forked from science-ation/science-ation
Of course, we cant re-use the old one, due to function name collisions, DUH! what the hell was i thinking, i just went through this.
This commit is contained in:
james
parent
cf6bea5727
commit
2f670becf6
@ -1,6 +1,6 @@
|
||||
<?
|
||||
//146 user inc works fine here
|
||||
include "db.update.146.user.inc.php";
|
||||
//149 user inc works fine here
|
||||
include "db.update.149.user.inc.php";
|
||||
|
||||
function db_update_149_post() {
|
||||
$q=mysql_query("SELECT * FROM emergencycontact");
|
||||
@ -22,21 +22,21 @@ function db_update_149_post() {
|
||||
echo "YES: $r->firstname $r->lastname with relation '$r->relation' looks like a parent\n";
|
||||
if($r->email) {
|
||||
echo " Have email, creating record - $r->email\n";
|
||||
if($u=db146_user_load_by_email($r->email)) {
|
||||
if($u=db149_user_load_by_email($r->email)) {
|
||||
echo " This user already exists, linking parent record to their account!\n";
|
||||
if(!in_array("parent",$u['types']))
|
||||
db146_user_create("parent",$r->email,$u);
|
||||
db149_user_create("parent",$r->email,$u);
|
||||
else
|
||||
echo " - Already a parent, no need to re-add!\n";
|
||||
}
|
||||
else {
|
||||
echo "Creating new parent record\n";
|
||||
$u=db146_user_create("parent",$r->email);
|
||||
$u=db149_user_create("parent",$r->email);
|
||||
$u['firstname']=$r->firstname;
|
||||
$u['lastname']=$r->lastname;
|
||||
$u['phonehome']=$r->phone1;
|
||||
$u['phonework']=$r->phone2;
|
||||
db146_user_save($u);
|
||||
db149_user_save($u);
|
||||
}
|
||||
}
|
||||
else {
|
||||
|
||||
926
db/db.update.149.user.inc.php
Normal file
926
db/db.update.149.user.inc.php
Normal file
@ -0,0 +1,926 @@
|
||||
<?
|
||||
/*
|
||||
This file is part of the 'Science Fair In A Box' project
|
||||
SFIAB Website: http://www.sfiab.ca
|
||||
|
||||
Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
|
||||
Copyright (C) 2005 James Grant <james@lightbox.org>
|
||||
Copyright (C) 2007 David Grant <dave@lightbox.org>
|
||||
|
||||
This program is free software; you can redistribute it and/or
|
||||
modify it under the terms of the GNU General Public
|
||||
License as published by the Free Software Foundation, version 2.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
||||
General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program; see the file COPYING. If not, write to
|
||||
the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
|
||||
Boston, MA 02111-1307, USA.
|
||||
*/
|
||||
?>
|
||||
<?
|
||||
|
||||
$user_what = array('student'=>'Participant', 'judge' => 'Judge',
|
||||
'committee'=>'Committee Member','volunteer' => 'Volunteer',
|
||||
'fair'=>'Science Fair','sponsor' => 'Sponsor Contact',
|
||||
'principal' => 'Principal',
|
||||
'teacher' => 'Teacher',
|
||||
'parent' => 'Parent',
|
||||
'alumni' => 'Alumni',
|
||||
'mentor' => 'Mentor');
|
||||
$user_types = array_keys($user_what);
|
||||
|
||||
function db149_user_valid_type($type)
|
||||
{
|
||||
global $user_types;
|
||||
if(is_array($type)) {
|
||||
foreach($type as $t) {
|
||||
if(!in_array($t, $user_types)) return false;
|
||||
}
|
||||
} else {
|
||||
if(!in_array($type, $user_types)) return false;
|
||||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
/* Duplicate of common.inc.php:generatePassword, which will be deleted
|
||||
* eventually when ALL users are handled through this file */
|
||||
function db149_user_generate_password($pwlen=8)
|
||||
{
|
||||
//these are good characters that are not easily confused with other characters :)
|
||||
$available="ABCDEFGHJKLMNPQRSTUVWXYZabcdefghjkmnpqrstuvwxyz23456789";
|
||||
$len=strlen($available) - 1;
|
||||
|
||||
$key="";
|
||||
for($x=0;$x<$pwlen;$x++)
|
||||
$key.=$available{rand(0,$len)};
|
||||
return $key;
|
||||
}
|
||||
|
||||
|
||||
|
||||
/* Separate user_load_type functions, these could make additional database
|
||||
* calls if required */
|
||||
function db149_user_load_fair(&$u)
|
||||
{
|
||||
$u['fair_active'] = ($u['fair_active'] == 'yes') ? 'yes' : 'no';
|
||||
$u['fair_complete'] = ($u['fair_complete'] == 'yes') ? 'yes' : 'no';
|
||||
