* @license http://www.contenido.org/license/LIZENZ.txt
* @link http://www.4fb.de
* @link http://www.contenido.org
* @since file available since contenido release <= 4.6
*
* {@internal
* created 2003-01-21
* modified 2008-06-26, Dominik Ziegler, update notifier class added
* modified 2008-06-27, Frederic Schneider, add security fix
* modified 2009-12-14, Dominik Ziegler, use User::getRealname() for user name output and provide username fallback
* modified 2010-05-20, Oliver Lohkemper, add param true for get active admins
* modified 2011-01-28, Dominik Ziegler, added missing notice in backend home when no clients are available [#CON-379]
*
* $Id$:
* }}
*
*/
if (!defined('CON_FRAMEWORK')) {
die('Illegal call');
}
cInclude('pear', 'XML/Parser.php');
cInclude('pear', 'XML/RSS.php');
if (!isset($oTpl) || !is_object($oTpl)) {
$oTpl = new Template();
}
$oTpl->reset();
if ($saveLoginTime == true) {
$sess->register("saveLoginTime");
$saveLoginTime = 0;
$vuser = new User();
$vuser->loadUserByUserID($auth->auth["uid"]);
$lastTime = $vuser->getUserProperty("system", "currentlogintime");
$timestamp = date("Y-m-d H:i:s");
$vuser->setUserProperty("system", "currentlogintime", $timestamp);
$vuser->setUserProperty("system", "lastlogintime", $lastTime);
}
$vuser = new User();
$vuser->loadUserByUserID($auth->auth["uid"]);
$lastlogin = $vuser->getUserProperty("system", "lastlogintime");
if ($lastlogin == "") {
$lastlogin = i18n("No Login Information available.");
}
$aNotifications = array();
// notification for requested password
if ($vuser->getField('using_pw_request') == 1) {
//$sPwNoti = $notification->returnNotification("warning", i18n("You're logged in with a temporary password. Please change your password."));
$aNotifications[] = i18n("You're logged in with a temporary password. Please change your password.");
}
// Check, if setup folder is still available
if (file_exists(dirname(dirname(dirname(__FILE__))) . "/setup")) {
$aNotifications[] = i18n("The setup directory still exists. Please remove the setup directory before you continue.");
}
// Check, if sysadmin and/or admin accounts are still using well-known default passwords
$sDate = date('Y-m-d');
$sSQL = "SELECT * FROM " . $cfg["tab"]["phplib_auth_user_md5"] . "
WHERE (username = 'sysadmin' AND password = '48a365b4ce1e322a55ae9017f3daf0c0'
AND (valid_from <= '" . Contenido_Security::escapeDB($sDate, $db) . "' OR valid_from = '0000-00-00' OR valid_from = '1000-01-01' OR valid_from is NULL) AND
(valid_to >= '" . Contenido_Security::escapeDB($sDate, $db) . "' OR valid_to = '0000-00-00' OR valid_to is NULL))
OR (username = 'admin' AND password = '21232f297a57a5a743894a0e4a801fc3'
AND (valid_from <= '" . Contenido_Security::escapeDB($sDate, $db) . "' OR valid_from = '0000-00-00' OR valid_from = '1000-01-01' OR valid_from is NULL) AND
(valid_to >= '" . Contenido_Security::escapeDB($sDate, $db) . "' OR valid_to = '0000-00-00' OR valid_to = '1000-01-01' OR valid_to is NULL))
";
$db->query($sSQL);
if ($db->num_rows() > 0) {
$aNotifications[] = i18n("The sysadmin and/or the admin account still contains a well-known default password. Please change immediately.");
}
if (count($aNotifications) > 0) {
$oNotification = new Contenido_Notification();
$sNotification = $oNotification->messageBox("warning", implode("
", $aNotifications), 1) . "
";
} else {
$sNotification = "";
}
$oTpl->set('s', 'NOTIFICATION', $sNotification);
$userid = $auth->auth["uid"];
$oTpl->set('s', 'WELCOME', "" . i18n("Welcome") . " " . $vuser->getRealname($userid, true) . ".");
$oTpl->set('s', 'LASTLOGIN', i18n("Last login") . ": " . $lastlogin);
$clients = $classclient->getAccessibleClients();
$cApiClient = new cApiClient;
$warnings = array();
if (count($clients) > 1) {
$clientform = '");
$oTpl->set('s', 'CLIENTSDROPDOWN', $clientselect);
if ($perm->have_perm() && count($warnings) > 0) {
$oTpl->set('s', 'WARNINGS', "
" . $notification->messageBox("warning", implode("
", $warnings), 0));
} else {
$oTpl->set('s', 'WARNINGS', '');
}
$oTpl->set('s', 'OKBUTTON', '');
} else {
