diff options
Diffstat (limited to 'bin/admin.pl')
| -rw-r--r-- | bin/admin.pl | 1398 |
1 files changed, 773 insertions, 625 deletions
diff --git a/bin/admin.pl b/bin/admin.pl index 38c51c20..2754dac4 100644 --- a/bin/admin.pl +++ b/bin/admin.pl @@ -1,9 +1,9 @@ #===================================================================== -# LedgerSMB +# LedgerSMB # Small Medium Business Accounting software # http://www.ledgersmb.org/ # -# +# # Copyright (C) 2006 # This work contains copyrighted information from a number of sources all used # with permission. @@ -43,52 +43,58 @@ use LedgerSMB::Session; $form = new Form; -$locale = LedgerSMB::Locale->get_handle(${LedgerSMB::Sysconfig::language}) or - $form->error(__FILE__.':'.__LINE__.': '."Locale not loaded: $!\n"); +$locale = LedgerSMB::Locale->get_handle( ${LedgerSMB::Sysconfig::language} ) + or + $form->error( __FILE__ . ':' . __LINE__ . ': ' . "Locale not loaded: $!\n" ); $locale->encoding('UTF-8'); $form->{charset} = 'UTF-8'; eval { require DBI; }; -$form->error(__FILE__.':'.__LINE__.': '.$locale->text('DBI not installed!')) if ($@); +$form->error( + __FILE__ . ':' . __LINE__ . ': ' . $locale->text('DBI not installed!') ) + if ($@); $form->{stylesheet} = "ledgersmb.css"; -$form->{favicon} = "favicon.ico"; -$form->{timeout} = 600; +$form->{favicon} = "favicon.ico"; +$form->{timeout} = 600; require "bin/pw.pl"; # customization -if (-f "bin/custom/$form->{script}") { - eval { require "bin/custom/$form->{script}"; }; - $form->error(__FILE__.':'.__LINE__.': '.$@) if ($@); +if ( -f "bin/custom/$form->{script}" ) { + eval { require "bin/custom/$form->{script}"; }; + $form->error( __FILE__ . ':' . __LINE__ . ': ' . $@ ) if ($@); } +if ( $form->{action} ) { + &check_password unless $form->{action} eq 'logout'; + &{ $form->{action} }; -if ($form->{action}) { - &check_password unless $form->{action} eq 'logout'; - &{ $form->{action} }; - -} else { +} +else { - # if there are no drivers bail out - $form->error(__FILE__.':'.__LINE__.': '.$locale->text('No Database Drivers available!')) unless (LedgerSMB::User->dbdrivers); + # if there are no drivers bail out + $form->error( __FILE__ . ':' . __LINE__ . ': ' + . $locale->text('No Database Drivers available!') ) + unless ( LedgerSMB::User->dbdrivers ); - $root = LedgerSMB::User->new('admin'); + $root = LedgerSMB::User->new('admin'); - &adminlogin; + &adminlogin; } 1; -# end +# end sub adminlogin { - my ($errorMessage) = @_; + my ($errorMessage) = @_; - $form->{title} = qq|LedgerSMB $form->{version} |.$locale->text('Administration'); + $form->{title} = + qq|LedgerSMB $form->{version} | . $locale->text('Administration'); - $myheaderadd = qq| + $myheaderadd = qq| <script language="JavaScript" type="text/javascript"> <!-- function sf(){ @@ -97,19 +103,25 @@ sub adminlogin { // End --> </script> |; - $form->header(undef, $myheaderadd); + $form->header( undef, $myheaderadd ); - print qq| + print qq| <body class="admin" onload="sf()"> <div align="center"> <a href="http://www.ledgersmb.org/"><img src="images/ledgersmb.png" width="200" height="100" border="0" alt="LedgerSMB Logo" /></a> - <h1 class="login">|.$locale->text('Version').qq| $form->{version} <br />|.$locale->text('Administration').qq|</h1> + <h1 class="login">| + . $locale->text('Version') + . qq| $form->{version} <br />| + . $locale->text('Administration') + . qq|</h1> <form method="post" action="admin.pl" name="admin"> <table> <tr> - <th>|.$locale->text('Password').qq|</th> + <th>| . $locale->text('Password') . qq|</th> <td><input type="password" name="password" /></td> - <td><button type="submit" class="submit" name="action" value="login">|.$locale->text('Login').qq|</button></td> + <td><button type="submit" class="submit" name="action" value="login">| + . $locale->text('Login') + . qq|</button></td> </tr> </table> <input type="hidden" name="action" value="login" /> @@ -117,17 +129,19 @@ sub adminlogin { </form> |; - if($errorMessage){ - print qq|<p><span style="font-weight:bold; color:red;">$errorMessage</span></p><br />|; - } + if ($errorMessage) { + print +qq|<p><span style="font-weight:bold; color:red;">$errorMessage</span></p><br />|; + } - print qq| + print qq| <br /><br /> <p><a href="login.pl" - >|.$locale->text("Application Login").qq|</a></p> + >| . $locale->text("Application Login") . qq|</a></p> <br /><br /> - <a style="font-size: 0.8em;" href="http://www.ledgersmb.org/">|.$locale->text('LedgerSMB website').qq|</a> + <a style="font-size: 0.8em;" href="http://www.ledgersmb.org/">| + . $locale->text('LedgerSMB website') . qq|</a> </div> </body> </html> @@ -135,60 +149,68 @@ sub adminlogin { } - sub login { - &list_users; + &list_users; } - sub logout { - $form->{callback} = "admin.pl?action=adminlogin"; - Session::session_destroy($form); - $form->redirect($locale->text('You are logged out')); + $form->{callback} = "admin.pl?action=adminlogin"; + Session::session_destroy($form); + $form->redirect( $locale->text('You are logged out') ); } - sub add_user { - $form->{title} = "LedgerSMB ".$locale->text('Accounting')." ".$locale->text('Administration')." / ".$locale->text('Add User'); + $form->{title} = + "LedgerSMB " + . $locale->text('Accounting') . " " + . $locale->text('Administration') . " / " + . $locale->text('Add User'); - if (-f "css/ledgersmb.css") { - $myconfig->{stylesheet} = "ledgersmb.css"; - } + if ( -f "css/ledgersmb.css" ) { + $myconfig->{stylesheet} = "ledgersmb.css"; + } - $myconfig->{vclimit} = 1000; - $myconfig->{menuwidth} = 155; - $myconfig->{timeout} = 3600; + $myconfig->{vclimit} = 1000; + $myconfig->{menuwidth} = 155; + $myconfig->{timeout} = 3600; - &form_header; - &form_footer; + &form_header; + &form_footer; } - sub edit { - $form->{title} = "LedgerSMB ".$locale->text('Accounting')." ".$locale->text('Administration')." / ".$locale->text('Edit User'); - $form->{edit} = 1; + $form->{title} = + "LedgerSMB " + . $locale->text('Accounting') . " " + . $locale->text('Administration') . " / " + . $locale->text('Edit User'); + $form->{edit} = 1; - &form_header; - &form_footer; + &form_header; + &form_footer; } - sub form_footer { - if ($form->{edit}) { - $delete = qq|<button type="submit" class="submit" name="action" value="delete">|.$locale->text('Delete').qq|</button> + if ( $form->{edit} ) { + $delete = + qq|<button type="submit" class="submit" name="action" value="delete">| + . $locale->text('Delete') + . qq|</button> <input type="hidden" name="edit" value="1" />|; - } + } - print qq| + print qq| <input name="callback" type="hidden" value="$form->{script}?action=list_users&path=$form->{path}" /> <input type="hidden" name="path" value="$form->{path}" /> - <button type="submit" class="submit" name="action" value="save">|.