// $u['fair_name'] = $u['fair_name'];
|
||||
// $u['fair_abbrv'] = $u['fair_abbrv'];
|
||||
return true;
|
||||
}
|
||||
|
||||
function db149_user_load_student(&$u)
|
||||
{
|
||||
// $u['student_active'] = ($u['student_active'] == 'yes') ? 'yes' : 'no';
|
||||
// $u['student_complete'] = ($u['student_complete'] == 'yes') ? 'yes' : 'no';
|
||||
return false;
|
||||
}
|
||||
function db149_user_load_judge(&$u)
|
||||
{
|
||||
$u['judge_active'] = ($u['judge_active'] == 'yes') ? 'yes' : 'no';
|
||||
$u['judge_complete'] = ($u['judge_complete'] == 'yes') ? 'yes' : 'no';
|
||||
$u['years_school'] = intval($u['years_school']);
|
||||
$u['years_regional'] = intval($u['years_regional']);
|
||||
$u['years_national'] = intval($u['years_national']);
|
||||
$u['willing_chair'] = ($u['willing_chair'] == 'yes') ? 'yes' : 'no';
|
||||
$u['special_award_only'] = ($u['special_award_only'] == 'yes') ? 'yes' : 'no';
|
||||
$u['cat_prefs'] = unserialize($u['cat_prefs']);
|
||||
$u['div_prefs'] = unserialize($u['div_prefs']);
|
||||
$u['divsub_prefs'] = unserialize($u['divsub_prefs']);
|
||||
// $u['expertise_other'] = $u['expertise_other'];
|
||||
$u['languages'] = unserialize($u['languages']);
|
||||
// $u['highest_psd'] = $u['highest_psd'];
|
||||
|
||||
/* Sanity check the arrays, make sure they are arrays */
|
||||
$should_be_arrays = array('cat_prefs','div_prefs',
|
||||
'divsub_prefs','languages');
|
||||
foreach($should_be_arrays as $k) {
|
||||
if(!is_array($u[$k])) $u[$k] = array();
|
||||
}
|
||||
|
||||
return true;
|
||||
}
|
||||
|
||||
function db149_user_load_committee(&$u)
|
||||
{
|
||||
$u['committee_active'] = $u['committee_active'];
|
||||
$u['emailprivate'] = $u['emailprivate'];
|
||||
$u['ord'] = intval($u['ord']);
|
||||
$u['displayemail'] = ($u['displayemail'] == 'yes') ? 'yes' : 'no';
|
||||
$u['access_admin'] = ($u['access_admin'] == 'yes') ? 'yes' : 'no';
|
||||
$u['access_config'] = ($u['access_config'] == 'yes') ? 'yes' : 'no';
|
||||
$u['access_super'] = ($u['access_super'] == 'yes') ? 'yes' : 'no';
|
||||
return true;
|
||||
}
|
||||
|
||||
function db149_user_load_volunteer(&$u)
|
||||
{
|
||||
$u['volunteer_active'] = ($u['volunteer_active'] == 'yes') ? 'yes' : 'no';
|
||||
$u['volunteer_complete'] = ($u['volunteer_complete'] == 'yes') ? 'yes' : 'no';
|
||||
return true;
|
||||
}
|
||||
|
||||
function db149_user_load_sponsor(&$u)
|
||||
{
|
||||
$u['sponsors_id'] = intval($u['sponsors_id']);
|
||||
$u['sponsor_complete'] = ($u['sponsor_complete'] == 'yes') ? 'yes' : 'no';
|
||||
$u['sponsor_active'] = ($u['sponsor_active'] == 'yes') ? 'yes' : 'no';
|
||||
if($u['sponsors_id']) {
|
||||
$q=mysql_query("SELECT * FROM sponsors WHERE id='{$u['sponsors_id']}'");
|
||||
$u['sponsor']=mysql_fetch_assoc($q);
|
||||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
function db149_user_load_principal(&$u)
|
||||
{
|
||||
return true;
|
||||
}
|
||||
|
||||
function db149_user_load_teacher(&$u)
|
||||
{
|
||||
return true;
|
||||
}
|
||||
|
||||
function db149_user_load_mentor(&$u)
|
||||
{
|
||||
return true;
|
||||
}
|
||||
function db149_user_load_parent(&$u)
|
||||
{
|
||||
return true;
|
||||
}
|
||||
|
||||
function db149_user_load_alumni(&$u)
|
||||
{
|
||||
return true;
|
||||
}
|
||||
|
||||
function db149_user_load($user, $uid = false)
|
||||
{
|
||||
/* So, it turns out that doing one big load is faster than loading just
|
||||
* from the users table then loading only the specific types the user
|
||||
* has.. go figure. */
|
||||
$query = "SELECT * FROM `users`
|
||||
LEFT JOIN `users_committee` ON `users_committee`.`users_id`=`users`.`id`
|
||||
LEFT JOIN `users_judge` ON `users_judge`.`users_id`=`users`.`id`
|
||||
LEFT JOIN `users_volunteer` ON `users_volunteer`.`users_id`=`users`.`id`
|
||||
LEFT JOIN `users_fair` ON `users_fair`.`users_id`=`users`.`id`
|
||||
LEFT JOIN `users_sponsor` ON `users_sponsor`.`users_id`=`users`.`id`
|
||||
LEFT JOIN `users_principal` ON `users_principal`.`users_id`=`users`.`id`
|
||||
LEFT JOIN `users_teacher` ON `users_teacher`.`users_id`=`users`.`id`
|
||||
LEFT JOIN `users_parent` ON `users_parent`.`users_id`=`users`.`id`
