gitlabFork/ISPConfig3.git - Solinfo Gitblit

			@@ -1,7 +1,7 @@
			<?php

			/*
			Copyright (c) 2005, Till Brehm, projektfarm Gmbh
			Copyright (c) 2007, Till Brehm, projektfarm Gmbh
			All rights reserved.

			Redistribution and use in source and binary forms, with or without modification,
			@@ -31,43 +31,37 @@
			/**
			* Formularbehandlung
			*
			* Funktionen zur Umwandlung von Formulardaten
			* sowie zum vorbereiten von HTML und SQL
			* Ausgaben
			* Functions to validate, display and save form values
			*
			* Tabellendefinition
			* Database table field definitions
			*
			* Datentypen:
			* - INTEGER (Wandelt Ausdrücke in Int um)
			* Datatypes:
			* - INTEGER (Converts data to int automatically)
			* - DOUBLE
			* - CURRENCY (Formatiert Zahlen nach Währungsnotation)
			* - VARCHAR (kein weiterer Format Check)
			* - DATE (Datumsformat, Timestamp Umwandlung)
			* - CURRENCY (Formats digits in currency notation)
			* - VARCHAR (No format check)
			* - DATE (Date format, converts from and to linux timestamps automatically)
			*
			* Formtype:
			* - TEXT (normales Textfeld)
			* - PASSWORD (Feldinhalt wird nicht angezeigt)
			* - SELECT (Gibt Werte als option Feld aus)
			* - MULTIPLE (Select-Feld mit nehreren Werten)
			* - TEXT (Normal text field)
			* - PASSWORD (password field, the content will not be displayed again to the user)
			* - SELECT (Option fiield)
			* - MULTIPLE (Allows selection of multiple values)
			*
			* VALUE:
			* - Wert oder Array
			* - Value or array
			*
			* SEPARATOR
			* - Trennzeichen für multiple Felder
			* - separator char used for fileds with multiple values
			*
			* Hinweis:
			* Das ID-Feld ist nicht bei den Table Values einzufügen.
			* Hint: The auto increment (ID) filed of the table has not be be definied eoarately.
			*
			* @package form
			* @author Till Brehm
			* @version 1.1
			*/

			class tform {

			/**
			* Definition der Tabelle (array)
			* Table definition (array)
			* @var tableDef
			*/
			var $tableDef;
			@@ -79,26 +73,25 @@
			var $action;

			/**
			* Tabellenname (String)
			* Table name (String)
			* @var table_name
			*/
			var $table_name;

			/**
			* Debug Variable
			* Enable debigging
			* @var debug
			*/
			var $debug = 0;

			/**
			* name des primary Field der Tabelle (string)
			* name of the primary field of the datbase table (string)
			* @var table_index
			*/
			var $table_index;

			/**
			* enthält die Fehlermeldung bei Überprüfung
			* der Variablen mit Regex
			* contains the error message
			* @var errorMessage
			*/
			var $errorMessage = '';
			@@ -111,9 +104,9 @@
			var $diffrec = array();

			/**
			* Laden der Tabellendefinition
			* Loading of the table definition
			*
			* @param file: Pfad zur Tabellendefinition
			* @param file: path to the form definition file
			* @return true
			*/
			/*
			@@ -137,14 +130,15 @@
			$this->module = $module;
			$wb = array();

			include_once(ISPC_ROOT_PATH.'/lib/lang/'.$_SESSION['s']['language'].'.lng');
			if($module == '') {
			if(is_file("lib/lang/".$_SESSION["s"]["language"]."_".$this->formDef["name"].".lng")) {
			include_once("lib/lang/".$_SESSION["s"]["language"]."_".$this->formDef["name"].".lng");
			}
			$lng_file = "lib/lang/".$_SESSION["s"]["language"]."_".$this->formDef["name"].".lng";
			if(!file_exists($lng_file)) $lng_file = "lib/lang/en_".$this->formDef["name"].".lng";
			include($lng_file);
			} else {
			if(is_file("../$module/lib/lang/".$_SESSION["s"]["language"]."_".$this->formDef["name"].".lng")) {
			include_once("../$module/lib/lang/".$_SESSION["s"]["language"]."_".$this->formDef["name"].".lng");
			}
			$lng_file = "../$module/lib/lang/".$_SESSION["s"]["language"]."_".$this->formDef["name"].".lng";
			if(!file_exists($lng_file)) $lng_file = "../$module/lib/lang/en_".$this->formDef["name"].".lng";
			include($lng_file);
			}
			$this->wordbook = $wb;

