(is_numeric($objConfig->Get("SearchRel_Keyword_category")))
	$objSearch->PctRelevance = ($objConfig->Get("SearchRel_Keyword_category")/100);
	if(is_numeric($objConfig->Get("SearchRel_Rating_article")))
	$objSearch->PctRating = ($objConfig->Get("SearchRel_Rating_category")/100);

	//echo "Searching On $keywords<br>\n";
	$objSearch->PerformSearch(1,$SortOrder,TRUE);
	$SearchPerformed = TRUE;
	//$objSearch->SetRelevence($type->Get("ItemType"), "CategoryId");
	//echo "Finished Setting Category Relevence<br>\n";
	}
	else
	{
	if(strlen($_GET["Error"])>0)
	$var_list["t"] = $_GET["Error"];

	$MissingCount = SetMissingDataErrors("m_simplesearch");
	$MissingCount++;
	$FormError["m_simplesearch"]["keywords"] = language("lu_no_keyword");
	}
	break;
	case "m_adv_search":
	- if(!is_object($objSearchConfig))
	- $objSearchConfig = new clsSearchConfigList();
	+ if( !is_object($objSearchConfig) ) $objSearchConfig = new clsSearchConfigList();
	switch($_GET["type"])
	{
	case 1: /* category */
	$objAdvSearch = new clsAdvancedSearchResults("Category","clsCategory");
	foreach($objSearchConfig->Items as $field)
	{
	-
	- echo "TEST";
	$fld = $field->Get("FieldName");

	$Verb = $_POST["verb"][$field->Get("FieldName")];
	if(!strlen($Verb) && $field->Get("FieldType")=="boolean")
	{
	if($_POST["value"][$field->Get("FieldName")]!=-1)
	{
	$Value = $_POST["value"][$field->Get("FieldName")];
	$Verb = "is";
	}
	}
	else
	{
	$Value = $_POST["value"][$field->Get("FieldName")];
	}
	switch( $_POST["andor"][$field->Get("FieldName")])
	{
	case 1:
	$Conjuction = "AND";
	break;
	case 2:
	$Conjuction = "OR";
	break;
	default:
	$Conjuction = "";
	break;
	}
	if(strlen($Verb)>0 && $Verb!="any")
	$objAdvSearch->AddAdvancedField($field->Get("TableName"),$field->Get("FieldName"),$Verb,$Value,$Conjuction);

	}
	- $objAdvSearch->PerformSearch(1,NULL,TRUE);
	+ $objAdvSearch->PerformSearch(1,NULL,TRUE);
	break;
	}
	break;
	case "m_id":
	echo $Action.":".$DownloadId;
	die();
	break;
	case "m_simple_subsearch":
	$keywords = $_POST["keywords"];
	$type = $objItemTypes->GetTypeByName("Category");
	$objSearch = new clsSearchResults("Category","clsCategory");
	if(strlen($keywords))
	{
	$objSearchList = new clsSearchLogList();
	$objSearchList->UpdateKeyword($keywords,0);

	$objSearch->SetKeywords($keywords);
	$objSearch->AddSimpleFields();
	if(is_numeric($objConfig->Get("SearchRel_Pop_category")))
	$objSearch->PctPop = ($objConfig->Get("SearchRel_Pop_category")/100);
	if(is_numeric($objConfig->Get("SearchRel_Keyword_category")))
	$objSearch->PctRelevance = ($objConfig->Get("SearchRel_Keyword_category")/100);
	if(is_numeric($objConfig->Get("SearchRel_Rating_article")))
	$objSearch->PctRating = ($objConfig->Get("SearchRel_Rating_category")/100);

	$SearchResultIdList = $objSearch->Result_IdList();
	if(count($SearchResultIdList)>0)
	{
	$objSearch->PerformSearch(1,$SortOrder,TRUE,$SearchResultIdList);
	//$objSearch->SetRelevence($type->Get("ItemType"), "CategoryId");
	}
	$SearchPerformed = TRUE;
	}
	else {
	$MissingCount = SetMissingDataErrors("m_simplesearch");
	$MissingCount++;
	$FormError["m_simplesearch"]["keywords"] = language("lu_no_keyword");
	}
	break;
	}
	?>