$locale->text('Save').qq|</button> + <button type="submit" class="submit" name="action" value="save">| + . $locale->text('Save') + . qq|</button> $delete </form> </body> @@ -196,50 +218,58 @@ sub form_footer { |; } - sub list_users { + # use the central database handle + my $dbh = ${LedgerSMB::Sysconfig::GLOBALDBH}; - # use the central database handle - my $dbh = ${LedgerSMB::Sysconfig::GLOBALDBH}; - - my $fetchMembers = $dbh->selectall_arrayref("SELECT uc.name, uc.company, uc.templates, uc.dbuser, uc.dbdriver, uc.dbname, uc.dbhost, u.username + my $fetchMembers = $dbh->selectall_arrayref( +"SELECT uc.name, uc.company, uc.templates, uc.dbuser, uc.dbdriver, uc.dbname, uc.dbhost, u.username FROM users as u, users_conf as uc WHERE u.id = uc.id AND u.id > 1 - ORDER BY u.username;", { Slice => {} }); - - my @memberArray = (); - my @member = (); - - foreach my $memberArray ( @$fetchMembers ) { - $member{$memberArray->{username}} = $memberArray; - } - - # type=submit $locale->text('Pg Database Administration') - # type=submit $locale->text('PgPP Database Administration') - - foreach $item (LedgerSMB::User->dbdrivers) { - $dbdrivers .= qq|<button name="action" type="submit" class="submit" value="|.(lc $item).'_database_administration">'.$locale->text("$item Database Administration").qq|</button>|; - } - - - $column_header{login} = qq|<th>|.$locale->text('Login').qq|</th>|; - $column_header{name} = qq|<th>|.$locale->text('Name').qq|</th>|; - $column_header{company} = qq|<th>|.$locale->text('Company').qq|</th>|; - $column_header{dbdriver} = qq|<th>|.$locale->text('Driver').qq|</th>|; - $column_header{dbhost} = qq|<th>|.$locale->text('Host').qq|</th>|; - $column_header{dataset} = qq|<th>|.$locale->text('Dataset').qq|</th>|; - $column_header{templates} = qq|<th>|.$locale->text('Templates').qq|</th>|; - - @column_index = qw(login name company dbdriver dbhost dataset templates); - - $form->{title} = "LedgerSMB ".$locale->text('Accounting')." ".$locale->text('Administration'); - - $form->{login} = "admin"; - $form->header; - - print qq| + ORDER BY u.username;", { Slice => {} } + ); + + my @memberArray = (); + my @member = (); + + foreach my $memberArray (@$fetchMembers) { + $member{ $memberArray->{username} } = $memberArray; + } + + # type=submit $locale->text('Pg Database Administration') + # type=submit $locale->text('PgPP Database Administration') + + foreach $item ( LedgerSMB::User->dbdrivers ) { + $dbdrivers .= + qq|<button name="action" type="submit" class="submit" value="| + . ( lc $item ) + . '_database_administration">' + . $locale->text("$item Database Administration") + . qq|</button>|; + } + + $column_header{login} = qq|<th>| . $locale->text('Login') . qq|</th>|; + $column_header{name} = qq|<th>| . $locale->text('Name') . qq|</th>|; + $column_header{company} = qq|<th>| . $locale->text('Company') . qq|</th>|; + $column_header{dbdriver} = qq|<th>| . $locale->text('Driver') . qq|</th>|; + $column_header{dbhost} = qq|<th>| . $locale->text('Host') . qq|</th>|; + $column_header{dataset} = qq|<th>| . $locale->text('Dataset') . qq|</th>|; + $column_header{templates} = + qq|<th>| . $locale->text('Templates') . qq|</th>|; + + @column_index = qw(login name company dbdriver dbhost dataset templates); + + $form->{title} = + "LedgerSMB " + . $locale->text('Accounting') . " " + . $locale->text('Administration'); + + $form->{login} = "admin"; + $form->header; + + print qq| <body class="admin"> <form method="post" action="$form->{script}"> <table width="100%"> @@ -252,35 +282,35 @@ sub list_users { <table width="100%"> <tr class="listheading">|; - for (@column_index) { print "$column_header{$_}\n" } + for (@column_index) { print "$column_header{$_}\n" } - print qq| </tr>|; + print qq| </tr>|; - foreach $key (sort keys %member) { + foreach $key ( sort keys %member ) { - $href = "$script?action=edit&login=$key&path=$form->{path}"; - $href =~ s/ /%20/g; + $href = "$script?action=edit&login=$key&path=$form->{path}"; + $href =~ s/ /%20/g; - $member{$key}{templates} =~ s/^${LedgerSMB::Sysconfig::templates}\///; + $member{$key}{templates} =~ s/^${LedgerSMB::Sysconfig::templates}\///; - $column_data{login} = qq|<td><a href="$href">$key</a></td>|; - $column_data{name} = qq|<td>$member{$key}{name}</td>|; - $column_data{company} = qq|<td>$member{$key}{company}</td>|; - $column_data{dbdriver} = qq|<td>$member{$key}{dbdriver}</td>|; - $column_data{dbhost} = qq|<td>$member{$key}{dbhost}</td>|; - $column_data{dataset} = qq|<td>$member{$key}{dbname}</td>|; - $column_data{templates} = qq|<td>$member{$key}{templates}</td>|; + $column_data{login} = qq|<td><a href="$href">$key</a></td>|; + $column_data{name} = qq|<td>$member{$key}{name}</td>|; + $column_data{company} = qq|<td>$member{$key}{company}</td>|; + $column_data{dbdriver} = qq|<td>$member{$key}{dbdriver}</td>|; + $column_data{dbhost} = qq|<td>$member{$key}{dbhost}</td>|; + $column_data{dataset} = qq|<td>$member{$key}{dbname}</td>|; + $column_data{templates} = qq|<td>$member{$key}{templates}</td>|; - $i++; $i %= 2; - print qq| <tr class="listrow$i">|; + $i++; + $i %= 2; + print qq| <tr class="listrow$i">|; - for (@column_index) { print "$column_data{$_}\n"; } + for (@column_index) { print "$column_data{$_}\n"; } - print qq| </tr>|; - } + print qq| </tr>|; + } - - print qq| </table> + print qq| </table> </td> </tr> <tr> @@ -289,149 +319,183 @@ sub list_users { </table> <input type="hidden" name="path" value="$form->{path}" /> <br /> - <button type="submit" class="submit" name="action" value="add_user">|.$locale->text('Add User').qq|</button> - <button type="submit" class="submit" name="action" value="change_admin_password">|.$locale->text('Change Admin Password').qq|</button> + <button type="submit" class="submit" name="action" value="add_user">| + . $locale->text('Add User') + . qq|</button> + <button type="submit" class="submit" name="action" value="change_admin_password">| + . $locale->text('Change Admin Password') + . qq|</button> $dbdrivers $nologin - <button type="submit" class="submit" name="action" value="logout">|.$locale->text('Logout').qq|</button> + <button type="submit" class="submit" name="action" value="logout">| + . $locale->text('Logout') + . qq|</button> </form> - |.$locale->text('Click on login name to edit!').qq| + | . $locale->text('Click on login name to edit!') . qq| <br /> - |.$locale->text('To add a user to a group edit a name, change the login name and save. A new user with the same variables will then be saved under the new login name.').qq| + | + . $locale->text( +'To add a user to a group edit a name, change the login name and save. A new user with the same variables will then be saved under the new login name.' + ) + . qq| </body> </html>|; } - sub form_header { - # if there is a login, get user - if ($form->{login}) { - - # get user - %{$myconfig} = %{LedgerSMB::User->fetch_config($form->{login})}; - - for (qw(company address signature)) { $myconfig->{$_} = $form->quote($myconfig->{$_}) } - for (qw(address signature)) { $myconfig->{$_} =~ s/\\n/\n/g } - - # strip basedir from templates directory - $myconfig->{templates} =~ s/^${LedgerSMB::Sysconfig::templates}\///; - } - - foreach $item (qw(mm-dd-yy mm/dd/yy dd-mm-yy dd/mm/yy dd.mm.yy yyyy-mm-dd)) { - $dateformat .= ($item eq $myconfig->{dateformat}) ? "<option selected>$item</option>\n" : "<option>$item</option>\n"; - } - - my @formats = qw(1,000.00 1000.00 1.000,00 1000,00 1'000.00); - push @formats, '1 000.00'; - foreach $item (@formats) { - $numberformat .= ($item eq $myconfig->{numberformat}) ? "<option selected>$item</option>\n" : "<option>$item</option>\n"; - } - - - %countrycodes = LedgerSMB::User->country_codes; - $countrycodes = ""; - my $selectedcode = ($myconfig->{countrycode}) ? - $myconfig->{countrycode} : 'en'; - - foreach $key (sort { $countrycodes{$a} cmp $countrycodes{$b} } keys %countrycodes) { - $countrycodes .