From 7cc810c68346673d425130a2c03a9f3cb319c639 Mon Sep 17 00:00:00 2001 From: novagen Date: Fri, 29 Oct 2010 11:44:17 +0200 Subject: [PATCH] Fixed a problem with multiple installations on the same domain. When a user logged in on one chat, they also got logged in to all the other chats. --- src/messenger/webim/libs/operator.php | 767 ++++++++++--------- src/messenger/webim/operator/avatar.php | 208 ++--- src/messenger/webim/operator/permissions.php | 182 ++--- 3 files changed, 579 insertions(+), 578 deletions(-) mode change 100644 => 100755 src/messenger/webim/libs/operator.php mode change 100644 => 100755 src/messenger/webim/operator/avatar.php mode change 100644 => 100755 src/messenger/webim/operator/permissions.php diff --git a/src/messenger/webim/libs/operator.php b/src/messenger/webim/libs/operator.php old mode 100644 new mode 100755 index 54954476..6831c5db --- a/src/messenger/webim/libs/operator.php +++ b/src/messenger/webim/libs/operator.php @@ -1,383 +1,384 @@ - "admin", - $can_takeover => "takeover", - $can_viewthreads => "viewthreads", - $can_modifyprofile => "modifyprofile" -); - -function operator_by_login($login) { - global $mysqlprefix; - $link = connect(); - $operator = select_one_row( - "select * from " . $mysqlprefix . "chatoperator where vclogin = '".mysql_real_escape_string($login)."'", $link ); - mysql_close($link); - return $operator; -} - -function operator_by_email($mail) { - global $mysqlprefix; - $link = connect(); - $operator = select_one_row( - "select * from " . $mysqlprefix . "chatoperator where vcemail = '".mysql_real_escape_string($mail)."'", $link ); - mysql_close($link); - return $operator; -} - -function operator_by_id_($id,$link) { - global $mysqlprefix; - return select_one_row( - "select * from " .$mysqlprefix . "chatoperator where operatorid = $id", $link ); -} - -function operator_by_id($id) { - $link = connect(); - $operator = operator_by_id_($id,$link); - mysql_close($link); - return $operator; -} - -function operator_get_all() { - global $mysqlprefix; - $link = connect(); - - $query = "select operatorid, vclogin, vclocalename, vccommonname, istatus, (unix_timestamp(CURRENT_TIMESTAMP)-unix_timestamp(dtmlastvisited)) as time ". - "from " . $mysqlprefix . "chatoperator order by vclogin"; - $operators = select_multi_assoc($query, $link); - mysql_close($link); - return $operators; -} - -function operator_is_online($operator) { - global $settings; - return $operator['time'] < $settings['online_timeout']; -} - -function operator_is_available($operator) { - global $settings; - return $operator['istatus'] == 0 && $operator['time'] < $settings['online_timeout'] ? "1" : ""; -} - -function operator_is_away($operator) { - global $settings; - return $operator['istatus'] != 0 && $operator['time'] < $settings['online_timeout'] ? "1" : ""; -} - -function update_operator($operatorid,$login,$email,$jabber,$password,$localename,$commonname,$notify) { - global $mysqlprefix; - $link = connect(); - $query = sprintf( - "update " . $mysqlprefix . "chatoperator set vclogin = '%s',%s vclocalename = '%s', vccommonname = '%s'". - ", vcemail = '%s', vcjabbername= '%s', inotify = %s". - " where operatorid = %s", - mysql_real_escape_string($login), - ($password ? " vcpassword='".md5($password)."'," : ""), - mysql_real_escape_string($localename), - mysql_real_escape_string($commonname), - mysql_real_escape_string($email), - mysql_real_escape_string($jabber), - $notify, - $operatorid ); - - perform_query($query,$link); - mysql_close($link); -} - -function update_operator_avatar($operatorid,$avatar) { - global $mysqlprefix; - $link = connect(); - $query = sprintf( - "update " . $mysqlprefix . "chatoperator set vcavatar = '%s' where operatorid = %s", - mysql_real_escape_string($avatar), $operatorid ); - - perform_query($query,$link); - mysql_close($link); -} - -function create_operator_($login,$email,$jabber,$password,$localename,$commonname,$notify,$link) { - global $mysqlprefix; - $query = sprintf( - "insert into " . $mysqlprefix . "chatoperator (vclogin,vcpassword,vclocalename,vccommonname,vcavatar,vcemail,vcjabbername,inotify) values ('%s','%s','%s','%s','%s','%s','%s',%s)", - mysql_real_escape_string($login), - md5($password), - mysql_real_escape_string($localename), - mysql_real_escape_string($commonname), - '' /* no avatar */, - mysql_real_escape_string($email), - mysql_real_escape_string($jabber), - $notify); - - perform_query($query,$link); - $id = mysql_insert_id($link); - - return select_one_row("select * from " . $mysqlprefix . "chatoperator where operatorid = $id", $link ); -} - -function create_operator($login,$email,$jabber,$password,$localename,$commonname,$notify) { - $link = connect(); - $newop = create_operator_($login,$email,$jabber,$password,$localename,$commonname,$notify,$link); - mysql_close($link); - return $newop; -} - -function notify_operator_alive($operatorid, $istatus) { - global $mysqlprefix; - $link = connect(); - perform_query("update " . $mysqlprefix . "chatoperator set istatus = $istatus, dtmlastvisited = CURRENT_TIMESTAMP where operatorid = $operatorid",$link); - mysql_close($link); -} - -function has_online_operators($groupid="") { - global $settings, $mysqlprefix; - loadsettings(); - $link = connect(); - $query = "select count(*) as total, min(unix_timestamp(CURRENT_TIMESTAMP)-unix_timestamp(dtmlastvisited)) as time from " . $mysqlprefix . "chatoperator"; - if($groupid) { - $query .= ", " . $mysqlprefix . "chatgroupoperator where groupid = $groupid and " . $mysqlprefix . "chatoperator.operatorid = " . - $mysqlprefix . "chatgroupoperator.operatorid and istatus = 0"; - } else { - $query .= " where istatus = 0"; - } - $row = select_one_row($query,$link); - mysql_close($link); - return $row['time'] < $settings['online_timeout'] && $row['total'] > 0; -} - -function is_operator_online($operatorid, $link) { - global $settings, $mysqlprefix; - loadsettings_($link); - $query = "select count(*) as total, min(unix_timestamp(CURRENT_TIMESTAMP)-unix_timestamp(dtmlastvisited)) as time ". - "from " . $mysqlprefix . "chatoperator where operatorid = $operatorid"; - $row = select_one_row($query,$link); - return $row['time'] < $settings['online_timeout'] && $row['total'] == 1; -} - -function get_operator_name($operator) { - global $home_locale, $current_locale; - if( $home_locale == $current_locale ) - return $operator['vclocalename']; - else - return $operator['vccommonname']; -} - -function append_query($link,$pv) { - $infix = '?'; - if( strstr($link,$infix) !== FALSE ) - $infix = '&'; - return "$link$infix$pv"; -} - -function check_login($redirect=true) { - global $webimroot; - if( !isset( $_SESSION['operator'] ) ) { - if( isset($_COOKIE['webim_lite']) ) { - list($login,$pwd) = preg_split("/,/", $_COOKIE['webim_lite'], 2); - $op = operator_by_login($login); - if( $op && isset($pwd) && isset($op['vcpassword']) && md5($op['vcpassword']) == $pwd ) { - $_SESSION['operator'] = $op; - return $op; - } - } - $requested = $_SERVER['PHP_SELF']; - if($_SERVER['REQUEST_METHOD'] == 'GET' && $_SERVER['QUERY_STRING']) { - $requested .= "?".$_SERVER['QUERY_STRING']; - } - if($redirect) { - $_SESSION['backpath'] = $requested; - header("Location: $webimroot/operator/login.php"); - exit; - } else { - return null; - } - } - return $_SESSION['operator']; -} - -function get_logged_in() { - return isset( $_SESSION['operator'] ) ? $_SESSION['operator'] : FALSE; -} - -function login_operator($operator,$remember) { - global $webimroot; - $_SESSION['operator'] = $operator; - if( $remember ) { - $value = $operator['vclogin'].",".md5($operator['vcpassword']); - setcookie('webim_lite', $value, time()+60*60*24*1000, "$webimroot/"); - - } else if( isset($_COOKIE['webim_lite']) ) { - setcookie('webim_lite', '', time() - 3600, "$webimroot/"); - } -} - -function logout_operator() { - global $webimroot; - unset($_SESSION['operator']); - unset($_SESSION['backpath']); - if( isset($_COOKIE['webim_lite']) ) { - setcookie('webim_lite', '', time() - 3600, "$webimroot/"); - } -} - -function setup_redirect_links($threadid,$token) { - global $page, $webimroot, $settings, $mysqlprefix; - loadsettings(); - $link = connect(); - - $operatorscount = db_rows_count($mysqlprefix . "chatoperator", array(), "", $link); - - $groupscount = 0; - if($settings['enablegroups'] == "1") { - $groups = array(); - foreach(get_groups($link, true) as $group) { - if($group['inumofagents'] == 0) { - continue; - } - $groups[] = $group; - } - $groupscount = count($groups); - } - - prepare_pagination(max($operatorscount,$groupscount),8); - $p = $page['pagination']; - $limit = $p['limit']; - - $operators = select_multi_assoc(db_build_select( - "operatorid, vclogin, vclocalename, vccommonname, istatus, (unix_timestamp(CURRENT_TIMESTAMP)-unix_timestamp(dtmlastvisited)) as time", - $mysqlprefix . "chatoperator", array(), "order by vclogin $limit"), $link); - - $groups = array_slice($groups, $p['start'], $p['end']-$p['start']); - - mysql_close($link); - - $agent_list = ""; - $params = array('thread' => $threadid, 'token' => $token); - foreach($operators as $agent) { - $params['nextAgent'] = $agent['operatorid']; - $status = $agent['time'] < $settings['online_timeout'] - ? ($agent['istatus'] == 0 - ? getlocal("char.redirect.operator.online_suff") - : getlocal("char.redirect.operator.away_suff") - ) - : ""; - $agent_list .= "
  • ". - topage(get_operator_name($agent)). - " $status
    • "; - } - $page['redirectToAgent'] = $agent_list; - - $group_list = ""; - if($settings['enablegroups'] == "1") { - $params = array('thread' => $threadid, 'token' => $token); - foreach($groups as $group) { - $params['nextGroup'] = $group['groupid']; - $status = $group['ilastseen'] !== NULL && $group['ilastseen'] < $settings['online_timeout'] - ? getlocal("char.redirect.operator.online_suff") - : ($group['ilastseenaway'] !== NULL && $group['ilastseenaway'] < $settings['online_timeout'] - ? getlocal("char.redirect.operator.away_suff") - : ""); - $group_list .= "
  • ". - topage(get_group_name($group)). - " $status
    • "; - } - } - $page['redirectToGroup'] = $group_list; -} - -$permission_list = array(); - -function get_permission_list() { - global $permission_list, $permission_ids; - if(count($permission_list) == 0) { - foreach($permission_ids as $permid) { - $permission_list[] = array( - 'id' => $permid, - 'descr' => getlocal("permission.$permid") - ); - } - } - return $permission_list; -} - -function is_capable($perm,$operator) { - $permissions = $operator && isset($operator['iperm']) ? $operator['iperm'] : 0; - return $perm >= 0 && $perm < 32 && ($permissions & (1 << $perm)) != 0; -} - -function prepare_menu($operator,$hasright=true) { - global $page, $settings, $can_administrate; - $page['operator'] = topage(get_operator_name($operator)); - if($hasright) { - loadsettings(); - $page['showban'] = $settings['enableban'] == "1"; - $page['showgroups'] = $settings['enablegroups'] == "1"; - $page['showstat'] = $settings['enablestatistics'] == "1"; - $page['showadmin'] = is_capable($can_administrate, $operator); - $page['currentopid'] = $operator['operatorid']; - } -} - -function get_all_groups($link) { - global $mysqlprefix; - $query = "select " . $mysqlprefix . "chatgroup.groupid as groupid, vclocalname, vclocaldescription from " . $mysqlprefix . "chatgroup order by vclocalname"; - return select_multi_assoc($query, $link); -} - -function get_groups($link,$checkaway) { - global $mysqlprefix; - $query = "select " . $mysqlprefix . "chatgroup.groupid as groupid, vclocalname, vclocaldescription". - ", (SELECT count(*) from " . $mysqlprefix . "chatgroupoperator where " . $mysqlprefix . "chatgroup.groupid = " . - $mysqlprefix . "chatgroupoperator.groupid) as inumofagents". - ", (SELECT min(unix_timestamp(CURRENT_TIMESTAMP)-unix_timestamp(dtmlastvisited)) as time ". - "from " . $mysqlprefix . "chatgroupoperator, " . $mysqlprefix . "chatoperator where istatus = 0 and " . - $mysqlprefix . "chatgroup.groupid = " . $mysqlprefix . "chatgroupoperator.groupid ". - "and " . $mysqlprefix . "chatgroupoperator.operatorid = " . $mysqlprefix . "chatoperator.operatorid) as ilastseen". - ($checkaway - ? ", (SELECT min(unix_timestamp(CURRENT_TIMESTAMP)-unix_timestamp(dtmlastvisited)) as time ". - "from " . $mysqlprefix . "chatgroupoperator, " . $mysqlprefix . "chatoperator where istatus <> 0 and " . - $mysqlprefix . "chatgroup.groupid = " . $mysqlprefix . "chatgroupoperator.groupid ". - "and " . $mysqlprefix . "chatgroupoperator.operatorid = " . $mysqlprefix . "chatoperator.operatorid) as ilastseenaway" - : "" - ). - " from " . $mysqlprefix . "chatgroup order by vclocalname"; - return select_multi_assoc($query, $link); -} - -function get_operator_groupids($operatorid) { - global $mysqlprefix; - $link = connect(); - $query = "select groupid from " . $mysqlprefix . "chatgroupoperator where operatorid = $operatorid"; - $result = select_multi_assoc($query, $link); - mysql_close($link); - return $result; -} - -?