NDWeb/Pages/Users.pm

   1 #**************************************************************************
   2 #   Copyright (C) 2006 by Michael Andreen <harvATruinDOTnu>               *
   3 #                                                                         *
   4 #   This program is free software; you can redistribute it and/or modify  *
   5 #   it under the terms of the GNU General Public License as published by  *
   6 #   the Free Software Foundation; either version 2 of the License, or     *
   7 #   (at your option) any later version.                                   *
   8 #                                                                         *
   9 #   This program is distributed in the hope that it will be useful,       *
  10 #   but WITHOUT ANY WARRANTY; without even the implied warranty of        *
  11 #   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         *
  12 #   GNU General Public License for more details.                          *
  13 #                                                                         *
  14 #   You should have received a copy of the GNU General Public License     *
  15 #   along with this program; if not, write to the                         *
  16 #   Free Software Foundation, Inc.,                                       *
  17 #   51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.         *
  18 #**************************************************************************/
  19
  20 package NDWeb::Pages::Users;
  21 use strict;
  22 use warnings;
  23 use ND::Include;
  24 use CGI qw/:standard/;
  25 use NDWeb::Include;
  26
  27 use base qw/NDWeb::XMLPage/;
  28
  29 $NDWeb::Page::PAGES{users} = __PACKAGE__;
  30
  31 sub render_body {
  32         my $self = shift;
  33         my ($BODY) = @_;
  34         $self->{TITLE} = 'Users';
  35         my $DBH = $self->{DBH};
  36
  37         return $self->noAccess unless $self->isHC;
  38
  39         my $error = '';
  40         my $user;
  41         if (defined param('user') && param('user') =~ /^(\d+)$/){
  42                 my $query = $DBH->prepare(q{
  43                         SELECT uid,username,hostmask,CASE WHEN u.planet IS NULL THEN '' ELSE coords(x,y,z) END AS planet,attack_points,defense_points,scan_points,humor_points,info, email, sms
  44                         FROM users u LEFT OUTER JOIN current_planet_stats p ON u.planet = p.id
  45                         WHERE uid = ?;
  46                         }) or $error .= "<p> Something went wrong: </p>";
  47                 $user = $DBH->selectrow_hashref($query,undef,$1) or $error.= "<p> Something went wrong: ".$DBH->errstr."</p>";
  48         }
  49
  50
  51         if ($user && defined param('cmd') && param('cmd') eq 'change'){
  52                 $DBH->begin_work;
  53                 for my $param (param()){
  54                         if ($param =~ /^c:(planet|\w+_points|hostmask|info|username|email|sms)$/){
  55                                 my $column = $1;
  56                                 my $value = param($column);
  57                                 if ($column eq 'planet'){
  58                                         if ($value eq ''){
  59                                                 $value = undef;
  60                                         }elsif($value =~ /^(\d+)\D+(\d+)\D+(\d+)$/){
  61                                                 ($value) = $DBH->selectrow_array(q{SELECT id FROM
  62                                                         current_planet_stats WHERE x = ? and y = ? and z =?}
  63                                                         ,undef,$1,$2,$3);
  64                                         }
  65                                 }
  66                                 if ($DBH->do(qq{UPDATE users SET $column = ? WHERE uid = ? }
  67                                                 ,undef,$value,$user->{uid})){
  68                                         $user->{$column} = param($column);
  69                                         log_message $ND::UID,"HC set $column to $value for user: $user->{uid}";
  70                                 }else{
  71                                         $error .= "<p> Something went wrong: ".$DBH->errstr."</p>";
  72                                 }
  73                         }
  74                 }
  75                 my $groups = $DBH->prepare('SELECT gid,groupname FROM groups');
  76                 my $delgroup = $DBH->prepare(q{DELETE FROM groupmembers WHERE uid = ? AND gid = ?});
  77                 my $addgroup = $DBH->prepare(q{INSERT INTO groupmembers (uid,gid) VALUES(?,?)});
  78                 $groups->execute();
  79                 while (my $group = $groups->fetchrow_hashref){
  80                         my $query;
  81                         next unless defined param($group->{gid});
  82                         if (param($group->{gid}) eq 'remove'){
  83                                 $query = $delgroup;
  84                         }elsif(param($group->{gid}) eq 'add'){
  85                                 $query = $addgroup;
  86                         }
  87                         if ($query){
  88                                 if ($query->execute($user->{uid},$group->{gid})){
  89                                         my ($action,$a2) = ('added','to');
  90                                         ($action,$a2) = ('removed','from') if param($group->{gid}) eq 'remove';
  91                                         log_message $ND::UID,"HC $action user: $user->{uid} ($user->{username}) $a2 group: $group->{gid} ($group->{groupname})";
  92                                 }else{
  93                                         $error .= "<p> Something went wrong: ".$DBH->errstr."</p>";
  94                                 }
  95                         }
  96                 }
  97                 $DBH->commit or $error .= "<p> Something went wrong: ".$DBH->errstr."</p>";
  98         }
  99
 100         if ($user){
 101                 $BODY->param(User => $user->{uid});
 102                 $BODY->param(Username => $user->{username});
 103                 $BODY->param(Hostmask => $user->{hostmask});
 104                 $BODY->param(Planet => $user->{planet});
 105                 $BODY->param(Attack_points => $user->{attack_points});
 106                 $BODY->param(Defense_points => $user->{defense_points});
 107                 $BODY->param(Scan_points => $user->{scan_points});
 108                 $BODY->param(humor_points => $user->{humor_points});
 109                 $BODY->param(info => $user->{info});
 110                 $BODY->param(Email => $user->{email});
 111                 $BODY->param(SMS => $user->{sms});
 112
 113                 my $groups = $DBH->prepare(q{SELECT g.gid,g.groupname,uid FROM groups g LEFT OUTER JOIN (SELECT gid,uid FROM groupmembers WHERE uid = ?) AS gm ON g.gid = gm.gid});
 114                 $groups->execute($user->{uid});
 115
 116                 my @addgroups;
 117                 my @remgroups;
 118                 while (my $group = $groups->fetchrow_hashref){
 119                         if ($group->{uid}){
 120                                 push @remgroups,{Id => $group->{gid}, Name => $group->{groupname}};
 121                         }else{
 122                                 push @addgroups,{Id => $group->{gid}, Name => $group->{groupname}};
 123                         }
 124                 }
 125                 $BODY->param(RemoveGroups => \@remgroups);
 126                 $BODY->param(AddGroups => \@addgroups);
 127
 128         }else{
 129                 my $query = $DBH->prepare(qq{SELECT u.uid,username,TRIM(',' FROM concat(g.groupname||',')) AS groups
 130                         FROM users u LEFT OUTER JOIN (groupmembers gm NATURAL JOIN groups g) ON gm.uid = u.uid
 131                         WHERE u.uid > 0
 132                         GROUP BY u.uid,username
 133                         ORDER BY lower(username)})or $error .= $DBH->errstr;
 134                 $query->execute or $error .= $DBH->errstr;
 135                 my @users;
 136                 while (my $user = $query->fetchrow_hashref){
 137                         push @users, $user;
 138                 }
 139                 $BODY->param(Users => \@users);
 140         }
 141         $BODY->param(Error => $error);
 142         return $BODY;
 143 }
 144 1;