	Property changes on: trunk/kernel/frontaction.php
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.2
	\ No newline at end of property
	+1.3
	\ No newline at end of property
	Index: trunk/admin/email/do_send.php
	===================================================================
	--- trunk/admin/email/do_send.php (revision 34)
	+++ trunk/admin/email/do_send.php (revision 35)
	@@ -1,312 +1,312 @@
	<?php
	##############################################################
	##In-portal ##
	##############################################################
	## In-portal ##
	## Intechnic Corporation ##
	## All Rights Reserved, 1998-2002 ##
	## ##
	## No portion of this code may be copied, reproduced or ##
	## otherwise redistributed without proper written ##
	## consent of Intechnic Corporation. Violation will ##
	## result in revocation of the license and support ##
	## privileges along maximum prosecution allowed by law. ##
	##############################################################
	//$pathtoroot="";
	if(!strlen($pathtoroot))
	{
	$path=dirname(realpath($_SERVER['SCRIPT_FILENAME']));
	if(strlen($path))
	{
	/* determine the OS type for path parsing */
	$pos = strpos($path,":");
	if ($pos === false)
	{
	$gOS_TYPE="unix";
	$pathchar = "/";
	}
	else
	{
	$gOS_TYPE="win";
	$pathchar="\\";
	}
	$p = $path.$pathchar;
	/Start looking for the root flag file /
	while(!strlen($pathtoroot) && strlen($p))
	{
	$sub = substr($p,strlen($pathchar)*-1);
	if($sub==$pathchar)
	{
	$filename = $p."root.flg";
	}
	else
	$filename = $p.$pathchar."root.flg";
	if(file_exists($filename))
	{
	$pathtoroot = $p;
	}
	else
	{
	$parent = realpath($p.$pathchar."..".$pathchar);
	if($parent!=$p)
	{
	$p = $parent;
	}
	else
	$p = "";
	}
	}
	if(!strlen($pathtoroot))
	$pathtoroot = ".".$pathchar;
	}
	else
	{
	$pathtoroot = ".".$pathchar;
	}
	}

	$sub = substr($pathtoroot,strlen($pathchar)*-1);
	if($sub!=$pathchar)
	{
	$pathtoroot = $pathtoroot.$pathchar;
	}
	//echo $pathtoroot;

	require_once($pathtoroot."kernel/startup.php");

	$rootURL="http://".ThisDomain().$objConfig->Get("Site_Path");

	$admin = $objConfig->Get("AdminDirectory");
	if(!strlen($admin))
	$admin = "admin";
	$localURL=$rootURL."kernel/";

	$adminURL = $rootURL.$admin;
	$imagesURL = $adminURL."/images";
	$browseURL = $adminURL."/browse";

	//admin only util

	$pathtolocal = $pathtoroot."kernel/";
	require_once ($pathtoroot.$admin."/include/elements.php");
	//require_once ($pathtoroot."kernel/admin/include/navmenu.php");
	require_once ($pathtolocal."admin/include/navmenu.php");
	require_once($pathtoroot.$admin."/browse/toolbar.php");

	//Set Section
	$section = 'in-portal:sendmail';

	//Set Environment Variable
	$envar = "env=" . BuildEnv();

	$State = $_POST["EmailState"];
	if(!strlen($State))
	{
	$State = $_GET["EmailState"];
	}

	$ado = GetADODBConnection();
	$table = "ses_".$objSession->GetSessionKey()."_sendmail";
	$MessagesPerPage =2;

	$SendQueue = new clsEmailQueue($table,$MessagesPerPage);

	$FromUser = $objUsers->GetItem($objSession->Get("PortalUserId"));