			@@ -153,25 +147,24 @@


			/**
			* Konvertiert die Daten des übergebenen assoziativen
			* Arrays in "menschenlesbare" Form.
			* Datentyp Konvertierung, z.B. für Ausgabe in Listen.
			* Converts the data in the array to human readable format
			* Datatype conversion e.g. to show the data in lists
			*
			* @param record
			* @return record
			*/
			function decode($record,$tab) {
			if(!is_array($this->formDef['tabs'][$tab])) $app->error("Tab ist leer oder existiert nicht (TAB: $tab).");
			if(!is_array($this->formDef['tabs'][$tab])) $app->error("Tab does not exist or the tab is empty (TAB: $tab).");
			$new_record = '';
			if(is_array($record)) {
			foreach($this->formDef['tabs'][$tab]['fields'] as $key => $field) {
			switch ($field['datatype']) {
			case 'VARCHAR':
			$new_record[$key] = stripslashes($record[$key]);
			$new_record[$key] = $record[$key];
			break;

			case 'TEXT':
			$new_record[$key] = stripslashes($record[$key]);
			$new_record[$key] = $record[$key];
			break;

			case 'DATE':
			@@ -193,7 +186,7 @@
			break;

			default:
			$new_record[$key] = stripslashes($record[$key]);
			$new_record[$key] = $record[$key];
			}
			}

			@@ -252,17 +245,83 @@
			$app->uses($datasource_class);
			$values = $app->$datasource_class->$datasource_function($field, $record);
			} else {
			$this->errorMessage .= "Custom datasource class or function is empty<br>\r\n";
			$this->errorMessage .= "Custom datasource class or function is empty<br />\r\n";
			}
			}

			return $values;

			}

			//* If the parameter 'valuelimit' is set
			function applyValueLimit($limit,$values) {

			global $app;

			$limit_parts = explode(':',$limit);

			//* values are limited to a comma separated list
			if($limit_parts[0] == 'list') {
			$allowed = explode(',',$limit_parts[1]);
			}

			//* values are limited to a field in the client settings
			if($limit_parts[0] == 'client') {
			if($_SESSION["s"]["user"]["typ"] == 'admin') {
			return $values;
			} else {
			$client_group_id = $_SESSION["s"]["user"]["default_group"];
			$client = $app->db->queryOneRecord("SELECT ".$limit_parts[1]." as lm FROM sys_group, client WHERE sys_group.client_id = client.client_id and sys_group.groupid = $client_group_id");
			$allowed = explode(',',$client['lm']);
			}
			}

			//* values are limited to a field in the reseller settings
			if($limit_parts[0] == 'reseller') {
			if($_SESSION["s"]["user"]["typ"] == 'admin') {
			return $values;
			} else {
			//* Get the limits of the client that is currently logged in
			$client_group_id = $_SESSION["s"]["user"]["default_group"];
			$client = $app->db->queryOneRecord("SELECT parent_client_id FROM sys_group, client WHERE sys_group.client_id = client.client_id and sys_group.groupid = $client_group_id");
			//echo "SELECT parent_client_id FROM sys_group, client WHERE sys_group.client_id = client.client_id and sys_group.groupid = $client_group_id";
			//* If the client belongs to a reseller, we will check against the reseller Limit too
			if($client['parent_client_id'] != 0) {

			//* first we need to know the groups of this reseller
			$tmp = $app->db->queryOneRecord("SELECT userid, groups FROM sys_user WHERE client_id = ".$client['parent_client_id']);
			$reseller_groups = $tmp["groups"];
			$reseller_userid = $tmp["userid"];

			// Get the limits of the reseller of the logged in client
			$client_group_id = $_SESSION["s"]["user"]["default_group"];
			$reseller = $app->db->queryOneRecord("SELECT ".$limit_parts[1]." as lm FROM client WHERE client_id = ".$client['parent_client_id']);
			$allowed = explode(',',$reseller['lm']);
			} else {
			return $values;
			}
			} // end if admin
			} // end if reseller

			//* values are limited to a field in the system settings
			if($limit_parts[0] == 'system') {
			$app->uses('getconf');
			$tmp_conf = $app->getconf->get_global_config($limit_parts[1]);
			$tmp_key = $limit_parts[2];
			$allowed = $tmp_conf[$tmp_key];
			}

			$values_new = array();
			foreach($values as $key => $val) {
			if(in_array($key,$allowed)) $values_new[$key] = $val;
			}

			return $values_new;
			}


			/**
			* Record für Ausgabe in Formularen vorbereiten.
			* Prepare the data record to show the data in a form.
			*
			* @param record = Datensatz als Array
			* @param action = NEW oder EDIT
			@@ -274,8 +333,8 @@

			$this->action = $action;

			if(!is_array($this->formDef)) $app->error("Keine Formdefinition vorhanden.");
			if(!is_array($this->formDef['tabs'][$tab])) $app->error("Tab ist leer oder existiert nicht (TAB: $tab).");
			if(!is_array($this->formDef)) $app->error("No form definition found.");
			if(!is_array($this->formDef['tabs'][$tab])) $app->error("The tab is empty or does not exist (TAB: $tab).");