|
||||
LEFT JOIN `users_mentor` ON `users_mentor`.`users_id`=`users`.`id`
|
||||
LEFT JOIN `users_alumni` ON `users_alumni`.`users_id`=`users`.`id`
|
||||
WHERE ";
|
||||
if($uid != false) {
|
||||
$uid = intval($uid);
|
||||
$query .= "`users`.`uid`='$uid' ORDER BY `users`.`year` DESC LIMIT 1";
|
||||
} else {
|
||||
$id = intval($user);
|
||||
$query .= " `users`.`id`='$id'";
|
||||
}
|
||||
$q=mysql_query($query);
|
||||
|
||||
if(mysql_num_rows($q)!=1) {
|
||||
// echo "Query [$query] returned ".mysql_num_rows($q)." rows\n";
|
||||
// echo "<pre>";
|
||||
// print_r(debug_backtrace());
|
||||
return false;
|
||||
}
|
||||
|
||||
$ret = mysql_fetch_assoc($q);
|
||||
|
||||
/* Make sure they're not deleted, we don't want to do this in the query, because loading by $uid would
|
||||
* simply return the previous year (where deleted=no) */
|
||||
if($ret['deleted'] != 'no') {
|
||||
/* User is deleted */
|
||||
return false;
|
||||
}
|
||||
|
||||
/* Do we need to do number conversions? */
|
||||
$ret['id'] = intval($ret['id']);
|
||||
$ret['uid'] = intval($ret['uid']);
|
||||
$ret['year'] = intval($ret['year']);
|
||||
|
||||
/* Turn the type into an array, because there could be more than one */
|
||||
$ts = explode(',', $ret['types']);
|
||||
$ret['types'] = $ts; /* Now we can use in_array('judge', $ret['types']) ; */
|
||||
|
||||
/* Convenience */
|
||||
$ret['name'] = $ret['firstname'].' '.$ret['lastname'];
|
||||
|
||||
foreach($ret['types'] as $t) {
|
||||
/* These all pass $ret by reference, and can modify
|
||||
* $ret */
|
||||
$r = call_user_func("db149_user_load_$t", &$ret);
|
||||
if($r != true) {
|
||||
echo "db149_user_load_$t returned false!\n";
|
||||
return false;
|
||||
}
|
||||
|
||||
/* It is important that each type database doesn't
|
||||
have conflicting column names */
|
||||
/* foreach($r as $k=>$v) {
|
||||
if(array_key_exists($k, $ret)) {
|
||||
echo "DATABASE DESIGN ERROR, duplicate user key $k";
|
||||
exit;
|
||||
}
|
||||
}
|
||||
$ret = array_merge($ret, $r);
|
||||
*/
|
||||
}
|
||||
|
||||
/* Do this assignment without recursion :) */
|
||||
unset($ret['orig']);
|
||||
$orig = $ret;
|
||||
$ret['orig'] = $orig;
|
||||
|
||||
/* echo "<pre>User load returning: \n";
|
||||
print_r($ret);
|
||||
echo "</pre>";
|
||||
*/
|
||||
return $ret;
|
||||
}
|
||||
|
||||
function db149_user_load_by_uid($uid)
|
||||
{
|
||||
return db149_user_load(0, $uid);
|
||||
}
|
||||
|
||||
function db149_user_load_by_email($email)
|
||||
{
|
||||
/* Find the most recent uid for the email, regardless of deleted status */
|
||||
$e = mysql_real_escape_string($email);
|
||||
$q = mysql_query("SELECT uid FROM users WHERE email='$e' OR username='$e' ORDER BY year DESC LIMIT 1");
|
||||
|
||||
if(mysql_num_rows($q) == 1) {
|
||||
$i = mysql_fetch_assoc($q);
|
||||
return db149_user_load_by_uid($i['uid']);
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
function db149_user_load_by_uid_year($uid, $year)
|
||||
{
|
||||
$q = mysql_query("SELECT id FROM users WHERE uid='$uid' AND year <= '$year'");
|
||||
if(!mysql_num_rows($q)) return false;
|
||||
$i = mysql_fetch_assoc($q);
|
||||
return db149_user_load($i['id']);
|
||||
}
|
||||
|
||||
function db149_user_set_password($id, $password = NULL)
|
||||
{
|
||||
/* pass $u by reference so we can update it */
|
||||
$save_old = false;
|
||||
if($password == NULL) {
|
||||
$q = mysql_query("SELECT passwordset FROM users WHERE id='$id'");
|
||||
$u = mysql_fetch_assoc($q);
|
||||
/* Generate a new password */
|
||||
$password = db149_user_generate_password(12);
|
||||
/* save the old password only if it's not an auto-generated one */
|
||||
if($u['passwordset'] != '0000-00-00') $save_old = true;
|
||||
/* Expire the password */
|
||||
$save_set = "'0000-00-00'";
|
||||
} else {
|
||||
/* Set the password, no expiry, save the old */
|
||||
$save_old = true;
|
||||
$save_set = 'NOW()';
|
||||
}
|
||||
|
||||
$p = mysql_escape_string($password);
|
||||
$set = ($save_old == true) ? 'oldpassword=password, ' : '';
|
||||
$set .= "password='$p', passwordset=$save_set ";
|
||||
|
||||
