?><?
/**
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License as published by the 
 * Free Software Foundation; either version 2 of the License, or (at your
 * option) any later version.
 *
 * This program is distributed in the hope that it will be useful, but 
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General
 * Public License for more details.
 */
 
/**
 * Poseidon PHP Content Document
 * Author:  Torben Jensen
 * Contact: Torben@GreyStork.com
 *
 * User listing and administration script for use as an 
 * active PHP document in Poseidon content management system.
 *
 * February 23, 2004: V1.2.0
 * + Added setting for number of users to display per page.
 * February 6, 2004: V1.1.3
 * - Fixed a couple of security issues.
 * December 10, 2003: V1.1.2
 * + Added option to turn off display of e-mail addresses.
 * October 10, 2003: V1.1.1
 * + All UI text is now defined as variables for easy translation.
 * October 9, 2003: V1.1.0
 * + Added code for automatic addition of menu item.
 *   (Requires Poseidon 0.6 or better)
 * August 22, 2003: V1.0.0 Release
 * ! Admins will be able to set user levels and reset passwords, 
 *   while everyone else will only see the uneditable list. 
 * ! Admins will see the actual user level figure in the listing, 
 *   while everyone else will see the ratings Admin, Writer or Reader. 
 */
 
/**
 * Whether to show e-mail addresses in the list. 
 * Set to false if you don't want them to show up.
 */
$ShowEmailAddr   = true;

/**
 * How many users to show per page.
 * Set to zero if you want to display all users.
 */
$UsersPerPage    = 25;
 
$UserListVersion = "1.2.0";
$MenuSection     = "User Tools";
$MenuItemText    = "Registered Users";
$MenuItemTooltip = "Cast in order of appearance";
$MenuErrorText   = "Failed to create menu item";

$ListHeadings = array (
	array ( "Mark",      "center" ),
	array ( "Name",      "center" ),
	array ( "EMail",     "left" ),
	array ( "Time Zone", "left" ),
	array ( "Joined",    "left" ),
	array ( "Comments",  "center" ),
	array ( "Level",     "center" )
);

$WhatToDoText      = "What to do with marked users";
$ResetPasswordText = "Reset Password to";
$OrText            = "OR";
$SetLevelText      = "Set UserLevel to";

$ErrorHeading      = "No Users Found In Database";
$ErrorText         = "I can't find find any users! Either something terrible has happened that wiped humanity from the face of the earth or I can't find the database anywhere, although I sure looked for it. I'm very confused...";
$MustLogin         = "You must log in to view this page.";

$nl = chr(13) . chr(10);

global $db;


	
if (($userlist = $db->query("SELECT u.id, u.username, u.email, u.timezone, u.created, u.userlevel, COUNT(c.userid) AS numcomments FROM ".DBTABLEPREFIX."users AS u LEFT JOIN ".DBTABLEPREFIX."comments AS c ON u.id = c.userid GROUP BY u.id ORDER BY u.id ASC")) && count($result) > 0)
{
	if ($userinfo->userlevel >= USERLEVEL_ADMIN) 
	{	
		if (isset($_POST['action']) && isset($_POST['userlist']))
		{
			if ($_POST['action'] == $ResetPasswordText)
			{
				if ($db->query("UPDATE ".DBTABLEPREFIX."users SET pass='" . $_POST['setpassword'] . "' WHERE id IN (" . implode(",",$_POST['userlist']) . ")"))
					print "<b>Password(s) updated!</b>" . $nl;
			}
			elseif ($_POST['action'] == $SetLevelText)
			{
				if ($db->query("UPDATE ".DBTABLEPREFIX."users SET userlevel=" . $_POST['setlevel'] . " WHERE id IN (" . implode(",",$_POST['userlist']) . ")"))
					print "<b>User level(s) updated!</b>" . $nl;
			}
		}
		elseif (POSEIDON_VERSION >= "0.6" && count($db->query("SELECT name FROM ".DBTABLEPREFIX."plugins WHERE name='UserList'")) == 0)
		{
			$UserListCode = "\$poseidon->createMenuItem(\"" . $MenuSection . "\", \"" . $MenuItemText . "\", \"content.php?title=" . urlencode($item->title) . "\", \"" . $MenuItemTooltip . ".\", 10);" . $nl;
			if (!installPlugin ("UserList", $UserListVersion, "", $UserListCode, 1))
			{
				print "
				<p align=\"center\">
					<b>" . $MenuErrorText . ".</b>
				</p>";
			}
		}
		