			$new_record = array();
			if($action == 'EDIT') {
			@@ -288,6 +347,11 @@
			if(isset($field['datasource']) && is_array($field['datasource'])) {
			$field["value"] = $this->getDatasourceData($field, $record);
			}

			// If a limitation for the values is set
			if(isset($field['valuelimit']) && is_array($field["value"])) {
			$field["value"] = $this->applyValueLimit($field['valuelimit'],$field["value"]);
			}

			switch ($field['formtype']) {
			case 'SELECT':
			@@ -303,10 +367,10 @@
			case 'MULTIPLE':
			if(is_array($field['value'])) {

			// aufsplitten ergebnisse
			// Split
			$vals = explode($field['separator'],$val);

			// HTML schreiben
			// write HTML
			$out = '';
			foreach($field['value'] as $k => $v) {

			@@ -327,7 +391,7 @@

			case 'CHECKBOX':
			$checked = ($val == $field['value'][1])?' CHECKED':'';
			$new_record[$key] = "<input name=\"".$key."\" type=\"checkbox\" value=\"".$field['value'][1]."\" $checked>\r\n";
			$new_record[$key] = "<input name=\"".$key."\" id=\"".$key."\" value=\"".$field['value'][1]."\" type=\"checkbox\" $checked />\r\n";
			break;

			case 'CHECKBOXARRAY':
			@@ -344,8 +408,8 @@
			foreach($vals as $tvl) {
			if(trim($tvl) == trim($k)) $checked = ' CHECKED';
			}

			$out .= "<input name=\"".$key."[]\" type=\"checkbox\" value=\"$k\" $checked>$v <br />\r\n";
			// $out .= "<label for=\"".$key."[]\" class=\"inlineLabel\"><input name=\"".$key."[]\" id=\"".$key."[]\" value=\"$k\" type=\"checkbox\" $checked /> $v</label>\r\n";
			$out .= "<input name=\"".$key."[]\" id=\"".$key."[]\" value=\"$k\" type=\"checkbox\" $checked /> $v  \r\n";
			}
			}
			$new_record[$key] = $out;
			@@ -358,7 +422,8 @@
			$out = '';
			foreach($field['value'] as $k => $v) {
			$checked = ($k == $val)?' CHECKED':'';
			$out .= "<input name='".$key."[]' type='radio' value='$k'$checked> $v<br>\r\n";
			//$out .= "<label for=\"".$key."[]\" class=\"inlineLabel\"><input name=\"".$key."[]\" id=\"".$key."[]\" value=\"$k\" type=\"radio\" $checked/> $v</label>\r\n";
			$out .= "<input name=\"".$key."[]\" id=\"".$key."[]\" value=\"$k\" type=\"radio\" $checked/> $v\r\n";
			}
			}
			$new_record[$key] = $out;
			@@ -375,8 +440,13 @@

			// If Datasource is set, get the data from there
			if(@is_array($field['datasource'])) {
			$field["value"] = $this->getDatasourceData($field, $record);
			$field["value"] = $this->getDatasourceData($field, $record);
			}

			// If a limitation for the values is set
			if(isset($field['valuelimit']) && is_array($field["value"])) {
			$field["value"] = $this->applyValueLimit($field['valuelimit'],$field["value"]);
			}

			switch ($field['formtype']) {
			case 'SELECT':
			@@ -412,8 +482,8 @@

			case 'CHECKBOX':
			// $checked = (empty($field["default"]))?'':' CHECKED';
			$checked = ($field["default"] == $field['value'][1])?' CHECKED':'';
			$new_record[$key] = "<input name=\"".$key."\" type=\"checkbox\" value=\"".$field['value'][1]."\" $checked>\r\n";
			$checked = ($field["default"] == $field['value'][1])?' CHECKED':'';
			$new_record[$key] = "<input name=\"".$key."\" id=\"".$key."\" value=\"".$field['value'][1]."\" type=\"checkbox\" $checked />\r\n";
			break;

			case 'CHECKBOXARRAY':
			@@ -430,8 +500,8 @@
			foreach($vals as $tvl) {
			if(trim($tvl) == trim($k)) $checked = ' CHECKED';
			}

			$out .= "<input name=\"".$key."[]\" type=\"checkbox\" value=\"$k\" $checked> $v<br />\r\n";
			// $out .= "<label for=\"".$key."[]\" class=\"inlineLabel\"><input name=\"".$key."[]\" id=\"".$key."[]\" value=\"$k\" type=\"checkbox\" $checked /> $v</label>\r\n";
			$out .= "<input name=\"".$key."[]\" id=\"".$key."[]\" value=\"$k\" type=\"checkbox\" $checked /> $v  \r\n";
			}
			}
			$new_record[$key] = $out;
			@@ -444,7 +514,8 @@
			$out = '';
			foreach($field['value'] as $k => $v) {
			$checked = ($k == $field["default"])?' CHECKED':'';
			$out .= "<input name='".$key."[]' type='radio' value='$k'$checked> $v<br>\r\n";
			//$out .= "<label for=\"".$key."[]\" class=\"inlineLabel\"><input name=\"".$key."[]\" id=\"".$key."[]\" value=\"$k\" type=\"radio\" $checked/> $v</label>\r\n";
			$out .= "<input name=\"".$key."[]\" id=\"".$key."[]\" value=\"$k\" type=\"radio\" $checked/> $v\r\n";
			}
			}
			$new_record[$key] = $out;
			@@ -463,15 +534,16 @@
			}

