deon/phpldapadmin
1
0
Fork 0
Code Issues 36 Pull Requests Packages Projects Releases Wiki Activity
7ff3528665
phpldapadmin/update_confirm.php

250 lines
7.3 KiB
PHP
Raw Normal View History

RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
<?php
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
// $Header: /cvsroot/phpldapadmin/phpldapadmin/update_confirm.php,v 1.37 2005/02/25 13:44:06 wurley Exp $
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
/**
* Takes the results of clicking "Save" in edit.php and determines which
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
* attributes need to be updated (ie, which ones actually changed). Then,
* we present a confirmation table to the user outlining the changes they
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
* are about to make. That form submits directly to update.php, which
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
* makes the change.
*
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
* @package phpLDAPadmin
*/
/**
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
*/
require './common.php';
include './header.php';
include 'templates/template_config.php';
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
$server_id = (isset($_POST['server_id']) ? $_POST['server_id'] : '');
$ldapserver = new LDAPServer($server_id);
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
if( $ldapserver->isReadOnly() )
pla_error( $lang['no_updates_in_read_only_mode'] );
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
$dn = $_POST['dn'];
$old_values = $_POST['old_values'];
$new_values = $_POST['new_values'];
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
$encoded_dn = rawurlencode( $dn );
$rdn = get_rdn( $dn );
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
$mkntPassword = NULL;
$samba_password_step = 0;
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
?>
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
<body>
<h3 class="title"><?php echo htmlspecialchars( ( $rdn ) ); ?></h3>
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
<h3 class="subtitle">Server: <b><?php echo $ldapserver->name; ?></b> &nbsp;&nbsp;&nbsp; <?php echo $lang['distinguished_name']; ?>: <b><?php echo htmlspecialchars( ( $dn ) ); ?></b></h3>
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
<?php
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
run_hook ( 'pre_update_array_processing', array ( 'server_id' => $server_id,
'dn' => $dn, 'old_values' => &$old_values, 'new_values' => &$new_values ) );
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
$update_array = array();
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
foreach( $old_values as $attr => $old_val ) {
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
// Did the user delete the field?
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
if( ! isset( $new_values[ $attr ] ) )
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
$update_array[ $attr ] = '';
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
// did the user change the field?
elseif( $old_val != $new_values[ $attr ] ) {
$new_val = $new_values[ $attr ];
// special case for userPassword attributes
if( 0 == strcasecmp( $attr, 'userPassword' ) && $new_val != '' ) {
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
$new_val = password_hash( $new_val, $_POST['enc_type'] );
$password_already_hashed = true;
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
}
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
// special case for samba password
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
else if (( 0 == strcasecmp($attr,'sambaNTPassword') || 0 == strcasecmp($attr,'sambaLMPassword'))
&& trim($new_val[0]) != '' ) {
$mkntPassword = new MkntPasswdUtil();
$mkntPassword->createSambaPasswords( $new_val[0] ) or pla_error($lang['unable_create_samba_pass']);
$new_val = $mkntPassword->valueOf($attr);
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
}
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
$update_array[ $attr ] = $new_val;
}
}
// special case check for a new enc_type for userPassword (not otherwise detected)
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
if( isset( $_POST['enc_type'] ) &&
! isset( $password_already_hashed ) &&
$_POST['enc_type'] != $_POST['old_enc_type'] &&
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
$_POST['enc_type'] != 'clear' &&
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
array_key_exists ( 'userpassword', $_POST['new_values'] ) &&
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
$_POST['new_values']['userpassword'] != '' ) {
$new_password = password_hash( $_POST['new_values']['userpassword'], $_POST['enc_type'] );
$update_array[ 'userpassword' ] = $new_password;
}
// strip empty vals from update_array and ensure consecutive indices for each attribute
foreach( $update_array as $attr => $val ) {
if( is_array( $val ) ) {
foreach( $val as $i => $v )
if( null == $v || 0 == strlen( $v ) )
unset( $update_array[$attr][$i] );
$update_array[$attr] = array_values( $update_array[$attr] );
}
}
// at this point, the update_array should look like this (example):
// Array (
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
// cn => Array(
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
// [0] => 'Dave',
// [1] => 'Bob' )
// sn => 'Smith',
// telephoneNumber => '555-1234' )
// This array should be ready to be passed to ldap_modify()
