webinterface.git

modules/handles/include/handles.php     1) <?php
modules/handles/include/handles.php     2) /*
modules/handles/include/handles.php     3) This file belongs to the Webinterface of schokokeks.org Hosting
modules/handles/include/handles.php     4) 

modules/handles/include/handles.php     5) Written 2008-2018 by schokokeks.org Hosting, namely

modules/handles/include/handles.php     6)   Bernd Wurst <bernd@schokokeks.org>
modules/handles/include/handles.php     7)   Hanno Böck <hanno@schokokeks.org>
modules/handles/include/handles.php     8) 
modules/handles/include/handles.php     9) To the extent possible under law, the author(s) have dedicated all copyright and related and neighboring rights to this software to the public domain worldwide. This software is distributed without any warranty.
modules/handles/include/handles.php    10) 
modules/handles/include/handles.php    11) You should have received a copy of the CC0 Public Domain Dedication along with this software. If not, see 
modules/handles/include/handles.php    12) http://creativecommons.org/publicdomain/zero/1.0/
modules/handles/include/handles.php    13) 
modules/handles/include/handles.php    14) Nevertheless, in case you use a significant part of this code, we ask (but not require, see the license) that you keep the authors' names in place and return your changes to the public. We would be especially happy if you tell us what you're going to do with this code.
modules/handles/include/handles.php    15) */
modules/handles/include/handles.php    16) 
modules/handles/include/handles.php    17) require_once('inc/debug.php');
modules/handles/include/handles.php    18) require_role(array(ROLE_CUSTOMER));
modules/handles/include/handles.php    19) 

modules/contacts/include/contacts.php  20) require_once('api.php');
modules/contacts/include/contacts.php  21) 

modules/handles/include/handles.php    22) /*

modules/contacts/include/contacts.php  23) Todo:
modules/contacts/include/contacts.php  24)     - Wenn ein Domain-Handle aktualisiert wird, das beim Provider ändern
modules/contacts/include/contacts.php  25)     - "separate Rechnungsadresse einrichten" / "Zusätzliche Adresse für den Notfall"
modules/contacts/include/contacts.php  26)     - Domaininhaber festlegen    

modules/handles/include/handles.php    27) */
modules/handles/include/handles.php    28) 
modules/handles/include/handles.php    29) 

modules/contacts/include/contacts.php  30) function new_contact() {
modules/contacts/include/contacts.php  31)     return array("id" => NULL,
modules/contacts/include/contacts.php  32)         "state" => NULL,
modules/contacts/include/contacts.php  33)         "lastchange" => time(),
modules/contacts/include/contacts.php  34)         "nic_handle" => NULL,
modules/contacts/include/contacts.php  35)         "nic_id" => NULL,
modules/contacts/include/contacts.php  36)         "company" => NULL,
modules/contacts/include/contacts.php  37)         "name" => NULL,
modules/contacts/include/contacts.php  38)         "address" => NULL,
modules/contacts/include/contacts.php  39)         "zip" => NULL,
modules/contacts/include/contacts.php  40)         "city" => NULL,
modules/contacts/include/contacts.php  41)         "country" => "DE",
modules/contacts/include/contacts.php  42)         "phone" => NULL,
modules/contacts/include/contacts.php  43)         "mobile" => NULL,
modules/contacts/include/contacts.php  44)         "fax" => NULL,
modules/contacts/include/contacts.php  45)         "email" => NULL,
modules/contacts/include/contacts.php  46)         "pgp_id" => NULL,
modules/contacts/include/contacts.php  47)         "pgp_key" => NULL,
modules/contacts/include/contacts.php  48)         "customer" => $_SESSION['customerinfo']['customerno']);
modules/contacts/include/contacts.php  49) }
modules/contacts/include/contacts.php  50) 
modules/contacts/include/contacts.php  51) 
modules/contacts/include/contacts.php  52) function get_contact($id)
modules/contacts/include/contacts.php  53) {
modules/contacts/include/contacts.php  54)     $args = array(
modules/contacts/include/contacts.php  55)         "cid" => (int) $_SESSION['customerinfo']['customerno'],
modules/contacts/include/contacts.php  56)         "id" => (int) $id);
modules/contacts/include/contacts.php  57)     $result = db_query("SELECT id, state, lastchange, nic_id, nic_handle, company, name, address, zip, city, country, phone, mobile, fax, email, pgp_id, pgp_key FROM kundendaten.contacts WHERE id=:id AND customer=:cid", $args);
modules/contacts/include/contacts.php  58)     if ($result->rowCount() == 0) {
modules/contacts/include/contacts.php  59)         system_failure("Kontakt nicht gefunden oder gehört nicht diesem Kunden");
modules/contacts/include/contacts.php  60)     }

