1254 lines
52 KiB
PHP
1254 lines
52 KiB
PHP
<?php
|
|
/*
|
|
FusionPBX
|
|
Version: MPL 1.1
|
|
|
|
The contents of this file are subject to the Mozilla Public License Version
|
|
1.1 (the "License"); you may not use this file except in compliance with
|
|
the License. You may obtain a copy of the License at
|
|
http://www.mozilla.org/MPL/
|
|
|
|
Software distributed under the License is distributed on an "AS IS" basis,
|
|
WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
|
|
for the specific language governing rights and limitations under the
|
|
License.
|
|
|
|
The Original Code is FusionPBX
|
|
|
|
The Initial Developer of the Original Code is
|
|
Mark J Crane <markjcrane@fusionpbx.com>
|
|
Portions created by the Initial Developer are Copyright (C) 2008-2024
|
|
the Initial Developer. All Rights Reserved.
|
|
|
|
Contributor(s):
|
|
Mark J Crane <markjcrane@fusionpbx.com>
|
|
Luis Daniel Lucio Quiroz <dlucio@okay.com.mx>
|
|
*/
|
|
|
|
//includes files
|
|
require_once dirname(__DIR__, 2) . "/resources/require.php";
|
|
require_once "resources/check_auth.php";
|
|
|
|
//add multi-lingual support
|
|
$language = new text;
|
|
$text = $language->get();
|
|
|
|
//create a single database object
|
|
$database = new database;
|
|
$database->app_name = 'users';
|
|
$database->app_uuid = '112124b3-95c2-5352-7e9d-d14c0b88f207';
|
|
|
|
//get user uuid
|
|
if (!empty($_REQUEST["id"]) && ((is_uuid($_REQUEST["id"]) && permission_exists('user_edit')) || (is_uuid($_REQUEST["id"]) && $_REQUEST["id"] == $_SESSION['user_uuid']))) {
|
|
$user_uuid = $_REQUEST["id"];
|
|
$action = 'edit';
|
|
}
|
|
elseif (permission_exists('user_add') && !isset($_REQUEST["id"])) {
|
|
$user_uuid = uuid();
|
|
$action = 'add';
|
|
}
|
|
else {
|
|
// load users own account
|
|
header("Location: user_edit.php?id=".urlencode($_SESSION['user_uuid']));
|
|
exit;
|
|
}
|
|
|
|
//get total user count from the database, check limit, if defined
|
|
if (permission_exists('user_add') && $action == 'add' && !empty($_SESSION['limit']['users']['numeric'])) {
|
|
$sql = "select count(*) ";
|
|
$sql .= "from v_users ";
|
|
$sql .= "where domain_uuid = :domain_uuid ";
|
|
$parameters['domain_uuid'] = $_SESSION['domain_uuid'];
|
|
$num_rows = $database->select($sql, $parameters, 'column');
|
|
unset($sql, $parameters);
|
|
|
|
if ($num_rows >= $_SESSION['limit']['users']['numeric']) {
|
|
message::add($text['message-maximum_users'].' '.$_SESSION['limit']['users']['numeric'], 'negative');
|
|
header('Location: users.php');
|
|
exit;
|
|
}
|
|
}
|
|
|
|
//required to be a superadmin to update an account that is a member of the superadmin group
|
|
if (permission_exists('user_edit') && $action == 'edit') {
|
|
$superadmins = superadmin_list();
|
|
if (if_superadmin($superadmins, $user_uuid)) {
|
|
if (!if_group("superadmin")) {
|
|
echo "access denied";
|
|
exit;
|
|
}
|
|
}
|
|
}
|
|
|
|
//delete the group from the user
|
|
if (!empty($_GET["a"]) && $_GET["a"] == "delete" && is_uuid($_GET["group_uuid"]) && is_uuid($user_uuid) && permission_exists("user_delete")) {
|
|
//set the variables
|
|
$group_uuid = $_GET["group_uuid"];
|
|
//delete the group from the users
|
|
$array['user_groups'][0]['group_uuid'] = $group_uuid;
|
|
$array['user_groups'][0]['user_uuid'] = $user_uuid;
|
|
|
|
$p = new permissions;
|
|
$p->add('user_group_delete', 'temp');
|
|
|
|
$database->delete($array);
|
|
unset($array);
|
|
|
|
$p->delete('user_group_delete', 'temp');
|
|
|
|
//redirect the user
|
|
message::add($text['message-update']);
|
|
header("Location: user_edit.php?id=".urlencode($user_uuid));
|
|
exit;
|
|
}
|
|
|
|
//retrieve password requirements
|
|
if (permission_exists('user_password')) {
|
|
$required['length'] = $_SESSION['users']['password_length']['numeric'];
|
|
$required['number'] = ($_SESSION['users']['password_number']['boolean'] == 'true') ? true : false;
|
|
$required['lowercase'] = ($_SESSION['users']['password_lowercase']['boolean'] == 'true') ? true : false;
|
|
$required['uppercase'] = ($_SESSION['users']['password_uppercase']['boolean'] == 'true') ? true : false;
|
|
$required['special'] = ($_SESSION['users']['password_special']['boolean'] == 'true') ? true : false;
|
|
}
|
|
|
|
//prepare the data
|
|
if (!empty($_POST)) {
|
|
|
|
//get the HTTP values and set as variables
|
|
if (permission_exists('user_edit') && $action == 'edit') {
|
|
$user_uuid = $_REQUEST["id"];
|
|
$username_old = $_POST["username_old"];
|
|
}
|
|
$domain_uuid = $_POST["domain_uuid"];
|
|
$username = $_POST["username"];
|
|
$password = $_POST["password"];
|
|
$password_confirm = $_POST["password_confirm"];
|
|
$user_email = $_POST["user_email"];
|
|
$user_status = $_POST["user_status"] ?? '';
|
|
$user_language = $_POST["user_language"];
|
|
$user_time_zone = $_POST["user_time_zone"];
|
|
|
|
if (permission_exists('contact_edit') && $action == 'edit') {
|
|
$contact_uuid = $_POST["contact_uuid"];
|
|
}
|
|
else if (permission_exists('contact_add') && $action == 'add') {
|
|
$contact_organization = $_POST["contact_organization"];
|
|
$contact_name_given = $_POST["contact_name_given"];
|
|
$contact_name_family = $_POST["contact_name_family"];
|
|
}
|
|
$group_uuid_name = $_POST["group_uuid_name"];
|
|
$user_type = $_POST["user_type"];
|
|
$user_enabled = $_POST["user_enabled"] ?? 'false';
|
|
if (permission_exists('api_key')) {
|
|
$api_key = $_POST["api_key"];
|
|
}
|
|
if (permission_exists('message_key')) {
|
|
$message_key = $_POST["message_key"];
|
|
}
|
|
if (!empty($_SESSION['authentication']['methods']) && in_array('totp', $_SESSION['authentication']['methods'])) {
|
|
$user_totp_secret = strtoupper($_POST["user_totp_secret"]);
|
|
}
|
|
|
|
//validate the token
|
|
$token = new token;
|
|
if (!$token->validate($_SERVER['PHP_SELF'])) {
|
|
message::add($text['message-invalid_token'],'negative');
|
|
header('Location: users.php');
|
|
exit;
|
|
}
|
|
|
|
//validate the user status
|
|
switch ($user_status) {
|
|
case "Available" :
|
|
break;
|
|
case "Available (On Demand)" :
|
|
break;
|
|
case "On Break" :
|
|
break;
|
|
case "Do Not Disturb" :
|
|
break;
|
|
case "Logged Out" :
|
|
break;
|
|
default :
|
|
$user_status = '';
|
|
}
|
|
|
|
//check required values
|
|
if (empty($username)) {
|
|
$invalid[] = $text['label-username'];
|
|
}
|
|
|
|
//require a username format: any, email, no_email
|
|
if (!empty($_SESSION['users']['username_format']['text']) && $_SESSION['users']['username_format']['text'] != 'any') {
|
|
if (
|
|
($_SESSION['users']['username_format']['text'] == 'email' && !valid_email($username)) ||
|
|
($_SESSION['users']['username_format']['text'] == 'no_email' && valid_email($username))
|
|
) {
|
|
message::add($text['message-username_format_invalid'], 'negative', 7500);
|
|