= ($selectedcode eq $key) ? qq|<option selected value="$key">$countrycodes{$key}</option>| - : qq|<option value="$key">$countrycodes{$key}</option>|; - } - - # is there a templates basedir - if (! -d "${LedgerSMB::Sysconfig::templates}") { - $form->error(__FILE__.':'.__LINE__.': '.$locale->text('Directory [_1] does not exist', ${LedgerSMB::Sysconfig::templates})); - } - - opendir TEMPLATEDIR, "${LedgerSMB::Sysconfig::templates}/." or $form->error(__FILE__.':'.__LINE__.': '."$templates : $!"); - @all = grep !/(^\.\.?|^\.svn)/, readdir TEMPLATEDIR; - closedir TEMPLATEDIR; - - @allhtml = sort grep /\.html/, @all; - - @alldir = (); - for (@all) { - - if (-d "${LedgerSMB::Sysconfig::templates}/$_") { - push @alldir, $_; - } - } - - @allhtml = reverse grep !/Default/, @allhtml; - push @allhtml, 'Default'; - @allhtml = reverse @allhtml; - - foreach $item (sort @alldir) { - - if ($item eq $myconfig->{templates}) { - $usetemplates .= qq|<option selected value="$item">$item</option>\n|; - } else { - $usetemplates .= qq|<option value="$item">$item</option>\n|; - } - } - - $lastitem = $allhtml[0]; - $lastitem =~ s/-.*//g; - $mastertemplates = qq|<option value="$lastitem">$lastitem</option>\n|; - - foreach $item (@allhtml) { - - $item =~ s/-.*//g; - - if ($item ne $lastitem) { - $mastertemplates .= qq|<option value="$item">$item</option>\n|; - $lastitem = $item; - } - } - - opendir CSS, "css/."; - @all = grep /.*\.css$/, readdir CSS; - closedir CSS; - - foreach $item (@all) { - - if ($item eq $myconfig->{stylesheet}) { - $selectstylesheet .= qq|<option selected value="$item">$item</option>\n|; - } else { - $selectstylesheet .= qq|<option value="$item">$item</option>\n|; - } - } - - $selectstylesheet .= "<option></option>\n"; - - if (%{LedgerSMB::Sysconfig::printer} && ${LedgerSMB::Sysconfig::latex}) { - - $selectprinter = "<option></option>\n"; - - foreach $item (sort keys %{LedgerSMB::Sysconfig::printer}) { - - if ($myconfig->{printer} eq $item) { - $selectprinter .= qq|<option value="$item" selected>$item</option>\n|; - } else { - $selectprinter .= qq|<option value="$item">$item</option>\n|; - } - } - - $printer = qq| + # if there is a login, get user + if ( $form->{login} ) { + + # get user + %{$myconfig} = %{ LedgerSMB::User->fetch_config( $form->{login} ) }; + + for (qw(company address signature)) { + $myconfig->{$_} = $form->quote( $myconfig->{$_} ); + } + for (qw(address signature)) { $myconfig->{$_} =~ s/\\n/\n/g } + + # strip basedir from templates directory + $myconfig->{templates} =~ s/^${LedgerSMB::Sysconfig::templates}\///; + } + + foreach $item (qw(mm-dd-yy mm/dd/yy dd-mm-yy dd/mm/yy dd.mm.yy yyyy-mm-dd)) + { + $dateformat .= + ( $item eq $myconfig->{dateformat} ) + ? "<option selected>$item</option>\n" + : "<option>$item</option>\n"; + } + + my @formats = qw(1,000.00 1000.00 1.000,00 1000,00 1'000.00); + push @formats, '1 000.00'; + foreach $item (@formats) { + $numberformat .= + ( $item eq $myconfig->{numberformat} ) + ? "<option selected>$item</option>\n" + : "<option>$item</option>\n"; + } + + %countrycodes = LedgerSMB::User->country_codes; + $countrycodes = ""; + my $selectedcode = + ( $myconfig->{countrycode} ) ? $myconfig->{countrycode} : 'en'; + + foreach $key ( sort { $countrycodes{$a} cmp $countrycodes{$b} } + keys %countrycodes ) + { + $countrycodes .= + ( $selectedcode eq $key ) + ? qq|<option selected value="$key">$countrycodes{$key}</option>| + : qq|<option value="$key">$countrycodes{$key}</option>|; + } + + # is there a templates basedir + if ( !-d "${LedgerSMB::Sysconfig::templates}" ) { + $form->error( + __FILE__ . ':' . __LINE__ . ': ' + . $locale->text( + 'Directory [_1] does not exist', + ${LedgerSMB::Sysconfig::templates} + ) + ); + } + + opendir TEMPLATEDIR, "${LedgerSMB::Sysconfig::templates}/." + or $form->error( __FILE__ . ':' . __LINE__ . ': ' . "$templates : $!" ); + @all = grep !/(^\.\.?|^\.svn)/, readdir TEMPLATEDIR; + closedir TEMPLATEDIR; + + @allhtml = sort grep /\.html/, @all; + + @alldir = (); + for (@all) { + + if ( -d "${LedgerSMB::Sysconfig::templates}/$_" ) { + push @alldir, $_; + } + } + + @allhtml = reverse grep !/Default/, @allhtml; + push @allhtml, 'Default'; + @allhtml = reverse @allhtml; + + foreach $item ( sort @alldir ) { + + if ( $item eq $myconfig->{templates} ) { + $usetemplates .= + qq|<option selected value="$item">$item</option>\n|; + } + else { + $usetemplates .= qq|<option value="$item">$item</option>\n|; + } + } + + $lastitem = $allhtml[0]; + $lastitem =~ s/-.*//g; + $mastertemplates = qq|<option value="$lastitem">$lastitem</option>\n|; + + foreach $item (@allhtml) { + + $item =~ s/-.*//g; + + if ( $item ne $lastitem ) { + $mastertemplates .= qq|<option value="$item">$item</option>\n|; + $lastitem = $item; + } + } + + opendir CSS, "css/."; + @all = grep /.*\.css$/, readdir CSS; + closedir CSS; + + foreach $item (@all) { + + if ( $item eq $myconfig->{stylesheet} ) { + $selectstylesheet .= + qq|<option selected value="$item">$item</option>\n|; + } + else { + $selectstylesheet .= qq|<option value="$item">$item</option>\n|; + } + } + + $selectstylesheet .= "<option></option>\n"; + + if ( %{LedgerSMB::Sysconfig::printer} && ${LedgerSMB::Sysconfig::latex} ) { + + $selectprinter = "<option></option>\n"; + + foreach $item ( sort keys %{LedgerSMB::Sysconfig::printer} ) { + + if ( $myconfig->{printer} eq $item ) { + $selectprinter .= + qq|<option value="$item" selected>$item</option>\n|; + } + else { + $selectprinter .= qq|<option value="$item">$item</option>\n|; + } + } + + $printer = qq| <tr> - <th align="right">|.$locale->text('Printer').qq|</th> + <th align="right">| . $locale->text('Printer') . qq|</th> <td><select name="printer">$selectprinter</select></td> </tr> |; - } + } - $user = $form->{login}; - $form->{login} = "admin"; - $form->header; - $form->{login} = $user; + $user = $form->{login}; + $form->{login} = "admin"; + $form->header; + $form->{login} = $user; - print qq| + print qq| <body class="admin"> <form method="post" action="admin.pl"> <table width="100%"> @@ -441,39 +505,39 @@ sub form_header { <td> <table> <tr> - <th align="right">|.$locale->text('Login').qq|</th> + <th align="right">| . $locale->text('Login') . qq|</th> <td><input name="login" value="$myconfig->{login}" /></td> </tr> <tr> - <th align="right">|.$locale->text('Password').qq|</th> + <th align="right">| . $locale->text('Password') . qq|</th> <td><input type="password" name="new_password" size="8" value="$myconfig->{password}" /></td> </tr> <tr> - <th align="right">|.$locale->text('Name').qq|</th> + <th align="right">| . $locale->text('Name') . qq|</th> <td><input name="name" size="15" value="$myconfig->{name}" /></td> </tr> <tr> - <th align="right">|.$locale->text('E-mail').qq|</th> + <th align="right">| . $locale->text('E-mail') . qq|</th> <td><input name="email" size="30" value="$myconfig->{email}" /></td> </tr> <tr valign="top"> - <th align="right">|.$locale->text('Signature').qq|</th> + <th align="right">| . $locale->text('Signature') . qq|</th> <td><textarea name="signature" rows="3" cols="35">$myconfig->{signature}</textarea></td> </tr> <tr> - <th align="right">|.