webinterface.git

@@ -45,6 +45,12 @@ function icon_error($title = '')

   return "<img src=\"{$prefix}images/error.png\" style=\"height: 16px; width: 16px;\" alt=\"{$title}\" title=\"{$title}\" />";

 }

+function icon_edit($title = '')

+{

+  global $prefix;

+  return "<img src=\"{$prefix}images/edit.png\" style=\"height: 16px; width: 16px;\" alt=\"{$title}\" title=\"{$title}\" />";

+}

+

 function icon_pwchange($title = '')

 {

   global $prefix;

@@ -1,6 +1,6 @@

 <?php

-

-require_once('session/start.php');

+require_once('inc/base.php');

+require_once('inc/icons.php');

 require_once('useraccounts.php');

@@ -18,19 +18,37 @@ if (! customer_may_have_useraccounts())

 else

 {

   $accounts = list_useraccounts();

+  $shells = available_shells();

   output("<p>Folgende Benutzeraccounts haben Sie bisher:</p>");

-  output("<table><tr><th>Benutzername</th><th>Name</th><th>Erstellt am</th><th>Speicherplatz</th></tr>");

+  output("<table><tr><th>Benutzeraccount</th><th>Speicherplatz<sup>*</sup></th><th>Aktionen</th></tr>");

   foreach ($accounts as $acc)

   {

+    $shell = $shells[$acc['shell']];

+    $usedquota = get_used_quota($acc['uid']);

+    $quota = array();

+    foreach ($usedquota as $q)

+    {

+      $percent = round(( $q["used"] / $q["quota"] ) * 100 );

+      $color = ( $percent > 99 ? 'red' : ($percent > 80 ? "yellow" : "green" ));

+      $width = 2 * min($percent, 100);

+      $quota[] = "<p>Server <strong>{$q['server']}</strong><br />{$percent}%: {$q['used']} MB von {$q['quota']} MB belegt.</p> 

+        <div style=\"margin: 0; padding: 0; width: 200px; border: 1px solid black;\"><div style=\"font-size: 1px; background-color: {$color}; height: 10px; width: {$width}px; margin: 0; padding: 0;\">&#160;</div></div>";

-    output("<tr><td>");

-    if (customer_useraccount($acc->uid))

-      output($acc->username);

-    else

-      output(internal_link('edit', $acc->username, "uid={$acc->uid}"));

-    output("</td><td>{$acc->name}</td><td>{$acc->erstellungsdatum}</td><td>{$acc->quota} MB</td></tr>");

     }

-  output("</table><br />");

+    $realname = $acc['name'] ? $acc['name'] : $_SESSION['customerinfo']['name'];

+    $quotastring = implode('', $quota);

+    output("<tr><td><p><strong>{$acc['username']}</strong> - {$realname}</p><p style=\"color: #555;\">Existiert seit {$acc['erstellungsdatum']}<br />Verwendete Shell: {$shell}</p></td>");

+    output("<td>{$quotastring}</td>");

+    output("<td>".internal_link('edit', other_icon('user_edit.png', 'Bearbeiten'), "uid={$acc['uid']}"));

+    

+    if (! customer_useraccount($acc['uid']))

+    {

+      output("   ".internal_link('pwchange', icon_pwchange('Passwort neu setzen'), "uid={$acc['uid']}"));

+      #output("   ".internal_link('deluser', other_icon('user_delete.png', 'Benutzer löschen'), "uid={$acc['uid']}"));

+    }

+    output("</td></tr>\n");

+  }

+  output("</table><p><sup>*</sup>) Die Werte für den verbrauchten Speicherplatz werden periodisch eingelesen und hier erst verspätet angezeigt!</p>");

 }

@@ -1,6 +1,6 @@

 <?php

-require_once('session/start.php');

+require_once('inc/base.php');

 require_once('useraccounts.php');

@@ -12,21 +12,42 @@ $section = "systemuser_accounts";

