Initial Commit of AgileBill Open Source
This commit is contained in:
unknown
362
modules/htaccess/htaccess.inc.php
Normal file
362
modules/htaccess/htaccess.inc.php
Normal file
@@ -0,0 +1,362 @@
|
||||
<?php
|
||||
|
||||
/**
|
||||
* AgileBill - Open Billing Software
|
||||
*
|
||||
* This body of work is free software; you can redistribute it and/or
|
||||
* modify it under the terms of the Open AgileBill License
|
||||
* License as published at http://www.agileco.com/agilebill/license1-4.txt
|
||||
*
|
||||
* For questions, help, comments, discussion, etc., please join the
|
||||
* Agileco community forums at http://forum.agileco.com/
|
||||
*
|
||||
* @link http://www.agileco.com/
|
||||
* @copyright 2004-2008 Agileco, LLC.
|
||||
* @license http://www.agileco.com/agilebill/license1-4.txt
|
||||
* @author Tony Landis <tony@agileco.com>
|
||||
* @package AgileBill
|
||||
* @version 1.4.93
|
||||
*/
|
||||
|
||||
class htaccess
|
||||
{
|
||||
|
||||
# Open the constructor for this mod
|
||||
function htaccess()
|
||||
{
|
||||
# name of this module:
|
||||
$this->module = "htaccess";
|
||||
|
||||
# location of the construct XML file:
|
||||
$this->xml_construct = PATH_MODULES . "" . $this->module . "/" . $this->module . "_construct.xml";
|
||||
|
||||
# open the construct file for parsing
|
||||
$C_xml = new CORE_xml;
|
||||
$construct = $C_xml->xml_to_array($this->xml_construct);
|
||||
|
||||
$this->method = $construct["construct"]["method"];
|
||||
$this->trigger = $construct["construct"]["trigger"];
|
||||
$this->field = $construct["construct"]["field"];
|
||||
$this->table = $construct["construct"]["table"];
|
||||
$this->module = $construct["construct"]["module"];
|
||||
$this->cache = $construct["construct"]["cache"];
|
||||
$this->order_by = $construct["construct"]["order_by"];
|
||||
$this->limit = $construct["construct"]["limit"];
|
||||
}
|
||||
|
||||
|
||||
|
||||
##############################
|
||||
## LIST AUTH HTACCESS URLS ##
|
||||
##############################
|
||||
|
||||
function list_dirs($VAR)
|
||||
{
|
||||
global $smarty, $C_auth;
|
||||
$ii = 0;
|
||||
|
||||
### Get a list of htaccess groups:
|
||||
$db = &DB();
|
||||
$sql = 'SELECT id,group_avail
|
||||
FROM ' . AGILE_DB_PREFIX . 'htaccess WHERE
|
||||
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
||||
status = ' . $db->qstr('1');
|
||||
$result = $db->Execute($sql);
|
||||
|
||||
if($result->RecordCount() == 0)
|
||||
{
|
||||
|
||||
$smarty->assign('htaccess_display', false);
|
||||
return false;
|
||||
}
|
||||
|
||||
while(!$result->EOF)
|
||||
{
|
||||
@$arr = unserialize($result->fields['group_avail']);
|
||||
$id = $result->fields['id'];
|
||||
$this_show = false;
|
||||
|
||||
for($i=0; $i<count($arr); $i++)
|
||||
{
|
||||
if($C_auth->auth_group_by_id($arr[$i]))
|
||||
{
|
||||
$this_show = true;
|
||||
$i=count($arr);
|
||||
}
|
||||
}
|
||||
|
||||
if($this_show)
|
||||
{
|
||||
### Get each directory and add it to the array:
|
||||
$db = &DB();
|
||||
$sql = 'SELECT *
|
||||
FROM ' . AGILE_DB_PREFIX . 'htaccess_dir WHERE
|
||||
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
||||
htaccess_id = ' . $db->qstr($id) . ' AND
|
||||
status = ' . $db->qstr('1');
|
||||
$result_dir = $db->Execute($sql);
|
||||
|
||||
while(!$result_dir->EOF)
|
||||
{
|
||||
|
||||
$arr_smarty[] = Array (
|
||||
'id' => $result_dir->fields['id'],
|
||||
'name' => $result_dir->fields['name'],
|
||||
'description' => $result_dir->fields['description'],
|
||||
'url' => $result_dir->fields['url']
|
||||
);
|
||||
$ii++;
|
||||
$result_dir->MoveNext();
|
||||
}
|
||||
}
|
||||
$result->MoveNext();
|
||||
}
|
||||
|
||||
|
||||