		?>
		<p align="center">
		<form name="userlistform" action="" method="post">
		<table align="center">
		<tr class="genericTableHeader">
		<?
		print "<td class=\"genericTableHeader\" align=\"" . $ListHeadings[0][1] . "\">" . $ListHeadings[0][0] . "</td>";
	}
	elseif ($userinfo->userlevel >= 10)
	{
		?>
		<p align="center">
		<table align="center">
		<tr class="genericTableHeader">
		<?
	}
	else
	{
		?>
		<p align="center">
		<b><?=$MustLogin?></b>
		</p>
		<?
		exit;
	}
	for ($hdg = 1; $hdg < count($ListHeadings); ++$hdg)
	{
		if ($hdg != 2 || $ShowEmailAddr)
			print "<td class=\"genericTableHeader\" align=\"" . $ListHeadings[$hdg][1] . "\">" . $ListHeadings[$hdg][0] . "</td>";
	}
	
	$UserListHTML = array();
	$UserListItem = 0;
	$offset = 0;
	
	if ($UsersPerPage == 0)
		$UsersPerPage = count($userlist);
	$userlistchunk = array_chunk($userlist, $UsersPerPage);
		
	if (isset($_GET['offset']) && isset($userlistchunk[$_GET['offset']]))
		$offset = $_GET['offset'];
		
	
	foreach ($userlistchunk[$offset] as $userdata)
	{
		if ($userinfo->userlevel < USERLEVEL_ADMIN)
			if ($userdata->userlevel >= USERLEVEL_ADMIN)
				$UserLevelString = "Admin";
			elseif ($userdata->userlevel >= USERLEVEL_POST)
				$UserLevelString = "Writer";
			else
				$UserLevelString = "Reader";
		else
			$UserLevelString = $userdata->userlevel;
		if ($userdata->timezone < 0)
			$TimeZoneString = "GMT " . $userdata->timezone;
		else
			$TimeZoneString = "GMT +" . $userdata->timezone;
		$CreatedString = strftime("%b %e, %Y", $userdata->created);
		$UserListHTML[$UserListItem] = "<tr>" . $nl;
		if ($userinfo->userlevel >= USERLEVEL_ADMIN) 
			$UserListHTML[$UserListItem] = $UserListHTML[$UserListItem] . "<td class=\"genericTableCell\" align=\"center\"><input type=\"checkbox\" class=\"checkbox\" name=\"userlist[]\" value=\"" . $userdata->id . "\"></td>" . $nl;
		$UserListHTML[$UserListItem] = $UserListHTML[$UserListItem] . "<td class=\"genericTableCell\" align=\"left\"><a href=\"users.php?op=info&username=" . $userdata->username . "\">" . $userdata->username . "</td>" . $nl;
		if ($ShowEmailAddr)
			$UserListHTML[$UserListItem] = $UserListHTML[$UserListItem] . "<td class=\"genericTableCell\" align=\"left\"><a href=\"mailto:" . $userdata->email . "\">" . $userdata->email . "</a></td>" . $nl;
		$UserListHTML[$UserListItem] = $UserListHTML[$UserListItem] . "<td class=\"genericTableCell\" align=\"center\">" . $TimeZoneString . "</td>" . $nl;
		$UserListHTML[$UserListItem] = $UserListHTML[$UserListItem] . "<td class=\"genericTableCell\" align=\"left\">" . $CreatedString . "</td>" . $nl;
		$UserListHTML[$UserListItem] = $UserListHTML[$UserListItem] . "<td class=\"genericTableCell\" align=\"center\">" . $userdata->numcomments . "</td>" . $nl;
		$UserListHTML[$UserListItem] = $UserListHTML[$UserListItem] . "<td class=\"genericTableCell\" align=\"center\">" . $UserLevelString . "</td>" . $nl;
		++$UserListItem;
	}
	foreach ($UserListHTML as $UserListRow)
		print $UserListRow;
	?>
	</table>
	<?
	if ($userinfo->userlevel >= USERLEVEL_ADMIN) 
	{	
		print "<hr align=\"center\">
		<b>" . $WhatToDoText . ":</b><br>
		<input type=\"submit\" class=\"button\" name=\"action\" value=\"" . $ResetPasswordText . "\">
		<input type=\"text\" class=\"text\" size=\"10\" name=\"setpassword\" value=\"password\"> " . $OrText . "
		<input type=\"submit\" class=\"button\" name=\"action\" value=\"" . $SetLevelText . "\">
		<input type=\"text\" class=\"text\" size=\"3\" name=\"setlevel\" value=\"0\">
		</form>";
	}
	print "<div align=\"center\">";
	if ($offset > 0)
		print "&lt;- <a href=\"content.php?title=" . urlencode($item->title) . "&offset=" . ($offset - 1) . "\">Previous</a>";
	if (isset($userlistchunk[$offset + 1]))
	{
		if ($offset > 0)
			print " &nbsp; | &nbsp; ";
		print "<a href=\"content.php?title=" . urlencode($item->title) . "&offset=" . ($offset + 1) . "\">Next</a> -&gt;";
	}
	print "</div>\n";
}
else
{
	print "
		<div align=\"center\" class=\"formHeader\">
			" . $ErrorHeading . "
		</div>
		" . $ErrorText . "
		<p>";
}