Subversion-Projekte lars-tiefland.content-management

Revision

Blame | Letzte Änderung | Log anzeigen | RSS feed

<?
        $self=basename($PHP_SELF);
        $DB="admintool.ftpuser";
        define ("modul_name", "domain_admin");
        define ("tool_name", "ftp_user");
        require_once "../Online-Shop/connect2.php";
        $error=false;

        mysql_select_db ("content_management");

        function generate()
        {
                $filename = "/etc/proftpd/passwd";
                $fd = fopen ($filename, "w+");

                        $query="SELECT * FROM FTP_user order by reseller,username";
                        $result = mysql_query ($query) or die (mysql_errno().": ".mysql_error());
                        while ($zeile=mysql_fetch_array($result))
                {
                                fwrite ($fd, "$zeile[username]:$zeile[passwd]:$zeile[uid]:$zeile[gid]:$zeile[comment]:$zeile[home]:$zeile[shell]\n");
                        }

                fclose ($fd);
        }

        if ($action == "update")
        {
                if (!$user)
                {
                        $query="insert into $DB (username) values ('$username')";
                        $result = mysql_query ($query);
                        if (mysql_error())
                        {
                                $error = true;
                                $error_code='duplicate';
                        }
                        else
                        {
                                $user = $username;
                        }
                }

                if (crypt($passwd,'00') == crypt($passwd_wdh,'00'))
                {
                        unset($HTTP_POST_VARS[passwd_wdh]);
                }
                else
                {
                        $error = true;
                        $action = "edit";
                }

                // überflüssige Variablen entfernen und Spezialvariablen behandeln
                        unset($HTTP_POST_VARS[action]);
                        unset($HTTP_POST_VARS[user]);
                        
                        if ($passwd)
                        {
                                srand ((double)microtime()*1000000);
                                $salt = chr(rand(0,255)).chr(rand(0,255));
                                
                                $HTTP_POST_VARS[passwd] = crypt($HTTP_POST_VARS[passwd],$salt);
                        }
                        else
                        {
                                unset($HTTP_POST_VARS[passwd]);
                        }                       

                if ($error == false)
                {
                        // Kommando generieren 
                        $names=array();
                        foreach(array_keys($HTTP_POST_VARS) as $elem)
                        {
                                if (is_array($HTTP_POST_VARS[$elem]))
                                {
                                        $HTTP_POST_VARS[$elem] = implode($HTTP_POST_VARS[$elem],'');
                                }
                                array_push($names,"$elem='$HTTP_POST_VARS[$elem]'");
                        }
                        $query="update $DB set ".join($names,', ')." where username = '$user'";
                        $result = mysql_query ($query) or die (mysql_errno().": ".mysql_error());
                        unset($action);
                }
                //generate();
        }
        
        if ($action == "delete")
        {
                // Kommando generieren 
                if ($users)
                {
                        foreach(array_keys($users) as $elem) { $users[$elem] = "'".$users[$elem]."'"; }
                        $cond = implode($users," or username = ");

                        $query="delete from $DB where username = $cond";
                        $result = mysql_query ($query) or die (mysql_errno().": ".mysql_error());

                        unset($action);
                        //generate();
                }
        }


        if (!$action)
        {
                $action="select_edit";
        }
        if (!$sort) 
        {
                $sort="username";
        }
?>
<html>
<head>
<title>Content-Management-System - Webagentur Niewerth</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link rel=stylesheet type="text/css" href="redaktion.css">
<style type="text/css"><? require_once "redaktion.css"; ?></style>
<script language="JavaScript">
<!--
function MM_swapImgRestore() { //v3.0
  var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
}

function MM_preloadImages() { //v3.0
  var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
    var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
    if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
}

function MM_swapImage() { //v3.0
  var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
   if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
}

function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}
//-->
</script>
<meta name="description" content="Redaktionssystem">
<meta name="author" content="Webagentur Niewerth">
<meta name="robots" content="noindex">
</head>

