diff --git a/src/messenger/webim/operator/avatar.php b/src/messenger/webim/operator/avatar.php index 9e4dada5..bb061474 100755 --- a/src/messenger/webim/operator/avatar.php +++ b/src/messenger/webim/operator/avatar.php @@ -1,105 +1,105 @@ - $opId, 'avatar' => ''); -$errors = array(); - -$canmodify = ($opId == $operator['operatorid'] && is_capable($can_modifyprofile, $operator)) - || is_capable($can_administrate, $operator); - -$op = operator_by_id($opId); - -if( !$op ) { - $errors[] = getlocal("no_such_operator"); - -} else if( isset($_POST['op']) ) { - $avatar = $op['vcavatar']; - - if(!$canmodify) { - $errors[] = getlocal('page_agent.cannot_modify'); - - } else if( isset($_FILES['avatarFile']) && $_FILES['avatarFile']['name']) { - $valid_types = array("gif","jpg", "png", "tif"); - - $orig_filename = $_FILES['avatarFile']['name']; - $tmp_file_name = $_FILES['avatarFile']['tmp_name']; - - $ext = strtolower(substr($orig_filename, 1 + strrpos($orig_filename, "."))); - $new_file_name = "$opId.$ext"; - loadsettings(); - - $file_size = $_FILES['avatarFile']['size']; - if ($file_size == 0 || $file_size > $settings['max_uploaded_file_size']) { - $errors[] = failed_uploading_file($orig_filename, "errors.file.size.exceeded"); - } elseif(!in_array($ext, $valid_types)) { - $errors[] = failed_uploading_file($orig_filename, "errors.invalid.file.type"); - } else { - $avatar_local_dir = "../images/avatar/"; - $full_file_path = $avatar_local_dir.$new_file_name; - if (file_exists($full_file_path)) { - unlink($full_file_path); - } - if (!move_uploaded_file($_FILES['avatarFile']['tmp_name'], $full_file_path)) { - $errors[] = failed_uploading_file($orig_filename, "errors.file.move.error"); - } else { - $avatar = "$webimroot/images/avatar/$new_file_name"; - } - } - } else { - $errors[] = "No file selected"; - } - - if(count($errors) == 0) { - update_operator_avatar($op['operatorid'],$avatar); - - if ($opId && $avatar && $_SESSION[$mysqlprefix . 'operator'] && $operator['operatorid'] == $opId) { - $_SESSION[$mysqlprefix . 'operator']['vcavatar'] = $avatar; - } - header("Location: $webimroot/operator/avatar.php?op=$opId"); - exit; - } else { - $page['avatar'] = topage($op['vcavatar']); - } - -} else { - if (isset($_GET['delete']) && $_GET['delete'] == "true" && $canmodify) { - update_operator_avatar($op['operatorid'],''); - header("Location: $webimroot/operator/avatar.php?op=$opId"); - exit; - } - $page['avatar'] = topage($op['vcavatar']); -} - -$page['currentop'] = $op ? topage(get_operator_name($op))." (".$op['vclogin'].")" : "-not found-"; -$page['canmodify'] = $canmodify ? "1" : ""; - -prepare_menu($operator); -setup_operator_settings_tabs($opId,1); -start_html_output(); -require('../view/avatar.php'); + $opId, 'avatar' => ''); +$errors = array(); + +$canmodify = ($opId == $operator['operatorid'] && is_capable($can_modifyprofile, $operator)) + || is_capable($can_administrate, $operator); + +$op = operator_by_id($opId); + +if( !$op ) { + $errors[] = getlocal("no_such_operator"); + +} else if( isset($_POST['op']) ) { + $avatar = $op['vcavatar']; + + if(!$canmodify) { + $errors[] = getlocal('page_agent.cannot_modify'); + + } else if( isset($_FILES['avatarFile']) && $_FILES['avatarFile']['name']) { + $valid_types = array("gif","jpg", "png", "tif"); + + $orig_filename = $_FILES['avatarFile']['name']; + $tmp_file_name = $_FILES['avatarFile']['tmp_name']; + + $ext = strtolower(substr($orig_filename, 1 + strrpos($orig_filename, "."))); + $new_file_name = "$opId.$ext"; + loadsettings(); + + $file_size = $_FILES['avatarFile']['size']; + if ($file_size == 0 || $file_size > $settings['max_uploaded_file_size']) { + $errors[] = failed_uploading_file($orig_filename, "errors.file.size.exceeded"); + } elseif(!in_array($ext, $valid_types)) { + $errors[] = failed_uploading_file($orig_filename, "errors.invalid.file.type"); + } else { + $avatar_local_dir = "../images/avatar/"; + $full_file_path = $avatar_local_dir.$new_file_name; + if (file_exists($full_file_path)) { + unlink($full_file_path); + } + if (!move_uploaded_file($_FILES['avatarFile']['tmp_name'], $full_file_path)) { + $errors[] = failed_uploading_file($orig_filename, "errors.file.move.error"); + } else { + $avatar = "$webimroot/images/avatar/$new_file_name"; + } + } + } else { + $errors[] = "No file selected"; + } + + if(count($errors) == 0) { + update_operator_avatar($op['operatorid'],$avatar); + + if ($opId && $avatar && $_SESSION[$mysqlprefix . 