webinterface.git

@@ -55,6 +55,7 @@ function create_jabber_account($local, $domain, $password)

     $result = mysql_query($query);

     if (mysql_num_rows($result) == 0)

     {

+      logger("modules/jabber/include/jabberaccounts.php", "jabber", "attempt to create account for invalid domain »{$domain}«");

       system_failure("Invalid domain!");

     }

   }

@@ -70,12 +71,14 @@ function create_jabber_account($local, $domain, $password)

   $result = mysql_query($query);

   if (mysql_num_rows($result) > 0)

   {

+    logger("modules/jabber/include/jabberaccounts.php", "jabber", "attempt to create already existing account »{$local}@{$domain}«");

     system_failure("Diesen Account gibt es bereits!");

   }

   $query = "INSERT INTO jabber.accounts (customerno,local,domain,password) VALUES ({$customerno}, '{$local}', {$domain}, '{$password}');";

   DEBUG($query);

   mysql_query($query);

+  logger("modules/jabber/include/jabberaccounts.php", "jabber", "created account »{$local}@{$domain}«");

 }

@@ -90,6 +93,7 @@ function change_jabber_password($id, $newpass)

   $query = "UPDATE jabber.accounts SET password='{$newpass}' WHERE customerno={$customerno} AND id={$id} LIMIT 1";

   DEBUG($query);

   mysql_query($query);

+  logger("modules/jabber/include/jabberaccounts.php", "jabber", "changed password for account  »{$id}«");

 }

@@ -104,6 +108,7 @@ function delete_jabber_account($id)

   $query = "UPDATE jabber.accounts SET `delete`=1 WHERE customerno={$customerno} AND id={$id} LIMIT 1";

   DEBUG($query);

   mysql_query($query);

+  logger("modules/jabber/include/jabberaccounts.php", "jabber", "deleted account »{$id}«");

 }

 ?>

@@ -57,12 +57,14 @@ function set_mysql_access($db, $account, $status)

     if (get_mysql_access($db, $account))

       return NULL;

     $query = "INSERT INTO misc.mysql_access (`database`,user) VALUES ((SELECT id FROM misc.mysql_database WHERE name='{$db}' AND useraccount={$uid} LIMIT 1), (SELECT id FROM misc.mysql_accounts WHERE username='{$account}' AND useraccount={$uid}));";

+    logger("modules/mysql/include/mysql.php", "mysql", "granting access on »{$db}« to »{$account}«");

   }

   else

   {

     if (! get_mysql_access($db, $account))

       return NULL;

     $query = "DELETE FROM misc.mysql_access WHERE `database`=(SELECT id FROM misc.mysql_database WHERE name='{$db}' AND useraccount={$uid} LIMIT 1) AND user=(SELECT id FROM misc.mysql_accounts WHERE username='{$account}' AND useraccount={$uid});";

+    logger("modules/mysql/include/mysql.php", "mysql", "revoking access on »{$db}« from »{$account}«");

   }

   DEBUG($query);

   mysql_query($query);

@@ -75,11 +77,13 @@ function create_mysql_account($username)

 {

   if (! validate_mysql_dbname($username))

   {

+    logger("modules/mysql/include/mysql.php", "mysql", "illegal username »{$username}«");

     input_error("Der eingegebene Benutzername entspricht leider nicht der Konvention. Bitte tragen Sie einen passenden Namen ein.");

     return NULL;

   }

   $uid = $_SESSION['userinfo']['uid'];

   $username = mysql_real_escape_string($username);

+  logger("modules/mysql/include/mysql.php", "mysql", "creating user »{$username}«");

   mysql_query("INSERT INTO misc.mysql_accounts (username, password, useraccount) VALUES ('$username', '!', $uid);");

   if (mysql_error())

     system_failure(mysql_error());

@@ -90,6 +94,7 @@ function delete_mysql_account($username)

 {

   $username = mysql_real_escape_string($username);

   $uid = $_SESSION['userinfo']['uid'];

+  logger("modules/mysql/include/mysql.php", "mysql", "deleting user »{$username}«");

   mysql_query("DELETE FROM misc.mysql_accounts WHERE username='{$username}' AND useraccount='{$uid}' LIMIT 1;");

   if (mysql_error())

     system_failure(mysql_error());

@@ -100,11 +105,13 @@ function create_mysql_database($dbname)

 {

   if (! validate_mysql_dbname($dbname))

   {

+    logger("modules/mysql/include/mysql.php", "mysql", "illegal db-name »{$dbname}«");

     input_error("Der eingegebene Datenbankname entspricht leider nicht der Konvention. Bitte tragen Sie einen passenden Namen ein.");

     return NULL;

   }

   $dbname = mysql_real_escape_string($dbname);

   $uid = $_SESSION['userinfo']['uid'];

+  logger("modules/mysql/include/mysql.php", "mysql", "creating database »{$dbname}«");

   mysql_query("INSERT INTO misc.mysql_database (name, useraccount) VALUES ('$dbname', $uid);");

   if (mysql_error())

     system_failure(mysql_error());

@@ -115,6 +122,7 @@ function delete_mysql_database($dbname)

 {

   $dbname = mysql_real_escape_string($dbname);

   $uid = $_SESSION['userinfo']['uid'];

+  logger("modules/mysql/include/mysql.php", "mysql", "removing database »{$dbname}«");

   mysql_query("DELETE FROM misc.mysql_database WHERE name='{$dbname}' AND useraccount='{$uid}' LIMIT 1;");

   if (mysql_error())

     system_failure(mysql_error());

@@ -141,6 +149,7 @@ function set_mysql_password($username, $password)

   $username = mysql_real_escape_string($username);

   $password = mysql_real_escape_string($password);

   $uid = $_SESSION['userinfo']['uid'];

+  logger("modules/mysql/include/mysql.php", "mysql", "updating password for »{$username}«");

   $query = "UPDATE misc.mysql_accounts SET password=PASSWORD('$password') WHERE username='$username' AND useraccount=$uid;";

   DEBUG($query);

   mysql_query($query);