From b4d4053a2949c0de8e093ffeae0bf2a1af192b33 Mon Sep 17 00:00:00 2001
From: Alan Garcia <a.garcia@nnx.com>
Date: Thu, 23 Aug 2012 17:01:13 +0000
Subject: [PATCH] Fix #1200

---
 bureau/admin/ftp_del.php  | 66 ++++++++++++++++++++++++++++++++-------
 bureau/admin/ftp_list.php |  4 ++-
 2 files changed, 58 insertions(+), 12 deletions(-)

diff --git a/bureau/admin/ftp_del.php b/bureau/admin/ftp_del.php
index 8fa254e3..c80d4168 100644
--- a/bureau/admin/ftp_del.php
+++ b/bureau/admin/ftp_del.php
@@ -32,17 +32,61 @@ require_once("../class/config.php");
 $error="";
 // On parcours les POST_VARS et on repere les del_.
 reset($_POST);
+$lst_todel=array();
 while (list($key,$val)=each($_POST)) {
-	if (substr($key,0,4)=="del_") {
-		// Effacement du compte ftp $val
-		$r=$ftp->delete_ftp($val);
-		if (!$r) {
-			$error.=$err->errstr()."<br />";
-		} else {
-			$error.=sprintf(_("The ftp account %s has been successfully deleted"),$r)."<br />";
-		}
-	}
+  if (substr($key,0,4)=="del_") {
+    $lst_todel[]=$val;
+  }
 }
-include("ftp_list.php");
-exit();
+
+if (empty($lst_todel)) {
+  header ("Location: /ftp_list.php");
+  exit();
+}
+
+$fields = array (
+  "confirm_del"    	=> array ("post", "string", ""),
+  "names"    		=> array ("post", "array", ""),
+);
+getFields($fields);
+
+
+if(!empty($confirm_del)) {
+  foreach($lst_todel as $v) {
+    $r=$ftp->delete_ftp($v);
+    if (!$r) {
+      $error.=$err->errstr()."<br />";
+    } else {
+      $error.=sprintf(_("The ftp account %s has been successfully deleted"),$r)."<br />";
+    }
+  }
+  include("ftp_list.php");
+  exit();
+} else {
+  include_once('head.php');
+?>
+<h3><?php __("FTP accounts deletion confirm"); ?></h3>
+<hr id="topbar"/>
+<br />
+  <?php __("Do you really want to delete those accounts ?");?>
+  <ul>
+  <?php foreach($lst_todel as $t) {
+    echo "<li>".$names[$t]."</li>\n";
+  } ?>
+  </ul>
+
+  <form method="post" action="ftp_del.php" name="main" id="main">
+    <?php foreach($lst_todel as $t) {
+      echo "<input type='hidden' name='del_$t' value='$t' >\n";
+    } ?>
+    <input type="submit" class="inb" name="confirm_del" value="<?php __("Delete")?>" />
+    <input type="button" class="inb" name="cancel" value="<?php __("Cancel"); ?>" onclick="document.location='ftp_list.php'" />
+  </form>
+  
+<?php
+  include_once('foot.php');
+  exit();
+
+}
+
 ?>
diff --git a/bureau/admin/ftp_list.php b/bureau/admin/ftp_list.php
index b6bd43e8..435ff8cd 100644
--- a/bureau/admin/ftp_list.php
+++ b/bureau/admin/ftp_list.php
@@ -81,7 +81,9 @@ while (list($key,$val)=each($r))
 		<td align="center"><input type="checkbox" class="inc" id="del_<?php echo $val["id"]; ?>" name="del_<?php echo $val["id"]; ?>" value="<?php echo $val["id"]; ?>" /></td>
 <td><div class="ina"><a href="ftp_edit.php?id=<?php echo $val["id"] ?>"><img src="images/edit.png" alt="<?php __("Edit"); ?>" /><?php __("Edit"); ?></a></div></td>
 
-		<td><label for="del_<?php echo $val["id"]; ?>"><?php echo $val["login"] ?></label></td>
+		<td><label for="del_<?php echo $val["id"]; ?>"><?php echo $val["login"] ?></label>
+                  <input type='hidden' name='names[<?php echo $val['id'];?>]' value='<?php echo $val["login"] ?>' >
+                </td>
 		<td><code><?php echo str_replace(ALTERNC_HTML,'',$val["dir"]) ?></code></td>
 	</tr>
 <?php