228 lines
		
	
	
		
			7.7 KiB
		
	
	
	
		
			PHP
		
	
	
		
			Executable File
		
	
	
			
		
		
	
	
			228 lines
		
	
	
		
			7.7 KiB
		
	
	
	
		
			PHP
		
	
	
		
			Executable File
		
	
	
<?php
 | 
						|
/*
 | 
						|
 $Id: piwik_userlist.php, author: François Serman <fser>
 | 
						|
 ----------------------------------------------------------------------
 | 
						|
 AlternC - Web Hosting System
 | 
						|
 Copyright (C) 2002 by the AlternC Development Team.
 | 
						|
 http://alternc.org/
 | 
						|
 ----------------------------------------------------------------------
 | 
						|
 Based on:
 | 
						|
 Valentin Lacambre's web hosting softwares: http://altern.org/
 | 
						|
 ----------------------------------------------------------------------
 | 
						|
 LICENSE
 | 
						|
 | 
						|
 This program is free software; you can redistribute it and/or
 | 
						|
 modify it under the terms of the GNU General Public License (GPL)
 | 
						|
 as published by the Free Software Foundation; either version 2
 | 
						|
 of the License, or (at your option) any later version.
 | 
						|
 | 
						|
 This program is distributed in the hope that it will be useful,
 | 
						|
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
						|
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
						|
 GNU General Public License for more details.
 | 
						|
 | 
						|
 To read the license please visit http://www.gnu.org/copyleft/gpl.html
 | 
						|
 ----------------------------------------------------------------------
 | 
						|
 Purpose of file: listing of piwik site, and manage associated credentials
 | 
						|
 ----------------------------------------------------------------------
 | 
						|
*/
 | 
						|
 | 
						|
require_once("../class/config.php");
 | 
						|
include_once("head.php");
 | 
						|
include_once("piwik_utils.php");
 | 
						|
 | 
						|
$fields = array (
 | 
						|
        "site_id"             => array ("request", "integer", -1),  // alternc ID of the piwik site
 | 
						|
	"right"               => array ("request",    "array", FALSE), // array of rights associated foreach user of $site_id
 | 
						|
);
 | 
						|
getFields($fields);
 | 
						|
 | 
						|
/* Get once alternc users and sites */
 | 
						|
$piwik_alternc_users = $piwik->get_alternc_users();
 | 
						|
$piwik_alternc_sites = $piwik->get_alternc_sites();
 | 
						|
 | 
						|
/* Does current user still has quota ? */
 | 
						|
if ($quota->cancreate("piwik")) {
 | 
						|
  $quotapiwik=$quota->getquota('piwik');
 | 
						|
 | 
						|
  /* If quota are still available, display form to let user add a new site */
 | 
						|
  if ($quotapiwik['t']>0) {
 | 
						|
  