$query = "UPDATE users SET $set WHERE id='$id'";
|
||||
mysql_query($query);
|
||||
echo mysql_error();
|
||||
|
||||
return $password;
|
||||
}
|
||||
|
||||
function db149_user_save_type_list($u, $db, $fields)
|
||||
{
|
||||
/* echo "<pre> save type list $db";
|
||||
print_r($u);
|
||||
echo "</pre>";*/
|
||||
$set = '';
|
||||
|
||||
foreach($fields as $f) {
|
||||
/* == even works on arrays in PHP */
|
||||
if($u[$f] == $u['orig'][$f]) continue;
|
||||
|
||||
if($set != '') $set .=',';
|
||||
|
||||
if($u[$f] == NULL) {
|
||||
$set .= "$f=NULL";
|
||||
continue;
|
||||
}
|
||||
|
||||
if(is_array($u[$f]))
|
||||
$data = mysql_escape_string(serialize($u[$f]));
|
||||
else
|
||||
$data = mysql_escape_string(stripslashes($u[$f]));
|
||||
|
||||
$set .= "`$f`='$data'";
|
||||
}
|
||||
if($set != "") {
|
||||
$query = "UPDATE $db SET $set WHERE users_id='{$u['id']}'";
|
||||
mysql_query($query);
|
||||
if(mysql_error()) {
|
||||
echo mysql_error();
|
||||
echo error("Full query: $query");
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
function db149_user_save_volunteer($u)
|
||||
{
|
||||
$fields = array('volunteer_active','volunteer_complete');
|
||||
db149_user_save_type_list($u, 'users_volunteer', $fields);
|
||||
}
|
||||
|
||||
function db149_user_save_committee($u)
|
||||
{
|
||||
$fields = array('committee_active','emailprivate','ord','displayemail','access_admin',
|
||||
'access_config','access_super');
|
||||
db149_user_save_type_list($u, 'users_committee', $fields);
|
||||
}
|
||||
|
||||
function db149_user_save_judge($u)
|
||||
{
|
||||
$fields = array('judge_active','judge_complete','years_school','years_regional','years_national',
|
||||
'willing_chair','special_award_only',
|
||||
'cat_prefs','div_prefs','divsub_prefs',
|
||||
'expertise_other','languages', 'highest_psd');
|
||||
db149_user_save_type_list($u, 'users_judge', $fields);
|
||||
}
|
||||
|
||||
function db149_user_save_student($u)
|
||||
{
|
||||
// $fields = array('student_active','student_complete');
|
||||
// user_save_type_list($u, 'users_student', $fields);
|
||||
}
|
||||
|
||||
function db149_user_save_fair($u)
|
||||
{
|
||||
$fields = array('fair_active','fairs_id');
|
||||
db149_user_save_type_list($u, 'users_fair', $fields);
|
||||
}
|
||||
|
||||
function db149_user_save_sponsor($u)
|
||||
{
|
||||
$fields = array('sponsors_id','sponsor_active','sponsor_complete','primary','position','notes');
|
||||
db149_user_save_type_list($u, 'users_sponsor', $fields);
|
||||
}
|
||||
|
||||
function db149_user_save_teacher($u)
|
||||
{
|
||||
}
|
||||
|
||||
function db149_user_save_principal($u)
|
||||
{
|
||||
}
|
||||
|
||||
function db149_user_save_mentor($u)
|
||||
{
|
||||
}
|
||||
|
||||
function db149_user_save_alumni($u)
|
||||
{
|
||||
}
|
||||
|
||||
function db149_user_save_parent($u)
|
||||
{
|
||||
}
|
||||
|
||||
function db149_user_save(&$u)
|
||||
{
|
||||
/* Add any new types */
|
||||
$added = array_diff($u['types'], $u['orig']['types']);
|
||||
foreach($added as $t) {
|
||||
if(!db149_user_add_role_allowed($t, $u)) {
|
||||
echo "HALT: user can't add this type";
|
||||
exit;
|
||||
}
|
||||
//give em a record, the primary key on the table takes care of uniqueness
|
||||
$q=mysql_query("INSERT INTO users_$t (users_id) VALUES ('{$u['id']}')");
|
||||
}
|
||||
|
||||
|
||||
|
||||
$fields = array('salutation','firstname','lastname','username',
|
||||
'email',
|
||||
'phonehome','phonework','phonecell','fax','organization',
|
||||
'address','address2','city','province','postalcode','sex',
|
||||
'firstaid', 'cpr', 'types');
|
||||
|
||||
$set = "";
|
||||
foreach($fields as $f) {
|
||||
if($u[$f] == $u['orig'][$f]) continue;
|
||||
|
||||
if($set != "") $set .=',';
|
||||
|
||||
if($f == 'types')
|
||||
$set .= "$f='".implode(',', $u[$f])."'";
|
||||
else {
|
||||
$data = mysql_escape_string(stripslashes($u[$f]));
|
||||
$set .= "$f='$data'";
|
||||
}
|
||||
}
|
||||
// echo "<pre>";
|
||||
// print_r($u);
|
||||
// echo "</pre>";
|
||||
if($set != "") {
|
||||
$query = "UPDATE users SET $set WHERE id='{$u['id']}'";
|
||||
mysql_query($query);
|
||||