			/**
			* Record in "maschinen lesbares" Format überführen
			* und Werte gegen reguläre Ausdrücke prüfen.
			* Rewrite the record data to be stored in the database
			* and check values with regular expressions.
			*
			* @param record = Datensatz als Array
			* @return record
			*/
			function encode($record,$tab) {

			if(!is_array($this->formDef['tabs'][$tab])) $app->error("Tab ist leer oder existiert nicht (TAB: $tab).");
			global $app;

			if(!is_array($this->formDef['tabs'][$tab])) $app->error("Tab is empty or does not exist (TAB: $tab).");
			//$this->errorMessage = '';

			if(is_array($record)) {
			@@ -482,14 +554,14 @@
			switch ($field['datatype']) {
			case 'VARCHAR':
			if(!@is_array($record[$key])) {
			$new_record[$key] = (isset($record[$key]))?mysql_real_escape_string($record[$key]):'';
			$new_record[$key] = (isset($record[$key]))?$app->db->quote($record[$key]):'';
			} else {
			$new_record[$key] = implode($field['separator'],$record[$key]);
			}
			break;
			case 'TEXT':
			if(!is_array($record[$key])) {
			$new_record[$key] = mysql_real_escape_string($record[$key]);
			$new_record[$key] = $app->db->quote($record[$key]);
			} else {
			$new_record[$key] = implode($field['separator'],$record[$key]);
			}
			@@ -503,12 +575,12 @@
			}
			break;
			case 'INTEGER':
			$new_record[$key] = (isset($record[$key]))?intval($record[$key]):0;
			$new_record[$key] = (isset($record[$key]))?$record[$key]:0;
			//if($new_record[$key] != $record[$key]) $new_record[$key] = $field['default'];
			//if($key == 'refresh') die($record[$key]);
			break;
			case 'DOUBLE':
			$new_record[$key] = mysql_real_escape_string($record[$key]);
			$new_record[$key] = $app->db->quote($record[$key]);
			break;
			case 'CURRENCY':
			$new_record[$key] = str_replace(",",".",$record[$key]);
			@@ -521,7 +593,7 @@
			$field['regex'] .= 's';
			if(!preg_match($field['regex'], $record[$key])) {
			$errmsg = $field['errmsg'];
			$this->errorMessage .= $this->wordbook[$errmsg]."<br>\r\n";
			$this->errorMessage .= $this->wordbook[$errmsg]."<br />\r\n";
			}
			}