	$FromAddr = $FromUser->Get("Email");
	$FromName = $FromUser->Get("FirstName")." ".$FromUser->Get("LastName");

	if(!strlen(trim($FromAddr)))
	{
	$FromAddr = $objConfig->Get("Default_FromAddr");
	}

	if(!strlen(trim($FromName)))
	{
	$FromName = "System Administrator";
	}

	-$TargetURL = $_SERVER["PHP_SELF"]."?".$envar;
	+$TargetURL = $_SERVER["PHP_SELF"]."?".$envar.'&destform=popup';
	$CancelURL = $TargetURL."&EmailState=email_user_cancel";


	/Initialize page/
	switch($State)
	{
	case "email_single_send": /single user send /
	$PageTitle = admin_language("la_Title_SendInit");
	$Subject = $_POST["subject"];
	$Html = $_POST["messageHTML"];
	$Text = strip_tags($_POST["messageTEXT"]);

	if(is_array($_FILES))
	{
	$attatch = $_FILES["attatchment"];
	if(strlen($attatch["name"]) >0 && $attatch["size"]>0)
	{
	$FileName = $attatch["name"];
	$FileLoc = $attatch["tmp_name"];
	}
	else
	{
	$FileName = NULL;
	$FileLoc = NULL;
	}
	}
	else
	{
	$FileName = NULL;
	$FileLoc = NULL;
	}
	$charset = "";
	$TargetURL .= "&EmailState=email_send_complete";
	break;
	case "email_multi_send": /Init multiuser send/
	$UserList = explode(",",$_POST["sendaddrs"]);
	//echo $_POST["sendaddrs"]."<br>\n";

	$Subject = $_POST["subject"];
	$Html = $_POST["messageHTML"];
	$Text = strip_tags($_POST["messageTEXT"]);

	if(is_array($_FILES))
	{
	$attatch = $_FILES["attatchment"];
	if(strlen($attatch["name"]) >0 && $attatch["size"]>0)
	{
	$FileName = $attatch["name"];
	$FileLoc = $attatch["tmp_name"];
	}
	else
	{
	$FileName = NULL;
	$FileLoc = NULL;
	}
	}
	else
	{
	$FileName = NULL;
	$FileLoc = NULL;
	}

	$charset = "";
	$PageTitle = admin_language("la_Title_SendMailInit");
	$TargetURL .="&EmailState=email_send_progress&Start=0&Total=".count($UserList);
	break;
	case "email_send_progress":
	$total = $_GET["Total"];
	$start = $_GET["Start"];
	if($start < $total)
	{
	$pct = (int)(($start/$total)*100);
	$NewStart = $start+$MessagesPerPage;
	$TargetURL .= "&EmailState=email_send_progress&Start=$NewStart&Total=$total";
	$PageTitle = admin_language("la_Title_SendMailProgress")." - ".$pct."% ".admin_language("la_Text_Complete");
	}
	else
	{
	$PageTitle = admin_language("la_Title_SendMailProgress");
	$TargetURL .= "&EmailState=email_send_complete";
	}
	break;
	case "email_send_complete":
	$PageTitle = admin_language("la_Title_SendMailComplete");
	$TargetURL="";
	break;
	case "email_user_cancel":
	$PageTitle = admin_language("la_Title_SendMailCancel");
	$TargetURL = "";
	break;

	}
	int_header(NULL,NULL,admin_language("la_Title_PleaseWait"));
	echo "\n";

	/do page functions /
	// echo "Current State:". $State."<br>\n";

	echo "<TABLE border=0 width=\"100%\" height=\"90%\"><TR><TD valign=\"top\" align=\"middle\">";
	switch($State)
	{
	case "email_single_send": /single user send /
	$PageTitle = admin_language($Pagetitle);
	$ToAddr = $_POST["sendaddrs"];

