From 6e2a8dbc1a25d0f9366b8a0ab7958ae7a666b8a3 Mon Sep 17 00:00:00 2001 From: tbrehm <t.brehm@ispconfig.org> Date: Mon, 25 Jan 2010 15:14:13 -0500 Subject: [PATCH] Fixed: FS#1038 - Alias 1 character long --- interface/lib/classes/remoting_lib.inc.php | 50 ++++++++++++++++++++++++++++++++++++++++++-------- 1 files changed, 42 insertions(+), 8 deletions(-) diff --git a/interface/lib/classes/remoting_lib.inc.php b/interface/lib/classes/remoting_lib.inc.php index 6d0aec3..f5b88a5 100644 --- a/interface/lib/classes/remoting_lib.inc.php +++ b/interface/lib/classes/remoting_lib.inc.php @@ -373,7 +373,7 @@ } break; case 'UNIQUE': - if($this->action == 'NEW') { + if($this->action == 'INSERT') { $num_rec = $app->db->queryOneRecord("SELECT count(*) as number FROM ".$escape.$this->formDef['db_table'].$escape. " WHERE $field_name = '".$app->db->quote($field_value)."'"); if($num_rec["number"] > 0) { $errmsg = $validator['errmsg']; @@ -603,26 +603,60 @@ function getDataRecord($primary_id) { global $app; $escape = '`'; - $sql = "SELECT * FROM ".$escape.$this->formDef['db_table'].$escape." WHERE ".$this->formDef['db_table_idx']." = ".$primary_id; - return $app->db->queryOneRecord($sql); + if(@is_numeric($primary_id)) { + $sql = "SELECT * FROM ".$escape.$this->formDef['db_table'].$escape." WHERE ".$this->formDef['db_table_idx']." = ".$primary_id; + return $app->db->queryOneRecord($sql); + } elseif (@is_array($primary_id)) { + $sql_where = ''; + foreach($primary_id as $key => $val) { + $key = $app->db->quote($key); + $val = $app->db->quote($val); + $sql_where .= "$key = '$val' AND "; + } + $sql_where = substr($sql_where,0,-5); + $sql = "SELECT * FROM ".$escape.$this->formDef['db_table'].$escape." WHERE ".$sql_where; + return $app->db->queryAllRecords($sql); + } else { + $this->errorMessage = 'The ID must be either an integer or an array.'; + return array(); + } + + } - function dodaj_usera($params,$insert_id){ + function ispconfig_sysuser_add($params,$insert_id){ global $app,$sql1; - $username = $params["username"]; - $password = $params["password"]; + $username = $app->db->quote($params["username"]); + $password = $app->db->quote($params["password"]); $modules = 'mail,sites,dns,tools'; $startmodule = 'mail'; - $usertheme = $params["usertheme"]; + $usertheme = $app->db->quote($params["usertheme"]); $type = 'user'; $active = 1; - $language = $params["language"]; + $insert_id = intval($insert_id); + $language = $app->db->quote($params["language"]); $groupid = $app->db->datalogInsert('sys_group', "(name,description,client_id) VALUES ('$username','','$insert_id')", 'groupid'); $groups = $groupid; $sql1 = "INSERT INTO sys_user (username,passwort,modules,startmodule,app_theme,typ,active,language,groups,default_group,client_id) VALUES ('$username',md5('$password'),'$modules','$startmodule','$usertheme','$type','$active','$language',$groups,$groupid,$insert_id)"; $app->db->query($sql1); } + + function ispconfig_sysuser_update($params,$client_id){ + global $app; + $username = $app->db->quote($params["username"]); + $password = $app->db->quote($params["password"]); + $client_id = intval($client_id); + $sql = "UPDATE sys_user set username = '$username', passwort = md5('$password') WHERE client_id = $client_id"; + $app->db->query($sql); + } + + function ispconfig_sysuser_delete($client_id){ + global $app; + $client_id = intval($client_id); + $sql = "DELETE FROM sys_user WHERE client_id = $client_id"; + $app->db->query($sql); + } function datalogSave($action,$primary_id, $record_old, $record_new) { global $app,$conf; -- Gitblit v1.9.1