'operator'] && $operator['operatorid'] == $opId) { + $_SESSION[$mysqlprefix . 'operator']['vcavatar'] = $avatar; + } + header("Location: $webimroot/operator/avatar.php?op=$opId"); + exit; + } else { + $page['avatar'] = topage($op['vcavatar']); + } + +} else { + if (isset($_GET['delete']) && $_GET['delete'] == "true" && $canmodify) { + update_operator_avatar($op['operatorid'],''); + header("Location: $webimroot/operator/avatar.php?op=$opId"); + exit; + } + $page['avatar'] = topage($op['vcavatar']); +} + +$page['currentop'] = $op ? topage(get_operator_name($op))." (".$op['vclogin'].")" : "-not found-"; +$page['canmodify'] = $canmodify ? "1" : ""; + +prepare_menu($operator); +setup_operator_settings_tabs($opId,1); +start_html_output(); +require('../view/avatar.php'); ?> \ No newline at end of file diff --git a/src/messenger/webim/operator/permissions.php b/src/messenger/webim/operator/permissions.php index c717261f..e311a6a4 100755 --- a/src/messenger/webim/operator/permissions.php +++ b/src/messenger/webim/operator/permissions.php @@ -1,91 +1,91 @@ - $opId, 'canmodify' => is_capable($can_administrate, $operator) ? "1" : ""); -$errors = array(); - -$op = operator_by_id($opId); - -if( !$op ) { - $errors[] = getlocal("no_such_operator"); - -} else if( isset($_POST['op']) ) { - - if(!is_capable($can_administrate, $operator)) { - $errors[] = getlocal('page_agent.cannot_modify'); - } - - $new_permissions = isset($op['iperm']) ? $op['iperm'] : 0; - - foreach($permission_ids as $perm => $id) { - if( verifyparam("permissions$id","/^on$/", "") == "on") { - $new_permissions |= (1 << $perm); - } else { - $new_permissions &= ~ (1 << $perm); - } - } - - if(count($errors) == 0) { - update_operator_permissions($op['operatorid'],$new_permissions); - - if ($opId && $_SESSION[$mysqlprefix . 'operator'] && $operator['operatorid'] == $opId) { - $_SESSION[$mysqlprefix . 'operator']['iperm'] = $new_permissions; - } - header("Location: $webimroot/operator/permissions.php?op=$opId&stored"); - exit; - } - -} - -$page['permissionsList'] = get_permission_list(); -$page['formpermissions'] = array(""); -$page['currentop'] = $op ? topage(get_operator_name($op))." (".$op['vclogin'].")" : "-not found-"; - -if($op) { - foreach($permission_ids as $perm => $id) { - if(is_capable($perm,$op)) { - $page['formpermissions'][] = $id; - } - } -} - -$page['stored'] = isset($_GET['stored']); -prepare_menu($operator); -setup_operator_settings_tabs($opId,3); -start_html_output(); -require('../view/permissions.php'); -?> + $opId, 'canmodify' => is_capable($can_administrate, $operator) ? "1" : ""); +$errors = array(); + +$op = operator_by_id($opId); + +if( !$op ) { + $errors[] = getlocal("no_such_operator"); + +} else if( isset($_POST['op']) ) { + + if(!is_capable($can_administrate, $operator)) { + $errors[] = getlocal('page_agent.cannot_modify'); + } + + $new_permissions = isset($op['iperm']) ? $op['iperm'] : 0; + + foreach($permission_ids as $perm => $id) { + if( verifyparam("permissions$id","/^on$/", "") == "on") { + $new_permissions |= (1 << $perm); + } else { + $new_permissions &= ~ (1 << $perm); + } + } + + if(count($errors) == 0) { + update_operator_permissions($op['operatorid'],$new_permissions); + + if ($opId && $_SESSION[$mysqlprefix . 'operator'] && $operator['operatorid'] == $opId) { + $_SESSION[$mysqlprefix . 'operator']['iperm'] = $new_permissions; + } + header("Location: $webimroot/operator/permissions.php?op=$opId&stored"); + exit; + } + +} + +$page['permissionsList'] = get_permission_list(); +$page['formpermissions'] = array(""); +$page['currentop'] = $op ? topage(get_operator_name($op))." (".$op['vclogin'].")" : "-not found-"; + +if($op) { + foreach($permission_ids as $perm => $id) { + if(is_capable($perm,$op)) { + $page['formpermissions'][] = $id; + } + } +} + +$page['stored'] = isset($_GET['stored']); +prepare_menu($operator); +setup_operator_settings_tabs($opId,3); +start_html_output(); +require('../view/permissions.php'); +?>