X-Git-Url: http://git.shiar.net/minimedit.git/blobdiff_plain/0db67dd902c88a5c39648707ec468980d55a72d9..v3.7-15-g1888ccc749:/login/edit.php diff --git a/login/edit.php b/login/edit.php index 46b6132..99afb13 100644 --- a/login/edit.php +++ b/login/edit.php @@ -4,7 +4,8 @@ if (empty($user = &$User)) { return; } -if (!empty($User['admin']) and !empty($Place['user'])) { +if (!empty($User['admin']) +and !empty($Place['user']) and $Place['user'] !== $User['name']) { $username = strtolower($Place['user']); unset($user); $user = [ @@ -13,25 +14,47 @@ if (!empty($User['admin']) and !empty($Place['user'])) { ]; } -$cols = [ - 'name' => [ - 'label' => 'volledige naam', - 'explain' => "Alleen zichtbaar voor andere leden.", - ], - 'email' => [ - 'label' => 'e-mailadres', - 'type' => 'email', - 'explain' => "Voor contact van of met deze site. Wij zullen dit nooit vrij- of doorgeven.", - ], - 'avatar' => [ - 'label' => 'portretfoto', - 'type' => 'file', - ], -]; +require_once('edit.inc.php'); foreach ($cols as $col => &$colconf) { + if (isset($colconf['visible'])) { + if ($colconf['visible'] == 'admin' and empty($User['admin'])) { + $colconf['visible'] = FALSE; + continue; + } + } + else { + $colconf['visible'] = TRUE; + } + + if (!isset($colconf['filename'])) { + continue; # exceptional storage + } + + if (isset($colconf['values'])) { + if (!file_exists($colconf['filename'])) { + $colconf['visible'] = FALSE; + continue; + } + $tags = []; + foreach (glob($colconf['filename'] . '/*') as $tag) { + $tagname = pathinfo($tag, PATHINFO_BASENAME); + $target = "$tag/{$user['name']}"; + $val = file_exists($target); + $tagopt = &$colconf['values'][$tagname]; + $tagopt = ['value' => $val]; + if (!is_writable($tag)) { + continue; # locked tag directory + } + if ($val and !is_writable($target)) { + continue; # existing file locked + } + $tagopt['target'] = $target; + } + } + $filetype = @$colconf['type'] == 'file' ? 'jpg' : 'txt'; - $colpath = "{$user['dir']}/$col.$filetype"; + $colpath = $user['dir'] . '/' . $colconf['filename']; if (file_exists($colpath)) { $colconf['value'] = $filetype != 'txt' ? '' : file_get_contents($colpath); @@ -45,56 +68,6 @@ foreach ($cols as $col => &$colconf) { $colconf['target'] = $colpath; # editing allowed } -$cols = [ - 'username' => [ - 'label' => 'login', - 'value' => $user['name'], - 'target' => NULL, - 'pattern' => "[a-z0-9-]+", - ], -] + $cols; - -$tagdir = 'profile/.tags'; -if (file_exists($tagdir)) { - $tags = []; - foreach (glob("$tagdir/*") as $tag) { - $tagname = pathinfo($tag, PATHINFO_BASENAME); - $target = "$tag/{$user['name']}"; - $val = file_exists($target); - $tags[$tagname] = ['value' => $val]; - if (empty($User['admin'])) { - continue; # forbidden - } - if (!is_writable($tag)) { - continue; # locked tag directory - } - if ($val and !is_writable($target)) { - continue; # existing file locked - } - $tags[$tagname]['target'] = $target; - } - - if ($tags) { - $cols['tags'] = [ - 'label' => 'groepen', - 'values' => $tags, - ]; - } -} - -if (isset($user['pass'])) { - $cols['newpass'] = [ - 'label' => 'wachtwoord', - 'input' => <<<'EOT' - - - -EOT - , - 'hide' => 'pass', - ]; -} - $colwarn = []; if ($_POST) { if (!file_exists($user['dir']) and !@mkdir($user['dir'])) { @@ -134,6 +107,11 @@ if ($_POST) { } continue; } + + if (isset($cols[$col]['filter'])) { + list ($targetstr, $inputstr) = $cols[$col]['filter']; + $val = str_replace($inputstr, $targetstr, $val); + } if (isset($cols[$col]['value']) and $cols[$col]['value'] === $val) { continue; # unaltered } @@ -153,27 +131,19 @@ if ($_POST) { if (!isset($cols[$col]) and @$cols[$col]['type'] == 'file') { continue; # unknown } - switch ($val['error']) { - case UPLOAD_ERR_OK: - break; - case UPLOAD_ERR_NO_FILE: - continue 2; # current - default: - $colwarn[$col] = "Afbeelding niet goed ontvangen."; - continue 2; - } if (empty($cols[$col]['target'])) { $colwarn[$col] = "Kan niet worden aangepast."; continue; } - if (!@move_uploaded_file($val['tmp_name'], $cols[$col]['target'])) { - $colwarn[$col] = "Fout bij opslaan."; + try { + require_once('upload.inc.php'); + $target = userupload($val, NULL, $cols[$col]['target']); + if (!$target) continue; + $cols[$col]['value'] = ''; } - foreach (@glob('thumb/*/') as $thumbres) { - # attempt to remove old derivations - @unlink($thumbres.'/'.$cols[$col]['target']); + catch (Exception $e) { + $colwarn[$col] = ucfirst($e->getMessage()).'.'; } - $cols[$col]['value'] = ''; } if (!empty($_POST['newpass'])) { @@ -196,12 +166,17 @@ if ($_POST) {