$locale->text('Phone').qq|</th> + <th align="right">| . $locale->text('Phone') . qq|</th> <td><input name="tel" size="14" value="$myconfig->{tel}" /></td> </tr> <tr> - <th align="right">|.$locale->text('Fax').qq|</th> + <th align="right">| . $locale->text('Fax') . qq|</th> <td><input name="fax" size="14" value="$myconfig->{fax}" /></td> </tr> <tr> - <th align="right">|.$locale->text('Company').qq|</th> + <th align="right">| . $locale->text('Company') . qq|</th> <td><input name="company" size="35" value="$myconfig->{company}" /></td> </tr> <tr valign="top"> - <th align="right">|.$locale->text('Address').qq|</th> + <th align="right">| . $locale->text('Address') . qq|</th> <td><textarea name="address" rows="4" cols="35">$myconfig->{address}</textarea></td> </tr> </table> @@ -481,44 +545,44 @@ sub form_header { <td> <table> <tr> - <th align="right">|.$locale->text('Date Format').qq|</th> + <th align="right">| . $locale->text('Date Format') . qq|</th> <td><select name="dateformat">$dateformat</select></td> </tr> <tr> - <th align="right">|.$locale->text('Number Format').qq|</th> + <th align="right">| . $locale->text('Number Format') . qq|</th> <td><select name="numberformat">$numberformat</select></td> </tr> <tr> - <th align="right">|.$locale->text('Dropdown Limit').qq|</th> + <th align="right">| . $locale->text('Dropdown Limit') . qq|</th> <td><input name="vclimit" value="$myconfig->{vclimit}" /></td> </tr> <tr> - <th align="right">|.$locale->text('Menu Width').qq|</th> + <th align="right">| . $locale->text('Menu Width') . qq|</th> <td><input name="menuwidth" value="$myconfig->{menuwidth}" /></td> </tr> <tr> - <th align="right">|.$locale->text('Language').qq|</th> + <th align="right">| . $locale->text('Language') . qq|</th> <td><select name="countrycode">$countrycodes</select></td> </tr> <tr> - <th align="right">|.$locale->text('Session Timeout').qq|</th> + <th align="right">| . $locale->text('Session Timeout') . qq|</th> <td><input name="newtimeout" value="$myconfig->{timeout}" /></td> </tr> <tr> - <th align="right">|.$locale->text('Stylesheet').qq|</th> + <th align="right">| . $locale->text('Stylesheet') . qq|</th> <td><select name="userstylesheet">$selectstylesheet</select></td> </tr> $printer <tr> - <th align="right">|.$locale->text('Use Templates').qq|</th> + <th align="right">| . $locale->text('Use Templates') . qq|</th> <td><select name="usetemplates">$usetemplates</select></td> </tr> <tr> - <th align="right">|.$locale->text('New Templates').qq|</th> + <th align="right">| . $locale->text('New Templates') . qq|</th> <td><input name="newtemplates" /></td> </tr> <tr> - <th align="right">|.$locale->text('Setup Templates').qq|</th> + <th align="right">| . $locale->text('Setup Templates') . qq|</th> <td><select name="mastertemplates">$mastertemplates</select></td> </tr> </table> @@ -526,48 +590,50 @@ sub form_header { </td> </tr> <tr class="listheading"> - <th colspan="2">|.$locale->text('Database').qq|</th> + <th colspan="2">| . $locale->text('Database') . qq|</th> </tr>|; - # list section for database drivers - foreach $item (LedgerSMB::User->dbdrivers) { + # list section for database drivers + foreach $item ( LedgerSMB::User->dbdrivers ) { - print qq| + print qq| <tr> <td colspan="2"> <table> <tr>|; - $checked = "checked"; + $checked = "checked"; - if ($myconfig->{dbdriver} eq $item) { + if ( $myconfig->{dbdriver} eq $item ) { - for (qw(dbhost dbport dbuser dbpasswd dbname sid)) { $form->{"${item}_$_"} = $myconfig->{$_} } - $checked = "checked"; - } + for (qw(dbhost dbport dbuser dbpasswd dbname sid)) { + $form->{"${item}_$_"} = $myconfig->{$_}; + } + $checked = "checked"; + } - print qq| - <th align="right">|.$locale->text('Driver').qq|</th> + print qq| + <th align="right">| . $locale->text('Driver') . qq|</th> <td><input name="dbdriver" type="radio" class="radio" value="$item" $checked /> $item</td> - <th align="right">|.$locale->text('Host').qq|</th> + <th align="right">| . $locale->text('Host') . qq|</th> <td><input name="${item}_dbhost" size="30" value="$form->{"${item}_dbhost"}" /></td> </tr> <tr>|; - print qq| - <th align="right">|.$locale->text('Dataset').qq|</th> + print qq| + <th align="right">| . $locale->text('Dataset') . qq|</th> <td><input name="${item}_dbname" size="15" value="$form->{"${item}_dbname"}" /></td> - <th align="right">|.$locale->text('Port').qq|</th> + <th align="right">| . $locale->text('Port') . qq|</th> <td><input name="${item}_dbport" size="4" value="$form->{"${item}_dbport"}" /></td> </tr> <tr> - <th align="right">|.$locale->text('User').qq|</th> + <th align="right">| . $locale->text('User') . qq|</th> <td><input name="${item}_dbuser" size="15" value="$form->{"${item}_dbuser"}" /></td> - <th align="right">|.$locale->text('Password').qq|</th> + <th align="right">| . $locale->text('Password') . qq|</th> <td><input name="${item}_dbpasswd" type="password" size="10" value="$form->{"${item}_dbpasswd"}" /></td> </tr>|; - print qq| + print qq| </table> <input type="hidden" name="old_dbpasswd" value="$myconfig->{dbpasswd}" /> </td> @@ -577,115 +643,122 @@ sub form_header { </tr> |; - } + } + # access control + open( FH, '<', $menufile ) + or $form->error( __FILE__ . ':' . __LINE__ . ': ' . "$menufile : $!" ); - # access control - open(FH, '<', $menufile) or $form->error(__FILE__.':'.__LINE__.': '."$menufile : $!"); - # scan for first menu level - @a = <FH>; - close(FH); + # scan for first menu level + @a = <FH>; + close(FH); - if (open(FH, '<', "custom_$menufile")) { - push @a, <FH>; - } + if ( open( FH, '<', "custom_$menufile" ) ) { + push @a, <FH>; + } - close(FH); + close(FH); - foreach $item (@a) { + foreach $item (@a) { - next unless $item =~ /\[\w+/; - next if $item =~ /\#/; + next unless $item =~ /\[\w+/; + next if $item =~ /\#/; - $item =~ s/(\[|\])//g; - chop $item; + $item =~ s/(\[|\])//g; + chop $item; - if ($item =~ /--/) { + if ( $item =~ /--/ ) { - ($level, $menuitem) = split /--/, $item, 2; - } else { + ( $level, $menuitem ) = split /--/, $item, 2; + } + else { - $level = $item; - $menuitem = $item; - push @acsorder, $item; - } + $level = $item; + $menuitem = $item; + push @acsorder, $item; + } - push @{ $acs{$level} }, $menuitem; + push @{ $acs{$level} }, $menuitem; - } + } - %role = ( 'admin' => $locale->text('Administrator'), - 'user' => $locale->text('User'), - 'supervisor' => $locale->text('Supervisor'), - 'manager' => $locale->text('Manager')); + %role = ( + 'admin' => $locale->text('Administrator'), + 'user' => $locale->text('User'), + 'supervisor' => $locale->text('Supervisor'), + 'manager' => $locale->text('Manager') + ); - $selectrole = ""; + $selectrole = ""; - foreach $item (qw(user admin supervisor manager)) { - $selectrole .= ($myconfig->{role} eq $item) ? "<option selected value=\"$item\">$role{$item}</option>\n" - : "<option value=\"$item\">$role{$item}</option>\n"; - } + foreach $item (qw(user admin supervisor manager)) { + $selectrole .= + ( $myconfig->{role} eq $item ) + ? "<option selected value=\"$item\">$role{$item}</option>\n" + : "<option value=\"$item\">$role{$item}</option>\n"; + } - print qq| + print qq| <tr class="listheading"> - <th colspan="2">|.