 | 
						|
?>
 | 
						|
<h3><?php __("Add a new website");?></h3>
 | 
						|
<?php
 | 
						|
echo $msg->msg_html_all("<li>", true, true);
 | 
						|
?>
 | 
						|
<form method="post" action="piwik_addsites.php" id="main" name="addsites" >
 | 
						|
 <?php csrf_get(); ?>
 | 
						|
	<input type="text" class="int" name="site_urls" size="50" id="site_name" maxlength="255" value="" placeholder="<?php __("URL of the website")?>"/>
 | 
						|
	<input type="submit" name="submit" class="inb" value="<?php __("Create"); ?>" />
 | 
						|
</form>
 | 
						|
 | 
						|
<br/>
 | 
						|
<hr/>
 | 
						|
<?php
 | 
						|
  } // quotapiwik > 0
 | 
						|
} else {
 | 
						|
  $msg->raise('Info', "piwik", _("You cannot add any new Piwik sites, your quota is over."));
 | 
						|
} // cancreate piwik
 | 
						|
 | 
						|
 | 
						|
 | 
						|
/* In that part, we'll manage the rights associated to a selected piwik site. */
 | 
						|
/* The output is the following: */ 
 | 
						|
/*   [ site [v]] */
 | 
						|
/*     - user1  no access ()   view ()     admin () */
 | 
						|
/*     - user2  no access ()   view ()     admin () */
 | 
						|
/*   [ submit ] */
 | 
						|
 | 
						|
?>
 | 
						|
 | 
						|
<h3><?php __("Existing Piwik monitored websites"); ?></h3>
 | 
						|
<?php 
 | 
						|
/* Get the list of piwik sites for current user */
 | 
						|
$sitelist = $piwik->site_list();
 | 
						|
$infos_urls = $piwik->get_users_url_infos();
 | 
						|
 | 
						|
/* Form was submitted, need to deal with work to do. */
 | 
						|
if ($right !== FALSE) {
 | 
						|
  // Should this stay here, or in the API?
 | 
						|
  if (!in_array($site_id, $piwik_alternc_sites))
 | 
						|
    $msg->raise('Error', "piwik", _("You don't own this piwik site!"));
 | 
						|
  else {
 | 
						|
    foreach ($sitelist as $site) {
 | 
						|
      if ($site->id == $site_id)
 | 
						|
	$domain = $site->name;
 | 
						|
    }
 | 
						|
 | 
						|
    /* Foreach row of right, extract user, and selected credential */
 | 
						|
    foreach ($right AS $user => $cred) {
 | 
						|
      /* Ensures that the user is legitimate for that user */
 | 
						|
      /* If not, we just break the loop, and set error message */
 | 
						|
      if (!in_array($user, $piwik_alternc_users)) {
 | 
						|
	$msg->raise('Error', "piwik", _('You dont own user'), $user);
 | 
						|
	break;
 | 
						|
      }
 | 
						|
 | 
						|
      foreach ($infos_urls[$site_id] as $v) {
 | 
						|
	if ($v['login'] == $user && $v['cred'] != $cred) {
 | 
						|
          /* Ok, current user has right to manage this piwik user. Update rights. */
 | 
						|
          if (!$piwik->site_set_user_right($site_id, $user, $cred)) {
 | 
						|
	    break;
 | 
						|
          } else {
 | 
						|
	    $msg->raise('Ok', "piwik", _("Account '%s' has been given '%s' rights on '%s'"), array($user, $cred, $domain));
 | 
						|
          }
 | 
						|
        }
 | 
						|
      }
 | 
						|
    }
 | 
						|
 | 
						|
    $infos_urls = $piwik->get_users_url_infos();
 | 
						|
  }
 | 
						|
}
 | 
						|
 | 
						|
echo $msg->msg_html_all();
 | 
						|
 | 
						|
/* If user didn't add a website, just do nothing but display there's no site */
 | 
						|
if (empty($sitelist)){
 | 
						|
	__("No existing Piwik websites");
 | 
						|
} else {
 | 
						|
/* Otherwize, display the html form, [ sitename, url, javascript code ] */
 | 
						|
?>
 | 
						|
 | 
						|
<table class="tlist">
 | 
						|
    <tr><th/><th><?php __("Site name");?></th><th align=center><?php __("Site url"); ?></th><th>Javascript Code</th><th>Interface</th></tr>
 | 
						|
<?php
 | 
						|
 | 
						|
$col=1;
 | 
						|
foreach ($sitelist as $site ){
 | 
						|
	$col=3-$col;
 | 
						|
 | 
						|
	$no_user=true;
 | 
						|
	$first_url="";
 | 
						|
	$list_users="<select name='list_users_".$site->id."' id='list_users_".$site->id."' onChange='change_url(".$site->id.", this);'>";