<body bgcolor="#<? echo $webs[bgcolor_seite]; ?>" leftmargin="20" topmargin="10" marginwidth="20" marginheight="10" text="#000000">
<form method="post" action="#" name="formname" enctype="multipart/form-data">
  <table width="662" border="0" cellspacing="0" cellpadding="0">
    <tr valign="top">
      <td width="585">
<!--  Auswahl Löschen START  -->
<?
        if ($action=="delete")
        {
                    $query="SELECT * FROM $DB where resellerID = '$webs[ID]' ";
                $query=$query."order by $sort";
                $result = mysql_query ($query) or die (mysql_errno().": ".mysql_error());
                                $count = mysql_num_rows($result);
                if (mysql_num_rows($result) == 0)
                {
?>
<p class="error">Es sind keine Daten eingetragen !</p>
<p></p>
<?
                }
                else
                {
?>
        <table width="100%" border="1" cellspacing="0" cellpadding="3" bordercolorlight="#FFFFFF" bordercolordark="#999999">
          <tr bgcolor="#<? echo $webs[bgcolor_links] ?>"> 
            <td colspan="3" class="headline"><font color="#<? echo $webs[font_color_links] ?>"><b>FTP-User: 
              L&ouml;schen - <? echo $count ?> Eintr&auml;ge <br>
              <a href="#A">A</a> | <a href="#B">B</a> | <a href="#C">C</a> | <a href="#D">D</a> 
              | <a href="#E">E</a> | <a href="#F">F</a> | <a href="#G">G</a> | <a href="#H">H</a> 
              | <a href="#I">&nbsp;I&nbsp;</a> | <a href="#J">J</a> | <a href="#K">K</a> | <a href="#L">L</a> 
              | <a href="#M">M</a> | <a href="#N">N</a> | <a href="#O">O</a> | <a href="#P">P</a> 
              | <a href="#Q">Q</a> | <a href="#R">R</a> | <a href="#S">S</a> | <a href="#T">T</a> 
              | <a href="#U">U</a> | <a href="#V">V</a> | <a href="#W">W</a> | <a href="#X">X</a> 
              | <a href="#Y">Y</a> | <a href="#Z">Z</a>
              </b></font></td>
          </tr>
          <?
        while ($zeile=mysql_fetch_array($result))
        {
?>
                          <?
        $char_buffer=chr(ord(substr($zeile[username],0,1)) & 223);
        if ($char_buffer != $char_buffer2)
        {
                
                ?>
          <tr> 
            <td colspan="4"> <b> <a name="<? echo $char_buffer ?>"> 
              <? echo $char_buffer ?>
              </a> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href="#top">nach 
              oben</a></b> </td>
          </tr>
            <?
        }
        $char_buffer2 = $char_buffer;
?>
          <tr bgcolor="#<? echo $webs[bgcolor_rechts] ?>">
            <td width="60%"><a href="<? echo $self?>?action=edit&username=<? echo $zeile[username]; ?>"> 
              <font color="#<? echo $webs[font_color_rechts] ?>"><? echo $zeile[username]?></font></a></td>
            <td width="35%"> 
              <? echo $zeile[comment] ?><? if (!$zeile[comment]) { ?>&nbsp;<? } ?></td>
            <td width="5%" align="center">
              <input type="checkbox" name="users[]" value="<?  echo $zeile[username] ?>">
            </td>
          </tr>
          <?
        }
?>
          <tr bgcolor="#<? echo $webs[bgcolor_links] ?>"> 
            <td colspan="3" align="right"> 
              <input type="hidden" name="action" value='delete'>
              <input type="submit" value="LÖSCHEN">
              <input type="reset" value="Zur&uuml;cksetzen">
            </td>
          </tr>
        </table>
        <?
                }
?>
        <?
         }
?>
        <!--  Auswahl Löschen ENDE  -->
        <!--  Auswahl SELECT_EDIT START  -->
        <?

  if ($action=="select_edit")
        {
        $query="SELECT * FROM $DB where resellerID = '$webs[ID]' ";
        $query=$query."order by $sort";

