<?php
///////////////////////////////////////////////////////////////////////////////
//
// NagiosQL
//
///////////////////////////////////////////////////////////////////////////////
//
// (c) 2005-2017 by Martin Willisegger
//
// Project   : NagiosQL
// Component : Group administration
// Website   : http://www.nagiosql.org
// Date      : $LastChangedDate: 2017-06-22 09:29:35 +0200 (Thu, 22 Jun 2017) $
// Author    : $LastChangedBy: martin $
// Version   : 3.3.0
// Revision  : $LastChangedRevision: 2 $
//
///////////////////////////////////////////////////////////////////////////////
//
// Define common variables
// =======================
$prePageId			= 33;
$preContent   		= "admin/group.tpl.htm";
$preSearchSession	= 'group';
$preTableName		= 'tbl_group';
$preKeyField		= 'groupname';
$preAccess    		= 1;
$preFieldvars 		= 1;
$preNoAccessGrp		= 1;
//
// Include preprocessing files
// ===========================
require("../functions/prepend_adm.php");
require("../functions/prepend_content.php");
// 
// Add or modify data
// ==================
if (($chkModus == "insert") || ($chkModus == "modify")) {
	$strSQLx = "`$preTableName` SET `groupname`='$chkTfValue1', `description`='$chkTfValue2', `active`='$chkActive', `last_modified`=NOW()";
	if ($chkModus == "insert") {
		$strSQL 		= "INSERT INTO ".$strSQLx;
	} else {
		$strSQL			= "UPDATE ".$strSQLx." WHERE `id`=$chkDataId";
	}
	if ($intWriteAccessId == 0) {
		if (($chkTfValue1 != "") && ($chkTfValue2 != "")) {
			$intReturn = $myDataClass->dataInsert($strSQL,$intInsertId);
			if ($chkModus == "insert")  $chkDataId = $intInsertId;
			if ($intReturn == 1) {
				$myVisClass->processMessage($myDataClass->strErrorMessage,$strErrorMessage);
			} else {
				$myVisClass->processMessage($myDataClass->strInfoMessage,$strInfoMessage);
				if ($chkModus == "insert") $myDataClass->writeLog(translate('A new group added:')." ".$chkTfValue1);
				if ($chkModus == "modify") $myDataClass->writeLog(translate('User modified:')." ".$chkTfValue1);
				//
				// Insert/update user/group data from session data
				// ===============================================
				if ($chkModus == "modify") {
					$strSQL   	= "DELETE FROM `tbl_lnkGroupToUser` WHERE `idMaster`=$chkDataId";
					$intReturn  = $myDataClass->dataInsert($strSQL,$intInsertId);
					if ($intReturn != 0) $myVisClass->processMessage($myDataClass->strErrorMessage,$strErrorMessage);
				}
				if (isset($_SESSION['groupuser']) && is_array($_SESSION['groupuser']) && (count($_SESSION['groupuser']) != 0)) {
					foreach($_SESSION['groupuser'] AS $elem) {
						if ($elem['status'] == 0) {
							$intRead  = 0; $intWrite = 0; $intLink  = 0;
							if (substr_count($elem['rights'],"READ")  != 0) $intRead  = 1;
							if (substr_count($elem['rights'],"WRITE") != 0) $intWrite = 1;
							if (substr_count($elem['rights'],"LINK")  != 0) $intLink  = 1;
							if ($intWrite == 1) {$intRead = 1;$intLink = 1;}
							if ($intRead  == 1) {$intLink = 1;}
							// if ($intLink  == 1) $intRead = 1;
							$strSQL    = "INSERT INTO `tbl_lnkGroupToUser` (`idMaster`,`idSlave`,`read`,`write`,`link`)
								          VALUES ($chkDataId,".$elem['user'].",'$intRead','$intWrite','$intLink')";
							$intReturn = $myDataClass->dataInsert($strSQL,$intInsertId);
							if ($intReturn != 0) $myVisClass->processMessage($myDataClass->strErrorMessage,$strErrorMessage);
						}
					}
				}
			}
		} else {