// echo "query=[$query]";
|
||||
echo mysql_error();
|
||||
}
|
||||
|
||||
/* Save the password if it changed */
|
||||
if($u['password'] != $u['orig']['password'])
|
||||
db149_user_set_password($u['id'], $u['password']);
|
||||
|
||||
/* Save types */
|
||||
foreach($u['types'] as $t) {
|
||||
call_user_func("db149_user_save_$t", $u);
|
||||
}
|
||||
|
||||
/* Should we do this? */
|
||||
/* Record all the data in orig that we saved */
|
||||
unset($u['orig']);
|
||||
$orig = $u;
|
||||
$u['orig'] = $orig;
|
||||
|
||||
// print_r($u);
|
||||
}
|
||||
|
||||
/* Delete functions. These mark a user as deleted, and delete references to other
|
||||
* tables */
|
||||
|
||||
function db149_user_delete_committee($u)
|
||||
{
|
||||
mysql_query("DELETE FROM committees_link WHERE users_uid='{$u['uid']}'");
|
||||
}
|
||||
|
||||
function db149_user_delete_volunteer($u)
|
||||
{
|
||||
}
|
||||
|
||||
function db149_user_delete_judge($u)
|
||||
{
|
||||
global $config;
|
||||
$id = $u['id'];
|
||||
mysql_query("DELETE FROM judges_teams_link WHERE users_id='$id'");
|
||||
mysql_query("DELETE FROM judges_specialawards_sel WHERE users_id='$id'");
|
||||
}
|
||||
|
||||
function db149_user_delete_fair($u)
|
||||
{
|
||||
}
|
||||
|
||||
function db149_user_delete_student($u)
|
||||
{
|
||||
}
|
||||
|
||||
function db149_user_delete_sponsor($u)
|
||||
{
|
||||
}
|
||||
|
||||
function db149_user_delete_principal($u)
|
||||
{
|
||||
}
|
||||
|
||||
function db149_user_delete_teacher($u)
|
||||
{
|
||||
}
|
||||
|
||||
function db149_user_delete_parent($u)
|
||||
{
|
||||
}
|
||||
|
||||
function db149_user_delete_mentor($u)
|
||||
{
|
||||
}
|
||||
|
||||
function db149_user_delete_alumni($u)
|
||||
{
|
||||
}
|
||||
|
||||
|
||||
function db149_user_delete($u, $type=false)
|
||||
{
|
||||
$finish_delete = false;
|
||||
|
||||
if(!is_array($u)) {
|
||||
$u = db149_user_load($u);
|
||||
}
|
||||
if($type != false) {
|
||||
if(!in_array($type, $u['types'])) {
|
||||
/* Hum, type specified, but the user is not this type,
|
||||
* so, i guess we're done. */
|
||||
return;
|
||||
}
|
||||
if(count($u['types']) > 1) {
|
||||
/* Don't delete the whole user */
|
||||
$types='';
|
||||
foreach($u['types'] as $t) {
|
||||
if($t == $type) continue;
|
||||
if($types != '') $types .= ',';
|
||||
$types .= $t;
|
||||
}
|
||||
mysql_query("UPDATE users SET types='$types' WHERE id='{$u['id']}'");
|
||||
} else {
|
||||
$finish_delete = true;
|
||||
}
|
||||
call_user_func("db149_user_delete_$type", $u);
|
||||
} else {
|
||||
/* Delete the whole user */
|
||||
if(is_array($u['types'])) {
|
||||
foreach($u['types'] as $t) call_user_func("db149_user_delete_$t", $u);
|
||||
}
|
||||
$finish_delete = true;
|
||||
}
|
||||
if($finish_delete == true) {
|
||||
mysql_query("UPDATE users SET deleted='yes', deleteddatetime=NOW() WHERE id='{$u['id']}'");
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
/* Purge functions. These completely eliminate all traces of a user from the
|
||||
* database. This action cannot be undone. We prefer the committee to use the
|
||||
* "delete" functions, which simply mark the account as "deleted". */
|
||||
|
||||
function db149_user_purge($u, $type=false)
|
||||
{
|
||||
$finish_purge = false;
|
||||
|
||||
if(!is_array($u)) {
|
||||
$u = db149_user_load($u);
|
||||
}
|
||||
if($type != false) {
|
||||
if(!in_array($type, $u['types'])) {
|
||||
/* Hum, type specified, but the user is not this type,
|
||||
* so, i guess we're done. */
|
||||
return;
|
||||
}
|
||||
if(count($u['types']) > 1) {
|
||||
/* Don't delete the whole user */
|
||||
$types='';
|
||||
foreach($u['types'] as $t) {
|
||||
if($t == $type) continue;
|
||||
if($types != '') $types .= ',';
|
||||
$types .= $t;
|
||||
}
|
||||
mysql_query("UPDATE users SET types='$types' WHERE id='{$u['id']}'");
|
||||
} else {
|
||||
$finish_purge = true;
|
||||
}
|
||||
/* Call the delete func to deal with table linking, then completely wipe
|
||||
* out the entry */
|
||||
call_user_func("db149_user_delete_$type", $u);
|
||||
// call_user_func("user_purge_$type", $u);
|
||||