			@@ -555,9 +627,9 @@
			if(!preg_match($validator['regex'], $field_value)) {
			$errmsg = $validator['errmsg'];
			if(isset($this->wordbook[$errmsg])) {
			$this->errorMessage .= $this->wordbook[$errmsg]."<br>\r\n";
			$this->errorMessage .= $this->wordbook[$errmsg]."<br />\r\n";
			} else {
			$this->errorMessage .= $errmsg."<br>\r\n";
			$this->errorMessage .= $errmsg."<br />\r\n";
			}
			}
			break;
			@@ -567,9 +639,9 @@
			if($num_rec["number"] > 0) {
			$errmsg = $validator['errmsg'];
			if(isset($this->wordbook[$errmsg])) {
			$this->errorMessage .= $this->wordbook[$errmsg]."<br>\r\n";
			$this->errorMessage .= $this->wordbook[$errmsg]."<br />\r\n";
			} else {
			$this->errorMessage .= $errmsg."<br>\r\n";
			$this->errorMessage .= $errmsg."<br />\r\n";
			}
			}
			} else {
			@@ -577,9 +649,9 @@
			if($num_rec["number"] > 0) {
			$errmsg = $validator['errmsg'];
			if(isset($this->wordbook[$errmsg])) {
			$this->errorMessage .= $this->wordbook[$errmsg]."<br>\r\n";
			$this->errorMessage .= $this->wordbook[$errmsg]."<br />\r\n";
			} else {
			$this->errorMessage .= $errmsg."<br>\r\n";
			$this->errorMessage .= $errmsg."<br />\r\n";
			}
			}
			}
			@@ -588,9 +660,9 @@
			if(empty($field_value)) {
			$errmsg = $validator['errmsg'];
			if(isset($this->wordbook[$errmsg])) {
			$this->errorMessage .= $this->wordbook[$errmsg]."<br>\r\n";
			$this->errorMessage .= $this->wordbook[$errmsg]."<br />\r\n";
			} else {
			$this->errorMessage .= $errmsg."<br>\r\n";
			$this->errorMessage .= $errmsg."<br />\r\n";
			}
			}
			break;
			@@ -598,9 +670,9 @@
			if(!preg_match("/^\w+[\w.-]\w+@\w+[\w.-]\w+\.[a-z]{2,10}$/i", $field_value)) {
			$errmsg = $validator['errmsg'];
			if(isset($this->wordbook[$errmsg])) {
			$this->errorMessage .= $this->wordbook[$errmsg]."<br>\r\n";
			$this->errorMessage .= $this->wordbook[$errmsg]."<br />\r\n";
			} else {
			$this->errorMessage .= $errmsg."<br>\r\n";
			$this->errorMessage .= $errmsg."<br />\r\n";
			}
			}
			break;
			@@ -609,9 +681,9 @@
			if($tmpval === 0 and !empty($field_value)) {
			$errmsg = $validator['errmsg'];
			if(isset($this->wordbook[$errmsg])) {
			$this->errorMessage .= $this->wordbook[$errmsg]."<br>\r\n";
			$this->errorMessage .= $this->wordbook[$errmsg]."<br />\r\n";
			} else {
			$this->errorMessage .= $errmsg."<br>\r\n";
			$this->errorMessage .= $errmsg."<br />\r\n";
			}
			}
			break;
			@@ -619,11 +691,29 @@
			if(!is_numeric($field_value) \|\| $field_value <= 0){
			$errmsg = $validator['errmsg'];
			if(isset($this->wordbook[$errmsg])) {
			$this->errorMessage .= $this->wordbook[$errmsg]."<br>\r\n";
			$this->errorMessage .= $this->wordbook[$errmsg]."<br />\r\n";
			} else {
			$this->errorMessage .= $errmsg."<br>\r\n";
			$this->errorMessage .= $errmsg."<br />\r\n";
			}
			}
			break;
			case 'ISIPV4':
			$vip=1;
			if(preg_match("/^[0-9]{1,3}(\.)[0-9]{1,3}(\.)[0-9]{1,3}(\.)[0-9]{1,3}$/", $field_value)){
			$groups=explode(".",$field_value);
			foreach($groups as $group){
			if($group<0 OR $group>255)
			$vip=0;
			}
			}else{$vip=0;}
			if($vip==0) {
			$errmsg = $validator['errmsg'];
			if(isset($this->wordbook[$errmsg])) {
			$this->errorMessage .= $this->wordbook[$errmsg]."<br />\r\n";
			} else {
			$this->errorMessage .= $errmsg."<br />\r\n";
			}
			}
			break;
			case 'CUSTOM':
			// Calls a custom class to validate this record
			@@ -633,7 +723,7 @@
			$app->uses($validator_class);
			$this->errorMessage .= $app->$validator_class->$validator_function($field_name, $field_value, $validator);
			} else {
			$this->errorMessage .= "Custom validator class or function is empty<br>\r\n";
			$this->errorMessage .= "Custom validator class or function is empty<br />\r\n";
			}
			break;
			default:
			@@ -648,7 +738,7 @@
			}

			/**
			* SQL Statement für Record erzeugen.
			* Create the SQL staement.
			*
			* @param record = Datensatz als Array
			* @param action = INSERT oder UPDATE
			@@ -665,9 +755,9 @@
			// checking permissions
			if($this->formDef['auth'] == 'yes' && $_SESSION["s"]["user"]["typ"] != 'admin') {
			if($action == "INSERT") {
			if(!$this->checkPerm($primary_id,'i')) $this->errorMessage .= "Insert denied.<br>\r\n";
			if(!$this->checkPerm($primary_id,'i')) $this->errorMessage .= "Insert denied.<br />\r\n";
			} else {
			if(!$this->checkPerm($primary_id,'u')) $this->errorMessage .= "Update denied.<br>\r\n";
			if(!$this->checkPerm($primary_id,'u')) $this->errorMessage .= "Update denied.<br />\r\n";
			}
			}

			@@ -679,10 +769,10 @@
			$sql_insert_val = '';
			$sql_update = '';

			if(!is_array($this->formDef)) $app->error("Keine Formulardefinition vorhanden.");
			if(!is_array($this->formDef['tabs'][$tab])) $app->error("Tab ist leer oder existiert nicht (TAB: $tab).");
			if(!is_array($this->formDef)) $app->error("Form definition not found.");
			if(!is_array($this->formDef['tabs'][$tab])) $app->error("The tab is empty or does not exist (TAB: $tab).");