}
|
|
}
|
|
|
|
//require unique globally or per domain
|
|
if ((permission_exists('user_edit') && $action == 'edit' && $username != $username_old && !empty($username)) ||
|
|
(permission_exists('user_add') && $action == 'add' && !empty($username))) {
|
|
|
|
$sql = "select count(*) from v_users ";
|
|
if (isset($_SESSION["users"]["unique"]["text"]) && $_SESSION["users"]["unique"]["text"] == "global") {
|
|
$sql .= "where username = :username ";
|
|
}
|
|
else {
|
|
$sql .= "where username = :username ";
|
|
$sql .= "and domain_uuid = :domain_uuid ";
|
|
$parameters['domain_uuid'] = $domain_uuid;
|
|
}
|
|
$parameters['username'] = $username;
|
|
$num_rows = $database->select($sql, $parameters, 'column');
|
|
if ($num_rows > 0) {
|
|
message::add($text['message-username_exists'], 'negative', 7500);
|
|
}
|
|
unset($sql, $parameters);
|
|
}
|
|
|
|
//require the passwords to match
|
|
if (!empty($password) && $password != $password_confirm) {
|
|
message::add($text['message-password_mismatch'], 'negative', 7500);
|
|
}
|
|
|
|
//require passwords not allowed to be empty
|
|
if (permission_exists('user_password') && permission_exists('user_add') && $action == 'add') {
|
|
if (empty($password)) {
|
|
message::add($text['message-password_blank'], 'negative', 7500);
|
|
}
|
|
if (empty($group_uuid_name)) {
|
|
$invalid[] = $text['label-group'];
|
|
}
|
|
}
|
|
|
|
//require a value a valid email address format
|
|
if (!valid_email($user_email)) {
|
|
$invalid[] = $text['label-email'];
|
|
}
|
|
|
|
//require passwords with the defined required attributes: length, number, lower case, upper case, and special characters
|
|
if (permission_exists('user_password') && !empty($password)) {
|
|
if (!empty($required['length']) && is_numeric($required['length']) && $required['length'] != 0) {
|
|
if (strlen($password) < $required['length']) {
|
|
$invalid[] = $text['label-characters'];
|
|
}
|
|
}
|
|
if ($required['number']) {
|
|
if (!preg_match('/(?=.*[\d])/', $password)) {
|
|
$invalid[] = $text['label-numbers'];
|
|
}
|
|
}
|
|
if ($required['lowercase']) {
|
|
if (!preg_match('/(?=.*[a-z])/', $password)) {
|
|
$invalid[] = $text['label-lowercase_letters'];
|
|
}
|
|
}
|
|
if ($required['uppercase']) {
|
|
if (!preg_match('/(?=.*[A-Z])/', $password)) {
|
|
$invalid[] = $text['label-uppercase_letters'];
|
|
}
|
|
}
|
|
if ($required['special']) {
|
|
if (!preg_match('/(?=.*[\W])/', $password)) {
|
|
$invalid[] = $text['label-special_characters'];
|
|
}
|
|
}
|
|
}
|
|
|
|
//return if error
|
|
if (message::count() != 0 || !empty($invalid)) {
|
|
if ($invalid) { message::add($text['message-required'].implode(', ', $invalid), 'negative', 7500); }
|
|
persistent_form_values('store', $_POST);
|
|
header("Location: user_edit.php".(permission_exists('user_edit') && $action != 'add' ? "?id=".urlencode($user_uuid) : null));
|
|
exit;
|
|
}
|
|
else {
|
|
persistent_form_values('clear');
|
|
}
|
|
|
|
//save the data
|
|
$i = $n = $x = $c = 0; //set initial array indexes
|
|
|
|
//check to see if user language is set
|
|
$sql = "select user_setting_uuid, user_setting_value from v_user_settings ";
|
|
$sql .= "where user_setting_category = 'domain' ";
|
|
$sql .= "and user_setting_subcategory = 'language' ";
|
|
$sql .= "and user_uuid = :user_uuid ";
|
|
$parameters['user_uuid'] = $user_uuid;
|
|
$row = $database->select($sql, $parameters, 'row');
|
|
if (!empty($user_language) && (empty($row) || (!empty($row['user_setting_uuid']) && !is_uuid($row['user_setting_uuid'])))) {
|
|
//add user setting to array for insert
|
|
$array['user_settings'][$i]['user_setting_uuid'] = uuid();
|
|
$array['user_settings'][$i]['user_uuid'] = $user_uuid;
|
|
$array['user_settings'][$i]['domain_uuid'] = $domain_uuid;
|
|
$array['user_settings'][$i]['user_setting_category'] = 'domain';
|
|
$array['user_settings'][$i]['user_setting_subcategory'] = 'language';
|
|
$array['user_settings'][$i]['user_setting_name'] = 'code';
|
|
$array['user_settings'][$i]['user_setting_value'] = $user_language;
|
|
$array['user_settings'][$i]['user_setting_enabled'] = 'true';
|
|
$i++;
|
|
}
|
|
else {
|
|
if (empty($row['user_setting_value']) || empty($user_language)) {
|
|
$array_delete['user_settings'][0]['user_setting_category'] = 'domain';
|
|
$array_delete['user_settings'][0]['user_setting_subcategory'] = 'language';
|
|
$array_delete['user_settings'][0]['user_uuid'] = $user_uuid;
|
|
|
|
$p = new permissions;
|
|
$p->add('user_setting_delete', 'temp');
|
|
|
|
$database->delete($array_delete);
|
|
unset($array_delete);
|
|
|
|
$p->delete('user_setting_delete', 'temp');
|
|
}
|
|
if (!empty($user_language)) {
|
|
//add user setting to array for update
|
|
$array['user_settings'][$i]['user_setting_uuid'] = $row['user_setting_uuid'];
|
|
$array['user_settings'][$i]['user_uuid'] = $user_uuid;
|
|
$array['user_settings'][$i]['domain_uuid'] = $domain_uuid;
|
|
$array['user_settings'][$i]['user_setting_category'] = 'domain';
|
|
$array['user_settings'][$i]['user_setting_subcategory'] = 'language';
|
|
$array['user_settings'][$i]['user_setting_name'] = 'code';
|
|
$array['user_settings'][$i]['user_setting_value'] = $user_language;
|
|
$array['user_settings'][$i]['user_setting_enabled'] = 'true';
|
|
$i++;
|
|
}
|
|
}
|
|
unset($sql, $parameters, $row);
|
|
|
|
//check to see if user time zone is set
|
|
$sql = "select user_setting_uuid, user_setting_value from v_user_settings ";
|
|
$sql .= "where user_setting_category = 'domain' ";
|
|
$sql .= "and user_setting_subcategory = 'time_zone' ";
|
|
$sql .= "and user_uuid = :user_uuid ";
|
|
$parameters['user_uuid'] = $user_uuid;
|
|
$row = $database->select($sql, $parameters, 'row');
|
|
if (!empty($user_time_zone) && (empty($row) || (!empty($row['user_setting_uuid']) && !is_uuid($row['user_setting_uuid'])))) {
|
|
//add user setting to array for insert
|
|
$array['user_settings'][$i]['user_setting_uuid'] = uuid();
|
|
$array['user_settings'][$i]['user_uuid'] = $user_uuid;
|
|
$array['user_settings'][$i]['domain_uuid'] = $domain_uuid;
|
|
$array['user_settings'][$i]['user_setting_category'] = 'domain';
|
|
$array['user_settings'][$i]['user_setting_subcategory'] = 'time_zone';
|
|
$array['user_settings'][$i]['user_setting_name'] = 'name';
|
|
$array['user_settings'][$i]['user_setting_value'] = $user_time_zone;
|
|
$array['user_settings'][$i]['user_setting_enabled'] = 'true';
|
|
$i++;
|
|
}
|
|
else {
|
|
if (empty($row['user_setting_value']) || empty($user_time_zone)) {
|
|
$array_delete['user_settings'][0]['user_setting_category'] = 'domain';
|
|
$array_delete['user_settings'][0]['user_setting_subcategory'] = 'time_zone';
|
|
$array_delete['user_settings'][0]['user_uuid'] = $user_uuid;
|
|
|
|
$p = new permissions;
|
|
$p->add('user_setting_delete', 'temp');
