<?php
#CMS - CMS Made Simple
#(c)2004-2008 by Ted Kulp (ted@cmsmadesimple.org)
#This project's homepage is: http://cmsmadesimple.sf.net
#
#This program is free software; you can redistribute it and/or modify
#it under the terms of the GNU General Public License as published by
#the Free Software Foundation; either version 2 of the License, or
#(at your option) any later version.
#
#This program is distributed in the hope that it will be useful,
#but WITHOUT ANY WARRANTY; without even the implied warranty of
#MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#GNU General Public License for more details.
#You should have received a copy of the GNU General Public License
#along with this program; if not, write to the Free Software
#Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
#
#$Id$
 
$CMS_ADMIN_PAGE=1;
 
require_once("../include.php");
 
check_login();
$group_id= - 1;
if (isset($_POST["group_id"])) $group_id = $_POST["group_id"];
else if (isset($_GET["group_id"])) $group_id = $_GET["group_id"];
 
$submitted= - 1;
if (isset($_POST["submitted"])) $submitted = $_POST["submitted"];
else if (isset($_GET["submitted"])) $submitted = $_GET["submitted"];
 
$group_name="";
 
if (isset($_POST["cancel"])) {
  redirect("topusers.php");
  return;
}
 
$userid = get_userid();
$access = check_permission($userid, 'Modify Group Assignments');
 
$message = '';
 
include_once("header.php");
 
global $gCms;
$db =& $gCms->GetDb();
 
if (!$access) {
  echo "<div class=\"pageerrorcontainer\"><p class=\"pageerror\">".lang('noaccessto',array(lang('modifygrouppermissions')))."</p></div>";
}
else {
 
?>
 
<div class="pagecontainer">
<?php
    echo $themeObject->ShowHeader('usersassignedtogroup',array($group_name));
    // always display the group pulldown
  global $gCms;
  $groupops =& $gCms->GetGroupOperations();
    $groups = $groupops->LoadGroups();
    if (count($groups) > 0)
        {
        echo '<form id="groupname" method="post" action="changegroupassign.php">';
        echo '<div class="pageoverflow">';
        echo '<p class="pagetext">'.lang('groupname').':</p>';
        echo '<p class="pageinput">';
        echo '<select name="group_id"';
        echo '><option value="-1">'.lang('selectgroup').'</option>';
        foreach ($groups as $onegroup)
            {
            echo '<option value="'.$onegroup->id.'"';
            if ($onegroup->id == $group_id)
                {
                echo ' selected="selected"';
                }
            echo '>'.$onegroup->name.'</option>';
            }
        echo '</select>';
        echo '<input id="groupsubmit" type="submit" value="'.lang('selectgroup').'" /></p>';
        echo '</div></form>';
        }
    if ($group_id != -1 && $submitted == -1)
        {
        // a group has been selected
        echo '<form method="post" action="changegroupassign.php">';
      $query = "SELECT u.id, u.username, ug.group_id FROM ".cms_db_prefix()."users u LEFT JOIN ".
            cms_db_prefix()."user_groups ug ON u.id = ug.user_id and ug.group_id = ? ORDER BY u.username";
        $result = cms_db()->Execute($query,array($group_id));
    echo "<table cellspacing=\"0\" class=\"pagetable\">\n";
    echo '<thead>';
    echo "<tr>\n";
    echo "<th>".lang('assignments')."</th>\n";
    echo "<th class=\"pagew10\">&nbsp;</th>\n";
    echo "</tr>\n";
    echo '</thead>';
    echo '<tbody>';
    $currow = "row1";
        while($result && $row = $result->FetchRow())
            {
      echo "<tr class=\"".$currow."\" onmouseover=\"this.className='".$currow.'hover'."';\" onmouseout=\"this.className='".$currow."';\">\n";
            echo '<td>'.$row['username'].'</td>'."\n";
      echo '<td><input class="pagecheckbox" type="checkbox" name="user-'.$row['id'].'" value="1" '.(isset($row['group_id'])?" checked=\"checked\"":"").'/></td>'."\n";
      echo "</tr>\n";
 
      ($currow=="row1"?$currow="row2":$currow="row1");  
      }
    ?>
    </tbody>
    </table>
    <div class="pageoptions">
      <p class="pageoptions">
        <input type="hidden" name="group_id" value="<?php echo $group_id?>" />
        <input type="hidden" name="submitted" value="1" />
        <input type="submit" name="changeassign" value="<?php echo lang('submit')?>" class="pagebutton" onmouseover="this.className='pagebuttonhover'" onmouseout="this.className='pagebutton'" />
        <input type="submit" name="cancel" value="<?php echo lang('cancel')?>" class="pagebutton" onmouseover="this.className='pagebuttonhover'" onmouseout="this.className='pagebutton'" />
      </p>
    </div>
    </form>
    <?php
        }
    else if ($group_id != -1 && $submitted != -1)
        {
    // we have group preferences
    $groupobj =& $groupops->LoadGroupByID($group_id);
    $userops =& $gCms->GetUserOperations();
    
    #Send the ChangeGroupAssignPost event
    Events::SendEvent('Core', 'ChangeGroupAssignPre', array('group' => $groupobj, 'users' => $userops->LoadUsersInGroup($group_id)));
    $query = "DELETE FROM ".cms_db_prefix()."user_groups WHERE group_id = ?";
    $result = cms_db()->Execute($query, array($group_id));
    foreach ($_POST as $key=>$value)
    {
      if (strpos($key,"user-") == 0 && strpos($key,"user-") !== false)
      {
        $query = "INSERT INTO ".cms_db_prefix()."user_groups (group_id, user_id, create_date, modified_date) VALUES (".cms_db()->qstr($group_id).", ".cms_db()->qstr(substr($key,5)).", ".cms_db()->DBTimeStamp(time()).", ".cms_db()->DBTimeStamp(time()).")";
        $result = cms_db()->Execute($query);
      }
    }
    
    #Send the ChangeGroupAssignPost event
    Events::SendEvent('Core', 'ChangeGroupAssignPost', array('group' => $groupobj, 'users' => $userops->LoadUsersInGroup($group_id)));
    audit($group_id, 'Group ID', lang('assignmentchanged'));
        echo '<p class="pageheader">'.lang('assignmentchanged').'</p>';
        }
    echo '</div>';
}
echo '<p class="pageback"><a class="pageback" href="'.$themeObject->BackUrl().'">&#171; '.lang('back').'</a></p>';
 
include_once("footer.php");
 
# vim:ts=4 sw=4 noet
?>