			// gehe durch alle Felder des Tabs
			// go trough all fields of the tab
			if(is_array($record)) {
			foreach($this->formDef['tabs'][$tab]['fields'] as $key => $field) {
			// Wenn es kein leeres Passwortfeld ist
			@@ -699,14 +789,14 @@
			$salt.="$";
			// $salt = substr(md5(time()),0,2);
			$record[$key] = crypt($record[$key],$salt);
			$sql_insert_val .= "'".mysql_real_escape_string($record[$key])."', ";
			$sql_insert_val .= "'".$app->db->quote($record[$key])."', ";
			} elseif ($field['encryption'] == 'MYSQL') {
			$sql_insert_val .= "PASSWORD('".mysql_real_escape_string($record[$key])."'), ";
			$sql_insert_val .= "PASSWORD('".$app->db->quote($record[$key])."'), ";
			} elseif ($field['encryption'] == 'CLEARTEXT') {
			$sql_insert_val .= "'".mysql_real_escape_string($record[$key])."', ";
			$sql_insert_val .= "'".$app->db->quote($record[$key])."', ";
			} else {
			$record[$key] = md5($record[$key]);
			$sql_insert_val .= "'".mysql_real_escape_string($record[$key])."', ";
			$sql_insert_val .= "'".$app->db->quote($record[$key])."', ";
			}

			} elseif ($field['formtype'] == 'CHECKBOX') {
			@@ -732,14 +822,14 @@
			$salt.="$";
			// $salt = substr(md5(time()),0,2);
			$record[$key] = crypt($record[$key],$salt);
			$sql_update .= "`$key` = '".mysql_real_escape_string($record[$key])."', ";
			$sql_update .= "`$key` = '".$app->db->quote($record[$key])."', ";
			} elseif (isset($field['encryption']) && $field['encryption'] == 'MYSQL') {
			$sql_update .= "`$key` = PASSWORD('".mysql_real_escape_string($record[$key])."'), ";
			$sql_update .= "`$key` = PASSWORD('".$app->db->quote($record[$key])."'), ";
			} elseif (isset($field['encryption']) && $field['encryption'] == 'CLEARTEXT') {
			$sql_update .= "`$key` = '".mysql_real_escape_string($record[$key])."', ";
			$sql_update .= "`$key` = '".$app->db->quote($record[$key])."', ";
			} else {
			$record[$key] = md5($record[$key]);
			$sql_update .= "`$key` = '".mysql_real_escape_string($record[$key])."', ";
			$sql_update .= "`$key` = '".$app->db->quote($record[$key])."', ";
			}

			} elseif ($field['formtype'] == 'CHECKBOX') {
			@@ -763,7 +853,7 @@
			}


			// Füge Backticks nur bei unvollständigen Tabellennamen ein
			// Add backticks for incomplete table names
			if(stristr($this->formDef['db_table'],'.')) {
			$escape = '';
			} else {
			@@ -773,7 +863,7 @@

			if($action == "INSERT") {
			if($this->formDef['auth'] == 'yes') {
			// Setze User und Gruppe
			// Set user and group
			$sql_insert_key .= "`sys_userid`, ";
			$sql_insert_val .= ($this->formDef["auth_preset"]["userid"] > 0)?"'".$this->formDef["auth_preset"]["userid"]."', ":"'".$_SESSION["s"]["user"]["userid"]."', ";
			$sql_insert_key .= "`sys_groupid`, ";
			@@ -789,6 +879,7 @@
			$sql_insert_val = substr($sql_insert_val,0,-2);
			$sql = "INSERT INTO ".$escape.$this->formDef['db_table'].$escape." ($sql_insert_key) VALUES ($sql_insert_val)";
			} else {
			if($this->formDef['auth'] == 'yes') {
			if($primary_id != 0) {
			$sql_update = substr($sql_update,0,-2);
			$sql = "UPDATE ".$escape.$this->formDef['db_table'].$escape." SET ".$sql_update." WHERE ".$this->getAuthSQL('u')." AND ".$this->formDef['db_table_idx']." = ".$primary_id;
			@@ -796,6 +887,17 @@
			} else {
			$app->error("Primary ID fehlt!");
			}
			} else {
			if($primary_id != 0) {
			$sql_update = substr($sql_update,0,-2);
			$sql = "UPDATE ".$escape.$this->formDef['db_table'].$escape." SET ".$sql_update." WHERE ".$this->formDef['db_table_idx']." = ".$primary_id;
			if($sql_ext_where != '') $sql .= " and ".$sql_ext_where;
			} else {
			$app->error("Primary ID fehlt!");
			}
			}
			//* return a empty string if there is nothing to update
			if(trim($sql_update) == '') $sql = '';
			}

			return $sql;
			@@ -822,17 +924,16 @@

			$active_tab = $this->getNextTab();

			// definiere Tabs
			// go trough the tabs
			foreach( $this->formDef["tabs"] as $key => $tab) {

			$tab['name'] = $key;
			if($tab['name'] == $active_tab) {

			// Wenn Modul gesetzt, dann setzte template pfad relativ zu modul.
			// If module is set, then set the template path relative to the module..
			if($this->module != '') $tab["template"] = "../".$this->module."/".$tab["template"];

			// überprüfe, ob das Template existiert, wenn nicht
			// dann generiere das Template
			// Generate the template if it does not exist yet.

