Portions created by the Initial Developer are Copyright (C) 2018 the Initial Developer. All Rights Reserved. Contributor(s): Mark J Crane */ //includes require_once "root.php"; require_once "resources/require.php"; require_once "resources/check_auth.php"; //check permissions if (!permission_exists('access_control_add') && !permission_exists('access_control_edit')) { echo "access denied"; exit; } //add multi-lingual support $language = new text; $text = $language->get(); //action add or update if (is_uuid($_REQUEST["id"])) { $action = "update"; $access_control_uuid = $_REQUEST["id"]; } else { $action = "add"; } //get http post variables and set them to php variables if (count($_POST)>0) { $access_control_name = $_POST["access_control_name"]; $access_control_default = $_POST["access_control_default"]; $access_control_description = $_POST["access_control_description"]; } if (count($_POST)>0 && strlen($_POST["persistformvar"]) == 0) { //get the primary key if ($action == "update") { $access_control_uuid = $_POST["access_control_uuid"]; } //validate the token $token = new token; if (!$token->validate($_SERVER['PHP_SELF'])) { message::add($text['message-invalid_token'],'negative'); header('Location: access_controls.php'); exit; } //check for all required data $msg = ''; if (strlen($access_control_name) == 0) { $msg .= $text['message-required']." ".$text['label-access_control_name']."
\n"; } if (strlen($access_control_default) == 0) { $msg .= $text['message-required']." ".$text['label-access_control_default']."
\n"; } //if (strlen($access_control_description) == 0) { $msg .= $text['message-required']." ".$text['label-access_control_description']."
\n"; } if (strlen($msg) > 0 && strlen($_POST["persistformvar"]) == 0) { require_once "resources/header.php"; require_once "resources/persist_form_var.php"; echo "

\n"; echo "

\n"; echo $msg."
"; echo "

\n"; persistformvar($_POST); echo "

\n"; require_once "resources/footer.php"; return; } //add or update the database if ($_POST["persistformvar"] != "true") { $execute = false; if ($action == "add" && permission_exists('access_control_add')) { $execute = true; $access_control_uuid = uuid(); //add the message message::add($text['message-add']); } if ($action == "update" && permission_exists('access_control_edit')) { $execute = true; //$access_control_uuid //already set //add the message message::add($text['message-update']); } if ($execute) { $array['access_controls'][0]['access_control_uuid'] = $access_control_uuid; $array['access_controls'][0]['access_control_name'] = $access_control_name; $array['access_controls'][0]['access_control_default'] = $access_control_default; $array['access_controls'][0]['access_control_description'] = $access_control_description; $database = new database; $database->app_name = 'access_control'; $database->app_uuid = '1416a250-f6e1-4edc-91a6-5c9b883638fd'; $database->save($array); unset($array); //clear the cache $cache = new cache; $cache->delete("configuration:acl.conf"); //create the event socket connection $fp = event_socket_create($_SESSION['event_socket_ip_address'], $_SESSION['event_socket_port'], $_SESSION['event_socket_password']); if ($fp) { event_socket_request($fp, "api reloadacl"); } } //redirect the user header("Location: access_controls.php"); return; } //if ($_POST["persistformvar"] != "true") } //(count($_POST)>0 && strlen($_POST["persistformvar"]) == 0) //pre-populate the form if (count($_GET) > 0 && $_POST["persistformvar"] != "true" && is_uuid($_GET["id"])) { $access_control_uuid = $_GET["id"]; $sql = "select * from v_access_controls "; $sql .= "where access_control_uuid = :access_control_uuid "; $parameters['access_control_uuid'] = $access_control_uuid; $database = new database; $row = $database->select($sql, $parameters, 'row'); if (is_array($row) && sizeof($row)) { $access_control_name = $row["access_control_name"]; $access_control_default = $row["access_control_default"]; $access_control_description = $row["access_control_description"]; } unset ($sql, $parameters, $row); } //create token $object = new token; $token = $object->create($_SERVER['PHP_SELF']); //show the header require_once "resources/header.php"; //show the content echo "

\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo " \n"; echo " \n"; echo " "; echo "

".$text['title-access_control']."	\n"; echo " "; echo " "; echo "
\n"; echo " ".$text['label-access_control_name']."\n"; echo "	\n"; echo " \n"; echo " \n"; echo $text['description-access_control_name']."\n"; echo "
\n"; echo " ".$text['label-access_control_default']."\n"; echo "	\n"; echo " \n"; echo " \n"; echo $text['description-access_control_default']."\n"; echo "
\n"; echo " ".$text['label-access_control_description']."\n"; echo "	\n"; echo " \n"; echo " \n"; echo $text['description-access_control_description']."\n"; echo "
\n"; if ($action == "update") { echo " \n"; } echo " \n"; echo " \n"; echo "

"; echo "

"; echo "

"; if ($action == "update") { require "access_control_nodes.php"; echo "

"; } //include the footer require_once "resources/footer.php"; ?>