modules/contacts/include/contacts.php  61)     $contact = $result->fetch();

modules/contacts/include/contacts.php  62)     return $contact;
modules/contacts/include/contacts.php  63) }
modules/contacts/include/contacts.php  64) 

modules/contacts/include/contacts.php  65) function get_contacts() {

modules/handles/include/handles.php    66)     $cid = (int) $_SESSION['customerinfo']['customerno'];

modules/contacts/include/contacts.php  67)     $result = db_query("SELECT id, state, lastchange, nic_id, nic_handle, company, name, address, zip, city, country, phone, mobile, fax, email, pgp_id, pgp_key FROM kundendaten.contacts WHERE (state<>'deleted' OR state IS NULL) AND customer=? ORDER BY id", array($cid));

modules/handles/include/handles.php    68)     $ret = array();

modules/contacts/include/contacts.php  69)     while ($contact = $result->fetch()) {
modules/contacts/include/contacts.php  70)         $ret[$contact['id']] = $contact;

modules/handles/include/handles.php    71)     }
modules/handles/include/handles.php    72)     DEBUG($ret);
modules/handles/include/handles.php    73)     return $ret;
modules/handles/include/handles.php    74) }
modules/handles/include/handles.php    75) 

modules/contacts/include/contacts.php  76) 

modules/contacts/include/contacts.php  77) function is_domainholder($contactid) {
modules/contacts/include/contacts.php  78)     $contactid = (int) $contactid;
modules/contacts/include/contacts.php  79)     $result = db_query("SELECT id FROM kundendaten.domains WHERE owner=? OR admin_c=?", array($contactid, $contactid));
modules/contacts/include/contacts.php  80)     if ($result->rowCount() > 0) {
modules/contacts/include/contacts.php  81)         return true;
modules/contacts/include/contacts.php  82)     }
modules/contacts/include/contacts.php  83)     return false;
modules/contacts/include/contacts.php  84) }
modules/contacts/include/contacts.php  85) 

modules/contacts/include/contacts.php  86) function possible_domainholders() {
modules/contacts/include/contacts.php  87)     $allcontacts = get_contacts();
modules/contacts/include/contacts.php  88)     $ret = array();
modules/contacts/include/contacts.php  89)     foreach ($allcontacts as $id => $c) {

modules/contacts/include/contacts.php  90)         if (possible_domainholder($c)) {

modules/contacts/include/contacts.php  91)             $ret[$id] = $c;
modules/contacts/include/contacts.php  92)         }
modules/contacts/include/contacts.php  93)     }
modules/contacts/include/contacts.php  94)     return $ret;
modules/contacts/include/contacts.php  95) }
modules/contacts/include/contacts.php  96) 

modules/contacts/include/contacts.php  97) function possible_domainholder($c)
modules/contacts/include/contacts.php  98) {
modules/contacts/include/contacts.php  99)     if ($c['name'] && $c['address'] && $c['zip'] && $c['city'] && $c['country'] && $c['phone'] && $c['email']) {
modules/contacts/include/contacts.php 100)         return true;
modules/contacts/include/contacts.php 101)     }
modules/contacts/include/contacts.php 102)     return false;
modules/contacts/include/contacts.php 103) }

modules/contacts/include/contacts.php 104) 

modules/contacts/include/contacts.php 105) function have_mailaddress($email) 
modules/contacts/include/contacts.php 106) {
modules/contacts/include/contacts.php 107)     $cid = (int) $_SESSION['customerinfo']['customerno'];
modules/contacts/include/contacts.php 108)     $result = db_query("SELECT id FROM kundendaten.contacts WHERE customer=? AND email=?", array($cid, $email));
modules/contacts/include/contacts.php 109)     if ($result->rowCount() > 0) {
modules/contacts/include/contacts.php 110)         return true;
modules/contacts/include/contacts.php 111)     }
modules/contacts/include/contacts.php 112)     return false;
modules/contacts/include/contacts.php 113) }
modules/contacts/include/contacts.php 114) 