$locale->text('Access Control').qq|</th> + <th colspan="2">| . $locale->text('Access Control') . qq|</th> </tr> <tr> <td><select name="role">$selectrole</select></td> </tr> |; - foreach $item (split /;/, $myconfig->{acs}) { - ($key, $value) = split /--/, $item, 2; - $excl{$key}{$value} = 1; - } + foreach $item ( split /;/, $myconfig->{acs} ) { + ( $key, $value ) = split /--/, $item, 2; + $excl{$key}{$value} = 1; + } - foreach $key (@acsorder) { + foreach $key (@acsorder) { - $checked = "checked"; + $checked = "checked"; - if ($form->{login}) { - $checked = ($excl{$key}{$key}) ? "" : "checked"; - } + if ( $form->{login} ) { + $checked = ( $excl{$key}{$key} ) ? "" : "checked"; + } - # can't have variable names with & and spaces - $item = $form->escape("${key}--$key",1); + # can't have variable names with & and spaces + $item = $form->escape( "${key}--$key", 1 ); - $acsheading = $key; - $acsheading =~ s/ / /g; + $acsheading = $key; + $acsheading =~ s/ / /g; - $acsheading = qq| + $acsheading = qq| <td align="left" nowrap="nowrap" style="background-color: #C7E9F7" colspan="2"> <input name="$item" class="checkbox" type="checkbox" value="1" $checked /> $acsheading</td><tr><td>\n|; - $menuitems .= "$item;"; - $acsdata = "<td style=\"background-color: #F0F0F0\">"; + $menuitems .= "$item;"; + $acsdata = "<td style=\"background-color: #F0F0F0\">"; - foreach $item (@{ $acs{$key} }) { + foreach $item ( @{ $acs{$key} } ) { - next if ($key eq $item); + next if ( $key eq $item ); - $checked = "checked"; + $checked = "checked"; - if ($form->{login}) { - $checked = ($excl{$key}{$item}) ? "" : "checked"; - } + if ( $form->{login} ) { + $checked = ( $excl{$key}{$item} ) ? "" : "checked"; + } - $acsitem = $form->escape("${key}--$item",1); + $acsitem = $form->escape( "${key}--$item", 1 ); - $acsdata .= qq|<br /><input name="$acsitem" class="checkbox" type="checkbox" value="1" $checked /> $item|; - $menuitems .= "$acsitem;"; - } + $acsdata .= +qq|<br /><input name="$acsitem" class="checkbox" type="checkbox" value="1" $checked /> $item|; + $menuitems .= "$acsitem;"; + } - $acsdata .= " + $acsdata .= " </td>"; - print qq| + print qq| <tr valign="top">$acsheading $acsdata </tr> |; - } + } - print qq|<input type="hidden" name="acs" value="$menuitems" /> + print qq|<input type="hidden" name="acs" value="$menuitems" /> <tr> <td colspan="2"><hr size="3" noshade /></td> </tr> @@ -695,193 +768,224 @@ sub form_header { } - sub save { - $form->{callback} = "admin.pl?action=list_users"; - # no driver checked - $form->error(__FILE__.':'.__LINE__.': '.$locale->text('Database Driver not checked!')) unless $form->{dbdriver}; + $form->{callback} = "admin.pl?action=list_users"; - # no spaces allowed in login name - $form->{login} =~ s/ //g; + # no driver checked + $form->error( __FILE__ . ':' . __LINE__ . ': ' + . $locale->text('Database Driver not checked!') ) + unless $form->{dbdriver}; - $form->isblank("login", $locale->text('Login name missing!')); + # no spaces allowed in login name + $form->{login} =~ s/ //g; - # check for duplicates - if (!$form->{edit}) { + $form->isblank( "login", $locale->text('Login name missing!') ); - $temp = LedgerSMB::User->new($form->{login}); + # check for duplicates + if ( !$form->{edit} ) { - if ($temp->{login}) { - $form->error(__FILE__.':'.__LINE__.': '.$locale->text('[_1] is already a member!', $form->{login})); - } - } + $temp = LedgerSMB::User->new( $form->{login} ); - # no spaces allowed in directories - $form->{newtemplates} =~ s/( |\.\.|\*)//g; + if ( $temp->{login} ) { + $form->error( __FILE__ . ':' . __LINE__ . ': ' + . $locale->text( '[_1] is already a member!', $form->{login} ) + ); + } + } - if ($form->{newtemplates} ne "") { - $form->{templates} = $form->{newtemplates}; - } else { - $form->{templates} = ($form->{usetemplates}) ? $form->{usetemplates} : $form->{login}; - } + # no spaces allowed in directories + $form->{newtemplates} =~ s/( |\.\.|\*)//g; - # is there a basedir - if (! -d "${LedgerSMB::Sysconfig::templates}") { - $form->error(__FILE__.':'.__LINE__.': '.$locale->text('Directory [_1] does not exist', ${LedgerSMB::Sysconfig::templates})); - } + if ( $form->{newtemplates} ne "" ) { + $form->{templates} = $form->{newtemplates}; + } + else { + $form->{templates} = + ( $form->{usetemplates} ) ? $form->{usetemplates} : $form->{login}; + } - # add base directory to $form->{templates} - $form->{templates} = "${LedgerSMB::Sysconfig::templates}/$form->{templates}"; + # is there a basedir + if ( !-d "${LedgerSMB::Sysconfig::templates}" ) { + $form->error( + __FILE__ . ':' . __LINE__ . ': ' + . $locale->text( + 'Directory [_1] does not exist', + ${LedgerSMB::Sysconfig::templates} + ) + ); + } - $myconfig = LedgerSMB::User->new("${LedgerSMB::Sysconfig::memberfile}", "$form->{login}"); + # add base directory to $form->{templates} + $form->{templates} = + "${LedgerSMB::Sysconfig::templates}/$form->{templates}"; - # redo acs variable and delete all the acs codes - @acs = split /;/, $form->{acs}; - $form->{acs} = ""; + $myconfig = LedgerSMB::User->new( "${LedgerSMB::Sysconfig::memberfile}", + "$form->{login}" ); - foreach $item (@acs) { + # redo acs variable and delete all the acs codes + @acs = split /;/, $form->{acs}; + $form->{acs} = ""; - $item = $form->escape($item,1); + foreach $item (@acs) { - if (!$form->{$item}) { - $form->{acs} .= $form->unescape($form->unescape("$item")).";"; - } + $item = $form->escape( $item, 1 ); - delete $form->{$item}; - } + if ( !$form->{$item} ) { + $form->{acs} .= $form->unescape( $form->unescape("$item") ) . ";"; + } - # check which database was filled in + delete $form->{$item}; + } - $form->{dbhost} = $form->{"$form->{dbdriver}_dbhost"}; - $form->{dbport} = $form->{"$form->{dbdriver}_dbport"}; - $form->{dbpasswd} = $form->{"$form->{dbdriver}_dbpasswd"}; - $form->{dbuser} = $form->{"$form->{dbdriver}_dbuser"}; - $form->{dbname} = $form->{"$form->{dbdriver}_dbname"}; - $form->isblank("dbname", $locale->text('Dataset missing!')); - $form->isblank("dbuser", $locale->text('Database User missing!')); + # check which database was filled in - foreach $item (keys %{$form}) { - $myconfig->{$item} = $form->{$item}; - } + $form->{dbhost} = $form->{"$form->{dbdriver}_dbhost"}; + $form->{dbport} = $form->{"$form->{dbdriver}_dbport"}; + $form->{dbpasswd} = $form->{"$form->{dbdriver}_dbpasswd"}; + $form->{dbuser} = $form->{"$form->{dbdriver}_dbuser"}; + $form->{dbname} = $form->{"$form->{dbdriver}_dbname"}; + $form->isblank( "dbname", $locale->text('Dataset missing!') ); + $form->isblank( "dbuser", $locale->text('Database User missing!') ); - $myconfig->{password} = $form->{new_password}; - $myconfig->{timeout} = $form->{newtimeout}; + foreach $item ( keys %{$form} ) { + $myconfig->{$item} = $form->{$item}; + } - delete $myconfig->{stylesheet}; + $myconfig->{password} = $form->{new_password}; + $myconfig->{timeout} = $form->{newtimeout}; - if ($form->{userstylesheet}) { - $myconfig->{stylesheet} = $form->{userstylesheet}; - } + delete $myconfig->{stylesheet}; - $myconfig->{packpw} = 1; + if ( $form->{userstylesheet} ) { + $myconfig->{stylesheet} = $form->{userstylesheet}; + } - $myconfig->save_member($form); - # create user template directory and copy master files - if (! -d "$form->{templates}") { + $myconfig->{packpw} = 1; - umask(002); + $myconfig->save_member($form); - if (mkdir "$form->{templates}", oct("771")) { + # create user template directory and copy master files + if ( !