UsrMaint.prg

<?php
$admVars = array();
$admOk = array(
    "action" => array("filter" => FILTER_SANITIZE_STRING),
    "tdir" => array("filter" => FILTER_SANITIZE_STRING),
    "user" => array("filter" => FILTER_SANITIZE_STRING),
    "pwd1" => array("filter" => FILTER_SANITIZE_STRING),
    "pwd2" => array("filter" => FILTER_SANITIZE_STRING)
);
HCU_ImportVars($admVars, "USRMAINT", $admOk);

$action = HCU_array_key_value("action", $admVars['USRMAINT']);
$action = $action !== false ? $action : "list";

$tdirValue = HCU_array_key_value("tdir", $admVars['USRMAINT']);
$tdir = $tdirValue !== false ? $tdirValue : "";

$userValue = HCU_array_key_value("user", $admVars['USRMAINT']);
$user = $userValue !== false ? $userValue : "";

$pwd1Value = HCU_array_key_value("pwd1", $admVars['USRMAINT']);
$pwd1 = $pwd1Value !== false ? $pwd1Value : "";

$pwd2Value = HCU_array_key_value("pwd2", $admVars['USRMAINT']);
$pwd2= $pwd2Value !== false ? $pwd2Value : "";

// Here we will decide which password file is being used
$sel_file = "";
switch ($tdir) {
    case "employees":
        $sel_file = "employees";
        break;
    case "board":
        $sel_file = "board";
        break;
    case "vendors":
        $sel_file = "vendors";
        break;
    case "alm":
        $sel_file = "alm";
        break;
    case "supervisory":
        $sel_file = "supervisory";
        break;
    case "misc":
        $sel_file = "misc";
        break;
    case "disaster":
        $sel_file = "disaster";
        break;
    default:
        // Somethings wrong
        exit;
}

// Password File - Depends on where it is called from
$pwd_file="$home_path/admin/$sel_file";

// Print this at the top of each page
header("Expires: Sat 20 May 1995 03:32:38 GMT");
header("Pragma: no-cache");
header("Cache-Control: no-cache, must-revalidate");


// Validate for the action first, then if it fails I can resend it to the correct form
$msg_err = '';
$msg_suc = '';
switch ($action) {
    case "save":
        // Validate the user is entered, and validate the passwords are the same
        if (trim($user) == '') {
            $msg_err .= "The user ID was not entered.  Please enter a user id." . chr(10) . chr(13);
        }

        if (trim($pwd1) != trim($pwd2)) {
            $msg_err .= "The passwords do not match.  Please retype the passwords." . chr(10) . chr(13);
        }

        // Check to see if a message was entered, if so then force the action to 2
        if (strlen($msg_err) > 0) {
            $action = "edit";
        } else {
            // Create the line of code to execute
            $c_f = "";
            if (!file_exists($pwd_file))
                $c_f = "c";             // Set the create flag


            $err_array = array();
            $sys_call = escapeshellcmd("htpasswd -{$c_f}b $pwd_file $user $pwd1");
            exec ($sys_call, $err_array, $ret_val);

            // Here I want to check for the existence of the .htaccess file in the employees/board directory
            // if it does NOT exist then I need to create it
            $ht_file="$home_path/public_html/$sel_file/.htaccess";              // path to htaccess
            if (!file_exists($ht_file)) {
                // Create the file with the options specified
                $hp = fopen($ht_file, "w");

                fwrite ($hp, "AuthName \"" . strtoupper($chome) . " " . ucfirst($sel_file) . "\"\n");
                fwrite ($hp, "AuthType Basic\n");
                fwrite ($hp, "require valid-user\n");
                fwrite ($hp, "AuthUserFile $pwd_file\n");

                fclose($hp);
            }

            $action = "list";
            $msg_suc = "User '$user' updated successfully!";
        }

        break;
    case "delete":
        // Delete the selected user, this will need to be done by the following actions
        // 1.   Open the existing password file for reading
        // 2.   Copy the lines of the file into a user/pwd array
        // 3.   Close the file handle
        // 4.   Open the file again, but use the w+ command to open it at zero length
        // 5.   Write each piece of the array to the file skipping the user to be deleted
        // 6. Close the file handle

        $del_failed = false;