|
|
|
|
$database->delete($array_delete);
|
|
unset($array_delete);
|
|
|
|
$p->delete('user_setting_delete', 'temp');
|
|
}
|
|
if (!empty($user_time_zone)) {
|
|
//add user setting to array for update
|
|
$array['user_settings'][$i]['user_setting_uuid'] = $row['user_setting_uuid'];
|
|
$array['user_settings'][$i]['user_uuid'] = $user_uuid;
|
|
$array['user_settings'][$i]['domain_uuid'] = $domain_uuid;
|
|
$array['user_settings'][$i]['user_setting_category'] = 'domain';
|
|
$array['user_settings'][$i]['user_setting_subcategory'] = 'time_zone';
|
|
$array['user_settings'][$i]['user_setting_name'] = 'name';
|
|
$array['user_settings'][$i]['user_setting_value'] = $user_time_zone;
|
|
$array['user_settings'][$i]['user_setting_enabled'] = 'true';
|
|
$i++;
|
|
}
|
|
}
|
|
unset($sql, $parameters, $row);
|
|
|
|
//check to see if message key is set
|
|
if (permission_exists('message_key')) {
|
|
$sql = "select user_setting_uuid, user_setting_value from v_user_settings ";
|
|
$sql .= "where user_setting_category = 'message' ";
|
|
$sql .= "and user_setting_subcategory = 'key' ";
|
|
$sql .= "and user_uuid = :user_uuid ";
|
|
$parameters['user_uuid'] = $user_uuid;
|
|
$row = $database->select($sql, $parameters, 'row');
|
|
if (!empty($message_key) && (empty($row) || (!empty($row['user_setting_uuid']) && !is_uuid($row['user_setting_uuid'])))) {
|
|
//add user setting to array for insert
|
|
$array['user_settings'][$i]['user_setting_uuid'] = uuid();
|
|
$array['user_settings'][$i]['user_uuid'] = $user_uuid;
|
|
$array['user_settings'][$i]['domain_uuid'] = $domain_uuid;
|
|
$array['user_settings'][$i]['user_setting_category'] = 'message';
|
|
$array['user_settings'][$i]['user_setting_subcategory'] = 'key';
|
|
$array['user_settings'][$i]['user_setting_name'] = 'text';
|
|
$array['user_settings'][$i]['user_setting_value'] = $message_key;
|
|
$array['user_settings'][$i]['user_setting_enabled'] = 'true';
|
|
$i++;
|
|
}
|
|
else {
|
|
if (empty($row['user_setting_value']) || empty($message_key)) {
|
|
$array_delete['user_settings'][0]['user_setting_category'] = 'message';
|
|
$array_delete['user_settings'][0]['user_setting_subcategory'] = 'key';
|
|
$array_delete['user_settings'][0]['user_uuid'] = $user_uuid;
|
|
|
|
$p = new permissions;
|
|
$p->add('user_setting_delete', 'temp');
|
|
|
|
$database->delete($array_delete);
|
|
unset($array_delete);
|
|
|
|
$p->delete('user_setting_delete', 'temp');
|
|
}
|
|
if (!empty($message_key)) {
|
|
//add user setting to array for update
|
|
$array['user_settings'][$i]['user_setting_uuid'] = $row['user_setting_uuid'];
|
|
$array['user_settings'][$i]['user_uuid'] = $user_uuid;
|
|
$array['user_settings'][$i]['domain_uuid'] = $domain_uuid;
|
|
$array['user_settings'][$i]['user_setting_category'] = 'message';
|
|
$array['user_settings'][$i]['user_setting_subcategory'] = 'key';
|
|
$array['user_settings'][$i]['user_setting_name'] = 'text';
|
|
$array['user_settings'][$i]['user_setting_value'] = $message_key;
|
|
$array['user_settings'][$i]['user_setting_enabled'] = 'true';
|
|
$i++;
|
|
}
|
|
}
|
|
}
|
|
unset($sql, $parameters, $row);
|
|
|
|
//assign the user to the group
|
|
if ((permission_exists('user_add') || permission_exists('user_edit')) && !empty($_REQUEST["group_uuid_name"])) {
|
|
$group_data = explode('|', $group_uuid_name);
|
|
$group_uuid = $group_data[0];
|
|
$group_name = $group_data[1];
|
|
|
|
//compare the group level to only add groups at the same level or lower than the user
|
|
$sql = "select * from v_groups ";
|
|
$sql .= "where (domain_uuid = :domain_uuid or domain_uuid is null) ";
|
|
$sql .= "and group_uuid = :group_uuid ";
|
|
$parameters['domain_uuid'] = $_SESSION['domain_uuid'];
|
|
$parameters['group_uuid'] = $group_uuid;
|
|
$row = $database->select($sql, $parameters, 'row');
|
|
if ($row['group_level'] <= $_SESSION['user']['group_level']) {
|
|
$array['user_groups'][$n]['user_group_uuid'] = uuid();
|
|
$array['user_groups'][$n]['domain_uuid'] = $domain_uuid;
|
|
$array['user_groups'][$n]['group_name'] = $group_name;
|
|
$array['user_groups'][$n]['group_uuid'] = $group_uuid;
|
|
$array['user_groups'][$n]['user_uuid'] = $user_uuid;
|
|
$n++;
|
|
}
|
|
unset($parameters);
|
|
}
|
|
|
|
//update domain, if changed
|
|
if ((permission_exists('user_add') || permission_exists('user_edit')) && permission_exists('user_domain')) {
|
|
//adjust group user records
|
|
$sql = "select user_group_uuid from v_user_groups ";
|
|
$sql .= "where user_uuid = :user_uuid ";
|
|
$parameters['user_uuid'] = $user_uuid;
|
|
$result = $database->select($sql, $parameters, 'all');
|
|
if (is_array($result)) {
|
|
foreach ($result as $row) {
|
|
//add group user to array for update
|
|
$array['user_groups'][$n]['user_group_uuid'] = $row['user_group_uuid'];
|
|
$array['user_groups'][$n]['domain_uuid'] = $domain_uuid;
|
|
$n++;
|
|
}
|
|
}
|
|
unset($sql, $parameters);
|
|
//adjust user setting records
|
|
$sql = "select user_setting_uuid from v_user_settings ";
|
|
$sql .= "where user_uuid = :user_uuid ";
|
|
$parameters['user_uuid'] = $user_uuid;
|
|
$result = $database->select($sql, $parameters);
|
|
if (is_array($result)) {
|
|
foreach ($result as $row) {
|
|
//add user setting to array for update
|
|
$array['user_settings'][$i]['user_setting_uuid'] = $row['user_setting_uuid'];
|
|
$array['user_settings'][$i]['domain_uuid'] = $domain_uuid;
|
|
$i++;
|
|
}
|
|
}
|
|
unset($sql, $parameters);
|
|
//unassign any foreign domain groups
|
|
$sql = "delete from v_user_groups ";
|
|
$sql .= "where domain_uuid = :domain_uuid ";
|
|
$sql .= "and user_uuid = :user_uuid ";
|
|
$sql .= "and group_uuid not in (";
|
|
$sql .= " select group_uuid from v_groups where domain_uuid = :domain_uuid or domain_uuid is null ";
|
|
$sql .= ") ";
|
|
$parameters['domain_uuid'] = $_SESSION['domain_uuid'];
|
|
$parameters['user_uuid'] = $user_uuid;
|
|
$database->execute($sql, $parameters);
|
|
unset($sql, $parameters);
|
|
}
|
|
|
|
//add contact to array for insert
|
|
if ($action == 'add' && permission_exists('user_add') && permission_exists('contact_add')) {
|
|
$contact_uuid = uuid();
|
|
$array['contacts'][$c]['domain_uuid'] = $domain_uuid;
|
|
$array['contacts'][$c]['contact_uuid'] = $contact_uuid;
|
|
$array['contacts'][$c]['contact_type'] = 'user';
|
|
$array['contacts'][$c]['contact_organization'] = $contact_organization;
|
|
$array['contacts'][$c]['contact_name_given'] = $contact_name_given;
|
|
$array['contacts'][$c]['contact_name_family'] = $contact_name_family;
|
|
$array['contacts'][$c]['contact_nickname'] = $username;
|
|
$c++;
|
|
if (permission_exists('contact_email_add')) {
|
|
$contact_email_uuid = uuid();
|
|
$array['contact_emails'][$c]['contact_email_uuid'] = $contact_email_uuid;
|
|
$array['contact_emails'][$c]['domain_uuid'] = $domain_uuid;