> + "admin", + $can_takeover => "takeover", + $can_viewthreads => "viewthreads", + $can_modifyprofile => "modifyprofile" +); + +function operator_by_login($login) { + global $mysqlprefix; + $link = connect(); + $operator = select_one_row( + "select * from " . $mysqlprefix . "chatoperator where vclogin = '".mysql_real_escape_string($login)."'", $link ); + mysql_close($link); + return $operator; +} + +function operator_by_email($mail) { + global $mysqlprefix; + $link = connect(); + $operator = select_one_row( + "select * from " . $mysqlprefix . "chatoperator where vcemail = '".mysql_real_escape_string($mail)."'", $link ); + mysql_close($link); + return $operator; +} + +function operator_by_id_($id,$link) { + global $mysqlprefix; + return select_one_row( + "select * from " .$mysqlprefix . "chatoperator where operatorid = $id", $link ); +} + +function operator_by_id($id) { + $link = connect(); + $operator = operator_by_id_($id,$link); + mysql_close($link); + return $operator; +} + +function operator_get_all() { + global $mysqlprefix; + $link = connect(); + + $query = "select operatorid, vclogin, vclocalename, vccommonname, istatus, (unix_timestamp(CURRENT_TIMESTAMP)-unix_timestamp(dtmlastvisited)) as time ". + "from " . $mysqlprefix . "chatoperator order by vclogin"; + $operators = select_multi_assoc($query, $link); + mysql_close($link); + return $operators; +} + +function operator_is_online($operator) { + global $settings; + return $operator['time'] < $settings['online_timeout']; +} + +function operator_is_available($operator) { + global $settings; + return $operator['istatus'] == 0 && $operator['time'] < $settings['online_timeout'] ? "1" : ""; +} + +function operator_is_away($operator) { + global $settings; + return $operator['istatus'] != 0 && $operator['time'] < $settings['online_timeout'] ? "1" : ""; +} + +function update_operator($operatorid,$login,$email,$jabber,$password,$localename,$commonname,$notify) { + global $mysqlprefix; + $link = connect(); + $query = sprintf( + "update " . $mysqlprefix . "chatoperator set vclogin = '%s',%s vclocalename = '%s', vccommonname = '%s'". + ", vcemail = '%s', vcjabbername= '%s', inotify = %s". + " where operatorid = %s", + mysql_real_escape_string($login), + ($password ? " vcpassword='".md5($password)."'," : ""), + mysql_real_escape_string($localename), + mysql_real_escape_string($commonname), + mysql_real_escape_string($email), + mysql_real_escape_string($jabber), + $notify, + $operatorid ); + + perform_query($query,$link); + mysql_close($link); +} + +function update_operator_avatar($operatorid,$avatar) { + global $mysqlprefix; + $link = connect(); + $query = sprintf( + "update " . $mysqlprefix . "chatoperator set vcavatar = '%s' where operatorid = %s", + mysql_real_escape_string($avatar), $operatorid ); + + perform_query($query,$link); + mysql_close($link); +} + +function create_operator_($login,$email,$jabber,$password,$localename,$commonname,$notify,$link) { + global $mysqlprefix; + $query = sprintf( + "insert into " . $mysqlprefix . "chatoperator (vclogin,vcpassword,vclocalename,vccommonname,vcavatar,vcemail,vcjabbername,inotify) values ('%s','%s','%s','%s','%s','%s','%s',%s)", + mysql_real_escape_string($login), + md5($password), + mysql_real_escape_string($localename), + mysql_real_escape_string($commonname), + '' /* no avatar */, + mysql_real_escape_string($email), + mysql_real_escape_string($jabber), + $notify); + + perform_query($query,$link); + $id = mysql_insert_id($link); + + return select_one_row("select * from " . $mysqlprefix . "chatoperator where operatorid = $id", $link ); +} + +function create_operator($login,$email,$jabber,$password,$localename,$commonname,$notify) { + $link = connect(); + $newop = create_operator_($login,$email,$jabber,$password,$localename,$commonname,$notify,$link); + mysql_close($link); + return $newop; +} + +function notify_operator_alive($operatorid, $istatus) { + global $mysqlprefix; + $link = connect(); + perform_query("update " . $mysqlprefix . "chatoperator set istatus = $istatus, dtmlastvisited = CURRENT_TIMESTAMP where operatorid = $operatorid",$link); + mysql_close($link); +} + +function has_online_operators($groupid="") { + global $settings, $mysqlprefix; + loadsettings(); + $link = connect(); + $query = "select count(*) as total, min(unix_timestamp(CURRENT_TIMESTAMP)-unix_timestamp(dtmlastvisited)) as time from " . $mysqlprefix . "chatoperator"; + if($groupid) { + $query .= ", " . $mysqlprefix . "chatgroupoperator where groupid = $groupid and " . $mysqlprefix . "chatoperator.operatorid = " . + $mysqlprefix . "chatgroupoperator.operatorid and istatus = 0"; + } else { + $query .= " where istatus = 0"; + } + $row = select_one_row($query,$link); + mysql_close($link); + return $row['time'] < $settings['online_timeout'] && $row['total'] > 0; +} + +function is_operator_online($operatorid, $link) { + global $settings, $mysqlprefix; + loadsettings_($link); + $query = "select count(*) as total, min(unix_timestamp(CURRENT_TIMESTAMP)-unix_timestamp(dtmlastvisited)) as time ". + "from " . $mysqlprefix . "chatoperator where operatorid = $operatorid"; + $row = select_one_row($query,$link); + return $row['time'] < $settings['online_timeout'] && $row['total'] == 1; +} + +function get_operator_name($operator) { + global $home_locale, $current_locale; + if( $home_locale == $current_locale ) + return $operator['vclocalename']; + else + return $operator['vccommonname']; +} + +function append_query($link,$pv) { + $infix = '?'; + if( strstr($link,$infix) !== FALSE ) + $infix = '&'; + return "$link$infix$pv"; +} + +function check_login($redirect=true) { + global $webimroot, $mysqlprefix; + if( !isset( $_SESSION[$mysqlprefix . 'operator'] ) ) { + if( isset($_COOKIE['webim_lite']) ) { + list($login,$pwd) = preg_split("/,/", $_COOKIE['webim_lite'], 2); + $op = operator_by_login($login); + if( $op && isset($pwd) && isset($op['vcpassword']) && md5($op['vcpassword']) == $pwd ) { + $_SESSION[$mysqlprefix . 'operator'] = $op; + return $op; + } + } + $requested = $_SERVER['PHP_SELF']; + if($_SERVER['REQUEST_METHOD'] == 'GET' && $_SERVER['QUERY_STRING']) { + $requested .= "?".$_SERVER['QUERY_STRING']; + } + if($redirect) { + $_SESSION['backpath'] = $requested; + header("Location: $webimroot/operator/login.php"); + exit; + } else { + return null; + } + } + return $_SESSION[$mysqlprefix . 'operator']; +} + +function get_logged_in() { + global $mysqlprefix; + return isset( $_SESSION[$mysqlprefix . 'operator'] ) ? $_SESSION[$mysqlprefix . 'operator'] : FALSE; +} + +function login_operator($operator,$remember) { + global $webimroot, $mysqlprefix; + $_SESSION[$mysqlprefix . 'operator'] = $operator; + if( $remember ) { + $value = $operator['vclogin'].",".md5($operator['vcpassword']); + setcookie('webim_lite', $value, time()+60*60*24*1000, "$webimroot/"); + + } else if( isset($_COOKIE['webim_lite']) ) { + setcookie('webim_lite', '', time() - 3600, "$webimroot/"); + } +} + +function logout_operator() { + global $webimroot, $mysqlprefix; + unset($_SESSION[$mysqlprefix . 'operator']); + unset($_SESSION['backpath']); + if( isset($_COOKIE['webim_lite']) ) { + setcookie('webim_lite', '', time() - 3600, "$webimroot/"); + } +} + +function setup_redirect_links($threadid,$token) { + global $page, $webimroot, $settings, $mysqlprefix; + loadsettings(); + $link = connect(); + + $operatorscount = db_rows_count($mysqlprefix . "chatoperator", array(), "", $link); + + $groupscount = 0; + if($settings['enablegroups'] == "1") { + $groups = array(); + foreach(get_groups($link, true) as $group) { + if($group['inumofagents'] == 0) { + continue; + } + $groups[] = $group; + } + $groupscount = count($groups); + } + + prepare_pagination(max($operatorscount,$groupscount),8); + $p = $page['pagination']; + $limit = $p['limit']; + + $operators = select_multi_assoc(db_build_select( + "operatorid, vclogin, vclocalename, vccommonname, istatus, (unix_timestamp(CURRENT_TIMESTAMP)-unix_timestamp(dtmlastvisited)) as time", + $mysqlprefix . "chatoperator", array(), "order by vclogin $limit"), $link); + + $groups = array_slice($groups, $p['start'], $p['end']-$p['start']); + + mysql_close($link); + + $agent_list = ""; + $params = array('thread' => $threadid, 'token' => $token); + foreach($operators as $agent) { + $params['nextAgent'] = $agent['operatorid']; + $status = $agent['time'] < $settings['online_timeout'] + ? ($agent['istatus'] == 0 + ? getlocal("char.redirect.operator.online_suff") + : getlocal("char.redirect.operator.away_suff") + ) + : ""; + $agent_list .= "