        $result = mysql_query ($query) or die (mysql_errno().": ".mysql_error().$query);
                $count = mysql_num_rows($result);
        if (mysql_num_rows($result) == 0)
        {
        ?>
        <p class="error">Es sind keine
            Daten eingetragen !</p>
          <p></p>
        <?
        }
        else
        {
        ?>
        <table width="100%" border="1" cellspacing="0" cellpadding="3" bordercolorlight="#FFFFFF" bordercolordark="#999999">
          <tr bgcolor="#<? echo $webs[bgcolor_links] ?>"> 
            <td class="headline" colspan="3"><font color="#<? echo $webs[font_color_links] ?>"><b>FTP-User: Bearbeiten - <? echo $count ?> Eintr&auml;ge 
                        <br>
              <a href="#A">A</a> | <a href="#B">B</a> | <a href="#C">C</a> | <a href="#D">D</a> 
              | <a href="#E">E</a> | <a href="#F">F</a> | <a href="#G">G</a> | <a href="#H">H</a> 
              | <a href="#I">&nbsp;I&nbsp;</a> | <a href="#J">J</a> | <a href="#K">K</a> | <a href="#L">L</a> 
              | <a href="#M">M</a> | <a href="#N">N</a> | <a href="#O">O</a> | <a href="#P">P</a> 
              | <a href="#Q">Q</a> | <a href="#R">R</a> | <a href="#S">S</a> | <a href="#T">T</a> 
              | <a href="#U">U</a> | <a href="#V">V</a> | <a href="#W">W</a> | <a href="#X">X</a> 
              | <a href="#Y">Y</a> | <a href="#Z">Z</a>
                        </b></font></td>
          </tr>
          <?
        while ($zeile=mysql_fetch_array($result))
        {
?>
<?
        $char_buffer=chr(ord(substr($zeile[username],0,1)) & 223);
        if ($char_buffer != $char_buffer2)
        {
                
                ?>
          <tr> 
            <td colspan="4"> <b> <a name="<? echo $char_buffer ?>"> 
              <? echo $char_buffer ?>
              </a> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href="#top">nach 
              oben</a></b> </td>
          </tr>
            <?
        }
        $char_buffer2 = $char_buffer;
?>
          <tr bgcolor="#<? echo $webs[bgcolor_rechts] ?>"> 
            <td width="65%"><a href="<? echo $self?>?action=edit&username=<? echo $zeile[username]; ?>"> 
              <font color="#<? echo $webs[font_color_rechts] ?>"><? echo $zeile[username]?></font></a></td>
            <td width="35%"> 
                                <font color="#<? echo $webs[font_color_rechts] ?>"><? echo $zeile[comment] ?><? if (!$zeile[comment]) { ?>&nbsp;<? } ?></font>
                        </td>
          </tr>
          <?
        }
?>
          <tr bgcolor="#<? echo $webs[bgcolor_links] ?>"> 
            <td colspan="3">&nbsp;</td>
          </tr>
        </table>
 <?
        }
?>
        <?
         }
?>
<!--  Auswahl SELECT_EDIT ENDE  -->

<?
        if ($action=="edit")
        {
                if ($username)
                {
                                                $query="SELECT * FROM $DB where username = '$username'";
                        $result = mysql_query ($query) or die (mysql_errno().": ".mysql_error()."<hr>$query<hr>");
                        $zeile=mysql_fetch_array($result);
                }
        ?>
            