|
|
$array['contact_emails'][$c]['contact_uuid'] = $contact_uuid;
|
|
$array['contact_emails'][$c]['email_address'] = $user_email;
|
|
$array['contact_emails'][$c]['email_primary'] = '1';
|
|
$c++;
|
|
}
|
|
}
|
|
|
|
//set the password hash cost
|
|
$options = array('cost' => 10);
|
|
|
|
//add user setting to array for update
|
|
$array['users'][$x]['user_uuid'] = $user_uuid;
|
|
$array['users'][$x]['domain_uuid'] = $domain_uuid;
|
|
if (!empty($username) && (empty($username_old) || $username != $username_old)) {
|
|
$array['users'][$x]['username'] = $username;
|
|
}
|
|
if (permission_exists('user_password') && !empty($password) && $password == $password_confirm) {
|
|
//remove the session id files
|
|
$sql = "select session_id from v_user_logs ";
|
|
$sql .= "where user_uuid = :user_uuid ";
|
|
$sql .= "and timestamp > NOW() - INTERVAL '4 hours' ";
|
|
$parameters['user_uuid'] = $user_uuid;
|
|
$user_logs = $database->select($sql, $parameters, 'all');
|
|
foreach ($user_logs as $row) {
|
|
if (preg_match('/^[a-zA-Z0-9,-]+$/', $row['session_id']) && file_exists(session_save_path() . "/sess_" . $row['session_id'])) {
|
|
unlink(session_save_path() . "/sess_" . $row['session_id']);
|
|
}
|
|
}
|
|
|
|
//create a one way hash for the user password
|
|
$array['users'][$x]['password'] = password_hash($password, PASSWORD_DEFAULT, $options);
|
|
$array['users'][$x]['salt'] = null;
|
|
}
|
|
$array['users'][$x]['user_email'] = $user_email;
|
|
$array['users'][$x]['user_status'] = $user_status;
|
|
if (permission_exists('user_add') || permission_exists('user_edit')) {
|
|
if (permission_exists('api_key')) {
|
|
$array['users'][$x]['api_key'] = (!empty($api_key)) ? $api_key : null;
|
|
}
|
|
if (!empty($_SESSION['authentication']['methods']) && in_array('totp', $_SESSION['authentication']['methods'])) {
|
|
$array['users'][$x]['user_totp_secret'] = $user_totp_secret;
|
|
}
|
|
$array['users'][$x]['user_type'] = $user_type;
|
|
$array['users'][$x]['user_enabled'] = $user_enabled;
|
|
if (permission_exists('contact_add')) {
|
|
$array['users'][$x]['contact_uuid'] = (!empty($contact_uuid)) ? $contact_uuid : null;
|
|
}
|
|
if ($action == 'add') {
|
|
$array['users'][$x]['add_user'] = $_SESSION["user"]["username"];
|
|
$array['users'][$x]['add_date'] = date("Y-m-d H:i:s.uO");
|
|
}
|
|
}
|
|
$x++;
|
|
|
|
//add the user_edit permission
|
|
$p = new permissions;
|
|
$p->add("user_setting_add", "temp");
|
|
$p->add("user_setting_edit", "temp");
|
|
$p->add("user_edit", "temp");
|
|
$p->add('user_group_add', 'temp');
|
|
|
|
//save the data
|
|
$database->save($array);
|
|
//$message = $database->message;
|
|
|
|
//remove the temporary permission
|
|
$p->delete("user_setting_add", "temp");
|
|
$p->delete("user_setting_edit", "temp");
|
|
$p->delete("user_edit", "temp");
|
|
$p->delete('user_group_add', 'temp');
|
|
|
|
//if call center installed
|
|
if ($action == 'edit' && permission_exists('user_edit') && file_exists($_SERVER["PROJECT_ROOT"]."/app/call_centers/app_config.php")) {
|
|
//get the call center agent uuid
|
|
$sql = "select call_center_agent_uuid from v_call_center_agents ";
|
|
$sql .= "where domain_uuid = :domain_uuid ";
|
|
$sql .= "and user_uuid = :user_uuid ";
|
|
$parameters['domain_uuid'] = $_SESSION['domain_uuid'];
|
|
$parameters['user_uuid'] = $user_uuid;
|
|
$call_center_agent_uuid = $database->select($sql, $parameters, 'column');
|
|
unset($sql, $parameters);
|
|
|
|
//update the user_status
|
|
if (isset($call_center_agent_uuid) && is_uuid($call_center_agent_uuid) && !empty($user_status)) {
|
|
$esl = event_socket::create();
|
|
$switch_cmd = "callcenter_config agent set status ".$call_center_agent_uuid." '".$user_status."'";
|
|
$switch_result = event_socket::api($switch_cmd);
|
|
}
|
|
|
|
//update the user state
|
|
if (isset($call_center_agent_uuid) && is_uuid($call_center_agent_uuid)) {
|
|
$esl = event_socket::create();
|
|
$cmd = "callcenter_config agent set state ".$call_center_agent_uuid." Waiting";
|
|
$response = event_socket::api($cmd);
|
|
}
|
|
}
|
|
|
|
//response message
|
|
if ($action == 'edit') {
|
|
message::add($text['message-update'],'positive');
|
|
}
|
|
else {
|
|
message::add($text['message-add'],'positive');
|
|
}
|
|
header("Location: user_edit.php?id=".urlencode($user_uuid));
|
|
exit;
|
|
}
|
|
|
|
//populate form
|
|
if (persistent_form_values('exists')) {
|
|
//populate the form with values from session variable
|
|
persistent_form_values('load');
|
|
//clear, set $unsaved flag
|
|
persistent_form_values('clear');
|
|
}
|
|
else {
|
|
//populate the form with values from db
|
|
if ($action == 'edit') {
|
|
$sql = "select domain_uuid, user_uuid, username, user_email, api_key, user_totp_secret, ";
|
|
$sql .= "user_type, user_enabled, contact_uuid, cast(user_enabled as text), user_status ";
|
|
$sql .= "from v_users ";
|
|
$sql .= "where user_uuid = :user_uuid ";
|
|
if (!permission_exists('user_all')) {
|
|
$sql .= "and domain_uuid = :domain_uuid ";
|
|
$parameters['domain_uuid'] = $domain_uuid;
|
|
}
|
|
$parameters['user_uuid'] = $user_uuid;
|
|
$row = $database->select($sql, $parameters, 'row');
|
|
if (is_array($row) && sizeof($row) > 0) {
|
|
$domain_uuid = $row["domain_uuid"];
|
|
$user_uuid = $row["user_uuid"];
|
|
$username = $row["username"];
|
|
$user_email = $row["user_email"];
|
|
$api_key = $row["api_key"];
|
|
$user_totp_secret = $row["user_totp_secret"];
|
|
$user_type = $row["user_type"];
|
|
$user_enabled = $row["user_enabled"];
|
|
if (permission_exists('contact_view')) {
|
|
$contact_uuid = $row["contact_uuid"];
|
|
}
|
|
$user_status = $row["user_status"];
|
|
}
|
|
else {
|
|
message::add($text['message-invalid_user'], 'negative', 7500);
|
|
header("Location: user_edit.php?id=".$_SESSION['user_uuid']);
|
|
exit;
|
|
}
|
|
unset($sql, $parameters, $row);
|
|
|
|
//get user settings
|
|
$sql = "select * from v_user_settings ";
|
|
$sql .= "where user_uuid = :user_uuid ";
|
|
$sql .= "and user_setting_enabled = 'true' ";
|
|
$parameters['user_uuid'] = $user_uuid;
|
|
$result = $database->select($sql, $parameters, 'all');
|
|
if (is_array($result)) {
|
|
foreach($result as $row) {
|
|
$name = $row['user_setting_name'];
|
|
$category = $row['user_setting_category'];
|
|
$subcategory = $row['user_setting_subcategory'];
|
|
if (empty($subcategory)) {
|
|
//$$category[$name] = $row['domain_setting_value'];
|
|
$user_settings[$category][$name] = $row['user_setting_value'];
|
|
}
|
|
else {
|
|
$user_settings[$category][$subcategory][$name] = $row['user_setting_value'];
|
|
}
|
|
}
|
|
}
|
|
unset($sql, $parameters, $result, $row);
|
|
}
|
|
}
|
|
|
|
//set the defaults
|
|
if (empty($user_enabled)) { $user_enabled = "true"; }
|
|
if (empty($user_totp_secret)) { $user_totp_secret = ""; }
