components/com_user/user.php-Dateireferenz

gehe zum Quellcode dieser Datei

Namensbereiche
namespace	Joomla
Funktionen
	CheckIn ($userid, $access, $option)
	userEdit ($option, $uid, $submitvalue)
	userSave ($option, $uid)
Variablen
	$access = new stdClass()
case	$option
case	__pad0__
case	__pad1__
case	__pad2__
default	__pad3__
	break
$access	canEdit = $acl->acl_check( 'action', 'edit', 'users', $my->usertype, 'content', 'all' )
$access	canEditOwn = $acl->acl_check( 'action', 'edit', 'users', $my->usertype, 'content', 'own' )

---

Dokumentation der Funktionen

CheckIn	(	$	userid,
		$	access,
		$	option
	)

Definiert in Zeile 175 der Datei user.php.

Benutzt $access, $database, $editor, $i, $k, $link, $mosConfig_db, $nullDate, $num, $query, $res, canEdit, canEditOwn und mosNotAuth().

                                             {
        global $database;
        global $mosConfig_db;

        $nullDate = $database->getNullDate();
        if (!($access->canEdit || $access->canEditOwn || $userid > 0)) {
                mosNotAuth();
                return;
        }

        // security check to see if link exists in a menu
        $link = 'index.php?option=com_user&task=CheckIn';
        $query = "SELECT id"
        . "\n FROM #__menu"
        . "\n WHERE link LIKE '%$link%'"
        . "\n AND published = 1"
        ;
        $database->setQuery( $query );
        $exists = $database->loadResult();
        if ( !$exists ) {
                mosNotAuth();
                return;
        }

        $lt = mysql_list_tables($mosConfig_db);
        $k = 0;
        echo "<table cellpadding=\"0\" cellspacing=\"0\" border=\"0\">";
        while (list($tn) = mysql_fetch_array($lt)) {
                // only check in the jos_* tables
                if (strpos( $tn, $database->_table_prefix ) !== 0) {
                        continue;
                }
                $lf = mysql_list_fields($mosConfig_db, "$tn");
                $nf = mysql_num_fields($lf);

                $checked_out = false;
                $editor = false;

                for ($i = 0; $i < $nf; $i++) {
                        $fname = mysql_field_name($lf, $i);
                        if ( $fname == "checked_out") {
                                $checked_out = true;
                        } else if ( $fname == "editor") {
                                $editor = true;
                        }
                }

                if ($checked_out) {
                        if ($editor) {
                                $query = "SELECT checked_out, editor"
                                . "\n FROM `$tn`"
                                . "\n WHERE checked_out > 0"
                                . "\n AND checked_out = " . (int) $userid
                                ;
                                $database->setQuery( $query );
                        } else {
                                $query = "SELECT checked_out"
                                . "\n FROM `$tn`"
                                . "\n WHERE checked_out > 0"
                                . "\n AND checked_out = " . (int) $userid
                                ;
                                $database->setQuery( $query );
                        }
                        $res = $database->query();
                        $num = $database->getNumRows( $res );

                        if ($editor) {
                                $query = "UPDATE `$tn`"
                                . "\n SET checked_out = 0, checked_out_time = " . $database->Quote( $nullDate ) . ", editor = NULL"
                                . "\n WHERE checked_out > 0"
                                . "\n AND checked_out = " . (int) $userid
                                ;
                                $database->setQuery( $query );
                        } else {
                                $query = "UPDATE `$tn`"
                                . "\n SET checked_out = 0, checked_out_time = " . $database->Quote( $nullDate )
                                . "\n WHERE checked_out > 0"
                                . "\n AND checked_out = " . (int) $userid
                                ;
                                $database->setQuery( $query );
                        }
                        $res = $database->query();

                        if ($res == 1) {

                                if ($num > 0) {
                                        echo "\n<tr class=\"row$k\">";
                                        echo "\n        <td width=\"250\">";
                                        echo _CHECK_TABLE;
                                        echo " - $tn</td>";
                                        echo "\n        <td>";
                                        echo _CHECKED_IN;
                                        echo "<b>$num</b>";
                                        echo _CHECKED_IN_ITEMS;
                                        echo "</td>";
                                        echo "\n</tr>";
                                }
                                $k = 1 - $k;
                        }
                }
        }
        ?>
        <tr>
                <td colspan="2">
                        <b><?php echo _CONF_CHECKED_IN; ?></b>
                </td>
        </tr>
        </table>
        <?php
}

Hier ist ein Graph der zeigt, was diese Funktion aufruft:

userEdit	(	$	option,
		$	uid,
		$	submitvalue
	)

Definiert in Zeile 52 der Datei user.php.

Benutzt $database, $link, $mainframe, $mosConfig_absolute_path, $option, $params, $query, $row, mosNotAuth(), HTML_user::userEdit() und username.