-d "$form->{templates}" ) { - umask(007); + umask(002); - # copy templates to the directory - opendir TEMPLATEDIR, "${LedgerSMB::Sysconfig::templates}/." or $form->error(__FILE__.':'.__LINE__.': '."$templates : $!"); - @templates = grep /$form->{mastertemplates}-/, readdir TEMPLATEDIR; - closedir TEMPLATEDIR; + if ( mkdir "$form->{templates}", oct("771") ) { - foreach $file (@templates) { + umask(007); - open(TEMP, '<', "${LedgerSMB::Sysconfig::templates}/$file") or $form->error(__FILE__.':'.__LINE__.': '."$templates/$file : $!"); + # copy templates to the directory + opendir TEMPLATEDIR, "${LedgerSMB::Sysconfig::templates}/." + or $form->error( + __FILE__ . ':' . __LINE__ . ': ' . "$templates : $!" ); + @templates = grep /$form->{mastertemplates}-/, readdir TEMPLATEDIR; + closedir TEMPLATEDIR; - $file =~ s/$form->{mastertemplates}-//; - open(NEW, '>', "$form->{templates}/$file") or $form->error(__FILE__.':'.__LINE__.': '."$form->{templates}/$file : $!"); + foreach $file (@templates) { - while ($line = <TEMP>) { - print NEW $line; - } + open( TEMP, '<', "${LedgerSMB::Sysconfig::templates}/$file" ) + or $form->error( __FILE__ . ':' . __LINE__ . ': ' + . "$templates/$file : $!" ); - close(TEMP); - close(NEW); - } + $file =~ s/$form->{mastertemplates}-//; + open( NEW, '>', "$form->{templates}/$file" ) + or $form->error( __FILE__ . ':' . __LINE__ . ': ' + . "$form->{templates}/$file : $!" ); - } else { - $form->error(__FILE__.':'.__LINE__.': '."$form->{templates} : $!"); - } - } + while ( $line = <TEMP> ) { + print NEW $line; + } - $form->redirect($locale->text('User saved!')); -} + close(TEMP); + close(NEW); + } + } + else { + $form->error( + __FILE__ . ':' . __LINE__ . ': ' . "$form->{templates} : $!" ); + } + } + + $form->redirect( $locale->text('User saved!') ); +} sub delete { - $form->{callback} = "admin.pl?action=list_users"; + $form->{callback} = "admin.pl?action=list_users"; - $form->{templates} = ($form->{templates}) ? "${LedgerSMB::Sysconfig::templates}/$form->{templates}" : "$templates/$form->{login}"; + $form->{templates} = + ( $form->{templates} ) + ? "${LedgerSMB::Sysconfig::templates}/$form->{templates}" + : "$templates/$form->{login}"; - # scan %user for $templatedir - foreach $login (keys %user) { - last if ($found = ($form->{templates} eq $user{$login})); - } + # scan %user for $templatedir + foreach $login ( keys %user ) { + last if ( $found = ( $form->{templates} eq $user{$login} ) ); + } - # if found keep directory otherwise delete - if (!$found) { - # delete it if there is a template directory - $dir = "$form->{templates}"; - if (-d "$dir") { - unlink <$dir/*>; - rmdir "$dir"; - } - } + # if found keep directory otherwise delete + if ( !$found ) { - my $dbh = ${LedgerSMB::Sysconfig::GLOBALDBH}; + # delete it if there is a template directory + $dir = "$form->{templates}"; + if ( -d "$dir" ) { + unlink <$dir/*>; + rmdir "$dir"; + } + } - #users_conf - my $deleteUser = $dbh->prepare("DELETE FROM users_conf USING users WHERE users.username = ? and users.id = users_conf.id;"); - $deleteUser->execute($form->{login}); + my $dbh = ${LedgerSMB::Sysconfig::GLOBALDBH}; - #and now users - $deleteUser = $dbh->prepare("DELETE FROM users WHERE username = ?;"); - $deleteUser->execute($form->{login}); + #users_conf + my $deleteUser = + $dbh->prepare( +"DELETE FROM users_conf USING users WHERE users.username = ? and users.id = users_conf.id;" + ); + $deleteUser->execute( $form->{login} ); - $form->redirect($locale->text('User deleted!')); -} + #and now users + $deleteUser = $dbh->prepare("DELETE FROM users WHERE username = ?;"); + $deleteUser->execute( $form->{login} ); + $form->redirect( $locale->text('User deleted!') ); +} sub login_name { - my $login = shift; - $login =~ s/\[\]//g; - return ($login) ? $login : undef; + my $login = shift; + $login =~ s/\[\]//g; + return ($login) ? $login : undef; } - sub change_admin_password { - $form->{title} = qq|LedgerSMB |.$locale->text('Accounting')." ".$locale->text('Administration')." / ".$locale->text('Change Admin Password'); + $form->{title} = + qq|LedgerSMB | + . $locale->text('Accounting') . " " + . $locale->text('Administration') . " / " + . $locale->text('Change Admin Password'); - $form->{login} = "admin"; - $form->header; + $form->{login} = "admin"; + $form->header; - print qq| + print qq| <body class="admin"> <form method="post" action="$form->{script}"> <table> <tr class="listheading"> - <th>|.$locale->text('Change Password').qq|</th> + <th>| . $locale->text('Change Password') . qq|</th> </tr> <tr size="5"></tr> <tr> <td> <table width="100%"> <tr> - <th align="right">|.$locale->text('Password').qq|</th> + <th align="right">| . $locale->text('Password') . qq|</th> <td><input type="password" name="new_password" /></td> </tr> <tr> - <th align="right">|.$locale->text('Confirm').qq|</th> + <th align="right">| . $locale->text('Confirm') . qq|</th> <td><input type="password" name="confirm_password" /></td> </tr> </table> @@ -891,7 +995,9 @@ sub change_admin_password { <br /> <hr size="3" noshade /> <input type="hidden" name="path" value="$form->{path}" /> - <p><button type="submit" class="submit" name="action" value="change_password">|.$locale->text('Change Password').qq|</button></p> + <p><button type="submit" class="submit" name="action" value="change_password">| + . $locale->text('Change Password') + . qq|</button></p> </form> </body> </html> @@ -899,103 +1005,112 @@ sub change_admin_password { } - sub change_password { - # Do we want to force a login after changing the password? - $form->{callback} = "admin.pl?"; + # Do we want to force a login after changing the password? + $form->{callback} = "admin.pl?"; - $form->error(__FILE__.':'.__LINE__.': '.$locale->text('Passwords do not match!')) if $form->{new_password} ne $form->{confirm_password}; + $form->error( __FILE__ . ':' . __LINE__ . ': ' + . $locale->text('Passwords do not match!') ) + if $form->{new_password} ne $form->{confirm_password}; - # use the central database handle - my $dbh = ${LedgerSMB::Sysconfig::GLOBALDBH}; + # use the central database handle + my $dbh = ${LedgerSMB::Sysconfig::GLOBALDBH}; - my $updateAdminPassword = $dbh->prepare("UPDATE users_conf + my $updateAdminPassword = $dbh->prepare( + "UPDATE users_conf SET password = md5(?) - WHERE id = 1"); + WHERE id = 1" + ); - $updateAdminPassword->execute($form->{new_password}); + $updateAdminPassword->execute( $form->{new_password} ); - $form->{callback} = "$form->{script}?action=list_users&path=$form->{path}"; - $form->redirect($locale->text('Password changed!')); + $form->{callback} = + "$form->{script}?action=list_users&path=$form->{path}"; + $form->redirect( $locale->text('Password changed!') ); } sub check_password { - $root = LedgerSMB::User->new('admin'); - - if ($form->{password}) { - - $form->{callback} .= "&password=$form->{password}" if $form->{callback}; - - if ($root->{password} ne (Digest::MD5::md5_hex $form->{password}) ) { - &adminlogin($locale->text('Access Denied!')); - exit; - } - else{ - Session::session_create($root); - } - } - else { - - $ENV{HTTP_COOKIE} =~ s/;\s*/;/g; - @cookies = split /;/, $ENV{HTTP_COOKIE}; - foreach (@cookies) { - ($name,$value) = split /=/, $_, 2; - $cookie{$name} = $value; - } - - if(!Session::session_check($cookie{"LedgerSMB"}, $root)){ - &adminlogin($locale->text('Session expired!')); - exit; - } - } + $root = LedgerSMB::User->new('admin'); + + if ( $form->{password} ) { + + $form->{callback} .