|
||||
if($ii == "0")
|
||||
{
|
||||
$smarty->assign('htaccess_display', false);
|
||||
return false;
|
||||
}
|
||||
else
|
||||
{
|
||||
$smarty->assign('htaccess_display', true);
|
||||
$smarty->assign('htaccess_results', $arr_smarty);
|
||||
return true;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
##############################
|
||||
## Smarty Authentication ##
|
||||
##############################
|
||||
function check_smarty($VAR)
|
||||
{
|
||||
global $smarty, $C_translate;
|
||||
if($this->check_auth($VAR['_htaccess_id']) )
|
||||
{
|
||||
if(isset($VAR['_htaccess_dir_id']))
|
||||
{
|
||||
## Get the URL for this htaccess area:
|
||||
$db = &DB();
|
||||
$sql = 'SELECT url FROM ' . AGILE_DB_PREFIX . 'htaccess_dir WHERE
|
||||
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
||||
id = ' . $db->qstr($VAR['_htaccess_dir_id']);
|
||||
$result = $db->Execute($sql);
|
||||
if($result->RecordCount() > 0)
|
||||
$smarty->assign('htaccess_url', $result->fields['url']);
|
||||
$smarty->assign('htaccess_auth', "1");
|
||||
return true;
|
||||
}
|
||||
}
|
||||
|
||||
$smarty->assign('htaccess_auth', "0");
|
||||
return false;
|
||||
}
|
||||
|
||||
|
||||
##############################
|
||||
## Check Authentication ##
|
||||
##############################
|
||||
function check_auth($id)
|
||||
{
|
||||
### Check if user is a member of one of the authorized groups:
|
||||
$db = &DB();
|
||||
$sql = 'SELECT status,group_avail FROM ' . AGILE_DB_PREFIX . 'htaccess WHERE
|
||||
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
|
||||
id = ' . $db->qstr($id);
|
||||
$result = $db->Execute($sql);
|
||||
|
||||
if($result->RecordCount() > 0)
|
||||
{
|
||||
if ($result->fields['status'] != '1') return false;
|
||||
@$arr = unserialize($result->fields['group_avail']);
|
||||
global $C_auth;
|
||||
for($i=0; $i<count($arr); $i++)
|
||||
if($C_auth->auth_group_by_id($arr[$i])) return true;
|
||||
|
||||
}
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
|
||||
##############################
|
||||
## ADD ##
|
||||
##############################
|
||||
function add($VAR)
|
||||
{
|
||||
$type = "add";
|
||||
$this->method["$type"] = split(",", $this->method["$type"]);
|
||||
$db = new CORE_database;
|
||||
$id = $db->add($VAR, $this, $type);
|
||||
|
||||
if(isset($id) && $id > 0)
|
||||
{
|
||||
# Create the php index file for the Apache mod_auth_remote module:
|
||||
/*
|
||||
$GroupArray = '';
|
||||
for($i=0; $i<count($VAR['htaccess_group_avail']); $i++)
|
||||
{
|
||||
if($i > 0) $GroupArray .= ',';
|
||||
$GroupArray .= $VAR['htaccess_group_avail'][$i];
|
||||
}
|
||||
|
||||
$data = '<?php
|
||||
$Status = '.@$VAR['htaccess_status'].';
|
||||
$GroupArray = Array('.$GroupArray.');
|
||||
if($Status != "1") { header(\'WWW-Authenticate: Basic realm="Failed"\'); header("HTTP/1.0 401 Unauthorized"); exit; }
|
||||
include_once("../../../config.inc.php");
|
||||
require_once(PATH_ADODB . "adodb.inc.php");
|
||||
require_once(PATH_CORE . "database.inc.php");
|
||||
require_once(PATH_MODULES. "htaccess/mod_auth_remote.inc.php");
|
||||
?>';
|
||||
|
||||
# add dir:
|
||||
$dir = PATH_FILES . 'htaccess_'. $id .'/';
|
||||
if(is_dir($dir))
|
||||
mkdir($dir, '755');
|
||||
|
||||
$file = $dir . 'index.php';
|
||||
$fp = fopen($file, "w+");
|
||||
fputs($fp, $data);
|
||||
fclose($fp);
|
||||
*/
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
##############################
|
||||
## VIEW ##
|
||||
##############################
|
||||
function view($VAR)
|
||||
{
|
||||
$type = "view";
|
||||
$this->method["$type"] = split(",", $this->method["$type"]);
|
||||
$db = new CORE_database;
|
||||
