Fixed #472: links are all created inside the client0 dir

tbrehm

2009-01-25 3dfe1e62c1e952225c4e35057dbaab71d28b0571

Fixed #472: links are all created inside the client0 dir

 interface/web/admin/form/groups.tform.php

@@ -65,7 +65,7 @@
$form["action"]            = "groups_edit.php";
$form["db_table"]        = "sys_group";
$form["db_table_idx"]    = "groupid";
$form["db_history"]        = "no";
$form["db_history"]        = "yes";
$form["tab_default"]    = "groups";
$form["list_default"]    = "groups_list.php";
$form["auth"]            = 'no';

 interface/web/client/client_edit.php

@@ -90,20 +90,18 @@
    function onAfterInsert() {
        global $app;
        // Create the group for the client
        $sql = "INSERT INTO sys_group (name,description,client_id) VALUES ('".mysql_real_escape_string($this->dataRecord["username"])."','',".$this->id.")";
        $app->db->query($sql);
        $groupid = $app->db->insertID();
        $groupid = $app->db->datalogInsert('sys_group', "(name,description,client_id) VALUES ('".mysql_real_escape_string($this->dataRecord["username"])."','',".$this->id.")", 'groupid');
        $groups = $groupid;
        
        $username = mysql_real_escape_string($this->dataRecord["username"]);
        $password = mysql_real_escape_string($this->dataRecord["password"]);
        $username = $app->db->quote($this->dataRecord["username"]);
        $password = $app->db->quote($this->dataRecord["password"]);
        $modules = ISPC_INTERFACE_MODULES_ENABLED;
        if($this->dataRecord["limit_client"] > 0) $modules .= ',client';
        $startmodule = 'mail';
        $usertheme = mysql_real_escape_string($this->dataRecord["usertheme"]);
        $usertheme = $app->db->quote($this->dataRecord["usertheme"]);
        $type = 'user';
        $active = 1;
        $language = mysql_real_escape_string($this->dataRecord["language"]);
        $language = $app->db->quote($this->dataRecord["language"]);
        
        // Create the controlpaneluser for the client
        $sql = "INSERT INTO sys_user (username,passwort,modules,startmodule,app_theme,typ,active,language,groups,default_group,client_id)
@@ -133,17 +131,19 @@
        
        // username changed
        if(isset($this->dataRecord['username']) && $this->dataRecord['username'] != '' && $this->oldDataRecord['username'] != $this->dataRecord['username']) {
            $username = mysql_real_escape_string($this->dataRecord["username"]);
            $username = $app->db->quote($this->dataRecord["username"]);
            $client_id = $this->id;
            $sql = "UPDATE sys_user SET username = '$username' WHERE client_id = $client_id";
            $app->db->query($sql);
            $sql = "UPDATE sys_group SET name = '$username' WHERE client_id = $client_id";
            $app->db->query($sql);
			
            $tmp = $app->db->queryOneRecord("SELECT * FROM sys_group WHERE client_id = $client_id");
            $app->db->datalogUpdate("sys_group", "name = '$username'", 'groupid', $tmp['groupid']);
            unset($tmp);
        }
        
        // password changed
        if(isset($this->dataRecord["password"]) && $this->dataRecord["password"] != '') {
            $password = mysql_real_escape_string($this->dataRecord["password"]);
            $password = $app->db->quote($this->dataRecord["password"]);
            $client_id = $this->id;
            $sql = "UPDATE sys_user SET passwort = md5('$password') WHERE client_id = $client_id";
            $app->db->query($sql);
@@ -153,7 +153,7 @@
        if(isset($this->dataRecord["limit_client"])) {
            $modules = ISPC_INTERFACE_MODULES_ENABLED;
            if($this->dataRecord["limit_client"] > 0) $modules .= ',client';
            $modules = mysql_real_escape_string($modules);
            $modules = $app->db->quote($modules);
            $client_id = $this->id;
            $sql = "UPDATE sys_user SET modules = '$modules' WHERE client_id = $client_id";
            $app->db->query($sql);

 server/plugins-available/apache2_plugin.inc.php

@@ -272,7 +272,7 @@
        */

    

        // Get the client ID

        $client = $app->db->queryOneRecord("SELECT client_id FROM sys_group WHERE sys_group.groupid = ".intval($data["new"]["sys_groupid"]));

        $client = $app->dbmaster->queryOneRecord("SELECT client_id FROM sys_group WHERE sys_group.groupid = ".intval($data["new"]["sys_groupid"]));
        $client_id = intval($client["client_id"]);

        unset($client);