modules/handles/include/handles.php   115) 

modules/contacts/include/contacts.php 116) function get_kundenkontakte() {

modules/handles/include/handles.php   117)     $cid = (int) $_SESSION['customerinfo']['customerno'];

modules/contacts/include/contacts.php 118)     $result = db_query("SELECT contact_kunde, contact_extern, contact_rechnung FROM kundendaten.kunden WHERE id=?", array($cid));

modules/handles/include/handles.php   119)     $res = $result->fetch();

modules/contacts/include/contacts.php 120)     $ret = array("kunde" => $res['contact_kunde'],
modules/contacts/include/contacts.php 121)                  "extern" => $res['contact_extern'],
modules/contacts/include/contacts.php 122)                  "rechnung" => $res['contact_rechnung']);

modules/handles/include/handles.php   123)     return $ret;
modules/handles/include/handles.php   124) }
modules/handles/include/handles.php   125) 

modules/contacts/include/contacts.php 126) function save_emailaddress($id, $email) 
modules/contacts/include/contacts.php 127) {

modules/contacts/include/contacts.php 128)     // Speichert eine E-Mail-Adresse direkt, z.B. wenn diese schonmal geprüt wurde
modules/contacts/include/contacts.php 129)     $args = array("cid" => (int) $_SESSION['customerinfo']['customerno'],
modules/contacts/include/contacts.php 130)         "id" => (int) $id,
modules/contacts/include/contacts.php 131)         "email" => $email);
modules/contacts/include/contacts.php 132)     db_query("UPDATE kundendaten.contacts SET email=:email WHERE id=:id AND customer=:cid", $args);    

modules/contacts/include/contacts.php 133) }
modules/contacts/include/contacts.php 134) 
modules/contacts/include/contacts.php 135) function save_contact($c)
modules/contacts/include/contacts.php 136) {

modules/contacts/include/contacts.php 137)     if ($c['nic_id']) {
modules/contacts/include/contacts.php 138)         if (! possible_domainholder($c)) {
modules/contacts/include/contacts.php 139)             system_failure("Sie haben ein Feld geleert, das für die Eigenschaft als Domaininhaber erhalten bleiben muss. Ihre Änderungen wurden nicht gespeichert.");
modules/contacts/include/contacts.php 140)         }
modules/contacts/include/contacts.php 141)     }

modules/contacts/include/contacts.php 142)     for ($i=0;array_key_exists($i, $c);$i++) {
modules/contacts/include/contacts.php 143)         unset($c[$i]);
modules/contacts/include/contacts.php 144)     }
modules/contacts/include/contacts.php 145)     unset($c['state']);
modules/contacts/include/contacts.php 146)     unset($c['lastchange']);
modules/contacts/include/contacts.php 147)     unset($c['email']);
modules/contacts/include/contacts.php 148)     $c['customer'] = (int) $_SESSION['customerinfo']['customerno'];
modules/contacts/include/contacts.php 149)     if ($c['id']) {
modules/contacts/include/contacts.php 150)         // Kontakt bestaht schon, Update

modules/contacts/include/contacts.php 151)         db_query("UPDATE kundendaten.contacts SET nic_id=:nic_id, nic_handle=:nic_handle, company=:company, name=:name, address=:address, zip=:zip, city=:city, country=:country, phone=:phone, mobile=:mobile, fax=:fax, pgp_id=:pgp_id, pgp_key=:pgp_key WHERE id=:id AND customer=:customer", $c);

modules/contacts/include/contacts.php 152)     } else {
modules/contacts/include/contacts.php 153)         unset($c['id']);
modules/contacts/include/contacts.php 154)         // Neu anlegen

modules/contacts/include/contacts.php 155)         db_query("INSERT INTO kundendaten.contacts (nic_id, nic_handle, customer, company, name, address, zip, city, country, phone, mobile, fax, pgp_id, pgp_key) VALUES (:nic_id, :nic_handle, :customer, :company, :name, :address, :zip, :city, :country, :phone, :mobile, :fax, :pgp_id, :pgp_key)", $c);