|
|
|
|
//create token
|
|
$object = new token;
|
|
$token = $object->create($_SERVER['PHP_SELF']);
|
|
|
|
//include the header
|
|
require_once "resources/header.php";
|
|
$document['title'] = $text['title-user_edit'];
|
|
|
|
//show the content
|
|
if (permission_exists('user_password')) {
|
|
echo "<script>\n";
|
|
echo " function compare_passwords() {\n";
|
|
echo " if (document.getElementById('password') === document.activeElement || document.getElementById('password_confirm') === document.activeElement) {\n";
|
|
echo " if ($('#password').val() != '' || $('#password_confirm').val() != '') {\n";
|
|
echo " if ($('#password').val() != $('#password_confirm').val()) {\n";
|
|
echo " $('#password').removeClass('formfld_highlight_good');\n";
|
|
echo " $('#password_confirm').removeClass('formfld_highlight_good');\n";
|
|
echo " $('#password').addClass('formfld_highlight_bad');\n";
|
|
echo " $('#password_confirm').addClass('formfld_highlight_bad');\n";
|
|
echo " }\n";
|
|
echo " else {\n";
|
|
echo " $('#password').removeClass('formfld_highlight_bad');\n";
|
|
echo " $('#password_confirm').removeClass('formfld_highlight_bad');\n";
|
|
echo " $('#password').addClass('formfld_highlight_good');\n";
|
|
echo " $('#password_confirm').addClass('formfld_highlight_good');\n";
|
|
echo " }\n";
|
|
echo " }\n";
|
|
echo " }\n";
|
|
echo " else {\n";
|
|
echo " $('#password').removeClass('formfld_highlight_bad');\n";
|
|
echo " $('#password_confirm').removeClass('formfld_highlight_bad');\n";
|
|
echo " $('#password').removeClass('formfld_highlight_good');\n";
|
|
echo " $('#password_confirm').removeClass('formfld_highlight_good');\n";
|
|
echo " }\n";
|
|
echo " }\n";
|
|
echo " function show_strength_meter() {\n";
|
|
echo " $('#pwstrength_progress').slideDown();\n";
|
|
echo " }\n";
|
|
echo "</script>\n";
|
|
}
|
|
|
|
echo "<form name='frm' id='frm' method='post'>\n";
|
|
|
|
echo "<div class='action_bar' id='action_bar'>\n";
|
|
echo " <div class='heading'><b>".$text['header-user_edit']."</b></div>\n";
|
|
echo " <div class='actions'>\n";
|
|
if (!empty($unsaved)) {
|
|
echo "<div class='unsaved'>".$text['message-unsaved_changes']." <i class='fas fa-exclamation-triangle'></i></div>";
|
|
}
|
|
if (permission_exists('user_add') || permission_exists('user_edit')) {
|
|
echo button::create(['type'=>'button','label'=>$text['button-back'],'icon'=>$_SESSION['theme']['button_icon_back'],'id'=>'btn_back','link'=>'users.php']);
|
|
}
|
|
$button_margin = 'margin-left: 15px;';
|
|
if (permission_exists('ticket_add') || permission_exists('ticket_edit')) {
|
|
echo button::create(['type'=>'button','label'=>$text['button-tickets'],'icon'=>'tags','style'=>$button_margin,'link'=>PROJECT_PATH.'/app/tickets/tickets.php?user_uuid='.urlencode($user_uuid)]);
|
|
unset($button_margin);
|
|
}
|
|
if (permission_exists('user_permissions') && file_exists('../../app/user_permissions/user_permissions.php')) {
|
|
echo button::create(['type'=>'button','label'=>$text['button-permissions'],'icon'=>'key','style'=>$button_margin,'link'=>PROJECT_PATH.'/app/user_permissions/user_permissions.php?id='.urlencode($user_uuid)]);
|
|
unset($button_margin);
|
|
}
|
|
if (permission_exists('user_setting_view')) {
|
|
echo button::create(['type'=>'button','label'=>$text['button-settings'],'icon'=>$_SESSION['theme']['button_icon_settings'],'id'=>'btn_settings','style'=>'','link'=>PROJECT_PATH.'/core/user_settings/user_settings.php?id='.urlencode($user_uuid)]);
|
|
}
|
|
echo button::create(['type'=>'button','label'=>$text['button-save'],'icon'=>$_SESSION['theme']['button_icon_save'],'id'=>'btn_save','style'=>'margin-left: 15px;','onclick'=>'submit_form();']);
|
|
echo " </div>\n";
|
|
echo " <div style='clear: both;'></div>\n";
|
|
echo "</div>\n";
|
|
|
|
echo $text['description-user_edit']."\n";
|
|
echo "<br /><br />\n";
|
|
|
|
echo "<div class='card'>\n";
|
|
echo "<table cellpadding='0' cellspacing='0' border='0' width='100%'>";
|
|
|
|
echo " <tr>";
|
|
echo " <td width='30%' class='vncellreq' valign='top'>".$text['label-username']."</td>";
|
|
echo " <td width='70%' class='vtable'>";
|
|
if (permission_exists("user_edit")) {
|
|
echo " <input type='text' class='formfld' name='username' id='username' autocomplete='new-password' value='".escape($username ?? '')."' required='required'>\n";
|
|
echo " <input type='text' style='display: none;' disabled='disabled'>\n"; //help defeat browser auto-fill
|
|
}
|
|
else {
|
|
echo " ".escape($username)."\n";
|
|
echo " <input type='hidden' name='username' id='username' autocomplete='new-password' value='".escape($username ?? '')."'>\n";
|
|
}
|
|
echo " </td>";
|
|
echo " </tr>";
|
|
|
|
if (permission_exists('user_password')) {
|
|
echo " <tr>";
|
|
echo " <td class='vncell".(($action == 'add') ? 'req' : null)."' valign='top'>".$text['label-password']."</td>";
|
|
echo " <td class='vtable'>";
|
|
echo " <input type='password' style='display: none;' disabled='disabled'>"; //help defeat browser auto-fill
|
|
echo " <input type='password' autocomplete='new-password' class='formfld' name='password' id='password' value=\"".escape($password ?? null)."\" ".($action == 'add' ? "required='required'" : null)." onkeypress='show_strength_meter();' onfocus='compare_passwords();' onkeyup='compare_passwords();' onblur='compare_passwords();'>";
|
|
echo " <div id='pwstrength_progress' class='pwstrength_progress'></div><br />\n";
|
|
if ((!empty($required['length']) && is_numeric($required['length']) && $required['length'] != 0) || $required['number'] || $required['lowercase'] || $required['uppercase'] || $required['special']) {
|
|
echo $text['label-required'].': ';
|
|
if (is_numeric($required['length']) && $required['length'] != 0) {
|
|
echo $required['length']." ".$text['label-characters'];
|
|
if ($required['number'] || $required['lowercase'] || $required['uppercase'] || $required['special']) {
|
|
echo " (";
|
|
}
|
|
}
|
|
if ($required['number']) {
|
|
$required_temp[] = $text['label-number'];
|
|
}
|
|
if ($required['lowercase']) {
|
|
$required_temp[] = $text['label-lowercase'];
|
|
}
|
|
if ($required['uppercase']) {
|
|
$required_temp[] = $text['label-uppercase'];
|
|
}
|
|
if ($required['special']) {
|
|
$required_temp[] = $text['label-special'];
|
|
}
|
|
if (!empty($required_temp)) {
|
|
echo implode(', ',$required_temp);
|
|
if (is_numeric($required['length']) && $required['length'] != 0) {
|
|
echo ")";
|
|
}
|
|
}
|
|
unset($required_temp);
|
|
}
|
|
echo " </td>";
|
|
echo " </tr>";
|
|
echo " <tr>";
|
|
echo " <td class='vncell".(($action == 'add') ? 'req' : null)."' valign='top'>".$text['label-confirm_password']."</td>";
|
|
echo " <td class='vtable'>";
|
|
