login/edit: apply tags input to target links

[minimedit.git] / login / edit.php

diff --git a/login/edit.php b/login/edit.php
index 6dfbfab5caf8f6ac00f563ad06c8ea9f40604278..894264b336ac3cc638a5d8a6ab85b61838e8f8ab 100644 (file)
--- a/login/edit.php
+++ b/login/edit.php
@@ -13,8 +13,15 @@ if (!empty($User['admin']) and $Page == 'login/edit' and $Args) {
 }
 
 $cols = [
-       'name'  => ['label' => 'volledige naam'],
-       'email' => ['label' => 'e-mailadres', 'type' => 'email'],
+       'name'  => [
+               'label' => 'volledige naam',
+               'explain' => "Alleen zichtbaar voor andere leden.",
+       ],
+       'email' => [
+               'label' => 'e-mailadres',
+               'type' => 'email',
+               'explain' => "Voor contact van of met deze site. Wij zullen dit nooit vrij- of doorgeven.",
+       ],
        'avatar' => [
                'label' => 'portretfoto',
                'type' => 'file',
@@ -38,9 +45,69 @@ foreach ($cols as $col => &$colconf) {
 }
 
 $cols = [
-       'login' => ['label' => 'login', 'value' => $user['name'], 'target' => NULL],
+       'login' => [
+               'label' => 'login',
+               'value' => $user['name'],
+               'target' => NULL,
+               'pattern' => "[a-z0-9-]+",
+       ],
 ] + $cols;
 
+$tagdir = 'profile/.tags';
+if (file_exists($tagdir)) {
+       $tags = [];
+       foreach (glob("$tagdir/*") as $tag) {
+               $tagname = pathinfo($tag, PATHINFO_BASENAME);
+               $target = "$tag/{$user['name']}";
+               $val = file_exists($target);
+               $tags[$tagname] = ['value' => $val];
+               if (empty($User['admin'])) {
+                       continue;  # forbidden
+               }
+               if (!is_writable($tag)) {
+                       continue;  # locked tag directory
+               }
+               if ($val and !is_writable($target)) {
+                       continue;  # existing file locked
+               }
+               $tags[$tagname]['target'] = $target;
+       }
+
+       if ($tags) {
+               $options = '';
+               foreach ($tags as $tag => $val) {
+                       $options .= sprintf(
+                               "\n\t\t" .
+                               '<input type="hidden" name="tags[%1$s]" value="" />' .
+                               '<input type="checkbox" name="tags[%s]" value="1"%s%s /> %s',
+                               $tag,
+                               $val['value'] ? ' checked' : '',
+                               isset($val['target']) ? '' : ' readonly',
+                               ucfirst($tag)
+                       );
+               }
+
+               $cols['tags'] = [
+                       'label' => 'groepen',
+                       'input' => $options,
+                       'values' => $tags,
+               ];
+       }
+}
+
+if (isset($user['pass'])) {
+       $cols['newpass'] = [
+               'label' => 'wachtwoord',
+               'input' => <<<'EOT'
+                       <input type="password" name="oldpass" value="" placeholder="Huidig wachtwoord" />
+                       <input type="password" id="newpass" name="newpass" value="" placeholder="Nieuw wachtwoord" />
+                       <input type="password" name="passconf" value="" placeholder="Nogmaals" />
+EOT
+               ,
+               'hide'  => 'pass',
+       ];
+}
+
 $colwarn = [];
 if ($_POST) {
        if (!file_exists($user['dir']) and !@mkdir($user['dir'])) {
@@ -65,6 +132,29 @@ if ($_POST) {
                }
        }
 