mysql_query("DELETE FROM users_$type WHERE users_id='{$u['id']}'");
|
||||
} else {
|
||||
/* Delete the whole user */
|
||||
foreach($u['types'] as $t) {
|
||||
call_user_func("db149_user_delete_$t", $u);
|
||||
// call_user_func("user_purge_$t", $u);
|
||||
mysql_query("DELETE FROM users_$t WHERE users_id='{$u['id']}'");
|
||||
}
|
||||
$finish_purge = true;
|
||||
}
|
||||
if($finish_purge == true) {
|
||||
mysql_query("DELETE FROM users WHERE id='{$u['id']}'");
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
/* Duplicate a row in the users table, or any one of the users_* tables. */
|
||||
function db149_user_dupe_row($db, $key, $val, $newval)
|
||||
{
|
||||
global $config;
|
||||
$nullfields = array('deleteddatetime'); /* Fields that can be null */
|
||||
$q = mysql_query("SELECT * FROM $db WHERE $key='$val'");
|
||||
if(mysql_num_rows($q) != 1) {
|
||||
echo "ERROR duplicating row in $db: $key=$val NOT FOUND.\n";
|
||||
exit;
|
||||
}
|
||||
$i = mysql_fetch_assoc($q);
|
||||
$i[$key] = $newval;
|
||||
|
||||
foreach($i as $k=>$v) {
|
||||
if($v == NULL && in_array($k, $nullfields))
|
||||
$i[$k] = 'NULL';
|
||||
else if($k == 'year')
|
||||
$i[$k] = $config['FAIRYEAR'];
|
||||
else
|
||||
$i[$k] = '\''.mysql_escape_string($v).'\'';
|
||||
}
|
||||
|
||||
$keys = '`'.join('`,`', array_keys($i)).'`';
|
||||
$vals = join(',', array_values($i));
|
||||
|
||||
$q = "INSERT INTO $db ($keys) VALUES ($vals)";
|
||||
// echo "Dupe Query: [$q]";
|
||||
$r = mysql_query($q);
|
||||
echo mysql_error();
|
||||
|
||||
$id = mysql_insert_id();
|
||||
return $id;
|
||||
}
|
||||
/* Used by the login scripts to copy one user from one year to another */
|
||||
function db149_user_dupe($u, $new_year)
|
||||
{
|
||||
/* Dupe a user if:
|
||||
* - They don't exist in the current year
|
||||
* (users->year != the target year (passed in so we can use it in the rollover script) )
|
||||
* - They have a previous year entry
|
||||
* (users->year DESC LIMIT 1 == 1 row)
|
||||
* - That previous entry has deleted=no */
|
||||
|
||||
/* Find the last entry */
|
||||
$q = mysql_query("SELECT id,uid,year,deleted FROM users WHERE uid='{$u['uid']}'
|
||||
ORDER BY year DESC LIMIT 1");
|
||||
$r = mysql_fetch_object($q);
|
||||
if($r->deleted == 'yes') {
|
||||
echo "Cannot duplicate user ID {$u['id']}, they are deleted. Undelete them first.\n";
|
||||
exit;
|
||||
}
|
||||
if($r->year == $new_year) {
|
||||
echo "Cannot duplicate user ID {$u['id']}, they already exist in year $new_year\n";
|
||||
exit;
|
||||
}
|
||||
|
||||
$id = db149_user_dupe_row('users', 'id', $u['id'], NULL);
|
||||
$q = mysql_query("UPDATE users SET year='$new_year' WHERE id='$id'");
|
||||
|
||||
/* Load the new user */
|
||||
$u2 = db149_user_load($id);
|
||||
|
||||
foreach($u2['types'] as $t) {
|
||||
db149_user_dupe_row("users_$t", 'users_id', $u['id'], $id);
|
||||
}
|
||||
/* Return the ID of the new user */
|
||||
return $id;
|
||||
}
|
||||
|
||||
/* Returns true if loaded user ($u) is allowed to add role type $type to their
|
||||
* profile. THis is intended as a last-stop mechanism, preventing, for example
|
||||
* a student from co-existing with any other account type. */
|
||||
function db149_user_add_role_allowed($type, $u)
|
||||
{
|
||||
/* For example, a committee member can add a volunteer or judge role to
|
||||
* their account. */
|
||||
$allowed = array(
|
||||
'committee' => array('volunteer', 'judge', 'sponsor','principal','teacher','parent','mentor','alumni'),
|
||||
'volunteer' => array('judge', 'committee', 'sponsor','principal','teacher','parent','mentor','alumni'),
|
||||
'judge' => array('volunteer', 'committee', 'sponsor','principal','teacher','parent','mentor','alumni'),
|
||||
'student' => array(),
|
||||
'fair' => array(),
|
||||
'sponsor' => array('volunteer','judge', 'sponsor','principal','teacher','parent','mentor','alumni'),
|
||||
'principal' => array('volunteer','judge', 'sponsor','committee','teacher','parent','mentor','alumni'),
|
||||
'teacher' => array('volunteer','judge', 'sponsor','principal','committee','parent','mentor','alumni'),
|
||||