 $account = get_account_details($_GET['uid']);

+

 output("<h3>Bearbeiten von Benutzer »{$account['username']}«</h3>");

-if (customer_useraccount($account['uid']))

-  system_failure('Aus Sicherheitsgründen können Sie diesen Account nicht ändern!');

+#if (customer_useraccount($account['uid']))

+#  system_failure('Aus Sicherheitsgründen können Sie diesen Account nicht ändern!');

+

+$shells = available_shells();

+$defaultname = ($account['name'] ? '' : 'checked="checked" ');

+$nondefaultname = ($account['name'] ? 'checked="checked" ' : '');

+

+$customerquota = get_customer_quota();

+

+$maxquota = $customerquota['max'] - $customerquota['assigned'] + $account['quota'];

+

+

+output(html_form('systemuser_edit', 'save', 'action=edit&uid='.$account['uid'], '

+

+<h5>Name (E-Mail-Absender, ...)</h5>

+<div style="margin-left: 2em;"> 

+  <p><input type="radio" name="defaultname" id="defaultname" value="1" '.$defaultname.'/> <label for="defaultname">Kundenname: <strong>'.$_SESSION['customerinfo']['name'].'</strong></label></p>

+  <p><input type="radio" name="defaultname" id="nondefaultname" value="0" '.$nondefaultname.'/> <label for="nondefaultname">Abweichend:</label> <input type="text" name="fullname" id="fullname" value="'.$account['name'].'" /></p>

+</div>

+

+<h5>Speicherplatz</h5>

+<div style="margin-left: 2em;">

+  <p>Wenn Sie mehrere Benutzeraccounts haben, können Sie den verfügbaren Speicherplatz selbst auf diese Accounts verteilen, bis diese zusammen das Limit erreichen, das für Ihr Kundenkonto vereinbart wurde (aktuell insgesamt '.$customerquota['max'].' MB).</p>

+  <p><label for="quota">Speicherplatz für »<strong>'.$account['username'].'</strong>«:</label> <input style="text-align: right; width: 5em;" type="text" name="quota" id="quota" value="'.$account['quota'].'" /> MB (Maximal '.$maxquota.' MB möglich.)</p>

+</div>

+<h5>Shell</h5>

+<div style="margin-left: 2em;">

+  <p>Hier können Sie eine andere Kommandozeile einstellen. Tun Sie das bitte nur, wenn Sie wissen was Sie tun. Möchten Sie gerne eine Shell benutzen, die hier nicht aufgeführt ist, wenden Sie sich bitte an den Support.</p>

+  <p>'.html_select('shell', $shells, $account['shell']).'</p>

+</div>

-output(html_form('systemuser_edit', 'save', 'action=edit', '

-<table>

-<tr><td>Benutzername:</td><td><strong>'.$account['username'].'</strong></td></tr>

-<tr><td>richtiger Name:<br /><span style="font-size:85%;">(wenn nicht »'.$_SESSION['customerinfo']['name'].'«)</span></td><td><input type="text" name="fullname" value="'.$account['name'].'" /></td></tr>

-<tr><td>Passwort:</td><td><input type="password" name="newpass" value="" /><br /><span style="font-size:85%;">(Bitte leer lassen um das Passwort nicht zu ändern!)</span></td></tr>

-<tr><td>Wiederholung:</td><td><input type="password" name="newpass2" value="" /></td></tr>

-</table>

 <p>

-<input type="hidden" name="uid" value="'.$account['uid'].'" />

 <input type="submit" name="submit" value="Speichern" />

 </p>

 '));

@@ -32,17 +32,29 @@ function primary_useraccount()

 }

+function available_shells()

+{

+  $result = db_query("SELECT path, name FROM system.shells WHERE usable=1");

+  $ret = array();

+  while ($s = mysql_fetch_assoc($result))

+  {

+    $ret[$s['path']] = $s['name'];

