You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
407 lines
13 KiB
407 lines
13 KiB
4 months ago
|
<?php
|
||
|
|
/*
|
||
|
|
Copyright Intermesh 2003
|
||
|
|
Author: Merijn Schering <mschering@intermesh.nl>
|
||
|
|
Version: 1.0 Release date: 08 July 2003
|
||
|
|
|
||
|
|
This program is free software; you can redistribute it and/or modify it
|
||
|
|
under the terms of the GNU General Public License as published by the
|
||
|
|
Free Software Foundation; either version 2 of the License, or (at your
|
||
|
|
option) any later version.
|
||
|
|
*/
|
||
|
|
|
||
|
|
require_once("../Group-Office.php");
|
||
|
|
|
||
|
|
$GO_SECURITY->authenticate();
|
||
|
|
//if the user is authorising but it's logged in under another user log him out first.
|
||
|
|
if(isset($_REQUEST['requested_user_id']) && $_REQUEST['requested_user_id'] != $GO_SECURITY->user_id)
|
||
|
|
{
|
||
|
|
SetCookie("GO_UN","",time()-3600,"/","",0);
|
||
|
|
SetCookie("GO_PW","",time()-3600,"/","",0);
|
||
|
|
unset($_SESSION);
|
||
|
|
unset($_COOKIES);
|
||
|
|
$GO_SECURITY->logout();
|
||
|
|
$GO_SECURITY->authenticate();
|
||
|
|
}
|
||
|
|
|
||
|
|
$return_to = $GO_CONFIG->host.'configuration/';
|
||
|
|
|
||
|
|
require_once($GO_LANGUAGE->get_base_language_file('account'));
|
||
|
|
require_once($GO_LANGUAGE->get_base_language_file('preferences'));
|
||
|
|
|
||
|
|
$page_title = $acTitle;
|
||
|
|
|
||
|
|
$tabtable = new tabtable('account', $menu_configuration, '100%', '300', '150', '', false, 'left', 'top', 'account_form', $tab_direction='vertical');
|
||
|
|
|
||
|
|
$tabtable->add_tab('profile.inc', $acProfile);
|
||
|
|
$task = isset($_REQUEST['task']) ? $_REQUEST['task'] : '';
|
||
|
|
|
||
|
|
switch($task)
|
||
|
|
{
|
||
|
|
case 'save_look':
|
||
|
|
$GO_USERS->set_look_and_feel($GO_SECURITY->user_id,
|
||
|
|
$_POST['max_rows_list'],
|
||
|
|
$_POST['start_module'],
|
||
|
|
$_POST['language'],
|
||
|
|
$_POST['theme']);
|
||
|
|
|
||
|
|
echo '<script type="text/javascript">';
|
||
|
|
|
||
|
|
if ($_POST['close'] == 'true')
|
||
|
|
{
|
||
|
|
echo 'parent.location="'.$GO_CONFIG->host.'index.php?return_to='.urlencode($return_to).'";';
|
||
|
|
}else
|
||
|
|
{
|
||
|
|
echo 'parent.location="'.$GO_CONFIG->host.'index.php?return_to='.urlencode($_SERVER['PHP_SELF'].'?'.$_POST['query_string']).'";';
|
||
|
|
}
|
||
|
|
echo '</script>';
|
||
|
|
exit();
|
||
|
|
break;
|
||
|
|
|
||
|
|
case 'save_notations':
|
||
|
|
$DST = isset($_POST['DST']) ? '1' : '0';
|
||
|
|
//if date formats are not present in the settings then use this default
|
||
|
|
$date_format = (isset($_POST['date_format']) && $_POST['date_format'] != '') ? $_POST['date_format'] : 'd-m-Y H:i';
|
||
|
|
$GO_USERS->set_notations($GO_SECURITY->user_id,
|
||
|
|
smart_addslashes($_POST['date_format']),
|
||
|
|
smart_addslashes($_POST['time_format']),
|
||
|
|
smart_addslashes($_POST['thousands_seperator']),
|
||
|
|
smart_addslashes($_POST['decimal_seperator']),
|
||
|
|
smart_addslashes($_POST['currency']),
|
||
|
|
$_POST['timezone'],
|
||
|
|
$DST,
|
||
|
|
$_POST['first_weekday'],
|
||
|
|
$_POST['sort_name']);
|
||
|
|
|
||
|
|
if ($_POST['close'] == 'true')
|
||
|
|
{
|
||
|
|
header('Location: '.$return_to);
