132 lines
4.2 KiB
PHP
132 lines
4.2 KiB
PHP
<?php
|
|
// $Header: /cvsroot/phpldapadmin/phpldapadmin/update.php,v 1.24 2005/09/25 16:11:44 wurley Exp $
|
|
|
|
/**
|
|
* Updates or deletes a value from a specified attribute for a specified dn.
|
|
*
|
|
* Variables that come in on the query string:
|
|
* - dn (rawurlencoded)
|
|
* - server_id
|
|
* - update_array (an array in the form expected by PHP's ldap_modify, except for deletions)
|
|
* (will never be empty: update_confirm.php ensures that)
|
|
*
|
|
* Attribute deletions:
|
|
* To specify that an attribute is to be deleted (whether multi- or single-valued),
|
|
* enter that attribute in the update array like this: attr => ''. For example, to
|
|
* delete the 'sn' attribute from an entry, the update array would look like this:
|
|
* Array (
|
|
* sn => ''
|
|
* )
|
|
*
|
|
* On success, redirect to edit.php. On failure, echo an error.
|
|
*
|
|
* @package phpLDAPadmin
|
|
*/
|
|
/**
|
|
*/
|
|
|
|
require './common.php';
|
|
|
|
if ($ldapserver->isReadOnly())
|
|
pla_error($lang['no_updates_in_read_only_mode']);
|
|
if (! $ldapserver->haveAuthInfo())
|
|
pla_error($lang['not_enough_login_info']);
|
|
|
|
$dn = $_POST['dn'];
|
|
$encoded_dn = rawurlencode($dn);
|
|
$update_array = isset($_POST['update_array']) ? $_POST['update_array'] : array();
|
|
is_array($update_array) or pla_error($lang['update_array_malformed']);
|
|
|
|
$failed_attrs = array();
|
|
|
|
run_hook ('pre_update',array ('server_id' => $ldapserver->server_id,
|
|
'dn' => $dn,'update_array' => $update_array));
|
|
|
|
// check for delete attributes (indicated by the attribute entry appearing like this: attr => ''
|
|
foreach ($update_array as $attr => $val)
|
|
if (! is_array($val))
|
|
if ($val == '')
|
|
$update_array[ $attr ] = array();
|
|
else
|
|
$update_array[ $attr ] = $val;
|
|
else
|
|
foreach ($val as $i => $v)
|
|
$update_array[ $attr ][ $i ] = $v;
|
|
|
|
// Call the custom callback for each attribute modification
|
|
// and verify that it should be modified.
|
|
foreach ($update_array as $attr_name => $val) {
|
|
|
|
// Check to see if this is a unique Attribute
|
|
if ($badattr = checkUniqueAttr($ldapserver,$dn,$attr_name,$val)) {
|
|
$search_href = sprintf('search.php?search=true&form=advanced&server_id=%s&filter=%s=%s',$ldapserver->server_id,$attr_name,$badattr);
|
|
pla_error(sprintf($lang['unique_attr_failed'],$attr_name,$badattr,$dn,$search_href));
|
|
}
|
|
|
|
if (true !== run_hook ('pre_attr_modify',array ('server_id' => $ldapserver->server_id,
|
|
'dn' => $dn,'attr_name' => $attr_name,'new_value' => $val))) {
|
|
|
|
unset($update_array[ $attr_name ]);
|
|
$failed_attrs[$attr_name] = $val;
|
|
}
|
|
|
|
elseif (is_attr_read_only($ldapserver,$attr))
|
|
pla_error(sprintf($lang['attr_is_read_only'],htmlspecialchars($attr_name)));
|
|
}
|
|
|
|
$res = @ldap_modify($ldapserver->connect(),$dn,$update_array);
|
|
if ($res) {
|
|
// Fire the post modification event to the user's custom
|
|
// callback function.
|
|
foreach ($update_array as $attr_name => $val) {
|
|
run_hook ('post_attr_modify',array('server_id' => $ldapserver->server_id,
|
|
'dn' => $dn,'attr_name' => $attr_name,'new_value' => $val));
|
|
|
|
// Was this a user's password modification who is currently
|
|
// logged in? If so, they need to logout and log back in
|
|
// with the new password.
|
|
if (0 === strcasecmp($attr_name,'userPassword') &&
|
|
in_array($ldapserver->auth_type,array('cookie','session')) &&
|
|
0 === pla_compare_dns(get_logged_in_dn($ldapserver),$dn)) {
|
|
|
|
unset_login_dn($ldapserver);
|
|
unset_lastactivity($ldapserver);
|
|
include './header.php';
|
|
?>
|
|
|
|
<script language="javascript">
|
|
parent.left_frame.location.reload();
|
|
</script>
|
|
<br />
|
|
<center>
|
|
<b><?php echo $lang['modification_successful']; ?></b><br />
|
|
<br />
|
|
<?php echo $lang['change_password_new_login']; ?>
|
|
<a href="login_form.php?server_id=<?php echo $ldapserver->server_id; ?>"><?php echo $lang['login_link']; ?></a>
|
|
</center>
|
|
</body>
|
|
</html>
|
|
|
|
<?php
|
|
|
|
exit;
|
|
}
|
|
}
|
|
|
|
run_hook ('post_update',array ('server_id' => $ldapserver->server_id,'dn' => $dn,'update_array' => $update_array));
|
|
|
|
$redirect_url = sprintf("edit.php?server_id=%s&dn=%s",$ldapserver->server_id,$encoded_dn);
|
|
|
|
foreach ($update_array as $attr => $junk)
|
|
$redirect_url .= "&modified_attrs[]=$attr";
|
|
|
|
foreach ($failed_attrs as $attr => $junk)
|
|
$redirect_url .= "&failed_attrs[]=$attr";
|
|
|
|
header("Location: $redirect_url");
|
|
|
|
} else {
|
|
pla_error($lang['could_not_perform_ldap_modify'],ldap_error($ldapserver->connect()),ldap_errno($ldapserver->connect()));
|
|
}
|
|
?>
|