echo " <input type='password' autocomplete='new-password' class='formfld' name='password_confirm' id='password_confirm' value=\"".escape($password_confirm ?? null)."\" ".($action == 'add' ? "required='required'" : null)." onfocus='compare_passwords();' onkeyup='compare_passwords();' onblur='compare_passwords();'><br />\n";
|
|
echo " ".$text['message-green_border_passwords_match']."\n";
|
|
echo " </td>";
|
|
echo " </tr>";
|
|
}
|
|
|
|
echo " <tr>";
|
|
echo " <td class='vncellreq'>".$text['label-email']."</td>";
|
|
echo " <td class='vtable'><input type='text' class='formfld' name='user_email' value='".escape($user_email ?? '')."' required='required'></td>";
|
|
echo " </tr>";
|
|
|
|
echo " <tr>\n";
|
|
echo " <td width='20%' class=\"vncell\" valign='top'>\n";
|
|
echo " ".$text['label-user_language']."\n";
|
|
echo " </td>\n";
|
|
echo " <td class=\"vtable\" align='left'>\n";
|
|
echo " <select id='user_language' name='user_language' class='formfld' style=''>\n";
|
|
echo " <option value=''></option>\n";
|
|
//get all language codes from database
|
|
$sql = "select * from v_languages order by language asc ";
|
|
$languages = $database->select($sql, null, 'all');
|
|
if (!empty($languages) && is_array($languages) && sizeof($languages) != 0) {
|
|
foreach ($languages as $row) {
|
|
$language_codes[$row["code"]] = $row["language"];
|
|
}
|
|
}
|
|
unset($sql, $languages, $row);
|
|
if (is_array($_SESSION['app']['languages']) && sizeof($_SESSION['app']['languages']) != 0) {
|
|
foreach ($_SESSION['app']['languages'] as $code) {
|
|
$selected = (isset($user_language) && $code == $user_language) || (isset($user_settings['domain']['language']['code']) && $code == $user_settings['domain']['language']['code']) ? "selected='selected'" : null;
|
|
echo " <option value='".$code."' ".$selected.">".escape($language_codes[$code] ?? null)." [".escape($code ?? null)."]</option>\n";
|
|
}
|
|
}
|
|
echo " </select>\n";
|
|
echo " <br />\n";
|
|
echo " ".$text['description-user_language']."<br />\n";
|
|
echo " </td>\n";
|
|
echo " </tr>\n";
|
|
|
|
echo " <tr>\n";
|
|
echo " <td width='20%' class=\"vncell\" valign='top'>\n";
|
|
echo " ".$text['label-time_zone']."\n";
|
|
echo " </td>\n";
|
|
echo " <td class=\"vtable\" align='left'>\n";
|
|
echo " <select id='user_time_zone' name='user_time_zone' class='formfld' style=''>\n";
|
|
echo " <option value=''></option>\n";
|
|
//$list = DateTimeZone::listAbbreviations();
|
|
$time_zone_identifiers = DateTimeZone::listIdentifiers();
|
|
$previous_category = '';
|
|
$x = 0;
|
|
foreach ($time_zone_identifiers as $key => $row) {
|
|
$time_zone = explode("/", $row);
|
|
$category = $time_zone[0];
|
|
if ($category != $previous_category) {
|
|
if ($x > 0) {
|
|
echo " </optgroup>\n";
|
|
}
|
|
echo " <optgroup label='".$category."'>\n";
|
|
}
|
|
$selected = (isset($user_time_zone) && $row == $user_time_zone) || (!empty($user_settings['domain']['time_zone']) && $row == $user_settings['domain']['time_zone']['name']) ? "selected='selected'" : null;
|
|
echo " <option value='".escape($row)."' ".$selected.">".escape($row)."</option>\n";
|
|
$previous_category = $category;
|
|
$x++;
|
|
}
|
|
echo " </select>\n";
|
|
echo " <br />\n";
|
|
echo " ".$text['description-time_zone']."<br />\n";
|
|
echo " </td>\n";
|
|
echo " </tr>\n";
|
|
|
|
if (permission_exists("user_status")) {
|
|
echo " <tr>\n";
|
|
echo " <td width='20%' class=\"vncell\" valign='top'>\n";
|
|
echo " ".$text['label-status']."\n";
|
|
echo " </td>\n";
|
|
echo " <td class=\"vtable\">\n";
|
|
echo " <select id='user_status' name='user_status' class='formfld' style=''>\n";
|
|
echo " <option value=''></option>\n";
|
|
echo " <option value='Available' ".(($user_status == "Available") ? "selected='selected'" : null).">".$text['option-available']."</option>\n";
|
|
echo " <option value='Available (On Demand)' ".(($user_status == "Available (On Demand)") ? "selected='selected'" : null).">".$text['option-available_on_demand']."</option>\n";
|
|
echo " <option value='Logged Out' ".(($user_status == "Logged Out") ? "selected='selected'" : null).">".$text['option-logged_out']."</option>\n";
|
|
echo " <option value='On Break' ".(($user_status == "On Break") ? "selected='selected'" : null).">".$text['option-on_break']."</option>\n";
|
|
echo " <option value='Do Not Disturb' ".(($user_status == "Do Not Disturb") ? "selected='selected'" : null).">".$text['option-do_not_disturb']."</option>\n";
|
|
echo " </select>\n";
|
|
echo " <br />\n";
|
|
echo " ".$text['description-status']."<br />\n";
|
|
echo " </td>\n";
|
|
echo " </tr>\n";
|
|
}
|
|
|
|
if ($action == 'edit' && permission_exists("user_edit") && permission_exists('contact_edit')) {
|
|
echo " <tr>";
|
|
echo " <td class='vncell' valign='top'>".$text['label-contact']."</td>";
|
|
echo " <td class='vtable'>\n";
|
|
$sql = "select ";
|
|
$sql .= "c.contact_uuid, ";
|
|
$sql .= "c.contact_organization, ";
|
|
$sql .= "c.contact_name_given, ";
|
|
$sql .= "c.contact_name_family, ";
|
|
$sql .= "c.contact_nickname ";
|
|
$sql .= "from ";
|
|
$sql .= "v_contacts as c ";
|
|
$sql .= "where ";
|
|
$sql .= "c.domain_uuid = :domain_uuid ";
|
|
$sql .= "and not exists ( ";
|
|
$sql .= " select ";
|
|
$sql .= " contact_uuid ";
|
|
$sql .= " from ";
|
|
$sql .= " v_users as u ";
|
|
$sql .= " where ";
|
|
$sql .= " u.domain_uuid = :domain_uuid ";
|
|
if (is_uuid($contact_uuid)) { //don't exclude currently assigned contact
|
|
$sql .= "and u.contact_uuid <> :contact_uuid ";
|
|
$parameters['contact_uuid'] = $contact_uuid;
|
|
}
|
|
$sql .= " and u.contact_uuid = c.contact_uuid ";
|
|
$sql .= ") ";
|
|
$sql .= "order by ";
|
|
$sql .= "lower(c.contact_organization) asc, ";
|
|
$sql .= "lower(c.contact_name_family) asc, ";
|
|
$sql .= "lower(c.contact_name_given) asc, ";
|
|
$sql .= "lower(c.contact_nickname) asc ";
|
|
$parameters['domain_uuid'] = $_SESSION['domain_uuid'];
|
|
$contacts = $database->select($sql, $parameters, 'all');
|
|
unset($parameters);
|
|
echo "<select name=\"contact_uuid\" id=\"contact_uuid\" class=\"formfld\">\n";
|
|
echo "<option value=\"\"></option>\n";
|
|
foreach($contacts as $row) {
|
|
$contact_name = array();
|
|
if (!empty($row['contact_organization'])) { $contact_name[] = $row['contact_organization']; }
|
|
if (!empty($row['contact_name_family'])) { $contact_name[] = $row['contact_name_family']; }
|
|
if (!empty($row['contact_name_given'])) { $contact_name[] = $row['contact_name_given']; }
|
|
if (!empty($row['contact_name_family']) && empty($row['contact_name_family']) && !empty($row['contact_nickname'])) { $contact_name[] = $row['contact_nickname']; }
|
|
echo "<option value='".escape($row['contact_uuid'])."' ".(($row['contact_uuid'] == $contact_uuid) ? "selected='selected'" : null).">".escape(implode(', ', $contact_name))."</option>\n";
