<?php
// $Header: /cvsroot/phpldapadmin/phpldapadmin/htdocs/template_engine.php,v 1.22.2.11 2005/10/25 12:50:29 wurley Exp $
/**
* Template render engine.
* @param dn $dn DN of the object being edited. (For editing existing entries)
* @param dn $container DN where the new object will be created. (For creating new entries)
* @param string $template to use for new entry. (For creating new entries)
* @todo schema attr keys should be in lowercase.
* @package phpLDAPadmin
* @author The phpLDAPadmin development team
*/
/**
*/
require "./common.php";
$friendly_attrs = process_friendly_attr_table(); // @todo might not need this.
# REMOVE THSE @todo
$today = date('U');
$shadow_before_today_attrs = arrayLower(array('shadowLastChange','shadowMin'));
$shadow_after_today_attrs = arrayLower(array('shadowMax','shadowExpire','shadowWarning','shadowInactive'));
$shadow_format_attrs = array_merge($shadow_before_today_attrs, $shadow_after_today_attrs);
# END REMOVE
# If we have a DN, then this is to edit the entry.
if (isset($_REQUEST['dn'])) {
if( ! $ldapserver->haveAuthInfo())
pla_error( $lang['not_enough_login_info'] );
dn_exists( $ldapserver, $dn )
or pla_error( sprintf( $lang['no_such_entry'], pretty_print_dn( $dn ) ) );
$rdn = get_rdn($dn);
$attrs = get_object_attrs( $ldapserver, $dn, false, $config->GetValue('deref','view'));
$modified_attrs = isset( $_REQUEST['modified_attrs'] ) ? $_REQUEST['modified_attrs'] : false;
$show_internal_attrs = isset( $_REQUEST['show_internal_attrs'] ) ? true : false;
# If an entry has more children than this, stop searching and display this amount with a '+'
$max_children = 100;
} else {
$dn = '';
$rdn = '';
$encoded_dn = '';
isset($_REQUEST['template']) or die(); // pla_error( $lang['must_choose_template'] );
if ($_REQUEST['template'] == 'custom') {
include TMPLDIR.'template_header.php';
require TMPLDIR.'creation/custom.php';
die();
} else {
$templates = new Templates($ldapserver->server_id);
$template = $templates->GetTemplate($_REQUEST['template']);
}
}
include TMPLDIR.'template_header.php';
/*
* When we get here, (either a new entry, or modifying an existing entry), if the
* empty_attrs array has content, then we need to ask the user for this information.
*/
if (isset($template['empty_attrs'])) {
masort($template['empty_attrs'],'page,order',1);
# What page are we working on.
$page = isset($_REQUEST['page']) ? $_REQUEST['page'] : 1;
?>
<center><h2><?php echo $template['description']; ?></h2></center>
<center>
<table class="confirm" border=0>
<?php if (isset($_REQUEST['nextpage']) && ! $_REQUEST['nextpage']) {
$new_dn = sprintf('%s=%s,%s',$template['rdn'],$_REQUEST['form'][$template['rdn']],$_REQUEST['container']); ?>
<form action="create.php" method="post">
<input type="hidden" name="new_dn" value="<?php echo $new_dn; ?>" />
<?php } else { ?>
<form action="template_engine.php" method="post" id="template_form" name="template_form">
<?php } ?>
<?php
if (isset($_REQUEST['form']))
foreach ($_REQUEST['form'] as $attr => $value) {
# Check for any with post actions.
if (isset($template['attribute'][$attr]['post']) && $_REQUEST['page'] == $template['attribute'][$attr]['page']+1) {
if (preg_match('/^=php\.(\w+)\((.*)\)$/',$template['attribute'][$attr]['post'],$matches)) {
switch ($matches[1]) {
case 'Password' :
preg_match_all('/%(\w+)(\|.+)?(\/[lU])?%/U',$matches[2],$matchall);
$value = password_hash( $_REQUEST['form'][$matchall[1][1]], $_REQUEST[$matchall[1][0]] );
$_REQUEST['form'][$attr] = $value;
break;
case 'SambaPassword' :
$matchall = explode(',',$matches[2]);
$attr = preg_replace('/%/','',$matchall[1]);
$sambapassword = new smbHash;
switch ($matchall[0]) {
case 'LM' : $value = $sambapassword->lmhash($_REQUEST['form'][$attr]);
break;
case 'NT' : $value = $sambapassword->nthash($_REQUEST['form'][$attr]);
break;
default :
$value = null;
}
$_REQUEST['form'][$attr] = $value;
break;
case 'Join' :
preg_match_all('/%(\w+)(\|.+)?(\/[lU])?%/U',$matches[2],$matchall);
$matchattrs = explode(',',$matches[2]);
$char = $matchattrs[0];
$values = array();
foreach ($matchall[1] as $joinattr) {
if (isset($_REQUEST['form'][$joinattr]))
$values[] = $_REQUEST['form'][$joinattr];
else if (isset($_REQUEST[$joinattr]))
$values[] = $_REQUEST[$joinattr];
else
pla_error($lang['template_post_join']);
}
$value = implode($char,$values);
$_REQUEST['form'][$attr] = $value;
break;
default:
#@todo: Error, unknown post funciton.