  • ". + topage(get_operator_name($agent)). + " $status
    • "; + } + $page['redirectToAgent'] = $agent_list; + + $group_list = ""; + if($settings['enablegroups'] == "1") { + $params = array('thread' => $threadid, 'token' => $token); + foreach($groups as $group) { + $params['nextGroup'] = $group['groupid']; + $status = $group['ilastseen'] !== NULL && $group['ilastseen'] < $settings['online_timeout'] + ? getlocal("char.redirect.operator.online_suff") + : ($group['ilastseenaway'] !== NULL && $group['ilastseenaway'] < $settings['online_timeout'] + ? getlocal("char.redirect.operator.away_suff") + : ""); + $group_list .= "
  • ". + topage(get_group_name($group)). + " $status
    • "; + } + } + $page['redirectToGroup'] = $group_list; +} + +$permission_list = array(); + +function get_permission_list() { + global $permission_list, $permission_ids; + if(count($permission_list) == 0) { + foreach($permission_ids as $permid) { + $permission_list[] = array( + 'id' => $permid, + 'descr' => getlocal("permission.$permid") + ); + } + } + return $permission_list; +} + +function is_capable($perm,$operator) { + $permissions = $operator && isset($operator['iperm']) ? $operator['iperm'] : 0; + return $perm >= 0 && $perm < 32 && ($permissions & (1 << $perm)) != 0; +} + +function prepare_menu($operator,$hasright=true) { + global $page, $settings, $can_administrate; + $page['operator'] = topage(get_operator_name($operator)); + if($hasright) { + loadsettings(); + $page['showban'] = $settings['enableban'] == "1"; + $page['showgroups'] = $settings['enablegroups'] == "1"; + $page['showstat'] = $settings['enablestatistics'] == "1"; + $page['showadmin'] = is_capable($can_administrate, $operator); + $page['currentopid'] = $operator['operatorid']; + } +} + +function get_all_groups($link) { + global $mysqlprefix; + $query = "select " . $mysqlprefix . "chatgroup.groupid as groupid, vclocalname, vclocaldescription from " . $mysqlprefix . "chatgroup order by vclocalname"; + return select_multi_assoc($query, $link); +} + +function get_groups($link,$checkaway) { + global $mysqlprefix; + $query = "select " . $mysqlprefix . "chatgroup.groupid as groupid, vclocalname, vclocaldescription". + ", (SELECT count(*) from " . $mysqlprefix . "chatgroupoperator where " . $mysqlprefix . "chatgroup.groupid = " . + $mysqlprefix . "chatgroupoperator.groupid) as inumofagents". + ", (SELECT min(unix_timestamp(CURRENT_TIMESTAMP)-unix_timestamp(dtmlastvisited)) as time ". + "from " . $mysqlprefix . "chatgroupoperator, " . $mysqlprefix . "chatoperator where istatus = 0 and " . + $mysqlprefix . "chatgroup.groupid = " . $mysqlprefix . "chatgroupoperator.groupid ". + "and " . $mysqlprefix . "chatgroupoperator.operatorid = " . $mysqlprefix . "chatoperator.operatorid) as ilastseen". + ($checkaway + ? ", (SELECT min(unix_timestamp(CURRENT_TIMESTAMP)-unix_timestamp(dtmlastvisited)) as time ". + "from " . $mysqlprefix . "chatgroupoperator, " . $mysqlprefix . "chatoperator where istatus <> 0 and " . + $mysqlprefix . "chatgroup.groupid = " . $mysqlprefix . "chatgroupoperator.groupid ". + "and " . $mysqlprefix . "chatgroupoperator.operatorid = " . $mysqlprefix . "chatoperator.operatorid) as ilastseenaway" + : "" + ). + " from " . $mysqlprefix . "chatgroup order by vclocalname"; + return select_multi_assoc($query, $link); +} + +function get_operator_groupids($operatorid) { + global $mysqlprefix; + $link = connect(); + $query = "select groupid from " . $mysqlprefix . "chatgroupoperator where operatorid = $operatorid"; + $result = select_multi_assoc($query, $link); + mysql_close($link); + return $result; +} + +?