+       if (isset($cols['tags']) and !empty($_POST['tags'])) {
+               $tagok = [];
+               foreach ($_POST['tags'] as $col => $val) {
+                       $tag = $cols['tags']['values'][$col];
+                       if (!isset($tag['target'])) {
+                               $tagok[$col] = 'forbidden';
+                       }
+                       if ($tag['value'] === !empty($val)) {
+                               $tagok[$col] = NULL;  # unaltered
+                       }
+                       elseif (empty($val)) {
+                               $tagok[$col] = !@unlink($tag['target']);
+                       }
+                       else {
+                               $tagok[$col] = !@symlink("../../{$user['name']}", $tag['target']);
+                       }
+               }
+               if ($tagok = array_filter($tagok)) {
+                       $colwarn['tags'] = "Wijziging niet opgeslagen voor "
+                               . implode(', ', array_keys($tagok));
+               }
+       }
+
        foreach ($_FILES as $col => $val) {
                if (!isset($cols[$col]) and @$cols[$col]['type'] == 'file') {
                        continue; # unknown
@@ -95,7 +185,7 @@ if ($_POST) {
        if (!empty($_POST['newpass'])) {
                require_once('login/pass.inc.php');
                if ($error = passform($user, $_POST)) {
-                       $colwarn['pass'] = $error;
+                       $colwarn['newpass'] = $error;
                }
        }
 
@@ -109,10 +199,6 @@ if ($_POST) {
 
 ?>
 <form method="post" enctype="multipart/form-data">
-       <p>
-       Geef een e-mailadres op waarmee we u kunnen bereiken indien nodig.
-       Wij zullen dit adres nooit vrij- of doorgeven.
-       </p>
        <ul class="grid">
 <?php
 foreach ($cols as $col => &$colconf) {
@@ -125,7 +211,17 @@ foreach ($cols as $col => &$colconf) {
                );
        }
 
-       {
+       if ($hide = @$colconf['hide'] and empty($_POST[$col])) {
+               printf('<a onclick="%s">Wijzigen</a><span id="%s" hidden>',
+                       "document.getElementById('$hide').removeAttribute('hidden'); this.remove()",
+                       $hide
+               );
+       }
+
+       if (isset($colconf['input'])) {
+               print $colconf['input'];
+       }
+       else {
                $attrs = [
                        'type'        => @$colconf['type'] ?: 'text',
                        'name'        => $col,
@@ -133,6 +229,7 @@ foreach ($cols as $col => &$colconf) {
                        'value'       => htmlspecialchars(@$colconf['value']),
                        'placeholder' => "Niet ingesteld",
                        'readonly'    => empty($colconf['target']),
+                       'pattern'     => @$colconf['pattern'] ?: FALSE,
                ];
                if (@$colconf['type'] == 'file') {
                        $attrs['accept'] = "image/jpeg";
@@ -150,34 +247,18 @@ foreach ($cols as $col => &$colconf) {
                }
                print ' />';
        }
-
-       if ($error = @$colwarn[$col]) {
-               print " <span class=warn>$error</span>\n";
+       if (!empty($colconf['explain'])) {
+               printf(' <span>(%s)</span>', $colconf['explain']);
        }
-       print "</li>\n";
-}
 
-if (isset($user['pass'])) {
-?>
-       <li><label for="newpass">Wachtwoord:</label>
-<?php
-       if ($hide = empty($_POST['newpass'])) {
-?>
-               <a onclick="document.getElementById('pass').removeAttribute('hidden'); this.remove()">Wijzigen</a>
-<?php
+       if ($hide) {
+               print '</span>';
        }
-?>
-               <span id="pass"<?php if ($hide) print ' hidden'; ?>>
-                       <input type="password" name="oldpass" value="" placeholder="Huidig wachtwoord" />
-                       <input type="password" name="newpass" value="" placeholder="Nieuw wachtwoord" />
-                       <input type="password" name="passconf" value="" placeholder="Nogmaals" />
-<?php
-       if ($error = @$colwarn['pass']) {
+
+       if ($error = @$colwarn[$col]) {
                print " <span class=warn>$error</span>\n";
        }
-?>
-       </li>
-<?php
+       print "</li>\n";
 }
 ?>
        </ul>