modules/contacts/include/contacts.php 156)         $c['id'] = db_insert_id();
modules/contacts/include/contacts.php 157)     }
modules/contacts/include/contacts.php 158)     return $c['id'];
modules/contacts/include/contacts.php 159) }
modules/contacts/include/contacts.php 160) 
modules/contacts/include/contacts.php 161) 
modules/contacts/include/contacts.php 162) function send_emailchange_token($id, $email)
modules/contacts/include/contacts.php 163) {
modules/contacts/include/contacts.php 164)     if (! check_emailaddr($email)) {
modules/contacts/include/contacts.php 165)         system_falure("Die E-Mail-Adresse scheint nicht gültig zu sein.");
modules/contacts/include/contacts.php 166)     }
modules/contacts/include/contacts.php 167)     $args = array("id" => (int) $id,
modules/contacts/include/contacts.php 168)         "email" => $email,
modules/contacts/include/contacts.php 169)         "token" => random_string(20));
modules/contacts/include/contacts.php 170) 
modules/contacts/include/contacts.php 171)     db_query("INSERT INTO kundendaten.mailaddress_token (token, expire, contact, email) VALUES (:token, NOW() + INTERVAL 1 DAY, :id, :email)" , $args);
modules/contacts/include/contacts.php 172)     DEBUG('Token erzeugt: '.print_r($args, true));
modules/contacts/include/contacts.php 173)     $message = 'Diese E-Mail-Adresse wurde angegeben als möglicher Domaininhaber oder Kundenkontakt bei schokokeks.org Hosting.
modules/contacts/include/contacts.php 174) 
modules/contacts/include/contacts.php 175) Bitte bestätigen Sie mit einem Klick auf den nachfolgenden Link, dass diese E-Mail-Adresse funktioniert und verwendet werden soll:
modules/contacts/include/contacts.php 176) 
modules/contacts/include/contacts.php 177)     '.config('webinterface_url').'/verify'.$args['token'].'
modules/contacts/include/contacts.php 178) 
modules/contacts/include/contacts.php 179) Wenn Sie diesen Link nicht innerhalb von 24 Stunden abrufen, wird Ihre Adresse gelöscht und nicht verwendet.
modules/contacts/include/contacts.php 180) Sollten Sie mit der Verwendung Ihrer E-Mail-Adresse nicht einverstanden sein, so ignorieren Sie daher bitte diese Nachricht oder teilen Sie uns dies mit.
modules/contacts/include/contacts.php 181) 
modules/contacts/include/contacts.php 182) -- 
modules/contacts/include/contacts.php 183) schokokeks.org GbR, Bernd Wurst, Johannes Böck
modules/contacts/include/contacts.php 184) Köchersberg 32, 71540 Murrhardt
modules/contacts/include/contacts.php 185) 
modules/contacts/include/contacts.php 186) https://schokokeks.org
modules/contacts/include/contacts.php 187) ';
modules/contacts/include/contacts.php 188)     # send welcome message
modules/contacts/include/contacts.php 189)     mail($email, '=?UTF-8?Q?Best=C3=A4tigung_Ihrer_E-Mail-Adresse?=', $message, "X-schokokeks-org-message: verify\nFrom: ".config('company_name').' <'.config('adminmail').">\nMIME-Version: 1.0\nContent-Type: text/plain; charset=UTF-8\n");
modules/contacts/include/contacts.php 190)  
modules/contacts/include/contacts.php 191) }

modules/handles/include/handles.php   192) 

modules/contacts/include/contacts.php 193) function update_pending($contactid) {
modules/contacts/include/contacts.php 194)     $contactid = (int) $contactid;
modules/contacts/include/contacts.php 195)     $result = db_query("SELECT email FROM kundendaten.mailaddress_token WHERE contact=?", array($contactid));

modules/handles/include/handles.php   196)     if ($result->rowCount() == 0) {
modules/handles/include/handles.php   197)         return NULL;
modules/handles/include/handles.php   198)     }
modules/handles/include/handles.php   199)     $res = $result->fetch();
modules/handles/include/handles.php   200)     return $res['email'];
modules/handles/include/handles.php   201) }
modules/handles/include/handles.php   202) 
modules/handles/include/handles.php   203) 
modules/handles/include/handles.php   204)