        $usr_ary = array();
        if (file_exists($pwd_file)) {
            // Item 1
            $fp = fopen($pwd_file, "r");
            if ($fp) {
                // Item 2
                while (!feof ($fp)) {
                    $buffer = fgets($fp, 255);
                    if (strlen($buffer) == 0) {
                        break;
                    }
                    list($del_user, $del_pass) = explode (":", $buffer, 2);
                    if (trim($del_user) != '') {
                        $usr_ary[$del_user] = $del_pass;
                    }
                }
                // Item 3
                fclose($fp);
            }

            // Item 4
            $fp = fopen($pwd_file, "w+");
            if ($fp) {
                //Item 5
                foreach ($usr_ary as $key => $value) {
                    if (trim($key) != trim($user))
                        fwrite ($fp, $key . ":" . $value);
                }
                // Item 6
                fclose($fp);
            } else {
                $del_failed = true;
            }
        }

        // Set to true, because no files were added to the array
        if (count($usr_ary) == 0) {
            $del_failed = true;
        }

        if ($del_failed == true) {
            $msg_err = "Unable to delete user '$user'.  Please try again.";
            $action = "list";
        } else {
            $msg_suc = "User '$user' deleted successfully";
            $action = "list";
        }
        break;
}

switch ($action) {
    case "list":

        // Build breadcrumb link back to directories
        $directoryCrumbs = "";
        $directoryCrumbs .= "<a href=\"main.prg?ft=25\">Active Directories</a> / ";
        $directoryCrumbs .= "<a href=\"main.prg?ft=25&ndir=$tdir&csub=\">$tdir</a> / ";
        $directoryCrumbs .= "<span>" . ucfirst($tdir) . " Password Maintenance</span>";

        // Get USer lsit from Password file
        $file = false;
        if (file_exists($pwd_file)) {
            $file = fopen($pwd_file, "r");
        }

        $userList = array();
        if ($file != false) {
            // Read through the entries and pop off the username
            // Add to list if user exists.
            while (!feof($file)) {
                $buffer = fgets($file, 255);
                if (strlen($buffer) == 0) {
                    break;
                }
                list($read_user, $pass) = explode (":", $buffer, 2);

                if (trim($read_user) != '') {
                    $userUrl = urlencode($read_user);
                    $userList[] = array(
                        "name" => $read_user,
                        "edit" => "$self&action=edit&user=$userUrl&tdir=$tdir",
                        "delete" => "$self&action=delete&user=$userUrl&tdir=$tdir"
                    );
                }
            }

            fclose($file);
        }?>

        <div class="container-fluid">
            <h2>Private Directory Users</h2>
            <p>
                <a href="<?php echo $self ?>&action=edit&tdir=<?php echo $tdir ?>" class="k-button k-primary"><span class="fa fa-plus">&nbsp;</span>Add User</a>
            </p>
            <div id="gridUsers"></div>
        </div>

        <script type="text/x-kendo-tmpl" id="rowTemplateUsers">
            <tr data-uid="#: uid #">
                <td>
                    <span class="fa fa-user"></span>&emsp;
                    <a href="#: data.edit #">#: data.name #</a>
                </td>
                <td class="text-right">
                    <a href="\\#" onclick="check_delete('#: data.name #')">Delete </a>
                </td>
            </tr>
        </script>

        <script type="text/javascript">
        var windowStack = [];
        var gridUsers = null;
        var gridData = <?php echo HCU_JsonEncode($userList); ?>;
        var gridBreadCrumbs = <?php echo HCU_JsonEncode($directoryCrumbs); ?>;

        var msg_err = "<?php echo $msg_err; ?>";
        var msg_suc = "<?php echo $msg_suc; ?>";

        $(document).ready(function(e) {
            gridUsers = $("#gridUsers").kendoGrid({
                dataSource: {
                    data: gridData
                },
                noRecords: {
                    template: "No users found."
                },
                columns: [{
                    title: "",
                    headerTemplate: gridBreadCrumbs
                },{
                    title: ""
                }],
                rowTemplate: kendo.template($("#rowTemplateUsers").html())
            }).data("kendoGrid");

            // Display Erros here, since every actions required page load
            if (msg_err.length > 0) {
                $.homecuValidator.homecuResetMessage = true;
                $.homecuValidator.displayMessage(msg_err, $.homecuValidator.settings.statusError);
            } else if (msg_suc.length > 0) {
                $.homecuValidator.homecuResetMessage = true;
                $.homecuValidator.displayMessage(msg_suc, $.homecuValidator.settings.statusSuccess);
            }
        });