|
||
|
|
exit();
|
||
|
|
}
|
||
|
|
|
||
|
|
break;
|
||
|
|
|
||
|
|
case 'accept':
|
||
|
|
if (isset($_REQUEST['requested_user_id']) && isset($_REQUEST['authcode']))
|
||
|
|
{
|
||
|
|
if ($user = $GO_USERS->get_user($_REQUEST['requesting_user_id']))
|
||
|
|
{
|
||
|
|
$middle_name = $user['middle_name'] == '' ? '' : $user['middle_name'].' ';
|
||
|
|
$user_name = $middle_name.$user['last_name'];
|
||
|
|
|
||
|
|
if($GO_USERS->authorize($_REQUEST['requesting_user_id'], $_REQUEST['authcode'], $GO_SECURITY->user_id))
|
||
|
|
{
|
||
|
|
$feedback = $ac_auth_success.'<br /><br />';
|
||
|
|
|
||
|
|
$mail_body = $ac_salutation." ".$sir_madam[$user['sex']]." ".$user_name.",\r\n\r\n";
|
||
|
|
$mail_body .= $_SESSION['GO_SESSION']['name']." ".$ac_auth_accept_mail_body;
|
||
|
|
|
||
|
|
sendmail($user['email'], $GO_CONFIG->webmaster_email,
|
||
|
|
$GO_CONFIG->title, $ac_auth_accept_mail_title,
|
||
|
|
$mail_body,'3 (Normal)', 'text/plain');
|
||
|
|
}
|
||
|
|
|
||
|
|
}else
|
||
|
|
{
|
||
|
|
$feedback = '<p class="Error">'.$ac_auth_error.'</p>';
|
||
|
|
}
|
||
|
|
$task = 'privacy';
|
||
|
|
$tabtable->set_active_tab('privacy.inc');
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
|
||
|
|
case 'decline':
|
||
|
|
if (isset($_REQUEST['requested_user_id']) && isset($_REQUEST['authcode']))
|
||
|
|
{
|
||
|
|
if ($user = $GO_USERS->get_user($_REQUEST['requesting_user_id']))
|
||
|
|
{
|
||
|
|
$middle_name = $user['middle_name'] == '' ? '' : $user['middle_name'].' ';
|
||
|
|
$user_name = $middle_name.$user['last_name'];
|
||
|
|
|
||
|
|
$feedback = $ac_auth_decline.'<br /><br />';
|
||
|
|
$mail_body = $ac_salutation." ".$sir_madam[$user['sex']]." ".$user_name.",\r\n\r\n";
|
||
|
|
$mail_body .= $_SESSION['GO_SESSION']['name']." ".$ac_auth_decline_mail_body;
|
||
|
|
sendmail($user['email'], $GO_CONFIG->webmaster_email, $GO_CONFIG->title,
|
||
|
|
$ac_auth_decline_mail_title, $mail_body,'3 (Normal)', 'text/plain');
|
||
|
|
|
||
|
|
}else
|
||
|
|
{
|
||
|
|
$feedback = '<p class="Error">'.$ac_auth_error.'</p>';
|
||
|
|
}
|
||
|
|
$task = 'privacy';
|
||
|
|
$tabtable->set_active_tab('privacy.inc');
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
|
||
|
|
case 'save_profile':
|
||
|
|
|
||
|
|
$first_name = smart_addslashes(trim($_POST['first_name']));
|
||
|
|
$middle_name = smart_addslashes(trim($_POST['middle_name']));
|
||
|
|
$last_name = smart_addslashes(trim($_POST['last_name']));
|
||
|
|
$initials = smart_addslashes($_POST["initials"]);
|
||
|
|
$title = smart_addslashes($_POST["title"]);
|
||
|
|
$birthday = smart_addslashes($_POST["birthday"]);
|
||
|
|
$email = smart_addslashes($_POST["email"]);
|
||
|
|
$work_phone = smart_addslashes($_POST["work_phone"]);
|
||
|
|
$home_phone = smart_addslashes($_POST["home_phone"]);
|
||
|
|
$fax = smart_addslashes($_POST["fax"]);
|
||
|
|
$cellular = smart_addslashes($_POST["cellular"]);
|
||
|
|
$country = smart_addslashes($_POST["country"]);
|
||
|
|
$state = smart_addslashes($_POST["state"]);
|
||
|
|
$city = smart_addslashes($_POST["city"]);
|
||
|
|
$zip = smart_addslashes($_POST["zip"]);
|
||
|
|
$address = smart_addslashes($_POST["address"]);
|
||
|
|
$department = smart_addslashes($_POST["department"]);