	$SendQueue->SendMail($FromAddr,$FromName,$ToAddr,"",$Subject,$Text,$Html,$charset,$FileName,$FileLoc,0, NULL);
	$o = "<TABLE CLASS=\"tableborder_full\" width=\"75%\">";
	$o .= int_subsection_title_ret($PageTitle);
	$o .= "<TD COLSPAN=2>".admin_language("la_prompt_EmailInitMessage")."</TD></TR>";
	$o .= "<TD ALIGN=\"middle\" COLSPAN=2></TD></TR>";
	$o .= "</TABLE><input type=button CLASS=\"button\" VALUE=\"".admin_language("la_Cancel")."\" ONCLICK=\"document.location='".$CancelURL."';\">";
	echo $o."\n";
	break;
	case "email_multi_send": /Init multiuser send/
	/Create storage Table for Queue /
	$o = "<TABLE CLASS=\"tableborder_full\" width=\"75%\">";
	$o .= int_subsection_title_ret($PageTitle);
	$o .= "<tr><TD COLSPAN=2>".admin_language("la_prompt_EmailInitMessage")."</TD></TR>";
	$o .= "<TD ALIGN=\"middle\" COLSPAN=2></TD></TR>";
	$o .= "</TABLE><input type=button CLASS=\"button\" VALUE=\"".admin_language("la_Cancel")."\" ONCLICK=\"document.location='".$CancelURL."';\">";
	echo $o."\n";

	$sql = "CREATE TABLE $table SELECT * FROM ".$objEmailQueue->SourceTable." WHERE queued=99";
	$ado->Execute($sql);
	//echo $sql."<br>\n";
	for($i=0;$i<count($UserList);$i++)
	{
	$ToAddr = $UserList[$i];
	//$From,$FromName,$To,$ToName,$Subject,$Text,$Html,$charset,$AttmFiles,$QueueOnly=0
	$SendQueue->SendMail($FromAddr,$FromName,$ToAddr,"",$Subject,$Text,$Html,$charset,$FileName,$FileLoc,1, NULL);
	}
	break;
	case "email_send_progress":
	$sql = "SELECT * FROM $table LIMIT $start,".$MessagesPerPage;
	// echo $sql."<br>\n";
	$rs = $ado->Execute($sql);
	while($rs && !$rs->EOF)
	{
	$data = $rs->fields;

	$SendQueue->DeliverMail($data["toaddr"],$data["fromaddr"],$data["Subject"],$data["message"],$data["headers"],1);
	$rs->MoveNext();
	}
	$o = "<TABLE CLASS=\"tableborder_full\" width=\"75%\">";
	$o .= int_subsection_title_ret($PageTitle);
	$o .="<TR border=1><TD width=\"".$pct."%\" STYLE=\"background:url('".$adminURL."/images/progress_bar_segment.gif');\"> </TD>";
	$comp_pct = 100-$pct;
	$o .= "<TD bgcolor=#FFFFFF width=\"".$comp_pct."%\"></TD></TR>";
	$o .= "</TABLE>";
	$o .= "<input type=button VALUE=\"".admin_language("la_Cancel")."\" CLASS=\"button\" ONCLICK=\"document.location='".$CancelURL."';\">";

	echo $o."\n";
	break;
	case "email_send_complete":
	$sql = "DROP TABLE $table";
	$ado->Execute($sql);
	$o = "<TABLE CLASS=\"tableborder_full\" width=\"75%\">";
	$o .= int_subsection_title_ret($PageTitle);
	$o .= "<TR><TD COLSPAN=2>".admin_language("la_prompt_EmailCompleteMessage")."</TD></TR>";
	$o .= "<TD ALIGN=\"middle\" COLSPAN=2></TD></TR>";
	$o .= "</TABLE><input type=button VALUE=\"".admin_language("la_Close")."\" CLASS=\"button\" ONCLICK=\"window.close();\">";
	echo $o."\n";
	break;
	case "email_user_cancel":
	$o = "<TABLE CLASS=\"tableborder_full\" width=\"75%\">";
	$o .= int_subsection_title_ret($PageTitle);
	$o .= "<TR><TD COLSPAN=2>".admin_language("la_prompt_EmailCancelMessage")."</TD></TR>";
	$o .= "</TABLE><input type=button VALUE=\"".admin_language("la_Close")."\" CLASS=\"button\" ONCLICK=\"window.close();\">";
	echo $o."\n";

	break;
	}
	echo "</TD></TR></TABLE>";
	if(strlen($TargetURL))
	{
	?>
	<SCRIPT LANGUAGE="JavaScript">
	document.location = '<?php echo $TargetURL; ?>';
	</SCRIPT>
	<?php
	}
	?>
	<?php int_footer(); ?>