}
}
}
if (is_array($value))
foreach ($value as $item)
printf('<input type="hidden" name="form[%s][]" value="%s" />',$attr,$item);
else
printf('<input type="hidden" name="form[%s]" value="%s" />',$attr,$value);
}
?>
<input type="hidden" name="server_id" value="<?php echo $ldapserver->server_id; ?>" />
<input type="hidden" name="template" value="<?php echo $_REQUEST['template']; ?>" />
<input type="hidden" name="object_classes" value="<?php echo rawurlencode(serialize(array_values($template['objectclass']))); ?>" />
<input type="hidden" name="page" value="<?php echo $page + 1; ?>" />
<tr class="spacer"><td colspan="3"></td></tr>
<tr>
<?php
if (isset($template['askcontainer']) && $template['askcontainer'] && $page == 1) {
if (! (isset($template['regexp']) && isset($template['regexp']))) {
?>
<td></td>
<td class="heading">Container <acronym title="Distinguished Name">DN</acronym>:</td>
<td><input type="text" name="container" size="40" value="<?php echo htmlspecialchars( $_REQUEST['container'] ); ?>" />
<?php draw_chooser_link( 'template_form.container' ); ?>
</td>
<tr class="spacer"><td colspan="3"></td></tr>
<?php } else { ?>
<td></td>
<td class="heading">Container <acronym title="Distinguished Name">DN</acronym>:</td>
<td><input type="text" name="container" size="40" value="<?php echo htmlspecialchars( $_REQUEST['container'] ); ?>" disabled />
</td>
<input type="hidden" name="container" value="<?php echo $_REQUEST['container']; ?>" />
<tr class="spacer"><td colspan="3"></td></tr>
<?php } ?>
<?php } else { ?>
<input type="hidden" name="container" value="<?php echo $_REQUEST['container']; ?>" />
<?php }
$count = 0;
$nextpage = 0;
$mustitems = 0;
foreach ($template['empty_attrs'] as $attr => $detail) {
$mustitem = false;
$verifyitem = false;
$onChange = '';
$onBlur = '';
$type = isset($detail['type']) ? $detail['type'] : 'text';
if (! isset($detail['page'])) $detail['page'] = 1;
$size = isset($detail['size']) ? $detail['size'] : 20;
$maxlength = isset($detail['maxlength']) ? $detail['maxlength'] : null;
# Check that the page number is correct.
if ($detail['page'] < $page && ! isset($attr[$attr])) {
# ERROR: This attribute should be set by now.
print "We should have set [$attr] by now.<BR>";
} elseif ($detail['page'] == $page) {
$count++;
print '</tr>';
# Some conditional checking.
# $detail['must'] & $detail['disable'] cannot be set at the same time.
if (isset($detail['must']) && $detail['must'] && isset($detail['disable']) && $detail['disable']) {
pla_error(printf($lang['template_mustattr'],$attr));
}
# If this attribute is disabled, go to the next one.
if (isset($detail['disable']) && $detail['disable'])
continue;
# Evaluate our Default Value, if its a function call result.
if (isset($detail['value'])) {
if (is_array($detail['value'])) {
# If value is an array, then it must a select list.
$type = 'select';
$defaultresult = sprintf('<select name="form[%s]" id="%%s" %%s %%s/>',$attr);
foreach ($detail['value'] as $key => $value) {
if (preg_match('/^_KEY:/',$key))
$key = preg_replace('/^_KEY:/','',$key);
else
$key = $value;
$defaultresult .= sprintf('<option name="%s" value="%s" %s>%s</option>',
$value,$key,
((isset($detail['default']) && $detail['default'] == $key) ? 'selected' : ''),
$value);
}
$defaultresult .= '</select>';
$detail['value'] = $defaultresult;
} else {
$detail['value'] = $templates->EvaluateDefault($ldapserver,$detail['value'],$_REQUEST['container'],null,(isset($detail['default']) ? $detail['default'] : null));
}
#if the default has a select list, then change the type to select
if (preg_match('/<select .*>/i',$detail['value']))
$type = 'select';
}
# @todo: $detail['must'] && $detail['hidden'] must have $detail['value'] (with a value).
# @todo: if value is a select list, then it cannot be hidden.
# If this is a hidden attribute, then set its value.
if (isset($detail['hidden']) && $detail['hidden']) {
printf('<input type="%s" name="form[%s]" id="%s" value="%s"/>','hidden',$attr,$attr,$detail['value']);
continue;