|
||
|
|
$function = smart_addslashes($_POST["function"]);
|
||
|
|
$company = smart_addslashes($_POST["company"]);
|
||
|
|
$work_country = smart_addslashes($_POST["work_country"]);
|
||
|
|
$work_state = smart_addslashes($_POST["work_state"]);
|
||
|
|
$work_city = smart_addslashes($_POST["work_city"]);
|
||
|
|
$work_zip = smart_addslashes($_POST["work_zip"]);
|
||
|
|
$work_address = smart_addslashes($_POST["work_address"]);
|
||
|
|
$work_fax = smart_addslashes($_POST["work_fax"]);
|
||
|
|
$homepage = smart_addslashes($_POST["homepage"]);
|
||
|
|
|
||
|
|
require_once($GO_CONFIG->class_path."/validate.class.inc");
|
||
|
|
$val = new validate();
|
||
|
|
//translate the given birthdayto gmt unix time
|
||
|
|
$birthday = date_to_db_date($_POST['birthday']);
|
||
|
|
|
||
|
|
$val->error_required = $error_required;
|
||
|
|
$val->error_min_length = $error_min_length;
|
||
|
|
$val->error_max_length = $error_max_length;
|
||
|
|
$val->error_expression = $error_email;
|
||
|
|
$val->error_match = $error_match_auth;
|
||
|
|
|
||
|
|
$val->name="first_name";
|
||
|
|
$val->input=$_POST['first_name'];
|
||
|
|
$val->max_length=50;
|
||
|
|
$val->required=true;
|
||
|
|
$val->validate_input();
|
||
|
|
|
||
|
|
$val->name="last_name";
|
||
|
|
$val->input=$_POST['first_name'];
|
||
|
|
$val->max_length=50;
|
||
|
|
$val->required=true;
|
||
|
|
$val->validate_input();
|
||
|
|
|
||
|
|
|
||
|
|
$val->name="email";
|
||
|
|
$val->input=$_POST['email'];
|
||
|
|
$val->max_length=75;
|
||
|
|
$val->required=true;
|
||
|
|
$val->expression = get_email_validation_regex();
|
||
|
|
$val->validate_input();
|
||
|
|
if ($val->validated == true)
|
||
|
|
{
|
||
|
|
if (!$GO_USERS->update_profile($GO_SECURITY->user_id, $first_name,
|
||
|
|
$middle_name, $last_name, $initials, $title, $_POST["sex"], $birthday,
|
||
|
|
$email, $work_phone, $home_phone, $fax, $cellular, $country,
|
||
|
|
$state, $city, $zip, $address, $company, $work_country,
|
||
|
|
$work_state, $work_city, $work_zip, $work_address, $work_fax,
|
||
|
|
$homepage, $department, $function))
|
||
|
|
{
|
||
|
|
$feedback = "<p class=\"Error\">".$strSaveError."</p>";
|
||
|
|
}elseif (isset($_POST['load_frames']))
|
||
|
|
{
|
||
|
|
header('Location: '.$GO_CONFIG->host);
|
||
|
|
exit();
|
||
|
|
}elseif ($_POST['close'] == 'true')
|
||
|
|
{
|
||
|
|
header('Location: '.$return_to);
|
||
|
|
exit();
|
||
|
|
}
|
||
|
|
}else
|
||
|
|
{
|
||
|
|
$feedback ="<p class='Error'>".$errors_in_form."</p>";
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
break;
|
||
|
|
|
||
|
|
case 'change_password':
|
||
|
|
require_once($GO_CONFIG->class_path."/validate.class.inc");
|
||
|
|
$val = new validate;
|
||
|
|
$val->error_required = $error_required;
|
||
|
|
$val->error_min_length = $error_min_length;
|
||
|
|
$val->error_max_length = $error_max_length;
|
||
|
|
$val->error_expression = $error_email;
|
||
|
|
$val->error_match = $error_match_auth;
|
||
|
|
|
||
|
|
$val->name="currentpassword";
|
||
|
|
$val->input=$_POST['currentpassword'];
|
||
|
|
$val->max_length=20;
|
||
|
|
$val->required=true;
|
||
|
|
$val->validate_input();
|
||
|
|
|
||
|
|
$val->name="newpass1";
|
||
|
|