= "&password=$form->{password}" + if $form->{callback}; + + if ( $root->{password} ne ( Digest::MD5::md5_hex $form->{password} ) ) { + &adminlogin( $locale->text('Access Denied!') ); + exit; + } + else { + Session::session_create($root); + } + } + else { + + $ENV{HTTP_COOKIE} =~ s/;\s*/;/g; + @cookies = split /;/, $ENV{HTTP_COOKIE}; + foreach (@cookies) { + ( $name, $value ) = split /=/, $_, 2; + $cookie{$name} = $value; + } + + if ( !Session::session_check( $cookie{"LedgerSMB"}, $root ) ) { + &adminlogin( $locale->text('Session expired!') ); + exit; + } + } } - sub pg_database_administration { - $form->{dbdriver} = 'Pg'; - &dbselect_source; + $form->{dbdriver} = 'Pg'; + &dbselect_source; } - sub pgpp_database_administration { - $form->{dbdriver} = 'PgPP'; - &dbselect_source; + $form->{dbdriver} = 'PgPP'; + &dbselect_source; } - sub dbdriver_defaults { - # load some defaults for the selected driver - %driverdefaults = ( 'Pg' => { dbport => '5432', - dbuser => '', - dbdefault => 'template1', - dbhost => 'localhost', - connectstring => $locale->text('Connect to') - } ); + # load some defaults for the selected driver + %driverdefaults = ( + 'Pg' => { + dbport => '5432', + dbuser => '', + dbdefault => 'template1', + dbhost => 'localhost', + connectstring => $locale->text('Connect to') + } + ); - $driverdefaults{PgPP} = $driverdefaults{Pg}; + $driverdefaults{PgPP} = $driverdefaults{Pg}; - for (keys %{ $driverdefaults{Pg} }) { $form->{$_} = $driverdefaults{$form->{dbdriver}}{$_} } + for ( keys %{ $driverdefaults{Pg} } ) { + $form->{$_} = $driverdefaults{ $form->{dbdriver} }{$_}; + } } - sub dbselect_source { - &dbdriver_defaults; + &dbdriver_defaults; - $form->{title} = "LedgerSMB ".$locale->text('Accounting')." / ".$locale->text('Database Administration'); + $form->{title} = + "LedgerSMB " + . $locale->text('Accounting') . " / " + . $locale->text('Database Administration'); - $form->{login} = "admin"; - $form->header; + $form->{login} = "admin"; + $form->header; - #an insane amount of table nesting here, this should be cleaned up. - print qq| + #an insane amount of table nesting here, this should be cleaned up. + print qq| <body class="admin"> <center> <h2>$form->{title}</h2> @@ -1005,21 +1120,21 @@ sub dbselect_source { <td> <table> <tr class="listheading"> - <th colspan="4">|.$locale->text('Database').qq|</th> + <th colspan="4">| . $locale->text('Database') . qq|</th> </tr> <tr> <td> <table> <tr> - <th align="right">|.$locale->text('Host').qq|</th> + <th align="right">| . $locale->text('Host') . qq|</th> <td><input name="dbhost" size="25" value="$form->{dbhost}" /></td> - <th align="right">|.$locale->text('Port').qq|</th> + <th align="right">| . $locale->text('Port') . qq|</th> <td><input name="dbport" size="5" value="$form->{dbport}" /></td> </tr> <tr> - <th align="right">|.$locale->text('User').qq|</th> + <th align="right">| . $locale->text('User') . qq|</th> <td><input name="dbuser" size="10" value="$form->{dbuser}" /></td> - <th align="right">|.$locale->text('Password').qq|</th> + <th align="right">| . $locale->text('Password') . qq|</th> <td><input type="password" name="dbpasswd" size="10" /></td> </tr> <tr> @@ -1027,9 +1142,9 @@ sub dbselect_source { <td colspan="3"><input name="dbdefault" size="10" value="$form->{dbdefault}" /></td> </tr> <tr> - <th align="right">|.$locale->text("Superuser").qq|</th> + <th align="right">| . $locale->text("Superuser") . qq|</th> <td><input name="dbsuperuser" size="10" value="$form->{dbsuperuser}" /></td> - <th align="right">|.$locale->text('Password').qq|</th> + <th align="right">| . $locale->text('Password') . qq|</th> <td><input type="password" name="dbsuperpasswd" size="10" /></td> </tr> </table> @@ -1043,56 +1158,65 @@ sub dbselect_source { <input name="callback" type="hidden" value="$form->{script}?action=list_users&path=$form->{path}" /> <input type="hidden" name="path" value="$form->{path}" /> <br /> - <button type="submit" class="submit" name="action" value="create_dataset">|.$locale->text('Create Company').qq|</button> - <button type="submit" class="submit" name="action" value="delete_dataset">|.$locale->text('Delete Company').qq|</button> + <button type="submit" class="submit" name="action" value="create_dataset">| + . $locale->text('Create Company') + . qq|</button> + <button type="submit" class="submit" name="action" value="delete_dataset">| + . $locale->text('Delete Company') + . qq|</button> </form> - <p>|.$locale->text('This is a preliminary check for existing sources. Nothing will be created or deleted at this stage!') - .qq|</p> + <p>| + . $locale->text( +'This is a preliminary check for existing sources. Nothing will be created or deleted at this stage!' + ) + . qq|</p> </center> </body> </html> |; } - sub continue { - &{ $form->{nextsub} }; + &{ $form->{nextsub} }; } - sub dbupdate { - $form->{callback} = "admin.pl?action=list_users"; + $form->{callback} = "admin.pl?action=list_users"; - LedgerSMB::User->dbupdate(\%$form); - $form->redirect($locale->text('Dataset updated!')); + LedgerSMB::User->dbupdate( \%$form ); + $form->redirect( $locale->text('Dataset updated!') ); } - sub create_dataset { - @dbsources = sort LedgerSMB::User->dbsources(\%$form); + @dbsources = sort LedgerSMB::User->dbsources( \%$form ); - opendir SQLDIR, "sql/." or $form->error(__FILE__.':'.__LINE__.': '.$!); + opendir SQLDIR, "sql/." + or $form->error( __FILE__ . ':' . __LINE__ . ': ' . $! ); - foreach $item (sort grep /-chart\.sql/, readdir SQLDIR) { - next if ($item eq 'Default-chart.sql'); - $item =~ s/-chart\.sql//; - push @charts, qq|<input name="chart" class="radio" type="radio" value="$item" />$item|; - } + foreach $item ( sort grep /-chart\.sql/, readdir SQLDIR ) { + next if ( $item eq 'Default-chart.sql' ); + $item =~ s/-chart\.sql//; + push @charts, +qq|<input name="chart" class="radio" type="radio" value="$item" />$item|; + } - closedir SQLDIR; + closedir SQLDIR; - # add Default at beginning - unshift @charts, qq|<input name="chart" class="radio" type="radio" value="Default" checked />Default|; + # add Default at beginning + unshift @charts, +qq|<input name="chart" class="radio" type="radio" value="Default" checked />Default|; - $form->{title} = "LedgerSMB ".$locale->text('Accounting') - ." ".$locale->text('Database Administration') - ." / ".$locale->text('Create Dataset'); - $form->{login} = "admin"; - $form->header; + $form->{title} = + "LedgerSMB " + . $locale->text('Accounting') . " " + . $locale->text('Database Administration') . " / " + . $locale->text('Create Dataset'); + $form->{login} = "admin"; + $form->header; - print qq| + print qq| <body class="admin"> <center> <h2>$form->{title}</h2> @@ -1102,36 +1226,42 @@ sub create_dataset { <th colspan="2"> </th> </tr> <tr> - <th align="right" nowrap="nowrap">|.$locale->text('Existing Datasets').qq|</th> + <th align="right" nowrap="nowrap">| + . $locale->text('Existing Datasets') + . qq|</th> <td> |; - for (@dbsources) { print "[ $_ ] " } + for (@dbsources) { print "[ $_ ] " } - print qq| + print qq| </td> </tr> <tr> - <th align="right" nowrap="nowrap">|.