$oTpl->set('s', 'OKBUTTON', '');
$sClientForm = '';
if (count($clients) == 0) {
$sClientForm = i18n('No clients available!');
}
$oTpl->set('s', 'CLIENTFORM', $sClientForm);
$oTpl->set('s', 'CLIENTFORMCLOSE', '');
foreach ($clients as $key => $v_client) {
if ($perm->hasClientPermission($key)) {
$cApiClient->loadByPrimaryKey($key);
if ($cApiClient->hasLanguages()) {
$name = $v_client['name'] . " (" . $key . ')';
} else {
$warnings[] = sprintf(i18n("Client %s (%s) has no languages"), $v_client['name'], $key);
}
}
}
if ($perm->have_perm() && count($warnings) > 0) {
$oTpl->set('s', 'WARNINGS', "
" . $notification->messageBox("warning", implode("
", $warnings), 0));
} else {
$oTpl->set('s', 'WARNINGS', '');
}
$oTpl->set('s', 'CLIENTSDROPDOWN', $name);
}
$props = new PropertyCollection;
$props->select("itemtype = 'idcommunication' AND idclient='$client' AND type = 'todo' AND name = 'status' AND value != 'done'");
$aItemsTodo = [];
while ($prop = $props->next()) {
$aItemsTodo[] = $prop->get("itemid");
}
if (count($aItemsTodo) > 0) {
$in = "idcommunication IN (" . implode(",", $aItemsTodo) . ")";
} else {
$in = 1;
}
$todoitems = new TODOCollection();
$recipient = $auth->auth["uid"];
$todoitems->select("recipient = '$recipient' AND idclient='$client' AND $in");
$iItemsTodoOpen = 0;
while ($todo = $todoitems->next()) {
if ($todo->getProperty("todo", "status") != "done") {
$iItemsTodoOpen++;
}
}
$sTaskTranslation = '';
if ($iItemsTodoOpen == 1) {
$sTaskTranslation = i18n("Reminder list: %d Task open");
} else {
$sTaskTranslation = i18n("Reminder list: %d Tasks open");
}
$mycontenido_overview = '' . i18n("Overview") . '';
$mycontenido_lastarticles = '' . i18n("Recently edited articles") . '';
$mycontenido_tasks = '' . sprintf($sTaskTranslation, $iItemsTodoOpen) . '';
$mycontenido_settings = '' . i18n("Settings") . '';
$oTpl->set('s', 'MYCONTENIDO_OVERVIEW', $mycontenido_overview);
$oTpl->set('s', 'MYCONTENIDO_LASTARTICLES', $mycontenido_lastarticles);
$oTpl->set('s', 'MYCONTENIDO_TASKS', $mycontenido_tasks);
$oTpl->set('s', 'MYCONTENIDO_SETTINGS', $mycontenido_settings);
$admins = $classuser->getSystemAdmins(true);
$sAdminTemplate = '%s, %s';
$sAdminName = "";
$sAdminEmail = "";
$sOutputAdmin = "";
foreach ($admins as $key => $value) {
if ($value["email"] != "") {
$sAdminEmail = '' . $value["email"] . '';
$sAdminName = $value['realname'];
$sOutputAdmin .= sprintf($sAdminTemplate, $sAdminName, $sAdminEmail);
}
}
$oTpl->set('s', 'ADMIN_EMAIL', $sOutputAdmin);
$oTpl->set('s', 'SYMBOLHELP', '' . i18n("Symbol help") . '');
if (isset($cfg["contenido"]["handbook_path"]) && file_exists($cfg["contenido"]["handbook_path"])) {
$oTpl->set('s', 'CONTENIDOMANUAL', '' . i18n("Contenido Manual") . '');
} else {
$oTpl->set('s', 'CONTENIDOMANUAL', '');
}
// For display current online user in Contenido-Backend
$aMemberList = array();
$oActiveUsers = new ActiveUsers($db, $cfg, $auth);
$iNumberOfUsers = 0;
// Start()
$oActiveUsers->startUsersTracking();
//Currently User Online
$iNumberOfUsers = $oActiveUsers->getNumberOfUsers();
// Find all User who is online
$aMemberList = $oActiveUsers->findAllUser();
// Template for display current user
$sTemplate = "";
$sOutput = "";
$sTemplate = '%s, %s';
foreach ($aMemberList as $key) {
$sRealName = $key['realname'];
$aPerms['0'] = $key['perms'];
$sOutput .= sprintf($sTemplate, $sRealName, $aPerms['0']);
}
// set template welcome
$oTpl->set('s', 'USER_ONLINE', $sOutput);
$oTpl->set('s', 'Anzahl', $iNumberOfUsers);
// rss feed
if ($perm->isSysadmin($vuser) && isset($cfg["backend"]["newsfeed"]) && $cfg["backend"]["newsfeed"] == true) {
$newsfeed = 'some news';
$oTpl->set('s', 'CONTENIDO_NEWS', $newsfeed);
} else {
$oTpl->set('s', 'CONTENIDO_NEWS', '');
}
// check for new updates
$oUpdateNotifier = new Contenido_UpdateNotifier($cfg, $vuser, $perm, $sess, $belang);
$sUpdateNotifierOutput = $oUpdateNotifier->displayOutput();
$oTpl->set('s', 'UPDATENOTIFICATION', $sUpdateNotifierOutput);
$oTpl->generate($cfg["path"]["templates"] . $cfg["templates"]["welcome"]);
?>