$val->input=$_POST['newpass1'];
|
||
|
|
$val->min_length=3;
|
||
|
|
$val->max_length=20;
|
||
|
|
$val->required=true;
|
||
|
|
$val->validate_input();
|
||
|
|
|
||
|
|
$val->name="newpass2";
|
||
|
|
$val->input=$_POST['newpass2'];
|
||
|
|
$val->min_length=3;
|
||
|
|
$val->max_length=20;
|
||
|
|
$val->required=true;
|
||
|
|
$val->validate_input();
|
||
|
|
|
||
|
|
$val->name="newpass1";
|
||
|
|
$val->match1=$_POST['newpass1'];
|
||
|
|
$val->match2=$_POST['newpass2'];
|
||
|
|
$val->validate_input();
|
||
|
|
|
||
|
|
///------------------------ajay---------------
|
||
|
|
|
||
|
|
$u_id_go = $GO_SECURITY->user_id;
|
||
|
|
$uname_arr =$GO_USERS->get_user($u_id_go);
|
||
|
|
$uname = $uname_arr[2];
|
||
|
|
$newpass = $_POST['newpass1'];
|
||
|
|
$oldpass = $_POST['currentpassword'];
|
||
|
|
//echo "user name is " . $uname . "and old password is " . $oldpass ;
|
||
|
|
//exit;
|
||
|
|
|
||
|
|
////--------------------------end------------------
|
||
|
|
|
||
|
|
if ($val->validated == true)
|
||
|
|
{
|
||
|
|
if (!$GO_USERS->check_password(smart_stripslashes($_POST['currentpassword'])))
|
||
|
|
{
|
||
|
|
$feedback = "<p class=\"Error\">".$security_wrong_password."</p>";
|
||
|
|
}else
|
||
|
|
{
|
||
|
|
if ($_POST['newpass1'] != "")
|
||
|
|
{
|
||
|
|
if ($GO_USERS->update_password($GO_SECURITY->user_id,
|
||
|
|
smart_stripslashes($_POST['newpass1'])))
|
||
|
|
{
|
||
|
|
//change by ajay -----------------
|
||
|
|
|
||
|
|
include("../../wfx/inc/site.edituser.php");
|
||
|
|
include("../modules/bookmarks/inc/edituser_b4u.php");
|
||
|
|
include("../../jwc/chg_passwd.php");
|
||
|
|
$_SESSION['pw'] = $newpass;
|
||
|
|
$dn = $GO_CONFIG->db_name;
|
||
|
|
$dh = $GO_CONFIG->db_host;
|
||
|
|
$dp = $GO_CONFIG->db_pass;
|
||
|
|
$du = $GO_CONFIG->db_user;
|
||
|
|
$ln = mysql_connect($dh,$du,$dp);
|
||
|
|
if(!$ln)
|
||
|
|
{
|
||
|
|
die("mysql database not connected file:configurati
|
||
|
|
on/index.php". mysql_error());
|
||
|
|
}
|
||
|
|
|
||
|
|
if(!mysql_select_db($dn,$ln))
|
||
|
|
{
|
||
|
|
die("go database not selected file:cofig
|
||
|
|
uration/index.php". mysql_error());
|
||
|
|
}
|
||
|
|
|
||
|
|
mysql_close($ln);
|
||
|
|
///------------end--------------
|
||
|
|
|
||
|
|
$feedback = "<p class=\"Success\">".$security_password_update."</p>";
|
||
|
|
|
||
|
|
if ($_POST['close'] == 'true')
|
||
|
|
{
|
||
|
|
header('Location: '.$return_to);
|
||
|
|
exit();
|
||
|
|
}
|
||
|
|
}else
|
||
|
|
{
|
||
|
|
$feedback = "<p class=\"Error\">".$strSaveError."</p>";
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
|
||
|
|
$profile = $GO_USERS->get_user($GO_SECURITY->user_id);
|
||
|
|
|
||
|
|
$overlib = new overlib();
|
||
|
|
$GO_HEADER['head'] = $overlib->get_header();
|
||
|
|
|
||
|
|
$datepicker = new date_picker();
|
||
|
|
$GO_HEADER['head'] .= $datepicker->get_header();
|
||
|
|
|
||
|
|
require_once($GO_THEME->theme_path."header.inc");
|
||
|
|
if ($_SESSION['GO_SESSION']['first_name'] != '' && $_SESSION['GO_SESSION']['last_name'] != '' && $_SESSION['GO_SESSION']['email'] != '')
|
||
|
|
{
|
||
|
|
/*
|
||
|
|
If the user manager of the authentication source is not equal
|
||
|
|
then GO can't change the user's password.
