boinc/html/user/user_permissions.php

<?php
// This file is part of BOINC.
// http://boinc.berkeley.edu
// Copyright (C) 2015 University of California
//
// BOINC is free software; you can redistribute it and/or modify it
// under the terms of the GNU Lesser General Public License
// as published by the Free Software Foundation,
// either version 3 of the License, or (at your option) any later version.
//
// BOINC is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
// See the GNU Lesser General Public License for more details.
//
// You should have received a copy of the GNU Lesser General Public License
// along with BOINC.  If not, see <http://www.gnu.org/licenses/>.

require_once('../inc/forum.inc');

db_init();

function user_permissions_form() {
    global $special_user_bitfield;
    page_head('Manage user privileges');

    start_table("align=\"center\"");
    row1("Current special users", '9');

    echo "<tr><td>User</td>";
    for ($i=0; $i<S_NFLAGS; $i++) {
        echo "<td width=\"15\">" . $special_user_bitfield[$i] . "</td>\n";
    }
    echo "</tr>";

    $result = _mysql_query(
        "SELECT prefs.userid, prefs.special_user, user.id, user.name 
        FROM forum_preferences as prefs, user 
        WHERE CONVERT(special_user, DECIMAL) > 0 and prefs.userid=user.id"
    );
    for ($i=1; $i<=_mysql_num_rows($result); $i++){
        $foo = _mysql_fetch_object($result);
        echo "<form action=\"user_permissions.php\" method=\"POST\">\n";
        echo "<input type=\"hidden\" name=\"userid\" value=\"$foo->userid\"
            <tr><td>$foo->name ($foo->id)</td>
        ";
        for ($j=0; $j<S_NFLAGS; $j++) {
            $bit = substr($foo->special_user, $j, 1);
            echo "<td><input type=\"checkbox\" name=\"role".$j."\" value=\"1\"";
            if ($bit == 1) {
                echo " checked=\"checked\"";
            }
            echo "></td>\n";
        }
        echo "<td><input class=\"btn btn-default\" type=\"submit\" value=\"Update\"></form></td>";
        echo "</tr>\n";
    }

    echo "<tr><form action=\"manage_special_users_action.php\" method=\"POST\">\n";
    echo "<td>Add UserID:<input type=\"text\" name=\"userid\" size=\"6\"></td>";

    for ($j=0; $j<S_NFLAGS; $j++) {
        echo "<td><input type=\"checkbox\" name=\"role".$j."\" value=\"1\"";
        echo "></td>\n";
    }
    echo "<td><input class=\"btn btn-default\" type=\"submit\" value=\"Update\"></form></td>";
    echo "</tr>\n";

    end_table();

    page_tail();
}

function user_permissions_action() {
    page_head("Manage special users action");

    $bitset = '';

    for ($i=0;$i<S_NFLAGS;$i++) {
        if (post_int("role".$i, TRUE) == '1') {
            $bitset = str_pad($bitset, $i+1, '1');
        } else {
            $bitset = str_pad($bitset, $i+1, '0');
        }
    }
    if ($bitset == "0000000") $bitset = '';
    $userid = post_int("userid");

    $query = "UPDATE forum_preferences SET special_user='$bitset' WHERE userid='$userid'";
    _mysql_query($query);

    if (_mysql_affected_rows() == 1) {
        echo "<center><h2>Success</h2>";
    } else {
        echo "<center><h2>Failure</h2>";
    }

    echo "Query was: $query</center>";

    //echo "<br><a href=\"manage_special_users.php\">Manage users</a>";

    page_tail();
}

$user = get_logged_in_user();
BoincForumPrefs::lookup($user);
if (!is_moderator($user, null)) {
    error_page("no access");
}

if (post_int("userid", true)) {
    user_permissions_action();
} else {
    user_permissions_form();
}

$cvs_version_tracker[]="\$Id$";  //Generated automatically - do not edit
?>