$db->view($VAR, $this, $type);
|
||||
}
|
||||
|
||||
##############################
|
||||
## UPDATE ##
|
||||
##############################
|
||||
function update($VAR)
|
||||
{
|
||||
$type = "update";
|
||||
$this->method["$type"] = split(",", $this->method["$type"]);
|
||||
$db = new CORE_database;
|
||||
$result = $db->update($VAR, $this, $type);
|
||||
|
||||
if($result)
|
||||
{
|
||||
$id = $VAR['htaccess_id'];
|
||||
|
||||
# Update the php index file for the Apache mod_auth_remote module:
|
||||
$GroupArray = '';
|
||||
for($i=0; $i<count($VAR['htaccess_group_avail']); $i++)
|
||||
{
|
||||
if($i > 0) $GroupArray .= ',';
|
||||
$GroupArray .= $VAR['htaccess_group_avail'][$i];
|
||||
}
|
||||
|
||||
|
||||
$data = '<?php
|
||||
$Status = '.@$VAR['htaccess_status'].';
|
||||
$GroupArray = Array('.$GroupArray.');
|
||||
if($Status != "1") { header(\'WWW-Authenticate: Basic realm="Failed"\'); header("HTTP/1.0 401 Unauthorized"); exit; }
|
||||
include_once("../../../config.inc.php");
|
||||
require_once(PATH_ADODB . "adodb.inc.php");
|
||||
require_once(PATH_CORE . "database.inc.php");
|
||||
require_once(PATH_MODULES. "htaccess/mod_auth_remote.inc.php");
|
||||
?>';
|
||||
|
||||
# add dir:
|
||||
$dir = PATH_FILES . 'htaccess_'. $id;
|
||||
if(!is_dir($dir))
|
||||
mkdir($dir, '755');
|
||||
|
||||
$file = PATH_FILES . 'htaccess_'. $id . '/index.php';
|
||||
$fp = fopen($file, "w+");
|
||||
fputs($fp, $data);
|
||||
fclose($fp);
|
||||
}
|
||||
}
|
||||
|
||||
##############################
|
||||
## DELETE ##
|
||||
##############################
|
||||
function delete($VAR)
|
||||
{
|
||||
global $C_debug, $C_translate;
|
||||
|
||||
### Get the array
|
||||
if(isset($VAR["delete_id"]))
|
||||
$id = split(',', $VAR["delete_id"]);
|
||||
elseif (isset($VAR["id"]))
|
||||
$id = split(',', $VAR["id"]);
|
||||
|
||||
### Load class for deleting sub-dirs.
|
||||
include_once ( PATH_MODULES .'htaccess_dir/htaccess_dir.inc.php' );
|
||||
$htdir = new htaccess_dir;
|
||||
|
||||
### Loop:
|
||||
$db = &DB();
|
||||
for($i=0; $i<count($id); $i++)
|
||||
{
|
||||
if ( $id[$i] > 0 )
|
||||
{
|
||||
### Delete the htpasswd record:
|
||||
$sql = "DELETE FROM ".AGILE_DB_PREFIX."htaccess WHERE
|
||||
site_id = ".$db->qstr(DEFAULT_SITE)." AND
|
||||
id = ".$db->qstr($id[$i]);
|
||||
$result = $db->Execute($sql);
|
||||
|
||||
if ( $result )
|
||||
{
|
||||
### Delete .htaccess file(s) from the sub-directories
|
||||
$sql = "SELECT id FROM ".AGILE_DB_PREFIX."htaccess_dir WHERE
|
||||
site_id = ".$db->qstr(DEFAULT_SITE)." AND
|
||||
htaccess_id = ".$db->qstr($id[$i]);
|
||||
$result = $db->Execute($sql);
|
||||
if ($result->RecordCount() > 0 )
|
||||
$htdir->delete_one($result->fields['id']);
|
||||
}
|
||||
}
|
||||
|
||||
### Delete the mod_auth_remote files:
|
||||
/*
|
||||
unlink(PATH_FILES.'htaccess_'. $id[$i] . '/index.php');
|
||||
rmdir(PATH_FILES.'htaccess_'. $id[$i] );
|
||||
*/
|
||||
}
|
||||
}
|
||||
|
||||
##############################
|
||||
## SEARCH ##
|
||||
##############################
|
||||
function search($VAR)
|
||||
{
|
||||
$type = "search";
|
||||
$this->method["$type"] = split(",", $this->method["$type"]);
|
||||
$db = new CORE_database;
|
||||
$db->search($VAR, $this, $type);
|
||||
}
|
||||
|
||||
##############################
|
||||
## SEARCH SHOW ##
|
||||
##############################
|
||||
|
||||
function search_show($VAR)
|
||||
{
|
||||
$type = "search";
|
||||
$this->method["$type"] = split(",", $this->method["$type"]);
|
||||
$db = new CORE_database;
|
||||
$db->search_show($VAR, $this, $type);
|
||||
}
|
||||
|
||||
}
|
||||
?>
|
||||
Reference in New Issue
Block a user