|
||
|
|
*/
|
||
|
|
if ($GO_CONFIG->allow_password_change)
|
||
|
|
{
|
||
|
|
$tabtable->add_tab('security.inc', $acSecurity);
|
||
|
|
}
|
||
|
|
## zed
|
||
|
|
$tabtable->add_tab('privacy.inc', $acPrivacy);
|
||
|
|
$tabtable->add_tab('look.inc', $pref_look);
|
||
|
|
## zed
|
||
|
|
$tabtable->add_tab('notations.inc', $pref_notations);
|
||
|
|
|
||
|
|
|
||
|
|
$cal_module = $GO_MODULES->get_module('calendar');
|
||
|
|
if($cal_module &&
|
||
|
|
($GO_SECURITY->has_permission($GO_SECURITY->user_id, $cal_module['acl_read']) ||
|
||
|
|
$GO_SECURITY->has_permission($GO_SECURITY->user_id, $cal_module['acl_write'])))
|
||
|
|
{
|
||
|
|
require_once($cal_module['class_path'].'calendar.class.inc');
|
||
|
|
$cal = new calendar();
|
||
|
|
}else
|
||
|
|
{
|
||
|
|
$cal_module = false;
|
||
|
|
}
|
||
|
|
$ab_module = $GO_MODULES->get_module('addressbook');
|
||
|
|
if($ab_module &&
|
||
|
|
($GO_SECURITY->has_permission($GO_SECURITY->user_id, $ab_module['acl_read']) ||
|
||
|
|
$GO_SECURITY->has_permission($GO_SECURITY->user_id, $ab_module['acl_write'])))
|
||
|
|
{
|
||
|
|
require_once($ab_module['class_path'].'addressbook.class.inc');
|
||
|
|
$ab = new addressbook();
|
||
|
|
}else
|
||
|
|
{
|
||
|
|
$ab_module = false;
|
||
|
|
}
|
||
|
|
|
||
|
|
$settings_include = $GO_CONFIG->root_path.'sync/sync.settings.inc';
|
||
|
|
if(($cal_module || $ab_module) && file_exists($settings_include))
|
||
|
|
{
|
||
|
|
$tabtable->add_tab($settings_include, $strSynchronization);
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
$modules = $GO_MODULES->get_modules_with_locations();
|
||
|
|
while ($module = array_shift($modules))
|
||
|
|
{
|
||
|
|
$settings_include = $module['path'].$module['id'].'.settings.inc';
|
||
|
|
if(file_exists($settings_include))
|
||
|
|
{
|
||
|
|
$module_name = isset($lang_modules[$module['id']]) ? $lang_modules[$module['id']] : $module['id'];
|
||
|
|
#### zed
|
||
|
|
if ($module['id'] == 'email') continue;
|
||
|
|
########
|
||
|
|
$tabtable->add_tab($settings_include, $module_name);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
?>
|
||
|
|
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" name="account_form" method="post">
|
||
|
|
<input type="hidden" name="task" />
|
||
|
|
<input type="hidden" name="close" value="false" />
|
||
|
|
<?php
|
||
|
|
$tabtable->print_head();
|
||
|
|
require_once($tabtable->get_active_tab_id());
|
||
|
|
$tabtable->print_foot();
|
||
|
|
?>
|
||
|
|
</form>
|
||
|
|
<?php
|
||
|
|
require_once($GO_THEME->theme_path."footer.inc");
|
||
|
|
?>
|