                                                {
        global $database, $mainframe;
        global $mosConfig_absolute_path;

        // security check to see if link exists in a menu
        $link = 'index.php?option=com_user&task=UserDetails';
        $query = "SELECT id"
        . "\n FROM #__menu"
        . "\n WHERE link LIKE '%$link%'"
        . "\n AND published = 1"
        ;
        $database->setQuery( $query );
        $exists = $database->loadResult();
        if ( !$exists ) {
                mosNotAuth();
                return;
        }

        require_once( $mosConfig_absolute_path .'/administrator/components/com_users/users.class.php' );

        if ($uid == 0) {
                mosNotAuth();
                return;
        }
        $row = new mosUser( $database );
        $row->load( (int)$uid );
        $row->orig_password = $row->password;

        $row->name = trim( $row->name );
        $row->email = trim( $row->email );
        $row->username = trim( $row->username );

        $file   = $mainframe->getPath( 'com_xml', 'com_users' );
        $params =& new mosUserParameters( $row->params, $file, 'component' );

        HTML_user::userEdit( $row, $option, $submitvalue, $params );
}

Hier ist ein Graph der zeigt, was diese Funktion aufruft:

userSave	(	$	option,
		$	uid
	)

Definiert in Zeile 90 der Datei user.php.

Benutzt $database, $k, $my, $params, $query, $row, josSpoofCheck(), mosGetParam(), mosMakeHtmlSafe(), mosMakePassword(), mosNotAuth(), mosRedirect(), NULL und username.

                                  {
        global $database, $my, $mosConfig_frontend_userparams;

        $user_id = intval( mosGetParam( $_POST, 'id', 0 ));

        // do some security checks
        if ($uid == 0 || $user_id == 0 || $user_id != $uid) {
                mosNotAuth();
                return;
        }

        // simple spoof check security
        josSpoofCheck();

        $row = new mosUser( $database );
        $row->load( (int)$user_id );

        $orig_password = $row->password;
        $orig_username = $row->username;

        if (!$row->bind( $_POST, 'gid usertype' )) {
                echo "<script> alert('".$row->getError()."'); window.history.go(-1); </script>\n";
                exit();
        }

        $row->name = trim($row->name);
        $row->email = trim($row->email);
        $row->username = trim($row->username);

        mosMakeHtmlSafe($row);

        if (isset($_POST['password']) && $_POST['password'] != '') {
                if (isset($_POST['verifyPass']) && ($_POST['verifyPass'] == $_POST['password'])) {
                        $row->password = trim($row->password);
                        $salt = mosMakePassword(16);
                        $crypt = md5($row->password.$salt);
                        $row->password = $crypt.':'.$salt;
                } else {
                        echo "<script> alert(\"".addslashes( _PASS_MATCH )."\"); window.history.go(-1); </script>\n";
                        exit();
                }
        } else {
                // Restore 'original password'
                $row->password = $orig_password;
        }

        if ($mosConfig_frontend_userparams == '1' || $mosConfig_frontend_userparams == 1 || $mosConfig_frontend_userparams == NULL) {
        // save params
                $params = mosGetParam( $_POST, 'params', '' );
                if (is_array( $params )) {
                        $txt = array();
                        foreach ( $params as $k=>$v) {
                                $txt[] = "$k=$v";
                        }
                        $row->params = implode( "\n", $txt );
                }
        }

        if (!$row->check()) {
                echo "<script> alert('".$row->getError()."'); window.history.go(-1); </script>\n";
                exit();
        }

        if (!$row->store()) {
                echo "<script> alert('".$row->getError()."'); window.history.go(-1); </script>\n";
                exit();
        }

        // check if username has been changed
        if ( $orig_username != $row->username ) {
                // change username value in session table
                $query = "UPDATE #__session"
                . "\n SET username = " . $database->Quote($row->username)
                . "\n WHERE username = " . $database->Quote( $orig_username )
                . "\n AND userid = " . (int) $my->id
                . "\n AND gid = " . (int) $my->gid
                . "\n AND guest = 0"
                ;
                $database->setQuery( $query );
                $database->query();
        }

        mosRedirect( 'index.php', _USER_DETAILS_SAVE );
}

Hier ist ein Graph der zeigt, was diese Funktion aufruft:

---

Variablen-Dokumentation

case $access = new stdClass()

Definiert in Zeile 19 der Datei user.php.

case $option

Definiert in Zeile 37 der Datei user.php.

case __pad0__

Definiert in Zeile 33 der Datei user.php.

case __pad1__

Definiert in Zeile 37 der Datei user.php.

case __pad2__

Definiert in Zeile 44 der Datei user.php.

default __pad3__

Definiert in Zeile 48 der Datei user.php.

break

Definiert in Zeile 28 der Datei user.php.

$access canEdit = $acl->acl_check( 'action', 'edit', 'users', $my->usertype, 'content', 'all' )

Definiert in Zeile 20 der Datei user.php.

$access canEditOwn = $acl->acl_check( 'action', 'edit', 'users', $my->usertype, 'content', 'own' )

Definiert in Zeile 21 der Datei user.php.