1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
|
<?php
/**************************************************************************
* *
* 4images - A Web Based Image Gallery Management System *
* ---------------------------------------------------------------- *
* *
* File: auth.php *
* Copyright: (C) 2002 Jan Sorgalla *
* Email: jan@4homepages.de *
* Web: http://www.4homepages.de *
* Scriptversion: 1.7.1 *
* *
* Never released without support from: Nicky (http://www.nicky.net) *
* *
**************************************************************************
* *
* Dieses Script ist KEINE Freeware. Bitte lesen Sie die Lizenz- *
* bedingungen (Lizenz.txt) für weitere Informationen. *
* --------------------------------------------------------------- *
* This script is NOT freeware! Please read the Copyright Notice *
* (Licence.txt) for further information. *
* *
*************************************************************************/
if (!defined('ROOT_PATH')) {
die("Security violation");
}
function get_auth_subcat_ids($cid = 0, $cat_id = 0, $cat_parent_cache) {
global $cat_subcat_ids;
if (!isset($cat_parent_cache[$cid])) {
return false;
}
foreach ($cat_parent_cache[$cid] as $key => $val) {
$cat_subcat_ids[$cat_id][] = $val;
get_subcat_ids($val, $cat_id, $cat_parent_cache);
}
return $cat_subcat_ids;
}
function check_permission($type, $cat_id = 0) {
global $cat_cache, $user_info, $user_access;
if (!isset($cat_cache[$cat_id][$type])) {
return false;
}
if ($cat_cache[$cat_id][$type] == AUTH_ALL || $user_info['user_level'] == ADMIN) {
return true;
}
elseif ($cat_cache[$cat_id][$type] == AUTH_USER && ($user_info['user_level'] != GUEST && $user_info['user_level'] != USER_AWAITING)) {
return true;
}
elseif ($cat_cache[$cat_id][$type] == AUTH_ADMIN && $user_info['user_level'] != ADMIN) {
return false;
}
elseif ($cat_cache[$cat_id][$type] == AUTH_ACL && ($user_info['user_level'] != GUEST && $user_info['user_level'] != USER_AWAITING)) {
if (isset($user_access[$cat_id])) {
for ($i = 0; $i < sizeof($user_access[$cat_id]); $i++) {
if (isset($user_access[$cat_id][$i][$type]) && $user_access[$cat_id][$i][$type] == 1) {
return true;
}
}
}
}
return false;
}
function get_permission() {
global $site_db, $cat_cache, $cat_parent_cache, $user_info, $subcat_ids;
foreach ($cat_cache as $key => $val) {
if ($val['auth_viewcat'] != AUTH_ALL) {
$cat_subcat_ids = get_auth_subcat_ids($key, $key, $cat_parent_cache);
if (isset($cat_subcat_ids[$key])) {
foreach ($cat_subcat_ids[$key] as $key2 => $val2) {
if ($cat_cache[$val2]['auth_viewcat'] < $cat_cache[$key]['auth_viewcat']) {
$cat_cache[$val2]['auth_viewcat'] = $cat_cache[$key]['auth_viewcat'];
}
}
}
}
}
$user_access = array();
if ($user_info['user_id'] != GUEST && $user_info['user_id'] != USER_AWAITING) {
$current_time = time();
/*
$sql = "DELETE FROM ".GROUP_MATCH_TABLE."
WHERE groupmatch_enddate <= $current_time AND groupmatch_enddate <> 0";
$site_db->query($sql);
*/
$sql = "SELECT a.cat_id, a.auth_viewcat, a.auth_viewimage, a.auth_download, a.auth_upload, a.auth_directupload, a.auth_vote, a.auth_sendpostcard, a.auth_readcomment, a.auth_postcomment
FROM ".GROUP_ACCESS_TABLE." a, ".GROUP_MATCH_TABLE." m
WHERE m.user_id = ".$user_info['user_id']."
AND a.group_id = m.group_id
AND m.groupmatch_startdate <= $current_time
AND (groupmatch_enddate > $current_time OR groupmatch_enddate = 0)";
$result = $site_db->query($sql);
while ($row = $site_db->fetch_array($result)) {
$user_access[$row['cat_id']][] = $row;
}
}
return $user_access;
}
// cat_id's for "auth_viewcat" is already defined in page_header.php
function get_auth_cat_sql($type, $mode = "IN") {
global $auth_cat_sql, $cat_cache;
if (!empty($auth_cat_sql[$type][$mode])) {
return $auth_cat_sql[$type][$mode];
}
$auth_cat_sql[$type]['IN'] = 0;
$auth_cat_sql[$type]['NOTIN'] = 0;
foreach ($cat_cache as $key => $val) {
if (!check_permission($type, $key)) {
$auth_cat_sql[$type]['NOTIN'] .= ", ".$key;
}
else {
$auth_cat_sql[$type]['IN'] .= ", ".$key;
}
}
return $auth_cat_sql[$type][$mode];
}
?>
|