> diff --git a/src/messenger/webim/operator/avatar.php b/src/messenger/webim/operator/avatar.php old mode 100644 new mode 100755 index ac4fa6e5..9e4dada5 --- a/src/messenger/webim/operator/avatar.php +++ b/src/messenger/webim/operator/avatar.php @@ -1,105 +1,105 @@ - $opId, 'avatar' => ''); -$errors = array(); - -$canmodify = ($opId == $operator['operatorid'] && is_capable($can_modifyprofile, $operator)) - || is_capable($can_administrate, $operator); - -$op = operator_by_id($opId); - -if( !$op ) { - $errors[] = getlocal("no_such_operator"); - -} else if( isset($_POST['op']) ) { - $avatar = $op['vcavatar']; - - if(!$canmodify) { - $errors[] = getlocal('page_agent.cannot_modify'); - - } else if( isset($_FILES['avatarFile']) && $_FILES['avatarFile']['name']) { - $valid_types = array("gif","jpg", "png", "tif"); - - $orig_filename = $_FILES['avatarFile']['name']; - $tmp_file_name = $_FILES['avatarFile']['tmp_name']; - - $ext = strtolower(substr($orig_filename, 1 + strrpos($orig_filename, "."))); - $new_file_name = "$opId.$ext"; - loadsettings(); - - $file_size = $_FILES['avatarFile']['size']; - if ($file_size == 0 || $file_size > $settings['max_uploaded_file_size']) { - $errors[] = failed_uploading_file($orig_filename, "errors.file.size.exceeded"); - } elseif(!in_array($ext, $valid_types)) { - $errors[] = failed_uploading_file($orig_filename, "errors.invalid.file.type"); - } else { - $avatar_local_dir = "../images/avatar/"; - $full_file_path = $avatar_local_dir.$new_file_name; - if (file_exists($full_file_path)) { - unlink($full_file_path); - } - if (!move_uploaded_file($_FILES['avatarFile']['tmp_name'], $full_file_path)) { - $errors[] = failed_uploading_file($orig_filename, "errors.file.move.error"); - } else { - $avatar = "$webimroot/images/avatar/$new_file_name"; - } - } - } else { - $errors[] = "No file selected"; - } - - if(count($errors) == 0) { - update_operator_avatar($op['operatorid'],$avatar); - - if ($opId && $avatar && $_SESSION['operator'] && $operator['operatorid'] == $opId) { - $_SESSION['operator']['vcavatar'] = $avatar; - } - header("Location: $webimroot/operator/avatar.php?op=$opId"); - exit; - } else { - $page['avatar'] = topage($op['vcavatar']); - } - -} else { - if (isset($_GET['delete']) && $_GET['delete'] == "true" && $canmodify) { - update_operator_avatar($op['operatorid'],''); - header("Location: $webimroot/operator/avatar.php?op=$opId"); - exit; - } - $page['avatar'] = topage($op['vcavatar']); -} - -$page['currentop'] = $op ? topage(get_operator_name($op))." (".$op['vclogin'].")" : "-not found-"; -$page['canmodify'] = $canmodify ? "1" : ""; - -prepare_menu($operator); -setup_operator_settings_tabs($opId,1); -start_html_output(); -require('../view/avatar.php'); + $opId, 'avatar' => ''); +$errors = array(); + +$canmodify = ($opId == $operator['operatorid'] && is_capable($can_modifyprofile, $operator)) + || is_capable($can_administrate, $operator); + +$op = operator_by_id($opId); + +if( !$op ) { + $errors[] = getlocal("no_such_operator"); + +} else if( isset($_POST['op']) ) { + $avatar = $op['vcavatar']; + + if(!$canmodify) { + $errors[] = getlocal('page_agent.cannot_modify'); + + } else if( isset($_FILES['avatarFile']) && $_FILES['avatarFile']['name']) { + $valid_types = array("gif","jpg", "png", "tif"); + + $orig_filename = $_FILES['avatarFile']['name']; + $tmp_file_name = $_FILES['avatarFile']['tmp_name']; + + $ext = strtolower(substr($orig_filename, 1 + strrpos($orig_filename, "."))); + $new_file_name = "$opId.$ext"; + loadsettings(); + + $file_size = $_FILES['avatarFile']['size']; + if ($file_size == 0 || $file_size > $settings['max_uploaded_file_size']) { + $errors[] = failed_uploading_file($orig_filename, "errors.file.size.exceeded"); + } elseif(!in_array($ext, $valid_types)) { + $errors[] = failed_uploading_file($orig_filename, "errors.invalid.file.type"); + } else { + $avatar_local_dir = "../images/avatar/"; + $full_file_path = $avatar_local_dir.$new_file_name; + if (file_exists($full_file_path)) { + unlink($full_file_path); + } + if (!move_uploaded_file($_FILES['avatarFile']['tmp_name'], $full_file_path)) { + $errors[] = failed_uploading_file($orig_filename, "errors.file.move.error"); + } else { + $avatar = "$webimroot/images/avatar/$new_file_name"; + } + } + } else { + $errors[] = "No file selected"; + } + + if(count($errors) == 0) { + update_operator_avatar($op['operatorid'],$avatar); + + if ($opId && $avatar && $_SESSION[$mysqlprefix . 