	Property changes on: trunk/admin/email/do_send.php
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.1
	\ No newline at end of property
	+1.2
	\ No newline at end of property
	Index: trunk/admin/email/sendmail.php
	===================================================================
	--- trunk/admin/email/sendmail.php (revision 34)
	+++ trunk/admin/email/sendmail.php (revision 35)
	@@ -1,191 +1,191 @@
	<?php
	##############################################################
	##In-portal ##
	##############################################################
	## In-portal ##
	## Intechnic Corporation ##
	## All Rights Reserved, 1998-2002 ##
	## ##
	## No portion of this code may be copied, reproduced or ##
	## otherwise redistributed without proper written ##
	## consent of Intechnic Corporation. Violation will ##
	## result in revocation of the license and support ##
	## privileges along maximum prosecution allowed by law. ##
	##############################################################
	//$pathtoroot="";
	if(!strlen($pathtoroot))
	{
	$path=dirname(realpath($_SERVER['SCRIPT_FILENAME']));
	if(strlen($path))
	{
	/* determine the OS type for path parsing */
	$pos = strpos($path,":");
	if ($pos === false)
	{
	$gOS_TYPE="unix";
	$pathchar = "/";
	}
	else
	{
	$gOS_TYPE="win";
	$pathchar="\\";
	}
	$p = $path.$pathchar;
	/Start looking for the root flag file /
	while(!strlen($pathtoroot) && strlen($p))
	{
	$sub = substr($p,strlen($pathchar)*-1);
	if($sub==$pathchar)
	{
	$filename = $p."root.flg";
	}
	else
	$filename = $p.$pathchar."root.flg";
	if(file_exists($filename))
	{
	$pathtoroot = $p;
	}
	else
	{
	$parent = realpath($p.$pathchar."..".$pathchar);
	if($parent!=$p)
	{
	$p = $parent;
	}
	else
	$p = "";
	}
	}
	if(!strlen($pathtoroot))
	$pathtoroot = ".".$pathchar;
	}
	else
	{
	$pathtoroot = ".".$pathchar;
	}
	}

	$sub = substr($pathtoroot,strlen($pathchar)*-1);
	if($sub!=$pathchar)
	{
	$pathtoroot = $pathtoroot.$pathchar;
	}
	//echo $pathtoroot;

	require_once($pathtoroot."kernel/startup.php");

	//echo "<pre>"; print_r($_POST); echo "</pre>";

	$rootURL="http://".ThisDomain().$objConfig->Get("Site_Path");

	$admin = $objConfig->Get("AdminDirectory");
	if(!strlen($admin))
	$admin = "admin";
	$localURL=$rootURL."kernel/";
	$adminURL = $rootURL.$admin;
	$imagesURL = $adminURL."/images";
	$browseURL = $adminURL."/browse";

	//admin only util

	$pathtolocal = $pathtoroot."kernel/";
	require_once ($pathtoroot.$admin."/include/elements.php");
	//require_once ($pathtoroot."kernel/admin/include/navmenu.php");
	require_once ($pathtolocal."admin/include/navmenu.php");
	require_once($pathtoroot.$admin."/browse/toolbar.php");

	//Set Section
	$section = 'in-portal:sendmail';

	//Set Environment Variable
	$envar = "env=" . BuildEnv();

	$objListToolBar = new clsToolBar();

	$objListToolBar->Set("section",$section);
	$objListToolBar->Set("load_menu_func","");
	$objListToolBar->Set("CheckClass","");

	$listImages = array();
	//$img, $alt, $link, $onMouseOver, $onMouseOut, $onClick

	$objListToolBar->Add("select", "la_ToolTip_SendEmail","#","swap('select','toolbar/tool_select_f2.gif');",
	"swap('select', 'toolbar/tool_select.gif');",
	"SendMail();",
	$imagesURL."/toolbar/tool_select.gif");