}
# This is a displayed attribute.
# Flag it as a must attribute so that we do get a value.
if (isset($detail['must']) && $detail['must'] && ! isset($detail['presubmit'])) {
$mustitems++;
$mustitem = true;
$onBlur .= sprintf("reduceMust(this.form,%s,'%s');",$attr,$attr);
}
# Display the icon if one is required.
if (isset($detail['icon']) && trim($detail['icon']))
printf('<td><img src="%s"></td>',$detail['icon']);
else
printf('<td></td>');
print '<td class="heading">';
# Display the label.
if (isset($detail['description']) && (trim($detail['description'])))
printf('<acronym title="%s">%s</acronym>:',$detail['description'],$detail['display']);
else
printf('%s:',$detail['display']);
print '</td>';
# Calculate the events.
# @todo: Need to change js so that if a must attr is auto populated, it decrements the total and enables the submit.
if (isset($detail['onchange'])) {
if (is_array($detail['onchange'])) {
foreach ($detail['onchange'] as $value) {
$onChange .= sprintf('%s;',$templates->OnChangeAdd($value));
}
} else {
$onChange .= sprintf('%s;',$templates->OnChangeAdd($detail['onchange']));
}
}
# Display the input box.
print '<td>';
if (in_array($type,array('text','password'))) {
printf('<input type="%s" size="%s" name="form[%s]%s" id="%s" value="%s" %s %s %s/>',
$type,$size,$attr,(isset($detail['array']) && ($detail['array'] > 1) ? '[]' : ''),$attr,
(isset($detail['value']) ? $detail['value'] : ''),
($onChange ? sprintf('onChange="%s"',$onChange) : '').($onBlur ? sprintf(' onBlur="%s"',$onBlur) : ''),
(isset($detail['disable']) ? 'disabled' : ''),
(isset($detail['maxlength']) ? sprintf(' maxlength="%s" ',$maxlength) : ''));
} else if ($type == 'select') {
printf($detail['value'],$attr,
($onChange ? sprintf('onChange="%s"',$onChange) : '').($onBlur ? sprintf(' onBlur="%s"',$onBlur) : ''),
(isset($detail['disable']) ? 'disabled' : ''));
}
# Disabled items dont get submitted.
# @todo need to add some js to enable them on submit, or add them as hidden items.
if ($mustitem) {
print ' *';
}
# Do we have a helper, and is it configured for the side.
if (isset($detail['helper']) && isset($detail['helper']['location'])
&& $detail['helper']['location'] == 'side' && isset($detail['helper']['value'])) {
printf(' %s',$templates->HelperValue($detail['helper']['value'],
(isset($detail['helper']['id']) ? $detail['helper']['id'] : ''),
$_REQUEST['container'],$ldapserver,null,
isset($detail['helper']['default']) ? $detail['helper']['default'] : ''));
}
if (isset($detail['hint']) && (trim($detail['hint'])))
printf(' <span class="hint">(hint: %s)</span></td>',$detail['hint']);
else
print '</td>';
print '</tr>';
# Do we have a verify attribute?
if (isset($detail['verify']) && ($detail['verify'])) {
$verifyitems = true;
print '<tr><td> </td><td class="heading">';
# Display the label.
if (isset($detail['description']) && (trim($detail['description'])))
printf('<acronym title="%s">%s %s</acronym>:',$lang['t_verify'],$detail['description'],$detail['display']);
else
printf('%s %s:',$lang['t_verify'],$detail['display']);
print '</td><td>';
if (in_array($type,array('text','password'))) {
printf('<input type="%s" name="%s" id="%s" value="%s" %s/>',
$type,$attr."V",$attr."V",(isset($detail['value']) ? $detail['value'] : ''),
sprintf('onBlur="check(form.%s,form.%sV)"',$attr,$attr));
}
print '</td></tr>';
}
# Is this a multiarray input?
if (isset($detail['array']) && ($detail['array'])) {
for ($i=2; $i <= $detail['array']; $i++) {
print '<tr><td> </td><td> </td>';
printf('<td><input type="%s" name="form[%s][]" id="%s" value="%s" %s %s/>',
$type,$attr,$attr.$i,
(isset($detail['value']) ? $detail['value'] : ''),
($onChange ? sprintf('onChange="%s"',$onChange) : '').($onBlur ? sprintf(' onBlur="%s"',$onBlur) : ''),
isset($detail['disable']) ? 'disabled' : '');
if (isset($detail['helper']) && isset($detail['helper']['location'])
&& $detail['helper']['location'] == 'side' && isset($detail['helper']['value'])) {
printf(' %s',$templates->HelperValue($detail['helper']['value'],
(isset($detail['helper']['id']) ? $detail['helper']['id'] : ''),$_REQUEST['container'],$ldapserver,$i));
}
print '</td></tr>';