        <table width="100%" border="1" cellspacing="0" cellpadding="3" bordercolorlight="#FFFFFF" bordercolordark="#999999">
          <tr bgcolor="#<? echo $webs[bgcolor_links] ?>"> 
            <td colspan="2" class="headline"><font color="#<? echo $webs[font_color_links] ?>"><b>FTP-User: 
              <?
                                        if ($user)
                                        {
                                         ?>
              Bearbeiten 
              <?
                                        }
                                        else
                                        {
                                         ?>
              Neueintrag 
              <?
                                        }
                                ?></b></font>
            </td>
          </tr>
          <?
        $Feld="username";
        if (isset($user_rechte[modul_name][tool_name][$Feld]))
        {
?>
          <tr> 
            <td bgcolor="#<? echo $webs[bgcolor_links] ?>" valign="middle" width="21%"> 
              <font color="#<? echo $webs[font_color_links] ?>"><b> 
              <? 
                                if ($web_rechte[modul_name][tool_name][$Feld]) 
                                { 
                                        echo $web_rechte[modul_name][tool_name][$Feld]; 
                                }
                                else 
                                {
                        ?>
              Username 
              <?
                                }
                        ?>
              </b></font> </td>
            <td bgcolor="#<? echo $webs[bgcolor_rechts] ?>" width="79%"> 
                <input type="text" name="<? echo $Feld ?>" value="<? echo $zeile[$Feld] ?>" onChange="document.formname[6].value=this.value;">
                <? if ($error_code == 'duplicate') { ?>
              <b><font color="#FF0000">Dieser Username ist bereits vergeben!</font></b> 
              <? } ?>
              </td>
          </tr>
          <? 
        }
?>
          <?
        $Feld="passwd";
        if (isset($user_rechte[modul_name][tool_name][$Feld]))
        {
?>
          <tr> 
            <td bgcolor="#<? echo $webs[bgcolor_links] ?>" valign="top" width="21%"> 
              <font color="#<? echo $webs[font_color_links] ?>"><b> 
              <? 
                                if ($web_rechte[modul_name][tool_name][$Feld]) 
                                { 
                                        echo $web_rechte[modul_name][tool_name][$Feld]; 
                                }
                                else 
                                {
                        ?>
              Passwort
              <?
                                }
                        ?>
              </b></font> </td>
            <td bgcolor="#<? echo $webs[bgcolor_rechts] ?>" width="79%" class="headline"> 
              <table width="100%" border="0" cellspacing="0" cellpadding="0">
                <tr>
                  <td>
                                        <input type="password" name="passwd" value="<? echo $passwd ?>">
                    <input type="password" name="passwd_wdh" value="<? echo $passwd_wdh ?>">
                  </td>
                  <? if ($passwd != $passwd_wdh) { ?>
                                  <td class="headline" width="100%">
                    <font color="#FF0000">Passwort und Passwortwiederholung<br>
                    stimmen nicht &uuml;berein!</font></td> 
                    <? } else { ?>
                  <td class="headline" width="100%" valign="bottom">(Wiederholung)</td>
                  <? } ?>
                </tr>
              </table>
             </td>
          </tr>
          <? 
        }
?>
          <?
        $Feld="gruppen";
        if (isset($user_rechte[modul_name][tool_name][$Feld]))
        {
?>
          <tr> 
            <td bgcolor="#<? echo $webs[bgcolor_links] ?>" valign="top" width="21%"> 
              <font color="#<? echo $webs[font_color_links] ?>"><b> 
              <? 
                                if ($web_rechte[modul_name][tool_name][$Feld]) 
                                { 
                                        echo $web_rechte[modul_name][tool_name][$Feld]; 
                                }
                                else 
                                {
                        ?>
              Gruppen
              <?
                                }
                        ?>
              </b></font> </td>
<?
        if (!$zeile[uid]) {$zeile[uid] = 40;}
        //if (!$zeile[gid]) {$zeile[gid] = 100;}
        if (!$zeile[shell]) {$zeile[shell] = '/bin/false';}
?>
            <td bgcolor="#<? echo $webs[bgcolor_rechts] ?>" width="79%" class="headline"> 
              uid: 
              <input type="text" name="uid" value="<? echo $zeile[uid] ?>" size="5" >
<!--
              <br>
              gid: 
              <input type="text" name="gid" value="<? echo $zeile[gid] ?>" size="5" ></td>
-->
          </tr>
          <? 
        }
?>
          <?
