1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
<?php
//
// Callback function for inline editing.
//
// webtrees: Web based Family History software
// Copyright (C) 2010 webtrees development team.
//
// This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation; either version 2 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program; if not, write to the Free Software
// Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
//
// @version $Id$
define('WT_SCRIPT_NAME', 'load.php');
require './includes/session.php';
require_once WT_ROOT.'includes/functions/functions_edit.php';
// Header for an AJAX response. There is no error/return value.
// Invalid requests just get an empty response - same as no data.
header('Content-type: text/html; charset=UTF-8');
// Which data set are we requesting?
$src=safe_GET('src');
switch ($src) {
case 'user_list':
// callback for administration/user_list.php
if (!WT_USER_IS_ADMIN) {
exit;
}
$sSearch=safe_GET('sSearch');
if ($sSearch) {
$WHERE=
" WHERE".
" u.user_id>0 AND (".
" real_name LIKE CONCAT('%', " . WT_DB::quote($sSearch) . ", '%') OR " .
" user_name LIKE CONCAT('%', " . WT_DB::quote($sSearch) . ", '%') OR " .
" email LIKE CONCAT('%', " . WT_DB::quote($sSearch) . ", '%'))";
} else {
$WHERE=" WHERE u.user_id>0";
}
$iDisplayStart =safe_GET('iDisplayStart', WT_REGEX_INTEGER);
$iDisplayLength=safe_GET('iDisplayLength', WT_REGEX_INTEGER);
if ($iDisplayLength>0) {
$LIMIT=" LIMIT " . $iDisplayStart . ',' . $iDisplayLength;
} else {
$LIMIT="";
}
$iSortingCols =safe_GET('iSortingCols', WT_REGEX_INTEGER);
if ($iSortingCols) {
$ORDER_BY=' ORDER BY ';
for ($i=0; $i<$iSortingCols; ++$i) {
// Datatables numbers columns 0, 1, 2, ...
// MySQL numbers columns 1, 2, 3, ...
$ORDER_BY.=(1+safe_GET('iSortCol_'.$i, WT_REGEX_INTEGER)).' '.safe_GET('sSortDir_'.$i, 'asc|desc').' ';
if ($i<$iSortingCols-1) {
$ORDER_BY.=',';
}
}
} else {
$ORDER_BY='';
}
// This becomes a JSON list, not array, so need to fetch with numeric keys.
$aaData=WT_DB::prepare(
"SELECT SQL_CALC_FOUND_ROWS u.user_id AS user_id, real_name, user_name, email,".
" us1.setting_value AS language,".
" FROM_UNIXTIME(us2.setting_value) AS reg_timestamp,".
" FROM_UNIXTIME(us3.setting_value) AS sessiontime,".
" us4.setting_value AS verified,".
" us5.setting_value AS verified_by_admin".
" FROM `##user` u".
" LEFT JOIN `##user_setting` us1 ON (u.user_id=us1.user_id AND us1.setting_name='language')".
" LEFT JOIN `##user_setting` us2 ON (u.user_id=us2.user_id AND us2.setting_name='reg_timestamp')".
" LEFT JOIN `##user_setting` us3 ON (u.user_id=us3.user_id AND us3.setting_name='sessiontime')".
" LEFT JOIN `##user_setting` us4 ON (u.user_id=us4.user_id AND us4.setting_name='verified')".
" LEFT JOIN `##user_setting` us5 ON (u.user_id=us5.user_id AND us5.setting_name='verified_by_admin')".
$WHERE.
$ORDER_BY.
$LIMIT
)->execute()->fetchAll(PDO::FETCH_NUM);
// Reformat various columns for display
foreach ($aaData as &$row) {
$row[1]=edit_field_inline('user-real_name-'.$row[0], $row[1]);
$row[2]=edit_field_inline('user-user_name-'.$row[0], $row[2]);
$row[3]=edit_field_inline('user-email-'. $row[0], $row[3]);
$row[4]=edit_field_language_inline('user_setting-language-'. $row[0], $row[4]);
if ($row[0]==WT_USER_ID) {
$row[7]=$row[7] ? WT_I18N::translate('yes') : WT_I18N::translate('no');
$row[8]=$row[7] ? WT_I18N::translate('yes') : WT_I18N::translate('no');
} else {
// Cannot approve/unapprove your own account
$row[7]=edit_field_yes_no_inline('user_setting-verified-'. $row[0], $row[7]);
$row[8]=edit_field_yes_no_inline('user_setting-verified_by_admin-'.$row[0], $row[8]);
}
}
// Total filtered/unfiltered rows
$iTotalDisplayRecords=WT_DB::prepare("SELECT FOUND_ROWS()")->fetchOne();
$iTotalRecords=WT_DB::prepare("SELECT COUNT(*) FROM `##user` WHERE user_id>0")->fetchOne();
echo json_encode(array(
'sEcho' =>(int)safe_GET('sEcho'), // See http://www.datatables.net/usage/server-side
'iTotalRecords' =>$iTotalRecords,
'iTotalDisplayRecords'=>$iTotalDisplayRecords,
'aaData' =>$aaData
));
exit;
}
|