 | 
						|
	foreach ($infos_urls[$site->id] as $v) {
 | 
						|
	  if ($v['cred'] != 'noaccess') {
 | 
						|
	    $list_users .= "<option value='".$piwik->url()."?module=Login&action=logme&login=".$v['login']."&idSite=".$site->id."&password=".$v['password']."'>".$v['login']."</option>";
 | 
						|
	    if ($no_user)
 | 
						|
	      $first_url = $piwik->url()."?module=Login&action=logme&login=".$v['login']."&idSite=".$site->id."&password=".$v['password'];
 | 
						|
 | 
						|
	    $no_user=false;
 | 
						|
	  }
 | 
						|
	}
 | 
						|
	$list_users .= "</select>";
 | 
						|
 | 
						|
	?>
 | 
						|
	<tr class="lst_clic<?php echo $col; ?>">
 | 
						|
	  <td><div class="ina"><a href="/piwik_site_dodel.php?siteid=<?php echo $site->id; ?>"><img src="images/delete.png" alt="<?php __("Delete"); ?>" /><?php __("Delete"); ?></a></div></td>
 | 
						|
  	  <td><?php echo $site->name ?></td>
 | 
						|
          <td><?php echo $site->main_url ?></td>
 | 
						|
	  <td><textarea><?php echo $piwik->site_js_tag($site->id); ?></textarea></td>
 | 
						|
	  <td>
 | 
						|
	    <div class="ina">
 | 
						|
              <?php
 | 
						|
              if (! $no_user) {
 | 
						|
		?>
 | 
						|
                <a id="connect_<?php echo $site->id; ?>" href="<?php echo $first_url; ?>" target="_blank"><?php __('Connect as'); ?></a>
 | 
						|
		<?php
 | 
						|
	        echo $list_users;
 | 
						|
              } else {
 | 
						|
              ?>
 | 
						|
              <img src="images/warning.png" onmouseover='$("#alert_div_msg").show();' onmouseout='$("#alert_div_msg").hide();'>
 | 
						|
              <?php } ?>
 | 
						|
	    </div>
 | 
						|
          </td>
 | 
						|
	</tr>
 | 
						|
	<?php
 | 
						|
} // foreach sitelist
 | 
						|
 | 
						|
 | 
						|
 | 
						|
/* We'll now manage credentials for piwik sites */
 | 
						|
/* We first create a select item to choose the piwik site to administrate */
 | 
						|
/* Then we display a list of users, and associated rights. */
 | 
						|
/* To achieve this, we select all piwik users available for current alternc user */
 | 
						|
/* If a piwik user has no rights on that site, its rights are set to "noaccess" */
 | 
						|
?>
 | 
						|
</table>
 | 
						|
 | 
						|
<h3><?php __("Credentials management"); ?></h3>
 | 
						|
 | 
						|
<form method="get" action="piwik_sitelist.php">
 | 
						|
<select name="site_id">
 | 
						|
 | 
						|
<?php
 | 
						|
	foreach ($sitelist as $site)
 | 
						|
		printf ('<option value="%d"%s>%s</option>', $site->id, ($site->id == $site_id) ? ' selected ' : '', $site->name);
 | 
						|
?>
 | 
						|
 | 
						|
</select> 
 | 
						|
<input type="submit" class="inb" value="ok" />	
 | 
						|
</form>
 | 
						|
 | 
						|
<?php
 | 
						|
	// If a site was selected
 | 
						|
	if ($site_id != -1 && in_array($site_id, $piwik_alternc_sites)) {
 | 
						|
		echo '<form method="post">';
 | 
						|
		csrf_get();
 | 
						|
		echo '<dl>';
 | 
						|
		foreach ($piwik->get_users_access_from_site($site_id) AS $piwik_user => $cred) {
 | 
						|
			printf("<dt>%s:</dt>\n\t<dd>%s</dd>\n", $piwik_user, piwik_right_widget('right', $piwik_user, $cred));
 | 
						|
		}
 | 
						|
		echo '</dl>';
 | 
						|
		echo '<input type="submit" name="valid" class="inb" value="' , _("submit"), '" />';
 | 
						|
		echo '</form>';
 | 
						|
	}
 | 
						|
} // empty userlist
 | 
						|
?>
 | 
						|
<div class="ina" id="alert_div_msg" style="display:none;background-color:yellow;padding:5px;border:2px solid black;margin-top:3em;";>
 | 
						|
  <?php __("No user may access this site") ?>
 | 
						|
</div>
 | 
						|
 | 
						|
<script type="text/javascript">
 | 
						|
  function change_url(id, elt) {
 | 
						|
    document.getElementById("connect_" + id).href = elt.value;
 | 
						|
  }
 | 
						|
</script>
 | 
						|
 | 
						|
<?php include_once("foot.php"); ?>
 |