$locale->text('Create Dataset').qq|</th> + <th align="right" nowrap="nowrap">| + . $locale->text('Create Dataset') + . qq|</th> <td><input name="db" /></td> </tr> <tr> - <th align="right" nowrap="nowrap">|.$locale->text('Create Chart of Accounts').qq|</th> + <th align="right" nowrap="nowrap">| + . $locale->text('Create Chart of Accounts') + . qq|</th> <td> <table> |; - while (@charts) { - print qq| <tr>|; + while (@charts) { + print qq| <tr>|; - for (0 .. 2) { print "<td>$charts[$_]</td>\n" } + for ( 0 .. 2 ) { print "<td>$charts[$_]</td>\n" } - print qq| </tr>|; + print qq| </tr>|; - splice @charts, 0, 3; - } + splice @charts, 0, 3; + } - print qq| </table> + print qq| </table> </td> </tr> <tr> @@ -1142,13 +1272,17 @@ sub create_dataset { </table> |; - $form->hide_form(qw(dbdriver dbsuperuser dbsuperpasswd dbuser dbhost dbport dbpasswd dbdefault path)); + $form->hide_form( + qw(dbdriver dbsuperuser dbsuperpasswd dbuser dbhost dbport dbpasswd dbdefault path) + ); - print qq| + print qq| <input name="callback" type="hidden" value="$form->{script}?action=list_users&path=$form->{path}" /> <input type="hidden" name="nextsub" value="dbcreate" /> <br /> - <button type="submit" class="submit" name="action" value="continue">|.$locale->text('Continue').qq|</button> + <button type="submit" class="submit" name="action" value="continue">| + . $locale->text('Continue') + . qq|</button> </form> </body> </html> @@ -1156,30 +1290,32 @@ sub create_dataset { } - sub dbcreate { - $form->isblank("db", $locale->text('Dataset missing!')); + $form->isblank( "db", $locale->text('Dataset missing!') ); - LedgerSMB::User->dbcreate(\%$form); + LedgerSMB::User->dbcreate( \%$form ); - $form->{title} = "LedgerSMB ".$locale->text('Accounting') - ." ".$locale->text('Database Administration') - ." / ".$locale->text('Create Dataset'); + $form->{title} = + "LedgerSMB " + . $locale->text('Accounting') . " " + . $locale->text('Database Administration') . " / " + . $locale->text('Create Dataset'); - $form->{login} = "admin"; - $form->header; + $form->{login} = "admin"; + $form->header; - print qq| + print qq| <body class="admin"> <center> <h2>$form->{title}</h2> <form method="post" action="$form->{script}">| - .$locale->text('Dataset [_1] successfully created!', $form->{db}) - .qq| + . $locale->text( 'Dataset [_1] successfully created!', $form->{db} ) . qq| <input type="hidden" name="path" value="$form->{path}" /> <input type="hidden" name="nextsub" value="list_users" /> - <p><button type="submit" class="submit" name="action" value="continue">|.$locale->text('Continue').qq|</button></p> + <p><button type="submit" class="submit" name="action" value="continue">| + . $locale->text('Continue') + . qq|</button></p> </form> </center> </body> @@ -1187,27 +1323,31 @@ sub dbcreate { |; } - sub delete_dataset { - if (@dbsources = LedgerSMB::User->dbsources_unused(\%$form)) { + if ( @dbsources = LedgerSMB::User->dbsources_unused( \%$form ) ) { - foreach $item (sort @dbsources) { - $dbsources .= qq|<input name="db" class="radio" type="radio" value="$item" /> $item |; - } + foreach $item ( sort @dbsources ) { + $dbsources .= +qq|<input name="db" class="radio" type="radio" value="$item" /> $item |; + } - } else { - $form->error(__FILE__.':'.__LINE__.': '.$locale->text('Nothing to delete!')); - } + } + else { + $form->error( __FILE__ . ':' . __LINE__ . ': ' + . $locale->text('Nothing to delete!') ); + } - $form->{title} = "LedgerSMB ".$locale->text('Accounting') - ." ".$locale->text('Database Administration') - ." / ".$locale->text('Delete Dataset'); + $form->{title} = + "LedgerSMB " + . $locale->text('Accounting') . " " + . $locale->text('Database Administration') . " / " + . $locale->text('Delete Dataset'); - $form->{login} = "admin"; - $form->header; + $form->{login} = "admin"; + $form->header; - print qq| + print qq| <body class="admin"> <h2>$form->{title}</h2> <form method="post" action="$form->{script}" /> @@ -1222,7 +1362,10 @@ sub delete_dataset { <input type="hidden" name="nextsub" value="dbdelete" /> <table width="100%"> <tr class="listheading"> - <th>|.$locale->text('The following Datasets are not in use and can be deleted').qq|</th> + <th>| + . $locale->text( + 'The following Datasets are not in use and can be deleted') + . qq|</th> </tr> <tr> <td> @@ -1233,7 +1376,9 @@ sub delete_dataset { <td> <hr size="3" noshade /> <br /> - <button type="submit" class="submit" name="action" value="continue">|.$locale->text('Continue').qq|</button> + <button type="submit" class="submit" name="action" value="continue">| + . $locale->text('Continue') + . qq|</button> </td> </tr> </table> @@ -1244,53 +1389,56 @@ sub delete_dataset { } - sub dbdelete { - if (!$form->{db}) { - $form->error(__FILE__.':'.__LINE__.': '.$locale->text('No Dataset selected!')); - } + if ( !$form->{db} ) { + $form->error( __FILE__ . ':' . __LINE__ . ': ' + . $locale->text('No Dataset selected!') ); + } - LedgerSMB::User->dbdelete(\%$form); + LedgerSMB::User->dbdelete( \%$form ); - $form->{title} = "LedgerSMB ".$locale->text('Accounting') - ." ".$locale->text('Database Administration') - ." / ".$locale->text('Delete Dataset'); + $form->{title} = + "LedgerSMB " + . $locale->text('Accounting') . " " + . $locale->text('Database Administration') . " / " + . $locale->text('Delete Dataset'); - $form->{login} = "admin"; - $form->header; + $form->{login} = "admin"; + $form->header; - print qq| + print qq| <body class="admin"> <center> <h2>$form->{title}</h2> - $form->{db} |.$locale->text('successfully deleted!') - .qq| + $form->{db} | . $locale->text('successfully deleted!') . qq| <form method="post" action="$form->{script}" /> <input type="hidden" name="path" value="$form->{path}" /> <input type="hidden" name="nextsub" value="list_users" /> - <p><button type="submit" class="submit" name="action" value="continue">|.$locale->text('Continue').qq|</button></p> + <p><button type="submit" class="submit" name="action" value="continue">| + . $locale->text('Continue') + . qq|</button></p> </form> </body> </html> |; } - sub unlock_system { - # This needs to be done with a db tool - # unlink "${LedgerSMB::Sysconfig::userspath}/nologin"; - $form->{callback} = "$form->{script}?action=list_users&path=$form->{path}"; - $form->redirect($locale->text('Lockfile removed!')); + # This needs to be done with a db tool + # unlink "${LedgerSMB::Sysconfig::userspath}/nologin"; + $form->{callback} = + "$form->{script}?action=list_users&path=$form->{path}"; + $form->redirect( $locale->text('Lockfile removed!') ); } - sub lock_system { - # This needs to be done with a db tool - #open(FH, '>', "${LedgerSMB::Sysconfig::userspath}/nologin") or $form->error($locale->text('Cannot create Lock!')); - #close(FH); - $form->{callback} = "$form->{script}?action=list_users&path=$form->{path}"; - $form->redirect($locale->text('Lockfile created!')); +# This needs to be done with a db tool +#open(FH, '>', "${LedgerSMB::Sysconfig::userspath}/nologin") or $form->error($locale->text('Cannot create Lock!')); +#close(FH); + $form->{callback} = + "$form->{script}?action=list_users&path=$form->{path}"; + $form->redirect( $locale->text('Lockfile created!') ); } |