'parent' => array('volunteer','judge', 'sponsor','principal','teacher','committee','mentor','alumni'),
|
||||
'mentor' => array('volunteer','judge', 'sponsor','principal','teacher','parent','committee','alumni'),
|
||||
'alumni' => array('volunteer','judge', 'sponsor','principal','teacher','parent','mentor','committee'),
|
||||
);
|
||||
|
||||
foreach($u['types'] as $ut) {
|
||||
$allowed_array = $allowed[$ut];
|
||||
if(in_array($type, $allowed[$ut])) return true;
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
function db149_user_create($type, $username, $u = NULL)
|
||||
{
|
||||
global $config;
|
||||
if(!is_array($u)) {
|
||||
mysql_query("INSERT INTO users (`types`,`username`,`passwordset`,`created`,`year`)
|
||||
VALUES ('$type','$username','0000-00-00', NOW(), '{$config['FAIRYEAR']}')");
|
||||
echo mysql_error();
|
||||
$uid = mysql_insert_id();
|
||||
if(db149_user_valid_email($username)) {
|
||||
mysql_query("UPDATE users SET email='$username' WHERE id='$uid'");
|
||||
}
|
||||
mysql_query("UPDATE users SET uid='$uid' WHERE id='$uid'");
|
||||
echo mysql_error();
|
||||
db149_user_set_password($uid, NULL);
|
||||
/* Since the user already has a type, user_save won't create this
|
||||
* entry for us, so do it here */
|
||||
mysql_query("INSERT INTO users_$type (users_id) VALUES('$uid')");
|
||||
echo mysql_error();
|
||||
/* Load the complete user */
|
||||
$u = db149_user_load($uid);
|
||||
} else {
|
||||
/* The user has been specified and already exists,
|
||||
* just add a role */
|
||||
$uid = $u['uid'];
|
||||
if(!db149_user_add_role_allowed($type, $u)) {
|
||||
/* If we get in here, someone is hand crafting URLs */
|
||||
echo "HALT: invalid role add specified for operation.";
|
||||
exit;
|
||||
}
|
||||
/* Ensure we have a full user, and add the type to the existing user */
|
||||
$u = db149_user_load_by_uid($uid);
|
||||
$u['types'][] = $type;
|
||||
}
|
||||
/* Activate the new type, and save, then return the user */
|
||||
$u["{$type}_active"] = 'yes';
|
||||
db149_user_save($u);
|
||||
return $u;
|
||||
}
|
||||
|
||||
|
||||
function db149_user_valid_user($user)
|
||||
{
|
||||
/* Find any character that doesn't match the valid username characters
|
||||
* (^ inverts the matching remember */
|
||||
$x = preg_match('[^a-zA-Z0-9@.-_]',$user);
|
||||
|
||||
/* If x==1, a match was found, and the input is bad */
|
||||
return ($x == 1) ? false : true;
|
||||
}
|
||||
|
||||
function db149_user_valid_password($pass)
|
||||
{
|
||||
/* Same as user, but allow more characters */
|
||||
$x = preg_match('[^a-zA-Z0-9 ~!@#$%^&*()-_=+|;:,<.>/?]',$pass);
|
||||
|
||||
/* If x==1, a match was found, and the input is bad */
|
||||
if($x == 1) return false;
|
||||
|
||||
if(strlen($pass) < 6) return false;
|
||||
|
||||
return true;
|
||||
}
|
||||
|
||||
/* A more strict version of isEmailAddress() */
|
||||
function db149_user_valid_email($str)
|
||||
{
|
||||
if(eregi('^[a-zA-Z0-9._-]+@[a-zA-Z0-9._-]+\.([a-zA-Z]{2,4})$', $str))
|
||||
return true;
|
||||
return false;
|
||||
}
|
||||
|
||||
|
||||
/* Perform some checks. Make sure the person is logged in, and that their
|
||||
* password hasn't expired (the password_expired var is set in the login page)
|
||||
*/
|
||||
function db149_user_auth_required($type, $access='')
|
||||
{
|
||||
global $config;
|
||||
if(!isset($_SESSION['users_type'])) {
|
||||
message_push(error(i18n("You must login to view that page")));
|
||||
header("location: {$config['SFIABDIRECTORY']}/user_login.php?type=$type");
|
||||
exit;
|
||||
}
|
||||
|
||||
if($_SESSION['users_type'] != $type) {
|
||||
message_push(error(i18n("You must login to view that page")));
|
||||
header("location: {$config['SFIABDIRECTORY']}/user_login.php?type=$type");
|
||||
exit;
|
||||
}
|
||||
|
||||
if($_SESSION['password_expired'] == true) {
|
||||
header("location: {$config['SFIABDIRECTORY']}/user_password.php");
|
||||
exit;
|
||||
}
|
||||
|
||||
if($access != '') {
|
||||
if($type != 'committee') {
|
||||
echo "CRITICAL ERROR, cannot check access in user_auth_required without specifying type=committee";
|
||||
exit;
|
||||
}
|
||||
|
||||
if(committee_auth_has_access($access) == false) {