'operator'] && $operator['operatorid'] == $opId) { + $_SESSION[$mysqlprefix . 'operator']['vcavatar'] = $avatar; + } + header("Location: $webimroot/operator/avatar.php?op=$opId"); + exit; + } else { + $page['avatar'] = topage($op['vcavatar']); + } + +} else { + if (isset($_GET['delete']) && $_GET['delete'] == "true" && $canmodify) { + update_operator_avatar($op['operatorid'],''); + header("Location: $webimroot/operator/avatar.php?op=$opId"); + exit; + } + $page['avatar'] = topage($op['vcavatar']); +} + +$page['currentop'] = $op ? topage(get_operator_name($op))." (".$op['vclogin'].")" : "-not found-"; +$page['canmodify'] = $canmodify ? "1" : ""; + +prepare_menu($operator); +setup_operator_settings_tabs($opId,1); +start_html_output(); +require('../view/avatar.php'); ?> \ No newline at end of file diff --git a/src/messenger/webim/operator/permissions.php b/src/messenger/webim/operator/permissions.php old mode 100644 new mode 100755 index 16f2394a..c007c72c --- a/src/messenger/webim/operator/permissions.php +++ b/src/messenger/webim/operator/permissions.php @@ -1,91 +1,91 @@ - $opId, 'canmodify' => is_capable($can_administrate, $operator) ? "1" : ""); -$errors = array(); - -$op = operator_by_id($opId); - -if( !$op ) { - $errors[] = getlocal("no_such_operator"); - -} else if( isset($_POST['op']) ) { - - if(!is_capable($can_administrate, $operator)) { - $errors[] = getlocal('page_agent.cannot_modify'); - } - - $new_permissions = isset($op['iperm']) ? $op['iperm'] : 0; - - foreach($permission_ids as $perm => $id) { - if( verifyparam("permissions$id","/^on$/", "") == "on") { - $new_permissions |= (1 << $perm); - } else { - $new_permissions &= ~ (1 << $perm); - } - } - - if(count($errors) == 0) { - update_operator_permissions($op['operatorid'],$new_permissions); - - if ($opId && $_SESSION['operator'] && $operator['operatorid'] == $opId) { - $_SESSION['operator']['iperm'] = $new_permissions; - } - header("Location: $webimroot/operator/permissions.php?op=$opId&stored"); - exit; - } - -} - -$page['permissionsList'] = get_permission_list(); -$page['formpermissions'] = array(""); -$page['currentop'] = $op ? topage(get_operator_name($op))." (".$op['vclogin'].")" : "-not found-"; - -if($op) { - foreach($permission_ids as $perm => $id) { - if(is_capable($perm,$op)) { - $page['formpermissions'][] = $id; - } - } -} - -$page['stored'] = isset($_GET['stored']); -prepare_menu($operator); -setup_operator_settings_tabs($opId,3); -start_html_output(); -require('../view/permissions.php'); -?> + $opId, 'canmodify' => is_capable($can_administrate, $operator) ? "1" : ""); +$errors = array(); + +$op = operator_by_id($opId); + +if( !$op ) { + $errors[] = getlocal("no_such_operator"); + +} else if( isset($_POST['op']) ) { + + if(!is_capable($can_administrate, $operator)) { + $errors[] = getlocal('page_agent.cannot_modify'); + } + + $new_permissions = isset($op['iperm']) ? $op['iperm'] : 0; + + foreach($permission_ids as $perm => $id) { + if( verifyparam("permissions$id","/^on$/", "") == "on") { + $new_permissions |= (1 << $perm); + } else { + $new_permissions &= ~ (1 << $perm); + } + } + + if(count($errors) == 0) { + update_operator_permissions($op['operatorid'],$new_permissions); + + if ($opId && $_SESSION[$mysqlprefix . 'operator'] && $operator['operatorid'] == $opId) { + $_SESSION[$mysqlprefix . $mysqlprefix . 'operator']['iperm'] = $new_permissions; + } + header("Location: $webimroot/operator/permissions.php?op=$opId&stored"); + exit; + } + +} + +$page['permissionsList'] = get_permission_list(); +$page['formpermissions'] = array(""); +$page['currentop'] = $op ? topage(get_operator_name($op))." (".$op['vclogin'].")" : "-not found-"; + +if($op) { + foreach($permission_ids as $perm => $id) { + if(is_capable($perm,$op)) { + $page['formpermissions'][] = $id; + } + } +} + +$page['stored'] = isset($_GET['stored']); +prepare_menu($operator); +setup_operator_settings_tabs($opId,3); +start_html_output(); +require('../view/permissions.php'); +?>