        $Feld="comment";
        if (isset($user_rechte[modul_name][tool_name][$Feld]))
        {
?>
          <tr> 
            <td bgcolor="#<? echo $webs[bgcolor_links] ?>" valign="middle" width="21%"> 
              <font color="#<? echo $webs[font_color_links] ?>"><b> 
              <? 
                                if ($web_rechte[modul_name][tool_name][$Feld]) 
                                { 
                                        echo $web_rechte[modul_name][tool_name][$Feld]; 
                                }
                                else 
                                {
                        ?>
              Bemerkung 
              <?
                                }
                        ?>
              </b></font> </td>
            <td bgcolor="#<? echo $webs[bgcolor_rechts] ?>" width="79%"> 
              <input type="text" name="<? echo $Feld ?>" value="<? echo $zeile[$Feld] ?>">
            </td>
          </tr>
          <? 
        }
?>
          <?
        $Feld="home";
        if (isset($user_rechte[modul_name][tool_name][$Feld]))
        {
?>
          <tr> 
            <td bgcolor="#<? echo $webs[bgcolor_links] ?>" valign="middle" width="21%"> 
              <font color="#<? echo $webs[font_color_links] ?>"><b> 
              <? 
                                if ($web_rechte[modul_name][tool_name][$Feld]) 
                                { 
                                        echo $web_rechte[modul_name][tool_name][$Feld]; 
                                }
                                else 
                                {
                        ?>
              home 
              <?
                                }
                        ?>
              </b></font> </td>
            <td bgcolor="#<? echo $webs[bgcolor_rechts] ?>" width="79%" class="headline"> 
              <? echo $web_rechte[modul_name][tool_name][home_base]; ?>
              <input type="hidden" name="<? echo $Feld ?>[0]" value="<? echo $web_rechte[modul_name][tool_name][home_base]; ?>">
                                <? $zeile[$Feld] = ereg_replace ($web_rechte[modul_name][tool_name][home_base], "", $zeile[$Feld]); ?>
                          <input type="text" name="<? echo $Feld ?>[1]" value="<? echo $zeile[$Feld] ?>">
            </td>
          </tr>
          <? 
        }
?>
          <?
        $Feld="shell";
        if (isset($user_rechte[modul_name][tool_name][$Feld]))
        {
?>
          <tr> 
            <td bgcolor="#<? echo $webs[bgcolor_links] ?>" valign="middle" width="21%"> 
              <font color="#<? echo $webs[font_color_links] ?>"><b> 
              <? 
                                if ($web_rechte[modul_name][tool_name][$Feld]) 
                                { 
                                        echo $web_rechte[modul_name][tool_name][$Feld]; 
                                }
                                else 
                                {
                        ?>
              shell 
              <?
                                }
                        ?>
              </b></font> </td>
            <td bgcolor="#<? echo $webs[bgcolor_rechts] ?>" width="79%"> 
              <input type="text" name="<? echo $Feld ?>" value="<? echo $zeile[$Feld] ?>">
            </td>
          </tr>
          <? 
        }
?>
          <tr bgcolor="#<? echo $webs[bgcolor_links] ?>"> 
            <td align="right" colspan="2"> 
              <input type="hidden" name="resellerID" value="<? echo $webs[ID] ?>" size="3">
              <input type="hidden" name="user" value="<? echo $zeile[username] ?>">
              <input type="hidden" name="action" value="update">
              <input type="submit" value="OK">
              <input type="reset" value="Zur&uuml;cksetzen">
            </td>
          </tr>
        </table>
        <?
        }
?> </td>
      <td width="77" align="right">
        <table width="67" border="1" cellspacing="0" cellpadding="0" bordercolorlight="#FFFFFF" bordercolordark="#999999">
                  <tr>
            <td class="frame"><a href="<? echo $self ?>?action=edit" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('Image5','','../images/navigation/bt_neu_f2.gif',1)"><img name="Image5" border="0" src="../images/navigation/bt_neu.gif" width="67" height="40"></a></td>
                  </tr>
                  <tr>
            <td class="frame"><a href="<? echo $self ?>?action=select_edit" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('Image6','','../images/navigation/bt_bearbeiten_f2.gif',1)"><img name="Image6" border="0" src="../images/navigation/bt_bearbeiten.gif" width="67" height="40"></a></td>
                  </tr>
                  <tr>
            <td class="frame"><a href="<? echo $self ?>?action=delete" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('Image7','','../images/navigation/bt_delete_f2.gif',1)"><img name="Image7" border="0" src="../images/navigation/bt_delete.gif" width="67" height="40"></a></td>
                  </tr>
                </table>
      </td>
</tr>
</table>
</form>
</body>