	$objListToolBar->Add("cancel", "la_ToolTip_Stop","#","swap('cancel','toolbar/tool_stop_f2.gif');",
	"swap('cancel', 'toolbar/tool_stop.gif');","window.close();",
	$imagesURL."/toolbar/tool_stop.gif");


	int_header($objListToolBar);
	if(count(explode(",",$recip_ids))>1)
	{
	$action = "email_multi_send";
	}
	else
	$action = "email_single_send";
	if ($addr_list != '' \|\| $addr_list != null) {
	$addresses = implode(",",$addr_list);
	}
	?>

	<table width="100%" border="0" cellspacing="0" cellpadding="4" class="tableborder">
	-<form ID="sendmail" name="sendmail" action="<?php echo $adminURL."/email/do_send.php?env=".BuildEnv(); ?>" enctype="multipart/form-data" method=POST>
	+<form ID="sendmail" name="sendmail" action="<?php echo $adminURL."/email/do_send.php?env=".BuildEnv(); ?>&destform=popup" enctype="multipart/form-data" method=POST>
	<INPUT TYPE="HIDDEN" NAME="EmailState" VALUE="<?php echo $action; ?>">
	<?php int_subsection_title(admin_language("la_tab_General")); ?>

	<tr <?php int_table_color(); ?>>
	<td valign="top"><span class="text"><?php echo admin_language("la_prompt_To"); ?></span></td>
	<td>

	<SPAN CLASS="text"><?php echo implode("; ", $reciplist); ?></SPAN>
	<input type="hidden" name="sendto" class="text" value="<?php echo $recip_ids; ?>">
	<INPUT TYPE="HIDDEN" NAME="sendaddrs" VALUE="<?php echo $addresses; ?>">
	</td>
	<td><span ID="valTo" class="validation_error"><?php echo admin_language("la_val_RequiredField"); ?></span></td>
	</tr>
	<tr <?php int_table_color(); ?>>
	<td valign="top"><span class="text"><?php echo admin_language("la_prompt_Subject"); ?></span></td>
	<td>
	<input type="text" name="subject" class="text" size="60" value="<?php echo ""; ?>">
	</td>
	<td><span ID="valSubject" class="validation_error"><?php echo admin_language("la_val_RequiredField"); ?></span></td>
	</tr>

	<tr <?php int_table_color(); ?>>
	<td valign="top"><span class="text"><?php echo admin_language("la_prompt_Attatchment"); ?></span></td>
	<td>
	<input type="file" name="attatchment" class="text" size="60">
	</td>
	<td></td>
	</tr>

	<?php int_subsection_title(admin_language("la_tab_Message")); ?>
	<tr <?php int_table_color(); ?>>
	<td valign="top"><span class="text"><?php echo admin_language("la_prompt_html_version"); ?></span>
	<br />
	<a href="#">
	<img src="<?php echo $rootURL; ?>admin/icons/icon24_link_editor.gif" style="cursor:hand" border="0"
	ONCLICK="document.forms[0].elements[0].checked=true; OpenEditor('&section=<?php echo $section; ?>','sendmail','messageHTML');">
	</a>

	</td>
	<td valign="top" COLSPAN=2>
	<textarea name="messageHTML" id="messageHTML" rows="5" cols="60">Type your Message Here</textarea>
	</td>
	</tr>
	<tr <?php int_table_color(); ?>>
	<td valign="top"><span class="text"><?php echo admin_language("la_prompt_text_version"); ?></span></td>
	<td valign="top" COLSPAN=2>
	<textarea name="messageTEXT" id="messageTEXT" rows="5" cols="60">Type your Message Here</textarea>
	</td>
	</tr>

	</FORM>
	</TABLE>
	<script language="JavaScript">
	InitValidation();
	</script>
	<?php int_footer(); ?>

	Property changes on: trunk/admin/email/sendmail.php
	___________________________________________________________________
	Modified: cvs2svn:cvs-rev
	## -1 +1 ##
	-1.1
	\ No newline at end of property
	+1.2
	\ No newline at end of property

in-portalNo OneTemporaryActions

File Metadata

in-portalView Options

Event Timeline

in-portal
No OneTemporary
Actions

in-portal
View Options