			// Translate the title of the tab
			$tab['title'] = $this->lng($tab['title']);
			@@ -849,7 +950,7 @@
			$tab["active"] = 0;
			}

			// Die Datenfelder werden für die Tabs nicht benötigt
			// Unset unused variables.
			unset($tab["fields"]);
			unset($tab["plugins"]);

			@@ -864,8 +965,8 @@
			$app->tpl->setVar('form_active_tab',$active_tab);

			// Set form title
			$form_hint = '<b>'.$this->lng($this->formDef["title"]).'</b>';
			if($this->formDef["description"] != '') $form_hint .= '<br><br>'.$this->lng($this->formDef["description"]);
			$form_hint = $this->lng($this->formDef["title"]);
			if($this->formDef["description"] != '') $form_hint .= '<div class="pageForm_description">'.$this->lng($this->formDef["description"]).'</div>';
			$app->tpl->setVar('form_hint',$form_hint);

			// Set Wordbook for this form
			@@ -884,15 +985,15 @@
			function datalogSave($action,$primary_id, $record_old, $record_new) {
			global $app,$conf;

			// Füge Backticks nur bei unvollständigen Tabellennamen ein
			// Add backticks for incomplete table names.
			if(stristr($this->formDef['db_table'],'.')) {
			$escape = '';
			} else {
			$escape = '`';
			}

			$diffrec = array();

			$this->diffrec = array();
			/*
			if(is_array($record_new) && count($record_new) > 0) {
			foreach($record_new as $key => $val) {
			if(@$record_old[$key] != $val) {
			@@ -911,7 +1012,7 @@
			}
			}
			$this->diffrec = $diffrec;

			*/

			// Full diff records for ISPConfig, they have a different format then the simple diffrec
			$diffrec_full = array();
			@@ -923,6 +1024,8 @@
			// Record has changed
			$diffrec_full['old'][$key] = $val;
			$diffrec_full['new'][$key] = $record_new[$key];
			$this->diffrec[$key] = array( 'new' => $record_new[$key],
			'old' => $val);
			} else {
			$diffrec_full['old'][$key] = $val;
			$diffrec_full['new'][$key] = $val;
			@@ -934,6 +1037,8 @@
			// Record has changed
			$diffrec_full['new'][$key] = $val;
			$diffrec_full['old'][$key] = $record_old[$key];
			$this->diffrec[$key] = array( 'old' => @$record_old[$key],
			'new' => $val);
			} else {
			$diffrec_full['new'][$key] = $val;
			$diffrec_full['old'][$key] = $val;
			@@ -941,12 +1046,13 @@
			}
			}

			//$this->diffrec = $diffrec;
			// Insert the server_id, if the record has a server_id
			$server_id = (isset($record_old["server_id"]) && $record_old["server_id"] > 0)?$record_old["server_id"]:0;
			if(isset($record_new["server_id"])) $server_id = $record_new["server_id"];

			if(count($this->diffrec) > 0) {
			$diffstr = $app->db->quote(serialize($diffrec_full));
			$diffstr = addslashes(serialize($diffrec_full));
			$username = $app->db->quote($_SESSION["s"]["user"]["username"]);
			$dbidx = $this->formDef['db_table_idx'].":".$primary_id;
			// $action = ($action == 'INSERT')?'i':'u';
			@@ -978,14 +1084,14 @@
			}

			/*
			Diese funktion überprüft, ob ein User die Berechtigung $perm für den Datensatz mit der ID $record_id
			hat. It record_id = 0, dann wird gegen die user Defaults des Formulares getestet.
			This function checks if a user has the parmissions $perm for the data record with the ID $record_id
			If record_id = 0, the the permissions are tested against the defaults of the form file.
			*/
			function checkPerm($record_id,$perm) {
			global $app;

			if($record_id > 0) {
			// Füge Backticks nur bei unvollständigen Tabellennamen ein
			// Add backticks for incomplete table names.
			if(stristr($this->formDef['db_table'],'.')) {
			$escape = '';
			} else {
			@@ -1014,18 +1120,18 @@
			}

			function getNextTab() {
			// Welcher Tab wird angezeigt
			// Which tab is shown
			if($this->errorMessage == '') {
			// wenn kein Fehler vorliegt
			// If there is no error
			if(isset($_REQUEST["next_tab"]) && $_REQUEST["next_tab"] != '') {
			// wenn nächster Tab bekannt
			// If the next tab is known
			$active_tab = $_REQUEST["next_tab"];
			} else {
			// ansonsten ersten tab nehmen
			// else use the default tab
			$active_tab = $this->formDef['tab_default'];
			}
			} else {
			// bei Fehlern den gleichen Tab nochmal anzeigen
			// Show the same tab again in case of an error
			$active_tab = $_SESSION["s"]["form"]["tab"];
			}

