From 9cb77e00c93ad86c95e23b9377bcf2f92da9c75a Mon Sep 17 00:00:00 2001 From: mcramer <m.cramer@pixcept.de> Date: Thu, 01 Nov 2012 07:52:23 -0400 Subject: [PATCH] Fixed: - log parsing did not recognize lines with multiple recipients - spamfilter_users added to datalog status messages --- interface/lib/classes/auth.inc.php | 67 ++++++++++++++++++++++++++++++--- 1 files changed, 60 insertions(+), 7 deletions(-) diff --git a/interface/lib/classes/auth.inc.php b/interface/lib/classes/auth.inc.php index d3ed6e9..50d4950 100644 --- a/interface/lib/classes/auth.inc.php +++ b/interface/lib/classes/auth.inc.php @@ -1,7 +1,7 @@ <?php /* -Copyright (c) 2008, Till Brehm, projektfarm Gmbh +Copyright (c) 2007, Till Brehm, projektfarm Gmbh All rights reserved. Redistribution and use in source and binary forms, with or without modification, @@ -29,6 +29,12 @@ */ class auth { + var $client_limits = null; + + public function get_user_id() + { + return $_SESSION['s']['user']['userid']; + } public function is_admin() { if($_SESSION['s']['user']['typ'] == 'admin') { @@ -36,12 +42,12 @@ } else { return false; } - } + } public function has_clients($userid) { global $app, $conf; - $userid = intval($userid); + $userid = $app->functions->intval($userid); $client = $app->db->queryOneRecord("SELECT client.limit_client FROM sys_user, client WHERE sys_user.userid = $userid AND sys_user.client_id = client.client_id"); if($client['limit_client'] > 0) { return true; @@ -54,8 +60,8 @@ public function add_group_to_user($userid,$groupid) { global $app; - $userid = intval($userid); - $groupid = intval($groupid); + $userid = $app->functions->intval($userid); + $groupid = $app->functions->intval($groupid); if($userid > 0 && $groupid > 0) { $user = $app->db->queryOneRecord("SELECT * FROM sys_user WHERE userid = $userid"); @@ -69,13 +75,31 @@ return false; } } + + //** This function returns given client limit as integer, -1 means no limit + public function get_client_limit($userid, $limitname) + { + global $app; + + // simple query cache + if($this->client_limits===null) + $this->client_limits = $app->db->queryOneRecord("SELECT client.* FROM sys_user, client WHERE sys_user.userid = $userid AND sys_user.client_id = client.client_id"); + + // isn't client -> no limit + if(!$this->client_limits) + return -1; + + if(isset($this->client_limits['limit_'.$limitname])) { + return $this->client_limits['limit_'.$limitname]; + } + } //** This function removes a given group id from a given user. public function remove_group_from_user($userid,$groupid) { global $app; - $userid = intval($userid); - $groupid = intval($groupid); + $userid = $app->functions->intval($userid); + $groupid = $app->functions->intval($groupid); if($userid > 0 && $groupid > 0) { $user = $app->db->queryOneRecord("SELECT * FROM sys_user WHERE userid = $userid"); @@ -90,6 +114,35 @@ return false; } } + + public function check_module_permissions($module) { + // Check if the current user has the permissions to access this module + if(!stristr($_SESSION["s"]["user"]["modules"],$module)) { + // echo "LOGIN_REDIRECT:/index.php"; + header("Location: /index.php"); + exit; + } + } + + public function get_random_password($length = 8) { + $base64_alphabet='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'; + $password = ''; + for ($n=0;$n<$length;$n++) { + $password.=$base64_alphabet[mt_rand(0,63)]; + } + return $password; + } + + public function crypt_password($cleartext_password) { + $salt="$1$"; + $base64_alphabet='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'; + for ($n=0;$n<8;$n++) { + $salt.=$base64_alphabet[mt_rand(0,63)]; + } + $salt.="$"; + return crypt($cleartext_password,$salt); + } + } ?> \ No newline at end of file -- Gitblit v1.9.1