}
}
# Do we have a helper.
# Side helpers are handled above.
# @todo: Helpers must have an onchange or onsubmit.
# @todo: Helpers must have an id field.
# @todo: Helpers must have an post field.
if (isset($detail['helper']) && (! isset($detail['helper']['location']) || $detail['helper']['location'] != 'side')) {
print '<tr><td> </td>';
print '<td class="heading">';
# Display the label.
if (isset($detail['helper']['description']) && (trim($detail['helper']['description'])))
printf('<acronym title="%s">%s</acronym>:',$detail['helper']['description'],$detail['helper']['display']);
else
printf('%s:',$detail['helper']['display']);
print '</td>';
printf('<td>%s</td>',$templates->HelperValue($detail['helper']['value'],$detail['helper']['id']));
}
if (isset($detail['spacer']) && $detail['spacer'])
print '<tr class="spacer"><td colspan="3"></td></tr>';
# See if there are any future ones - if there are and we dont ask any this round, then thats an error.
} elseif ($detail['page'] > $page) {
$nextpage++;
}
}
# @todo: Proper error message required.
if ($nextpage && ! $count)
pla_error(sprintf($lang['template_nextpage'],$nextpage));
# If there is no count, display the summary
if (! $count) {
printf('<tr><td><img src="%s"></td><td><span class="x-small">%s :</span></td><td><b>%s</b></td></tr>',
$template['icon'],$lang['createf_create_object'],htmlspecialchars($new_dn));
print '<tr class="spacer"><td colspan="3"></td></tr>';
$counter = 0;
foreach ($_REQUEST['form'] as $attr => $value) {
# Remove blank attributes.
if (! $_REQUEST['form'][$attr]) {
unset($_REQUEST['form'][$attr]);
continue;
}
$attrs[] = $attr;
printf('<input type="hidden" name="attrs[]" value="%s" />',$attr);
if (is_array($value))
foreach ($value as $item) {
if ($item && ! isset($unique[$item])) {
$unique[$item] = 1;
printf('<tr class="%s"><td colspan=2>%s</td><td><b>%s</b></td></tr>',
($counter++%2==0?'even':'odd'),$attr,htmlspecialchars($item));
printf('<input type="hidden" name="vals[%s][]" value="%s" />',array_search($attr,$attrs),$item);
}
}
else {
$display = $value;
if (isset($template['attribute'][$attr]['type']) && $template['attribute'][$attr]['type'] == 'password')
if (obfuscate_password_display($_REQUEST['enc']))
$display = '********';
printf('<tr class="%s"><td colspan=2>%s</td><td><b>%s</b></td></tr>',
($counter++%2==0?'even':'odd'),$attr,htmlspecialchars($display));
printf('<input type="hidden" name="vals[]" value="%s" />',$value);
}
}
} ?>
<input type="hidden" name="nextpage" value="<?php echo $nextpage; ?>" />
<tr class="spacer"><td colspan="3"></td></tr>
<tr>
<?php
if (! $nextpage && isset($_REQUEST['nextpage']) && ! $_REQUEST['nextpage']) {
# Look for any presubmit functions.
foreach ($template['empty_attrs'] as $attr => $detail) {
if (isset($template['attribute'][$attr]['presubmit']) && ! isset($_REQUEST['form'][$attr])) {
printf('<tr class="%s"><td colspan=2>%s</td><td><b>%s</b></td></tr>',
($counter++%2==0?'even':'odd'),$attr,htmlspecialchars($lang['t_auto_submit']));
printf('<input type="hidden" name="presubmit[]" value="%s" />',$attr);
}
}
?>
<td colspan="3"><center><br /><input type="submit" name='submit' value="<?php echo $lang['createf_create_object']; ?>" <?php echo $mustitems ? 'disabled' : '' ?>/></center></td>
<?php } elseif ($nextpage) { ?>
<td colspan="3"><center><br /><input type="submit" name='submit' value="<?php echo $lang['next_page']; ?>" <?php echo $mustitems ? 'disabled' : '' ?>/></center></td>
<?php } else { ?>
<td colspan="3"><center><br /><input type="submit" name='submit' value="<?php echo $lang['proceed_gt']; ?>" <?php echo $mustitems ? 'disabled' : '' ?>/></center></td>
<?php } ?>
<?php if ($mustitems) { ?>
<input type="hidden" name="mustitems" value="<?php echo $mustitems; ?>" />
<?php } ?>
</tr>
</form>
</table>
</center>
<span class="hint">This is the template engine.</span><br>
<span class="hint"><?php printf($lang['page_n'], $page); ?>.</span>
<?php
if ($mustitems) {
print '<script language="javascript">';
print ' var reduced = new Array();';
print 'function reduceMust(form,attr,attrname){';
print ' if (attr.value.length > 0) {';
print ' if (! reduced[attrname]) {';
print ' reduced[attrname] = 1;';
print ' form.mustitems.value--;';
print ' }';
print '';
print ' if (form.mustitems.value < 0) {';
print ' form.mustitems.value = 0;';
print ' }';
print '';
print ' if (form.mustitems.value == 0) {';
print ' form.submit.disabled = false;';
print ' }';
print ' } else {';
print ' if (reduced[attrname]) {';
print ' reduced[attrname] = 0;';
print ' form.mustitems.value++;';
print ' }';
print ' if (form.mustitems.value > 0) {';
print ' form.submit.disabled = true;';
print ' }';
print ' }';
print '}';
print '</script>';
}
if (isset($verifyitems) && $verifyitems) {
//@todo: Return focus to the first item.