|
||||
message_push(error(i18n('You do not have permission to view that page')));
|
||||
header("Location: {$config['SFIABDIRECTORY']}/committee_main.php");
|
||||
exit;
|
||||
}
|
||||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
|
||||
function db149_user_volunteer_registration_status()
|
||||
{
|
||||
global $config;
|
||||
// $now = date('Y-m-d H:i:s');
|
||||
// if($now < $config['dates']['judgeregopen']) return "notopenyet";
|
||||
// if($now > $config['dates']['judgeregclose']) return "closed";
|
||||
return "open";
|
||||
}
|
||||
|
||||
function db149_user_judge_registration_status()
|
||||
{
|
||||
global $config;
|
||||
$now = date('Y-m-d H:i:s');
|
||||
if($now < $config['dates']['judgeregopen']) return "notopenyet";
|
||||
if($now > $config['dates']['judgeregclose']) return "closed";
|
||||
return "open";
|
||||
}
|
||||
|
||||
$user_personal_fields_map = array(
|
||||
'salutation' => array('salutation'),
|
||||
'name' => array('firstname','lastname'),
|
||||
'email' => array('email'),
|
||||
'sex' => array('sex'),
|
||||
'phonehome' => array('phonehome'),
|
||||
'phonework' => array('phonework'),
|
||||
'phonecell' => array('phonecell'),
|
||||
'fax' => array('fax'),
|
||||
'org' => array('organization'),
|
||||
'birthdate' => array('birthdate'),
|
||||
'lang' => array('lang'),
|
||||
'address' => array('address', 'address2', 'postalcode'),
|
||||
'city' => array('city'),
|
||||
'province' => array('province'),
|
||||
'firstaid' => array('firstaid','cpr'));
|
||||
|
||||
function db149_user_personal_fields($type)
|
||||
{
|
||||
global $config, $user_personal_fields_map;
|
||||
$ret = array('firstname','lastname','email');
|
||||
$fields = $config["{$type}_personal_fields"];
|
||||
if($fields != '') {
|
||||
$fields = split(',', $fields);
|
||||
foreach($fields as $f) {
|
||||
$ret = array_merge($ret, $user_personal_fields_map[$f]);
|
||||
}
|
||||
}
|
||||
return $ret;
|
||||
}
|
||||
|
||||
function db149_user_personal_required_fields($type)
|
||||
{
|
||||
global $config, $user_personal_fields_map;
|
||||
$ret = array('firstname','lastname','email');
|
||||
$required = $config["{$type}_personal_required"];
|
||||
if($required != '') {
|
||||
$fields = split(',', $required);
|
||||
foreach($fields as $f) {
|
||||
$ret = array_merge($ret, $user_personal_fields_map[$f]);
|
||||
}
|
||||
}
|
||||
/* Filter some elements that are never required.
|
||||
* - address2
|
||||
*/
|
||||
$ret = array_diff($ret, array('address2'));
|
||||
return $ret;
|
||||
}
|
||||
|
||||
function db149_user_personal_info_status(&$u)
|
||||
{
|
||||
$required = array();
|
||||
foreach($u['types'] as $t) {
|
||||
$required = array_merge($required,
|
||||
db149_user_personal_required_fields($t));
|
||||
}
|
||||
foreach($required as $r) {
|
||||
$val = trim($u[$r]);
|
||||
|
||||
if(strlen($val) > 0) {
|
||||
/* Ok */
|
||||
} else {
|
||||
return 'incomplete';
|
||||
}
|
||||
}
|
||||
/* FIXME: somehow call the $type _status_update() function db149_to update
|
||||
* the individual $type _complete entry? */
|
||||
return 'complete';
|
||||
}
|
||||
|
||||
/* user_{$type}_login() is called with a full $u loaded */
|
||||
function db149_user_committee_login($u)
|
||||
{
|
||||
/* Double check, make sure the user is of this type */
|
||||
if(!in_array('committee', $u['types'])) {
|
||||
echo "ERROR: attempted to login committee on a non-committee user\n";
|
||||
exit;
|
||||
}
|
||||
|
||||
$_SESSION['access_admin'] = $u['access_admin'];// == 'yes') ? true : false;
|
||||
$_SESSION['access_config'] = $u['access_config'];// == 'yes') ? true : false;
|
||||
$_SESSION['access_super'] = $u['access_super'];// == 'yes') ? true : false;
|
||||
}
|
||||
|
||||
function db149_user_fair_login($u)
|
||||
{
|
||||
/* Double check, make sure the user is of this type */
|
||||
if(!in_array('fair', $u['types'])) {
|
||||
echo "ERROR: attempted to login fair on a non-fair user\n";
|
||||
exit;
|
||||
}
|
||||
|
||||
$_SESSION['fairs_id'] = $u['fairs_id'];// == 'yes') ? true : false;
|
||||
}
|
||||
|
||||
?>
|
||||
Loading…
Reference in New Issue
Block a user