			@@ -1036,8 +1142,21 @@
			return $_SESSION["s"]["form"]["tab"];
			}

			function isReadonlyTab($tab) {
			if(isset($this->formDef['tabs'][$tab]['readonly']) && $this->formDef['tabs'][$tab]['readonly'] == true) {
			function isReadonlyTab($tab, $primary_id) {
			global $app, $conf;

			// Add backticks for incomplete table names.
			if(stristr($this->formDef['db_table'],'.')) {
			$escape = '';
			} else {
			$escape = '`';
			}

			$sql = "SELECT sys_userid FROM ".$escape.$this->formDef['db_table'].$escape." WHERE ".$this->formDef['db_table_idx']." = ".$primary_id;
			$record = $app->db->queryOneRecord($sql);

			// return true if the readonly flag of the form is set and the current loggedin user is not the owner of the record.
			if(isset($this->formDef['tabs'][$tab]['readonly']) && $this->formDef['tabs'][$tab]['readonly'] == true && $record['sys_userid'] != $_SESSION["s"]["user"]["userid"]) {
			return true;
			} else {
			return false;
			@@ -1056,6 +1175,87 @@
			}

			}

			function checkClientLimit($limit_name,$sql_where = '') {
			global $app;

			$check_passed = true;
			$limit_name = $app->db->quote($limit_name);
			if($limit_name == '') $app->error('Limit name missing in function checkClientLimit.');

			// Get the limits of the client that is currently logged in
			$client_group_id = $_SESSION["s"]["user"]["default_group"];
			$client = $app->db->queryOneRecord("SELECT $limit_name as number, parent_client_id FROM sys_group, client WHERE sys_group.client_id = client.client_id and sys_group.groupid = $client_group_id");

			// Check if the user may add another item
			if($client["number"] >= 0) {
			$sql = "SELECT count(".$this->formDef['db_table_idx'].") as number FROM ".$this->formDef['db_table']." WHERE ".$this->getAuthSQL('u');
			if($sql_where != '') $sql .= ' and '.$sql_where;
			$tmp = $app->db->queryOneRecord($sql);
			if($tmp["number"] >= $client["number"]) $check_passed = false;
			}

			return $check_passed;
			}

			function checkResellerLimit($limit_name,$sql_where = '') {
			global $app;

			$check_passed = true;
			$limit_name = $app->db->quote($limit_name);
			if($limit_name == '') $app->error('Limit name missing in function checkClientLimit.');

			// Get the limits of the client that is currently logged in
			$client_group_id = $_SESSION["s"]["user"]["default_group"];
			$client = $app->db->queryOneRecord("SELECT parent_client_id FROM sys_group, client WHERE sys_group.client_id = client.client_id and sys_group.groupid = $client_group_id");

			//* If the client belongs to a reseller, we will check against the reseller Limit too
			if($client['parent_client_id'] != 0) {

			//* first we need to know the groups of this reseller
			$tmp = $app->db->queryOneRecord("SELECT userid, groups FROM sys_user WHERE client_id = ".$client['parent_client_id']);
			$reseller_groups = $tmp["groups"];
			$reseller_userid = $tmp["userid"];

			// Get the limits of the reseller of the logged in client
			$client_group_id = $_SESSION["s"]["user"]["default_group"];
			$reseller = $app->db->queryOneRecord("SELECT $limit_name as number FROM client WHERE client_id = ".$client['parent_client_id']);

			// Check if the user may add another item
			if($reseller["number"] >= 0) {
			$sql = "SELECT count(".$this->formDef['db_table_idx'].") as number FROM ".$this->formDef['db_table']." WHERE (sys_groupid IN (".$reseller_groups.") or sys_userid = ".$reseller_userid.")";
			if($sql_where != '') $sql .= ' and '.$sql_where;
			$tmp = $app->db->queryOneRecord($sql);
			if($tmp["number"] >= $reseller["number"]) $check_passed = false;
			}
			}

			return $check_passed;
			}

			//* get the difference record of two arrays
			function getDiffRecord($record_old,$record_new) {

			if(is_array($record_new) && count($record_new) > 0) {
			foreach($record_new as $key => $val) {
			if(@$record_old[$key] != $val) {
			// Record has changed
			$diffrec[$key] = array( 'old' => @$record_old[$key],
			'new' => $val);
			}
			}
			} elseif(is_array($record_old)) {
			foreach($record_old as $key => $val) {
			if($record_new[$key] != $val) {
			// Record has changed
			$diffrec[$key] = array( 'new' => $record_new[$key],
			'old' => $val);
			}
			}
			}
			return $diffrec;

			}

			}