print '<script language="javascript">';
print 'function check(a,b){';
print ' if (a.value != b.value){';
print ' alert(\'Values dont compare\')';
print ' }';
print '}';
print '</script>';
}
if ($templates->OnChangeDisplay()) {
print '<script language="javascript">';
print $templates->OnChangeDisplay();
print '</script>';
}
# User needs to submit form to continue.
die();
}
if (! isset($template))
$template['attrs'] = $attrs;
# If we get here - we are displaying/editing the entry.
# Sort these entries.
uksort( $template['attrs'], 'sortAttrs' );
$js_date_attrs = $config->GetValue('appearance','date_attrs');
printf('<script language="javascript">var defaults = new Array();var default_date_format = "%s";</script>',$config->GetValue('appearance','date'));
foreach( $template['attrs'] as $attr => $vals ) {
flush();
$schema_attr = $ldapserver->getSchemaAttribute($attr,$dn);
if( $schema_attr )
$attr_syntax = $schema_attr->getSyntaxOID();
else
$attr_syntax = null;
if( ! strcasecmp( $attr, 'dn' ) )
continue;
// has the config.php specified that this attribute is to be hidden or shown?
if( is_attr_hidden( $ldapserver, $attr))
continue;
// Setup the $attr_note, which will be displayed to the right of the attr name (if any)
$attr_note = '';
// is there a user-friendly translation available for this attribute?
if( isset( $friendly_attrs[ strtolower( $attr ) ] ) ) {
$attr_display = $friendly_attrs[ strtolower( $attr ) ];
$attr_note = "<acronym title=\"" . sprintf( $lang['alias_for'], $attr_display, $attr ) . "\">alias</acronym>";
} else {
$attr_display = $attr;
}
// is this attribute required by an objectClass?
$required_by = '';
if( $schema_attr )
foreach( $schema_attr->getRequiredByObjectClasses() as $required )
if( isset($attrs['objectClass']) && in_array( strtolower( $required ), arrayLower( $attrs['objectClass'] ) ) )
$required_by .= $required . ' ';
// It seems that some LDAP servers (Domino) returns attributes in lower case?
elseif( isset($attrs['objectclass']) && in_array( strtolower( $required ), arrayLower( $attrs['objectclass'] ) ) )
$required_by .= $required . ' ';
if( $required_by ) {
if( trim( $attr_note ) )
$attr_note .= ', ';
$attr_note .= "<acronym title=\"" . sprintf( $lang['required_for'], $required_by ) . "\">" . $lang['required'] . "</acronym> ";
}
// is this attribute required because its the RDN
if (preg_match("/^${attr}=/",$rdn)) {
if( trim( $attr_note ) )
$attr_note .= ', ';
$attr_note .= " <acronym title=\"" . $lang['required_by_entry'] . "\">" . 'rdn' . "</acronym> ";
}
if( is_array( $modified_attrs ) && in_array( strtolower($attr), $modified_attrs ) )
$is_modified_attr = true;
else
$is_modified_attr = false;
if( $is_modified_attr ) { ?>
<tr class="updated_attr">
<?php } else { ?>
<tr>
<?php } ?>
<td class="attr">
<?php $schema_href = sprintf("schema.php?server_id=%s&view=attributes&viewvalue=%s",
$ldapserver->server_id,real_attr_name($attr)); ?>
<b><a title="<?php echo sprintf( $lang['attr_name_tooltip'], $attr ) ?>" href="<?php echo $schema_href; ?>"><?php echo $attr_display; ?></a></b>
</td>
<td class="attr_note">
<sup><small><?php echo $attr_note; ?></small></sup>
<?php if( is_attr_read_only( $ldapserver, $attr ) ) { ?>
<small>(<acronym title="<?php echo $lang['read_only_tooltip']; ?>"><?php echo $lang['read_only']; ?></acronym>)</small>
<?php } ?>
</td>
</tr>
<?php if( $is_modified_attr ) { ?>
<tr class="updated_attr">
<?php } else { ?>
<tr>
<?php } ?>
<td class="val" colspan="2">
<?php
/*
* Is this attribute a jpegPhoto?
*/
if( is_jpeg_photo( $ldapserver, $attr ) ) {
// Don't draw the delete buttons if there is more than one jpegPhoto
// (phpLDAPadmin can't handle this case yet)
if( $ldapserver->isReadOnly() || is_attr_read_only( $ldapserver, $attr ) )
draw_jpeg_photos( $ldapserver, $dn, $attr, false );
else
draw_jpeg_photos( $ldapserver, $dn, $attr, true );
// proceed to the next attribute
echo "</td></tr>\n";
if( $is_modified_attr )
echo '<tr class="updated_attr"><td class="bottom" colspan="2"></td></tr>';
continue;
}
/*
* Is this attribute binary?