			$myVisClass->processMessage(translate('Database entry failed! Not all necessary data filled in!'),$strErrorMessage);
		}
	} else {
		$myVisClass->processMessage(translate('Database entry failed! No write access!'),$strErrorMessage);
		
	}
	$chkModus = "display";
}
if ($chkModus != "add") $chkModus    = "display"; 
//
// Start content
// =============
$conttp->setVariable("TITLE",translate('Group administration'));
$conttp->parse("header");
$conttp->show("header");
//
// Singe data form
// ===============
if ($chkModus == "add") {
	// Process data fields
  	$strSQL    = "SELECT * FROM tbl_user WHERE id <> 1 ORDER BY username";
  	$booReturn = $myDBClass->getDataArray($strSQL,$arrDataLines,$intDataCount);
	$myVisClass->processMessage($myDBClass->strErrorMessage,$strErrorMessage);
  	if ($booReturn && ($intDataCount != 0)) {
		foreach($arrDataLines AS $elem) {
	  		$conttp->setVariable("DAT_USER_ID",$elem['id']);
	  		$conttp->setVariable("DAT_USER",$elem['username']);
	  		$conttp->parse("users");
		}
  	}
	// Initial add/modify form definitions
	$myContentClass->addFormInit($conttp);
	$conttp->setVariable("LANG_READ",translate("Read"));
	$conttp->setVariable("LANG_WRITE",translate("Write"));
	$conttp->setVariable("LANG_LINK",translate("Link"));
	$conttp->setVariable("DAT_ID",$chkListId);
	$conttp->setVariable("FILL_ALLFIELDS",translate('Please fill in all fields marked with an *'));
	$conttp->setVariable("FILL_ILLEGALCHARS",translate('The following field contains not permitted characters:'));
  	// Insert data from database in "modify" mode
	if (isset($arrModifyData) && ($chkSelModify == "modify")) {
		// Process data
		$myContentClass->addInsertData($conttp,$arrModifyData,0,'');
	}
	$conttp->parse("datainsert");
	$conttp->show("datainsert");
}
//
// List view
// ==========
if ($chkModus == "display") {
	// Initial list view definitions
	$myContentClass->listViewInit($mastertp);
	$mastertp->setVariable("FIELD_1",translate('Groupname'));
	$mastertp->setVariable("FIELD_2",translate('Description'));
	// Row sorting
	$strOrderString = "ORDER BY `groupname` $hidSortDir";
	if ($hidSortBy == 2) $strOrderString = "ORDER BY `description` $hidSortDir";
  	// Count datasets
	$strSQL    = "SELECT count(*) AS `number` FROM `$preTableName`";
  	$booReturn = $myDBClass->getSingleDataset($strSQL,$arrDataLinesCount);
  	if ($booReturn == false) {
    	$myVisClass->processMessage(translate('Error while selecting data from database:'),$strErrorMessage);
		$myVisClass->processMessage($myDBClass->strErrorMessage,$strErrorMessage);
  	} else {
    	$intLineCount = (int)$arrDataLinesCount['number'];
		if ($intLineCount < $chkLimit) $chkLimit = 0;
  	}
  	// Get datasets
	$strSQL    = "SELECT `id`, `groupname`, `description`, `active` FROM `$preTableName` $strOrderString LIMIT $chkLimit,".$SETS['common']['pagelines'];
  	$booReturn = $myDBClass->getDataArray($strSQL,$arrDataLines,$intDataCount);
	if ($booReturn == false) {
    	$myVisClass->processMessage(translate('Error while selecting data from database:'),$strErrorMessage);
		$myVisClass->processMessage($myDBClass->strErrorMessage,$strErrorMessage);
  	}
	// Process data
	$myContentClass->listData($mastertp,$arrDataLines,$intDataCount,$intLineCount,$preKeyField,'description');
}
// Show messages
$myContentClass->showMessages($mastertp,$strErrorMessage,$strInfoMessage,$strConsistMessage,'','',1);
//
// Process footer
// ==============
$myContentClass->showFooter($maintp,$setFileVersion);
?>