|
|
}
|
|
unset($sql, $row_count);
|
|
echo "</select>\n";
|
|
echo "<br />\n";
|
|
echo $text['description-contact']."\n";
|
|
if (!empty($contact_uuid)) {
|
|
echo " <a href=\"".PROJECT_PATH."/core/contacts/contact_edit.php?id=".urlencode($contact_uuid)."\">".$text['description-contact_view']."</a>\n";
|
|
}
|
|
echo " </td>";
|
|
echo " </tr>";
|
|
}
|
|
elseif ($action == 'add' && permission_exists("user_add") && permission_exists('contact_add')) {
|
|
echo " <tr>";
|
|
echo " <td class='vncell'>".$text['label-first_name']."</td>";
|
|
echo " <td class='vtable'><input type='text' class='formfld' name='contact_name_given' value='".escape($contact_name_given ?? '')."'></td>";
|
|
echo " </tr>";
|
|
echo " <tr>";
|
|
echo " <td class='vncell'>".$text['label-last_name']."</td>";
|
|
echo " <td class='vtable'><input type='text' class='formfld' name='contact_name_family' value='".escape($contact_name_family ?? '')."'></td>";
|
|
echo " </tr>";
|
|
echo " <tr>";
|
|
echo " <td class='vncell'>".$text['label-organization']."</td>";
|
|
echo " <td class='vtable'><input type='text' class='formfld' name='contact_organization' value='".escape($contact_organization ?? '')."'></td>";
|
|
echo " </tr>";
|
|
}
|
|
|
|
if (permission_exists("user_groups")) {
|
|
echo " <tr>";
|
|
echo " <td class='vncellreq' valign='top'>".$text['label-groups']."</td>";
|
|
echo " <td class='vtable'>";
|
|
|
|
$sql = "select ";
|
|
$sql .= " ug.*, g.domain_uuid as group_domain_uuid ";
|
|
$sql .= "from ";
|
|
$sql .= " v_user_groups as ug, ";
|
|
$sql .= " v_groups as g ";
|
|
$sql .= "where ";
|
|
$sql .= " ug.group_uuid = g.group_uuid ";
|
|
$sql .= " and (";
|
|
$sql .= " g.domain_uuid = :domain_uuid ";
|
|
$sql .= " or g.domain_uuid is null ";
|
|
$sql .= " ) ";
|
|
$sql .= " and ug.domain_uuid = :domain_uuid ";
|
|
$sql .= " and ug.user_uuid = :user_uuid ";
|
|
$sql .= "order by ";
|
|
$sql .= " g.domain_uuid desc, ";
|
|
$sql .= " g.group_name asc ";
|
|
$parameters['domain_uuid'] = $domain_uuid;
|
|
$parameters['user_uuid'] = $user_uuid;
|
|
$user_groups = $database->select($sql, $parameters, 'all');
|
|
if (is_array($user_groups)) {
|
|
echo "<table cellpadding='0' cellspacing='0' border='0'>\n";
|
|
foreach($user_groups as $field) {
|
|
if (!empty($field['group_name'])) {
|
|
echo "<tr>\n";
|
|
echo " <td class='vtable' style='white-space: nowrap; padding-right: 30px;' nowrap='nowrap'>";
|
|
echo escape($field['group_name']).((!empty($field['group_domain_uuid'])) ? "@".$_SESSION['domains'][$field['group_domain_uuid']]['domain_name'] : null);
|
|
echo " </td>\n";
|
|
if (permission_exists('user_group_delete') || if_group("superadmin")) {
|
|
echo " <td class='list_control_icons' style='width: 25px;'>\n";
|
|
echo " <a href='user_edit.php?id=".urlencode($user_uuid)."&domain_uuid=".urlencode($domain_uuid)."&group_uuid=".urlencode($field['group_uuid'])."&a=delete' alt='".$text['button-delete']."' onclick=\"return confirm('".$text['confirm-delete']."')\">".$v_link_label_delete."</a>\n";
|
|
echo " </td>\n";
|
|
}
|
|
echo "</tr>\n";
|
|
if (is_uuid($field['group_uuid'])) {
|
|
$assigned_groups[] = $field['group_uuid'];
|
|
}
|
|
}
|
|
}
|
|
echo "</table>\n";
|
|
}
|
|
unset($sql, $parameters, $user_groups, $field);
|
|
|
|
$sql = "select * from v_groups ";
|
|
$sql .= "where (domain_uuid = :domain_uuid or domain_uuid is null) ";
|
|
if (!empty($assigned_groups) && is_array($assigned_groups) && sizeof($assigned_groups) > 0) {
|
|
$sql .= "and group_uuid not in ('".implode("','",$assigned_groups)."') ";
|
|
}
|
|
$sql .= "order by domain_uuid desc, group_name asc ";
|
|
$parameters['domain_uuid'] = $domain_uuid;
|
|
$groups = $database->select($sql, $parameters, 'all');
|
|
if (is_array($groups)) {
|
|
if (isset($assigned_groups)) { echo "<br />\n"; }
|
|
echo "<select name='group_uuid_name' class='formfld' style='width: auto; margin-right: 3px;' ".($action == 'add' ? "required='required'" : null).">\n";
|
|
echo " <option value=''></option>\n";
|
|
foreach($groups as $field) {
|
|
if ($field['group_level'] <= $_SESSION['user']['group_level']) {
|
|
if (!isset($assigned_groups) || (isset($assigned_groups) && !in_array($field["group_uuid"], $assigned_groups))) {
|
|
if (isset($group_uuid_name) && $group_uuid_name == $field['group_uuid']."|".$field['group_name']) { $selected = "selected='selected'"; } else { $selected = ''; }
|
|
echo " <option value='".$field['group_uuid']."|".$field['group_name']."' $selected>".$field['group_name'].((!empty($field['domain_uuid'])) ? "@".$_SESSION['domains'][$field['domain_uuid']]['domain_name'] : null)."</option>\n";
|
|
}
|
|
}
|
|
}
|
|
echo "</select>";
|
|
if ($action == 'edit') {
|
|
echo button::create(['type'=>'button','label'=>$text['button-add'],'icon'=>$_SESSION['theme']['button_icon_add'],'onclick'=>'submit_form();']);
|
|
}
|
|
}
|
|
unset($sql, $parameters, $groups, $field);
|
|
|
|
echo " </td>";
|
|
echo " </tr>";
|
|
}
|
|
|
|
if (permission_exists('user_type')) {
|
|
echo "<tr>\n";
|
|
echo "<td class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
|
|
echo " ".$text['label-user_type']."\n";
|
|
echo "</td>\n";
|
|
echo "<td class='vtable' align='left'>\n";
|
|
echo " <select class='formfld' name='user_type' id='user_type'>\n";
|
|
echo " <option value='default' ".(($user_type == "default") ? "selected='selected'" : null).">".$text['label-default']."</option>\n";
|
|
echo " <option value='virtual' ".(($user_type == "virtual") ? "selected='selected'" : null).">".$text['label-virtual']."</option>\n";
|
|
echo " </select>\n";
|
|
echo "<br />\n";
|
|
echo $text['description-user_type']."\n";
|
|
echo "</td>\n";
|
|
echo "</tr>\n";
|
|
}
|
|
|
|
if (permission_exists('user_domain')) {
|
|
echo "<tr>\n";
|
|
echo "<td class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
|
|
echo " ".$text['label-domain']."\n";
|
|
echo "</td>\n";
|
|
echo "<td class='vtable' align='left'>\n";
|
|
echo " <select class='formfld' name='domain_uuid'>\n";
|
|
foreach ($_SESSION['domains'] as $row) {
|
|
echo " <option value='".escape($row['domain_uuid'])."' ".(($row['domain_uuid'] == $domain_uuid) ? "selected='selected'" : null).">".escape($row['domain_name'])."</option>\n";
|
|
}
|
|
echo " </select>\n";
|
|
echo "<br />\n";
|
|
echo $text['description-domain_name']."\n";
|
|
echo "</td>\n";
|
|
echo "</tr>\n";
|
|
}
|
|
else {
|
|
echo "<input type='hidden' name='domain_uuid' value='".escape($domain_uuid)."'>";
|
|
}
|
|
|
|
if (permission_exists('api_key')) {
|
|
echo " <tr>";
|
|
echo " <td class='vncell' valign='top'>".$text['label-api_key']."</td>";
|
|
echo " <td class='vtable'>\n";
|
|
echo " <input type='text' class='formfld' style='width: 250px; display: none;' name='api_key' id='api_key' value=\"".escape($api_key ?? '')."\" >";