*/
if( is_attr_binary( $ldapserver, $attr ) ) {
$href = sprintf('download_binary_attr.php?server_id=%s&dn=%s&attr=%s',
$ldapserver->server_id,$encoded_dn,$attr);
?>
<small>
<?php echo $lang['binary_value'];
if (! strcasecmp( $attr, 'objectSid' ) ) {
printf(' (%s)',binSIDtoText($vals[0]));
} ?>
<br />
<?php if( count( $vals ) > 1 ) {
for( $i=1; $i<=count($vals); $i++ ) { ?>
<a href="<?php echo $href . "&value_num=$i"; ?>"><img src="images/save.png" /> <?php echo $lang['download_value']; ?>(<?php echo $i; ?>)</a><br />
<?php }
} else { ?>
<a href="<?php echo $href; ?>"><img src="images/save.png" /> <?php echo $lang['download_value']; ?></a><br />
<?php } ?>
<?php if( ! $ldapserver->isReadOnly() && ! is_attr_read_only( $ldapserver, $attr ) ) { ?>
<a href="javascript:deleteAttribute( '<?php echo $attr; ?>' );" style="color:red;"><img src="images/trash.png" /> <?php echo $lang['delete_attribute']; ?></a>
<?php } ?>
</small>
</td>
</tr>
<?php if( $is_modified_attr )
echo '<tr class="updated_attr"><td class="bottom" colspan="2"></td></tr>';
continue;
}
/*
* Note: at this point, the attribute must be text-based (not binary or jpeg)
*/
// If this is the userPassword attribute, add the javascript so we can call check password later.
if (! strcasecmp( $attr, 'userPassword' ) ) {
$user_password = $vals[0]; ?>
<script language="javascript">
<!--
function passwordComparePopup() {
mywindow = open( 'password_checker.php', 'myname', 'resizable=no,width=450,height=200,scrollbars=1' );
mywindow.location.href = 'password_checker.php?hash=<?php echo base64_encode($user_password); ?>&base64=true';
if( mywindow.opener == null ) mywindow.opener = self;
}
-->
</script>
<?php }
/*
* If this server is in read-only mode or this attribute is configured as read_only,
* simply draw the attribute values and continue.
*/
if( $ldapserver->isReadOnly() || is_attr_read_only( $ldapserver, $attr ) || (preg_match("/^${attr}=/",$rdn)) ) {
if( is_array( $vals ) ) {
foreach( $vals as $i => $val ) {
if( trim( $val ) == "" )
echo "<span style=\"color:red\">[" . $lang['empty'] . "]</span><br />\n";
elseif( ! strcasecmp( $attr, 'userPassword' ) && $config->GetValue('appearance','obfuscate_password_display'))
echo preg_replace( '/./', '*', $val ) . "<br />";
elseif( in_array(strtolower($attr), $shadow_format_attrs) ) {
$shadow_date = shadow_date( $attrs, $attr);
echo htmlspecialchars($val)." ";
echo "<small>";
if( ($today < $shadow_date) && in_array(strtolower($attr), $shadow_before_today_attrs) )
echo '<span style="color:red">'.htmlspecialchars("(".strftime($config->GetValue('appearance','date'),$shadow_date).")").'</span>';
elseif( $today > $shadow_date && in_array(strtolower($attr), $shadow_after_today_attrs) )
echo '<span style="color:red">'.htmlspecialchars("(".strftime($config->GetValue('appearance','date'),$shadow_date).")").'</span>';
else
echo htmlspecialchars("(".strftime($config->GetValue('appearance','date'),shadow_date( $attrs, $attr)).")");
echo "</small>";
} else
echo htmlspecialchars( $val ) . "<br />";
}
} else {
if( ! strcasecmp( $attr, 'userPassword' ) && obfuscate_password_display())
echo preg_replace( '/./', '*', $vals ) . "<br />";
else
echo $vals . "<br />";
}
if (! strcasecmp( $attr, 'userPassword' ) ) {?>
<small><a href="javascript:passwordComparePopup()"><?php echo $lang['t_check_pass']; ?></a></small>
<?php }
if( preg_match("/^${attr}=/",$rdn) ) {?>
<small>(<a href="<?php echo $rename_href; ?>"><?php echo $lang['rename_lower']; ?></a>)</small>
<?php } ?>
</td>
</tr>
<?php if( $is_modified_attr )
echo '<tr class="updated_attr"><td class="bottom" colspan="2"></td></tr>';
continue;
}
/*
* Is this a userPassword attribute?