+  }

+  DEBUG($ret);

+  return $ret;

+}

+

 function list_useraccounts()

 {

   $customerno = (int) $_SESSION['customerinfo']['customerno'];

-  $result = db_query("SELECT uid,username,name,erstellungsdatum,quota FROM system.useraccounts WHERE kunde={$customerno}");

+  $result = db_query("SELECT uid,username,name,erstellungsdatum,quota,shell FROM system.useraccounts WHERE kunde={$customerno}");

   $ret = array();

-  while ($item = mysql_fetch_object($result))

+  while ($item = mysql_fetch_assoc($result))

   {

-    DEBUG('Useraccount: '.print_r($item, true));

     array_push($ret, $item);

   }

+  DEBUG($ret);

   return $ret;

 }

@@ -51,25 +63,45 @@ function get_account_details($uid)

 {

   $uid = (int) $uid;

   $customerno = (int) $_SESSION['customerinfo']['customerno'];

-  $result = db_query("SELECT uid,username,name FROM system.useraccounts WHERE kunde={$customerno} AND uid={$uid}");

+  $result = db_query("SELECT uid,username,name,shell,quota FROM system.useraccounts WHERE kunde={$customerno} AND uid={$uid}");

   if (mysql_num_rows($result) == 0)

     system_failure("Cannot find the requestes useraccount (for this customer).");

-  return mysql_fetch_array($result);

+  return mysql_fetch_assoc($result);

 }

+function get_used_quota($uid)

+{

+  $uid = (int) $uid;

+  $result = db_query("SELECT s.hostname AS server, used, COALESCE(us.quota, u.quota) AS quota FROM system.usedquota AS uq LEFT JOIN system.useraccounts AS u USING (uid) LEFT JOIN system.servers AS s ON (s.id=uq.server) LEFT JOIN system.user_server AS us ON (us.uid=uq.uid AND us.server=uq.server) WHERE uq.uid='{$uid}'");

+  $ret = array();

+  while ($line = mysql_fetch_assoc($result))

+    $ret[] = $line;

+  DEBUG($ret);

+  return $ret;

+}

-function set_systemuser_details($uid, $fullname, $quota)

+function set_account_details($account)

 {

-  $uid = (int) $uid;

+  $uid = (int) $account['uid'];

   $customerno = (int) $_SESSION['customerinfo']['customerno'];

-  $fullname = maybe_null(mysql_real_escape_string(filter_input_general($fullname)));

-  $quota = (int) $quota;

+  $fullname = maybe_null(mysql_real_escape_string(filter_input_general($account['name'])));

+  $shell = mysql_real_escape_string(filter_input_general($account['shell']));

+  $quota = (int) $account['quota'];

-  db_query("UPDATE system.useraccounts SET name={$fullname} WHERE kunde={$customerno} AND uid={$uid} LIMIT 1");

-  logger(LOG_INFO, "modules/systemuser/include/useraccounts", "systemuser", "updated real name for uid {$uid}");

+  db_query("UPDATE system.useraccounts SET name={$fullname}, quota={$quota}, shell='{$shell}' WHERE kunde={$customerno} AND uid={$uid}");

+  logger(LOG_INFO, "modules/systemuser/include/useraccounts", "systemuser", "updated details for uid {$uid}");

 }

+function get_customer_quota()

+{

+  $cid = (int) $_SESSION['customerinfo']['customerno'];

+  $result = db_query("SELECT SUM(u.quota) AS assigned, cq.quota AS max FROM system.customerquota AS cq INNER JOIN system.useraccounts AS u ON (u.kunde=cq.cid) WHERE cq.cid={$cid}");

+  $ret = mysql_fetch_assoc($result);

+  DEBUG($ret);

+  return $ret;

+}

+

 ?>

@@ -0,0 +1,37 @@

+<?php

+

+require_once('inc/base.php');

+

+require_once('useraccounts.php');

+

+require_role(ROLE_CUSTOMER);