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
run_hook ( 'post_update_array_processing', array ( 'server_id' => $server_id,
'dn' => $dn, 'update_array' => &$update_array ) );
if( count( $update_array ) > 0 ) { ?>
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
<br />
<center>
<?php echo $lang['do_you_want_to_make_these_changes']; ?>
<br />
<br />
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
<!-- Commit button and acompanying form -->
<form action="update.php" method="post">
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
<table class="confirm">
<tr>
<th><?php echo $lang['attribute']; ?></th>
<th><?php echo $lang['old_value']; ?></th>
<th><?php echo $lang['new_value']; ?></th>
</tr>
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
<?php
$counter=0;
run_hook ( 'pre_display_update_array', array ( 'server_id' => $server_id, 'dn' => $dn,
'update_array' => &$update_array ) );
foreach( $update_array as $attr => $new_val ) {
$counter++;
if ( ! array_key_exists ( $attr, $old_values ) or ! array_key_exists ( $attr, $new_values ) )
continue;
?>
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
<tr class="<?php echo $counter%2 ? 'even' : 'odd'; ?>">
<td><b><?php echo htmlspecialchars( $attr ); ?></b></td>
<td><nobr>
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
<?php
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
if( is_array( $old_values[ $attr ] ) )
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
foreach( $old_values[ $attr ] as $v )
echo nl2br( htmlspecialchars( $v ) ) . "<br />";
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
else
if( 0 == strcasecmp( $attr, 'userPassword' )
&& ( obfuscate_password_display() || is_null( get_enc_type( $old_values[ $attr ] ) ) ) )
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
echo preg_replace( '/./', '*', $old_values[ $attr ] ) . "<br />";
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
else
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
echo nl2br( htmlspecialchars( $old_values[ $attr ] ) ) . "<br />";
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
echo "</nobr></td><td><nobr>";
// is this a multi-valued attribute?
if( is_array( $new_val ) ) {
foreach( $new_val as $i => $v ) {
if( $v == '' ) {
// remove it from the update array if it's empty
unset( $update_array[ $attr ][ $i ] );
$update_array[ $attr ] = array_values( $update_array[ $attr ] );
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
} else {
echo nl2br( htmlspecialchars( $v ) ) . "<br />";
}
}
// was this a multi-valued attribute deletion? If so,
// fix the $update_array to reflect that per update_confirm.php's
// expectations
if( $update_array[ $attr ] == array( 0 => '' ) || $update_array[ $attr ] == array() ) {
$update_array[ $attr ] = '';
echo '<span style="color: red">' . $lang['attr_deleted'] . '</span>';
}
}
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
elseif( $new_val != '' )
if( 0 == strcasecmp( $attr, 'userPassword' ) &&
( obfuscate_password_display() || is_null( get_enc_type( $new_values[ $attr ] ) ) ) )
echo preg_replace( '/./', '*', $new_val ) . "<br />";
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
else
echo htmlspecialchars( $new_val ) . "<br />";
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
else
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
echo '<span style="color: red">' . $lang['attr_deleted'] . '</span>';
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
echo "</nobr></td></tr>\n\n";
}
run_hook ( 'post_display_update_array', array ( 'server_id' => $server_id, 'dn' => $dn,
'update_array' => &$update_array, 'index' => &$counter ) );
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
?>
</table>
<br />
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
<table class="form">
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
<tr>
<td>
<input type="hidden" name="server_id" value="<?php echo $server_id; ?>" />
<input type="hidden" name="dn" value="<?php echo $dn; ?>" />
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
<?php foreach( $update_array as $attr => $val ) {
if( is_array( $val ) ) {
foreach( $val as $i => $v ) { ?>
<input type="hidden" name="update_array[<?php echo htmlspecialchars( $attr ); ?>][<?php echo $i; ?>]" value="<?php echo htmlspecialchars( $v ); ?>" />
<?php }
} else { ?>
<input type="hidden" name="update_array[<?php echo htmlspecialchars( $attr ); ?>]" value="<?php echo htmlspecialchars( $val ); ?>" />
<?php }
} ?>
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
<input type="submit" value="<?php echo $lang['commit']; ?>" class="happy" />
</form>
</td>
<td>
<!-- Cancel button -->
<form action="edit.php" method="get">
<input type="hidden" name="server_id" value="<?php echo $server_id; ?>" />
<input type="hidden" name="dn" value="<?php echo $dn; ?>" />
<input type="submit" value="<?php echo $lang['cancel']; ?>" class="scary" />
</form>
</td>
</tr>
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
</table>
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
</center>
</body>
<?php
} else { ?>
RELEASE 0.9.6
2009-06-30 09:24:29 +00:00
RELEASE 0.9.5
2009-06-30 09:22:30 +00:00
<center>
<?php echo $lang['you_made_no_changes']; ?>
<a href="edit.php?server_id=<?php echo $server_id; ?>&amp;dn=<?php echo $encoded_dn; ?>"><?php echo $lang['go_back']; ?></a>.
</center>
<?php } ?>
</form>
Reference in New Issue Copy Permalink