*/
if( 0 == strcasecmp( $attr, 'userpassword' ) ) {
$user_password = $vals[0];
$enc_type = get_enc_type( $user_password );
// Set the default hashing type if the password is blank (must be newly created)
if( $user_password == '' )
$enc_type = get_default_hash( $ldapserver->server_id ); ?>
<input type="hidden" name="old_values[userpassword]" value="<?php echo htmlspecialchars($user_password); ?>" />
<!-- Special case of enc_type to detect changes when user changes enc_type but not the password value -->
<input size="38" type="hidden" name="old_enc_type" value="<?php echo ($enc_type==''?'clear':$enc_type); ?>" />
<?php if (obfuscate_password_display($enc_type)) {
echo htmlspecialchars(preg_replace("/./","*",$user_password));
} else {
echo htmlspecialchars($user_password);
} ?>
<br />
<input style="width: 260px" type="
<?php if (obfuscate_password_display($enc_type))
echo "password";
else
echo "text";
?>" name="new_values[userpassword]" value="<?php echo htmlspecialchars( $user_password ); ?>" />
<?php echo enc_type_select_list($enc_type); ?>
<br />
<small><a href="javascript:passwordComparePopup()"><?php echo $lang['t_check_pass']; ?></a></small>
</td>
</tr>
<?php if( $is_modified_attr )
echo '<tr class="updated_attr"><td class="bottom" colspan="2"></td></tr>';
continue;
}
/*
* Is this a boolean attribute?
*/
if( is_attr_boolean( $ldapserver, $attr) ) {
$val = $vals[0]; ?>
<input type="hidden" name="old_values[<?php echo htmlspecialchars( $attr ); ?>][]" value="<?php echo htmlspecialchars($val); ?>" />
<select name="new_values[<?php echo htmlspecialchars( $attr ); ?>]">
<option value="TRUE"<?php echo ($val=='TRUE' ? ' selected' : ''); ?>>
<?php echo $lang['true']; ?></option>
<option value="FALSE"<?php echo ($val=='FALSE' ? ' selected' : ''); ?>>
<?php echo $lang['false']; ?></option>
<option value="">(<?php echo $lang['none_remove_value']; ?>)</option>
</select>
</td>
</tr>
<?php if( $is_modified_attr )
echo '<tr class="updated_attr"><td class="bottom" colspan="2"></td></tr>';
continue;
}
/*
* Is this a date type attribute?
*/
if (in_array_ignore_case($attr, array_keys($js_date_attrs))) {
$val = $vals[0]; ?>
<input type="hidden" name="old_values[<?php echo htmlspecialchars( $attr ); ?>][]" value="<?php echo htmlspecialchars($val); ?>" />
<input type="text"
size="30" id="f_date_<?php echo $attr; ?>"
name="new_values[<?php echo htmlspecialchars( $attr ); ?>][0]"
value="<?php echo htmlspecialchars($val); ?>" /></nobr>
<?php draw_date_selector_link( $attr ); ?>
</td>
</tr>
<script language="javascript">
defaults['f_date_<?php echo $attr; ?>'] = '<?php echo $js_date_attrs[$attr]; ?>';
</script>
<?php if( $is_modified_attr )
echo '<tr class="updated_attr"><td class="bottom" colspan="2"></td></tr>';
continue;
}
/*
* End of special case attributes (non plain text).
*/
/*
* This is a plain text attribute, to be displayed and edited in plain text.
*/
foreach( $vals as $i => $val ) {
$input_name = "new_values[" . htmlspecialchars( $attr ) . "][$i]";
// We smack an id="..." tag in here that doesn't have [][] in it to allow the
// draw_chooser_link() to identify it after the user clicks.
$input_id = "new_values_" . htmlspecialchars($attr) . "_" . $i; ?>
<!-- The old_values array will let update.php know if the entry contents changed
between the time the user loaded this page and saved their changes. -->
<input type="hidden" name="old_values[<?php echo htmlspecialchars( $attr ); ?>][<?php echo $i; ?>]" value="<?php echo htmlspecialchars($val); ?>" />
<?php // Is this value is a structural objectClass, make it read-only
if( ! strcasecmp( $attr, 'objectClass' ) ) { ?>
<a title="<?php echo $lang['view_schema_for_oclass']; ?>" href="schema.php?server_id=<?php echo $ldapserver->server_id; ?>&view=objectClasses&viewvalue=<?php echo htmlspecialchars( $val ); ?>"><img src="images/info.png" /></a>
<?php $schema_object = $ldapserver->getSchemaObjectClass($val);
if ($schema_object->getType() == 'structural') {
echo "$val <small>(<acronym title=\"" .
sprintf( $lang['structural_object_class_cannot_remove'] ) . "\">" .