+

+

+$title = "Passwort neu setzen";

+$section = "systemuser_accounts";

+

+$account = get_account_details($_GET['uid']);

+

+

+output("<h3>Rücksetzen des Passworts für Benutzer »{$account['username']}«</h3>");

+

+if (customer_useraccount($account['uid']))

+  system_failure('Zum Ändern des Passwortes für den Hauptbenutzer verwenden Sie bitte die entsprechende Funktion im Hauptmenü!');

+

+output(html_form('systemuser_pwchange', 'save', 'action=pwchange&uid='.$account['uid'], '

+

+<h5>Neues Passwort</h5>

+<div style="margin-left: 2em;"> 

+  <p>Geben Sie bitte Ihr neues Passwort zweimal ein. Bitte verzichten Sie auf Anführungszeichen!</p>

+  <p><label for="newpass1">Neues Passwort für »<strong>'.$account['username'].'</strong>«:</label> <input type="password" name="newpass1" id="newpass1" /></p>

+  <p><label for="newpass2">Wiederholung des Passworts:</label> <input type="password" name="newpass2" id="newpass2" /></p>

+</div>

+

+<p>

+<input type="submit" name="submit" value="Speichern" />

+</p>

+'));

+

+

+

+?>

@@ -30,33 +30,54 @@ if ($_GET['action'] == 'new')

   }

   */

 }

-elseif ($_GET['action'] == 'edit')

+elseif ($_GET['action'] == 'pwchange')

 {

   $error = false;

-  check_form_token('systemuser_edit');

-  if (customer_useraccount($_POST['uid']))

-    system_failure('Aus Sicherheitsgründen können Sie diesen Account nicht ändern!');

+  check_form_token('systemuser_pwchange');

+  if (customer_useraccount($_REQUEST['uid']))

+    system_failure('Zum Ändern dieses Passworts verwenden Sie bitte die Funktion im Hauptmenü!');

-  if ($_POST['newpass'] != '')

-  {

   //if (! strong_password($_POST['newpass']))

   //  input_error('Das Passwort ist zu einfach');

   //else

-    if ($_POST['newpass2'] == '' ||

-        $_POST['newpass'] != $_POST['newpass2'])

+  if ($_POST['newpass1'] == '' ||

+      $_POST['newpass1'] != $_POST['newpass2'])

   {

     input_error('Bitte zweimal ein neues Passwort eingeben!');

     $error = true;

   }

   else

   {

-      $user = get_account_details($_POST['uid']);

+    $user = get_account_details($_REQUEST['uid']);

     # set_systemuser_password kommt aus den Session-Funktionen!

-      set_systemuser_password($user['uid'], $_POST['newpass']);

+    set_systemuser_password($user['uid'], $_POST['newpass1']);

   }

+  if (! ($debugmode || $error))

+    header('Location: accounts');

 }

+elseif ($_GET['action'] == 'edit')

+{

+  check_form_token('systemuser_edit');

+  $account = get_account_details($_REQUEST['uid']);

+

+  $customerquota = get_customer_quota();

+  $maxquota = $customerquota['max'] - $customerquota['assigned'] + $account['quota'];

+ 

+  $quota = (int) $_POST['quota'];

+  if ($quota > $maxquota) 

+    system_failure("Sie können diesem Account maximal {$maxquota} MB Speicherplatz zuweisen.");

+  $account['quota'] = $quota;

+

+  if ($_POST['defaultname'] == 1)

+    $account['name'] = NULL;

+  else

+    $account['name'] = filter_input_general($_POST['fullname']);

+  

+  $shells = available_shells();

+  if (isset($shells[$_POST['shell']]))

+    $account['shell'] = $_POST['shell'];

-  set_systemuser_details($_POST['uid'], $_POST['fullname'], $_POST['quota']);

+  set_account_details($account);

   if (! ($debugmode || $error))

     header('Location: accounts');