|
|
if (empty($api_key)) {
|
|
//generate api key
|
|
echo button::create(['type'=>'button',
|
|
'label'=>$text['button-generate'],
|
|
'icon'=>'key',
|
|
'style'=>'margin-top: 1px; margin-bottom: 1px;',
|
|
'onclick'=>"document.getElementById('api_key').value = '".generate_password(32,3)."';
|
|
document.getElementById('frm').submit();"]);
|
|
}
|
|
else {
|
|
//view the api key
|
|
echo button::create(['type'=>'button',
|
|
'label'=>$text['button-view'],
|
|
'id'=>'button-api_key_view',
|
|
'icon'=>'key',
|
|
'style'=>'margin-top: 1px; margin-bottom: 1px;',
|
|
'onclick'=>"document.getElementById ('button-api_key_view').style.display = 'none';
|
|
document.getElementById('api_key').style.display = 'inline';
|
|
document.getElementById('button-api_key_hide').style.display = 'inline';
|
|
document.getElementById('button-api_key_view').style.display = 'none';"]);
|
|
|
|
echo button::create(['type'=>'button',
|
|
'label'=>$text['button-hide'],
|
|
'id'=>'button-api_key_hide',
|
|
'icon'=>'key',
|
|
'style'=>'display: none;',
|
|
'onclick'=>"document.getElementById('api_key').style.display = 'none';
|
|
document.getElementById('button-api_key_hide').style.display = 'none';
|
|
document.getElementById('button-api_key_view').style.display = 'inline';"]);
|
|
|
|
}
|
|
if (!empty($text['description-api_key'])) {
|
|
echo " <br />".$text['description-api_key']."<br />\n";
|
|
}
|
|
echo " </td>";
|
|
echo " </tr>";
|
|
}
|
|
|
|
//user time based one time password secret
|
|
if (!empty($_SESSION['authentication']['methods']) && in_array('totp', $_SESSION['authentication']['methods'])) {
|
|
if (!empty($user_totp_secret) && !empty($username)) {
|
|
$otpauth = "otpauth://totp/".$username."?secret=".$user_totp_secret."&issuer=".$_SESSION['domain_name'];
|
|
|
|
require_once 'resources/qr_code/QRErrorCorrectLevel.php';
|
|
require_once 'resources/qr_code/QRCode.php';
|
|
require_once 'resources/qr_code/QRCodeImage.php';
|
|
|
|
try {
|
|
$code = new QRCode (- 1, QRErrorCorrectLevel::H);
|
|
$code->addData($otpauth);
|
|
$code->make();
|
|
$img = new QRCodeImage ($code, $width=210, $height=210, $quality=50);
|
|
$img->draw();
|
|
$image = $img->getImage();
|
|
$img->finish();
|
|
}
|
|
catch (Exception $error) {
|
|
echo $error;
|
|
}
|
|
}
|
|
echo "<tr>\n";
|
|
echo "<td class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
|
|
echo " ".$text['label-user_totp_secret']."\n";
|
|
echo "</td>\n";
|
|
echo "<td class='vtable' align='left' valign='top'>\n";
|
|
echo " <input type='hidden' class='formfld' style='width: 250px;' name='user_totp_secret' id='user_totp_secret' value=\"".escape($user_totp_secret)."\" >";
|
|
if (empty($user_totp_secret)) {
|
|
$base32 = new base2n(5, 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567', FALSE, TRUE, TRUE);
|
|
$user_totp_secret = $base32->encode(generate_password(20,3));
|
|
echo button::create(['type'=>'button',
|
|
'label'=>$text['button-setup'],
|
|
'icon'=>'key',
|
|
'onclick'=>"document.getElementById('user_totp_secret').value = '".$user_totp_secret."';
|
|
document.getElementById('frm').submit();"]);
|
|
}
|
|
else {
|
|
echo " <div id='totp_qr' style='display:none;'>\n";
|
|
echo " ".$user_totp_secret."<br />\n";
|
|
echo " <img src=\"data:image/jpeg;base64,".base64_encode($image)."\" style='margin-top: 0px; padding: 5px; background: white; max-width: 100%;'><br />\n";
|
|
echo " ".$text['description-user_totp_qr_code']."<br /><br />\n";
|
|
echo " </div>\n";
|
|
echo button::create(['type'=>'button',
|
|
'label'=>$text['button-view'],
|
|
'id'=>'button-totp_view',
|
|
'icon'=>'key',
|
|
'onclick'=>"document.getElementById('totp_qr').style.display = 'inline';
|
|
document.getElementById('button-totp_hide').style.display = 'inline';
|
|
document.getElementById('button-totp_disable').style.display = 'inline';
|
|
document.getElementById('button-totp_view').style.display = 'none';"]);
|
|
|
|
echo button::create(['type'=>'button',
|
|
'label'=>$text['button-hide'],
|
|
'id'=>'button-totp_hide',
|
|
'icon'=>'key',
|
|
'style'=>'display: none;',
|
|
'onclick'=>"document.getElementById('totp_qr').style.display = 'none';
|
|
document.getElementById('button-totp_hide').style.display = 'none';
|
|
document.getElementById('button-totp_disable').style.display = 'none';
|
|
document.getElementById('button-totp_view').style.display = 'inline';"]);
|
|
|
|
echo button::create(['type'=>'button',
|
|
'label'=>$text['button-disable'],
|
|
'id'=>'button-totp_disable',
|
|
'icon'=>'trash',
|
|
'style'=>'display: none;',
|
|
'onclick'=>"document.getElementById('user_totp_secret').value = '';
|
|
document.getElementById('frm').submit();"]);
|
|
}
|
|
if (empty($user_totp_secret)) {
|
|
echo " <br />".$text['description-user_totp_secret']."<br />\n";
|
|
}
|
|
else {
|
|
echo " <br />".$text['description-user_totp_view']."<br />\n";
|
|
}
|
|
echo "</td>\n";
|
|
echo "</tr>\n";
|
|
}
|
|
|
|
echo "<tr ".($user_uuid == $_SESSION['user_uuid'] ? "style='display: none;'" : null).">\n";
|
|
echo "<td class='vncell' valign='top' align='left' nowrap='nowrap'>\n";
|
|
echo " ".$text['label-enabled']."\n";
|
|
echo "</td>\n";
|
|
echo "<td class='vtable' align='left'>\n";
|
|
if (substr($_SESSION['theme']['input_toggle_style']['text'], 0, 6) == 'switch') {
|
|
echo " <label class='switch'>\n";
|
|
echo " <input type='checkbox' id='user_enabled' name='user_enabled' value='true' ".($user_enabled == 'true' ? "checked='checked'" : null).">\n";
|
|
echo " <span class='slider'></span>\n";
|
|
echo " </label>\n";
|
|
}
|
|
else {
|
|
echo " <select class='formfld' id='user_enabled' name='user_enabled'>\n";
|
|
echo " <option value='true' ".($user_enabled == 'true' ? "selected='selected'" : null).">".$text['option-true']."</option>\n";
|
|
echo " <option value='false' ".($user_enabled == 'false' ? "selected='selected'" : null).">".$text['option-false']."</option>\n";
|
|
echo " </select>\n";
|
|
}
|
|
echo "<br />\n";
|
|
echo $text['description-enabled']."\n";
|
|
echo "</td>\n";
|
|
echo "</tr>\n";
|
|
|
|
echo "</table>";
|
|
echo "</div>\n";
|
|
echo "<br /><br />";
|
|
|
|
if ($action == 'edit') {
|
|
echo "<input type='hidden' name='id' value=\"".escape($user_uuid)."\">";
|
|
if (permission_exists("user_edit")) {
|
|
echo "<input type='hidden' name='username_old' value=\"".escape($username)."\">";
|
|
}
|
|
}
|
|
echo "<input type='hidden' name='".$token['name']."' value='".$token['hash']."'>\n";
|
|
|
|
echo "</form>";
|
|
|
|
//hide password fields before submit
|
|
echo "<script>\n";
|
|
echo " function submit_form() {\n";
|
|
echo " hide_password_fields();\n";
|
|
echo " $('form#frm').submit();\n";
|
|
echo " }\n";
|
|
echo "</script>\n";
|
|
|
|
//include the footer
|
|
require_once "resources/footer.php";
|
|
|
|
?>
|