Subversion-Projekte lars-tiefland.ci

        <?php

/**
 *
 * @package WebanOS CI
 * @author Lars Tiefland <ltiefland@gmail.com> 
 * @copyright 2016
 * @version $Rev: 1984 $
 */

class Weban_backend
{
        public function __construct()
        {
                $CI = &get_instance();
                $csrf_name = $CI->security->get_csrf_token_name();
                $csrf_value = $CI->security->get_csrf_hash();
                $CI->smarty->assign('csrf_name', $csrf_name);
                $CI->smarty->assign('csrf_value', $csrf_value);
                if (!isset($_SESSION['username']))
                {
                        if (!isset($_SESSION["redirected"]))
                        {
                                $_SESSION["redirected"] = true;
                                header("Location:/backend/Login/");
                                exit;
                        }
                        return;
                }
                $web_rechte = array();
                $user_rechte = array();
                $CI->load->model('termine_model', 'termine');
                $termine = $CI->termine->get_list();
                $CI->smarty->assign('termine', $termine);
                $sql = "SELECT
                                *
                        FROM
                                webs
                        WHERE
                                domain='".__SHOP__."'
                ";
                $res = $GLOBALS["db_red"]->query($sql);
                $GLOBALS["webs"] = $res->row_array();
                $base = $_SERVER["DOCUMENT_ROOT"]."/backend/css";
                $extra = "/".__SHOP__."/";
                $file = "jquery-ui.custom.css";
                $css_file = $base.$extra.$file;
                if (!file_exists($css_file))
                {
                        $extra = "/start/";
                }
                $css_file = "/backend/css".$extra.$file;
                $CI->smarty->assign("jquery_ui_css", $css_file);
                $CI->smarty->assign("webs", $GLOBALS["webs"]);

                $sql = "SELECT
                                modules.interner_name AS m_name,
                                tools.button_name AS t_name,
                                properties.interner_name AS p_name,
                                webs_properties.Bezeichnung,
                                filename
                        FROM
                                webs,
                        webs_properties,
                        properties,
                        tools,
                        modules
                    WHERE
                        webs.domain='".__SHOP__."'
                    AND
                        webs_properties.webs=webs.ID
                    AND
                        webs_properties.properties=properties.ID
                    AND
                        properties.tools = tools.ID
                    AND
                        tools.modules = modules.ID
                    ORDER BY
                        properties.Rang
                ";

                $result = $GLOBALS["db_red"]->query($sql);
                while ($zeile = $result->unbuffered_row('array'))
                {
                        //var_dump($zeile);
                        //exit;
                        if (!$zeile["Bezeichnung"])
                        {
                                $zeile["Bezeichnung"] = "";
                        }
                        $zeile["Bezeichnung"] = explode("|", $zeile["Bezeichnung"]);

                        if (count($zeile["Bezeichnung"]) == 1)
                        {
                                $zeile["Bezeichnung"] = $zeile["Bezeichnung"][0];
                        }

                        $web_rechte[$zeile["m_name"]][$zeile["t_name"]][$zeile["p_name"]] = $zeile["Bezeichnung"];
                }

                foreach (array_keys($web_rechte) as $a)
                {
                        foreach (array_keys($web_rechte[$a]) as $b)
                        {
                                foreach (array_keys($web_rechte[$a][$b]) as $c)
                                {
                                        if (is_array($web_rechte[$a][$b][$c]))
                                        {
                                                //if (in_array($_SESSION[language], $web_rechte[$a][$b][$c]))
                                                {
                                                        $web_rechte[$a][$b][$c] = $web_rechte[$a][$b][$c][array_search($_SESSION["language"],
                                                                array_keys($web_rechte["online_shop"]["language"]))];
                                                }
                                                if ($web_rechte[$a][$b][$c] == "./.")
                                                {
                                                        unset($web_rechte[$a][$b][$c]);
                                                }
                                        }
                                }
                        }
                }

                unset($query);
                unset($result);
                unset($zeile);
                $CI->smarty->assign("web_rechte", $web_rechte);
                if ($CI->session->user_data["user"] == "admin")
                {
                        $user_rechte = $web_rechte;
                }
                else
                {
                        $sql = "
                                SELECT
                                        modules.interner_name AS module,
                                        tools.button_name AS tool,
                                        properties.interner_name AS property
                                FROM
                                        webs,
                                        Access,
                                        webs_properties,
                                        user_properties,
                                        properties,
                                        tools,
                                        modules
                                WHERE
                                        webs.domain='".__SHOP__."'
                                AND
                                        webs_properties.webs=webs.ID
                                AND
                                        webs_properties.properties=properties.ID
                                AND
                                        Access.user='".$CI->session->user_data["user"]."'
                                AND
                                        user_properties.Access=Access.ID
                                AND
                                        user_properties.properties=properties.ID
                                AND
                                        properties.tools = tools.ID
                                AND
                                        tools.modules = modules.ID
                        ";
                        $result = $GLOBALS["db_red"]->query($sql);
                        while ($zeile = $result->unbuffered_row('array'))
                        {
                                $user_rechte[$zeile["module"]][$zeile["tool"]][$zeile["property"]] = 1;
                        }
                }
                $CI->smarty->assign("user_rechte", $user_rechte);
                $query_modules = "SELECT
                                *
                        FROM
                                modules
                        ORDER BY
                                rang
                ";

                $result_modules = $GLOBALS['db_red']->query($query_modules);
                while ($zeile_modules = $result_modules->unbuffered_row('array'))
                {
                        $u_tools = array();
                        if (isset($user_rechte[$zeile_modules["interner_name"]]))
                        {
                                $query_tools = "SELECT
                                                *
                                        FROM
                                                tools
                                        WHERE
                                                tools.modules = ".$zeile_modules["ID"]."
                                        AND
                                                tools.hidden='false'
                                        ORDER BY
                                                tools.rang
                                ";

                                $result_tools = $GLOBALS['db_red']->query($query_tools);
                                while ($zeile_tools = $result_tools->unbuffered_row('array'))
                                {
                                        if (isset($user_rechte[$zeile_modules["interner_name"]][$zeile_tools["button_name"]]))
                                        {
                                                if ($zeile_tools["filename"])
                                                {
                                                        $images_Pfad = 'images/navigation/';
                                                        $imgsrc = $images_Pfad.'bt_'.$zeile_tools["button_name"].'.gif';
                                                        $imgsrc_f2 = $images_Pfad.'bt_'.$zeile_tools["button_name"].'_f2.gif';
                                                        $u_tools[] = array(
                                                                "ID" => $zeile_tools["ID"],
                                                                "image" => $imgsrc,
                                                                "image_f2" => $imgsrc_f2,
                                                                "filename" => $zeile_tools["filename"],
                                                                "name" => $zeile_tools["name"],
                                                                "icon" => $zeile_tools["icon"],
                                                                );
                                                }
                                        }
                                }
                                if ($u_tools)
                                {
                                        $u_modules[] = array(
                                                "name" => $zeile_modules["name"],
                                                "interner_name" => $zeile_modules["interner_name"],
                                                "ID" => $zeile_modules["ID"],
                                                "count" => count($user_rechte[$zeile_modules["interner_name"]]),
                                                "tools" => $u_tools,
                                                "icon" => $zeile_modules["icon"],
                                                );
                                }
                        }
                }
                $CI->smarty->assign('u_modules', $u_modules);
                $GLOBALS["web_rechte"] = $web_rechte;
                $GLOBALS["user_rechte"] = $user_rechte;
        }
}

?>