        $(document).on("click", ".k-overlay", function() {
          if (windowStack.length > 0) {
            var openWindow = windowStack[windowStack.length - 1];
            openWindow.close();
          }
        });

        function check_delete(pUser) {
            var dialogConfirmDelete = $("<div></div>").kendoDialog({
                title: "Delete User",
                modal: true,
                visible: false,
                resizable: false,
                minWidth: 300,
                maxWidth: 500,
                show: function(e) {
                    windowStack.push(this);
                },
                close: function(e) {
                    windowStack.pop();
                    this.destroy();
                },
                actions: [
                    { text: "No" },
                    {
                        text: "Yes", primary: true,
                        action: function(e) {
                            var url = "<?php echo $self; ?>";
                            url += "&action=delete";
                            url += "&tdir=" + "<?php echo $tdir; ?>";
                            url += "&user=" + pUser;

                            document.location = url;
                        }
                    }
                ],
                content: "<div class=\"col-xs-12\"><p><strong>You are about to delete the user '" + pUser + "'.</strong></p><p>Do you wish to continue?</p></div>"
            }).data("kendoDialog");

            dialogConfirmDelete.open().center();
        }
        </script>
<?php
        break;
    case "edit":
?>
        <div class="container-fluid">
            <h2>Private Directory Users</h2>
            <div class="well well-sm">
                <form id="umForm" method="post">
                    <input type="hidden" name="tdir" value="<?php echo $tdir; ?>">
                    <input type="hidden" name="action" value="save">
                    <fieldset>
                        <div class="col-xs-12 col-sm-3">
                            <label>User ID:</label>
                        </div>

                        <div class="col-xs-12 col-sm-4">
                            <?php if ($user !== "") { ?>
                            <label><?php echo $user ?></label>
                            <input type="hidden" name="user" id="user" value="<?php echo $user ?>">
                            <?php } else { ?>
                            <input type="text" name="user" id="user" class="k-textbox hcu-all-100" maxlength="15"
                            required
                            data-required-msg="User ID is required">
                            <?php } ?>
                        </div>
                    </fieldset>
                    <br>
                    <fieldset>
                        <div class="col-xs-12 col-sm-3">
                            <label>Password:</label>
                        </div>
                        <div class="col-xs-12 col-sm-4">
                            <input type="password" name="pwd1" id="pwd1" class="k-textbox hcu-all-100 password_match" size="10" maxlength="8"
                            required
                            data-required-msg="Password is required">
                        </div>
                    </fieldset>
                    <br>
                    <fieldset>
                        <div class="col-xs-12 col-sm-3">
                            <label>Confirm Password:</label>
                        </div>
                        <div class="col-xs-12 col-sm-4">
                            <input type="password" name="pwd2" id="pwd2" class="k-textbox hcu-all-100 password_match" size="10" maxlength="8"
                            required
                            data-required-msg="You must confirma your password"
                            homecu-equals="password_match"
                            data-homecuCustomEquals-msg="Passwords do not match">
                        </div>
                    </fieldset>
                </form>
            </div>
            <div class="hcu-template">
                <div class="hcu-edit-buttons k-state-default">
                    <a href="main.prg?ft=26&tdir=<?php echo $tdir; ?>" id="lnkCancel">Cancel</a>&emsp;
                    <a href="##" id="btnUpdate" class="k-button k-primary">
                        <i class="fa fa-check fa-lg"></i>Save
                    </a>
                </div>
            </div>
        </div>

        <script type="text/javascript">
        $(document).ready(function(e) {
            var msg_err = "<?php echo $msg_err; ?>";
            var msg_suc = "<?php echo $msg_suc; ?>";

            // Setup homecu validator
            $.homecuValidator.setup({
              formStatusField: "formStatus",
              formValidate: "umForm"
            });

            // Display Erros here, since every actions required page load
            if (msg_err.length > 0) {
                $.homecuValidator.homecuResetMessage = true;
                $.homecuValidator.displayMessage(msg_err, $.homecuValidator.settings.statusError);
            } else if (msg_suc.length > 0) {
                $.homecuValidator.homecuResetMessage = true;
                $.homecuValidator.displayMessage(msg_suc, $.homecuValidator.settings.statusSuccess);
            }

            // Submit action
            $("#btnUpdate").on("click", function(e) {
                if ($.homecuValidator.validate()) {
                    $("#umForm").submit();
                }
            });
        });
        </script>
<?php
        break;
}
?>