$lang['structural'] . "</acronym>)</small><br />"; ?>
<input type="hidden" name="<?php echo $input_name; ?>" id="<?php echo $input_id; ?>" value="<?php echo htmlspecialchars($val); ?>" />
<?php continue;
}
}
if( is_dn_string( $val ) || is_dn_attr( $ldapserver, $attr ) ) { ?>
<a title="<?php echo sprintf( $lang['go_to_dn'], htmlspecialchars($val) ); ?>" href="edit.php?server_id=<?php echo $ldapserver->server_id; ?>&dn=<?php echo rawurlencode($val); ?>"><img style="vertical-align: top" src="images/go.png" /></a>
<?php } elseif( is_mail_string( $val ) ) { ?>
<a href="mailto:<?php echo htmlspecialchars($val); ?>"><img style="vertical-align: center" src="images/mail.png" /></a>
<?php } elseif( is_url_string( $val ) ) { ?>
<a href="<?php echo htmlspecialchars($val); ?>" target="new"><img style="vertical-align: center" src="images/dc.png" /></a>
<?php }
if (is_multi_line_attr($attr,$val,$ldapserver->server_id)) { ?>
<textarea class="val" rows="3" cols="50" name="<?php echo $input_name; ?>" id="<?php echo $input_id; ?>"><?php echo htmlspecialchars($val); ?></textarea>
<?php } else { ?>
<input type="text" class="val" name="<?php echo $input_name; ?>" id="<?php echo $input_id; ?>" value="<?php echo htmlspecialchars($val); ?>" />
<?php }
// draw a link for popping up the entry browser if this is the type of attribute
// that houses DNs.
if( is_dn_attr( $ldapserver, $attr ) )
draw_chooser_link( "edit_form.$input_id", false );
echo '<br />';
// If this is a gidNumber on a non-PosixGroup entry, lookup its name and description for convenience
if( ! strcasecmp( $attr, 'gidNumber' ) &&
! in_array_ignore_case( 'posixGroup', get_object_attr( $ldapserver, $dn, 'objectClass' ) ) ) {
$gid_number = $val;
$search_group_filter = "(&(objectClass=posixGroup)(gidNumber=$val))";
$group = pla_ldap_search( $ldapserver, $search_group_filter, null, array( 'dn', 'description' ) );
if( count( $group ) > 0 ) {
echo "<br />";
$group = array_pop( $group );
$group_dn = $group['dn'];
$group_name = explode( '=', get_rdn( $group_dn ) );
$group_name = $group_name[1];
$href = sprintf('edit.php?server_id=%s&dn=%s',$ldapserver->server_id,urlencode($group_dn));
echo "<small>";
echo "<a href=\"$href\">" . htmlspecialchars($group_name) . "</a>";
$description = isset( $group['description'] ) ? $group['description'] : null;
if( $description ) echo " (" . htmlspecialchars( $description ) . ")";
echo "</small>";
}
}
// Show the dates for all the shadow attributes.
if( in_array(strtolower($attr), $shadow_format_attrs) ) {
if( ( $shadow_date = shadow_date( $attrs, $attr) ) !== false ) {
echo "<br />";
echo "<small>";
if( ($today < $shadow_date) && in_array(strtolower($attr), $shadow_before_today_attrs) )
echo '<span style="color:red">'.htmlspecialchars(strftime($config->GetValue('appearance','date'),$shadow_date)).'</span>';
elseif( $today > $shadow_date && in_array(strtolower($attr), $shadow_after_today_attrs) )
echo '<span style="color:red">'.htmlspecialchars(strftime($config->GetValue('appearance','date'),$shadow_date)).'</span>';
else
echo htmlspecialchars(strftime($config->GetValue('appearance','date'),$shadow_date));
echo "</small>";
}
}
} /* end foreach value */
/* Draw the "add value" link under the list of values for this attributes */
if( ! $ldapserver->isReadOnly() &&
( $schema_attr = $ldapserver->getSchemaAttribute($attr,$dn)) &&
! $schema_attr->getIsSingleValue() ) {
$add_href = sprintf('add_value_form.php?server_id=%s&dn=%s&attr=%s',
$ldapserver->server_id,$encoded_dn,rawurlencode($attr));
printf('<div class="add_value">(<a href="%s" title="%s">%s</a>)</div>',
$add_href,sprintf( $lang['add_value_tooltip'], $attr ),$lang['add_value']);
} ?>
</td>
</tr>
<?php if( $is_modified_attr ) { ?>
<tr class="updated_attr"><td class="bottom" colspan="2"></td></tr>
<?php }
flush();
} /* End foreach( $attrs as $attr => $vals ) */
if (! $ldapserver->isReadOnly()) { ?>
<tr><td colspan="2"><center><input type="submit" value="<?php echo $lang['save_changes']; ?>" /></center></td></tr></form>
<?php } ?>
</table>
<?php /* If this entry has a binary attribute, we need to provide a form for it to submit when deleting it. */ ?>
<script language="javascript">
<!--
function deleteAttribute( attrName )
{
if( confirm( "<?php echo $lang['really_delete_attribute']; ?> '" + attrName + "'?" ) ) {
document.delete_attribute_form.attr.value = attrName;
document.delete_attribute_form.submit();
}
}
-->
</script>
<!-- This form is submitted by JavaScript when the user clicks "Delete attribute" on a binary attribute -->
<form name="delete_attribute_form" action="delete_attr.php" method="post">
<input type="hidden" name="server_id" value="<?php echo $ldapserver->server_id; ?>" />
<input type="hidden" name="dn" value="<?php echo $dn; ?>" />
<input type="hidden" name="attr" value="FILLED IN BY JAVASCRIPT" />
</form>
<?php
echo "</body>\n</html>";
?>