mng-rad-usergroup-del.php at DaloRADIUS

<?php
/*
 *********************************************************************************************************
 * daloRADIUS - RADIUS Web Platform
 * Copyright (C) 2007 - Liran Tal <hide@address.com> All Rights Reserved.
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * as published by the Free Software Foundation; either version 2
 * of the License, or (at your option) any later version.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
 *
 *********************************************************************************************************
 *
 * Authors:	Liran Tal <hide@address.com>
 *
 *********************************************************************************************************
 */

    include ("library/checklogin.php");
    $operator = $_SESSION['operator_user'];

	include('library/check_operator_perm.php');

	$username = "";
	$group = "";

	$showRemoveDiv = "block";

	if (isset($_POST['usergroup'])) {
		$usergroup_array = $_REQUEST['usergroup'];
	} else {
		if (isset($_POST['username']))
			$usergroup_array = array($_REQUEST['username']."||".$_REQUEST['group']);
	}
	
	$logAction = "";
	$logDebugSQL = "";

	if (isset($usergroup_array)) {

		foreach ($usergroup_array as $usergroup) {

		list($username, $group) = split('\|\|', $usergroup);

		if (trim($username) != "") {
	
			$allGroups =  "";
			$allUsernames = "";			
			include 'library/opendb.php';

			if (trim($group) != "") {

				// // delete only a specific groupname and it's attribute
				$sql = "DELETE FROM ".$configValues['CONFIG_DB_TBL_RADUSERGROUP'].
					" WHERE UserName='".$dbSocket->escapeSimple($username)."' AND GroupName='".$dbSocket->escapeSimple($group)."'";
				$res = $dbSocket->query($sql);
				$logDebugSQL .= $sql . "\n";

				$allUsernames .= $username . ", ";
				$allGroups .= $group . ", ";
				$successMsg = "Deleted all Usernames: <b> $allUsernames </b> and all their Groupnames: <b> $allGroups </b>";
				$logAction .= "Successfully deleted all users [$allUsernames] and their groups [$allGroups] on page: ";

				include 'library/closedb.php';
							
			} else {
				// delete all attributes associated with a username
				$sql = "DELETE FROM ".$configValues['CONFIG_DB_TBL_RADUSERGROUP'].
						" WHERE UserName='".$dbSocket->escapeSimple($username)."'";
				$res = $dbSocket->query($sql);
				$logDebugSQL .= $sql . "\n";

				$successMsg = "Deleted all instances for Username: <b> $allUsernames </b>";
				$logAction .= "Successfully deleted all group instances for users [$allUsernames] on page: ";

				include 'library/closedb.php';
			}

			$showRemoveDiv = "none";

		}  else {
			$failureMsg = "No user was entered, please specify a username to remove from database";
			$logAction .= "Failed deleting empty user on page: ";
		}

		} //foreach
	}
	

	include_once('library/config_read.php');
    $log = "visited page: ";


	
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
<head>

<script src="library/javascript/pages_common.js" type="text/javascript"></script>

<title>daloRADIUS</title>
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<link rel="stylesheet" href="css/1.css" type="text/css" media="screen,projection" />

</head>
 
 
<?php
	include ("menu-mng-rad-usergroup.php");
?>


	<div id="contentnorightbar">
	
		<h2 id="Intro"><a href="#" onclick="javascript:toggleShowDiv('helpPage')"><?php echo $l['Intro']['mngradusergroupdel.php'] ?>
		<h144>+</h144></a></h2>

		<div id="helpPage" style="display:none;visibility:visible" >				
			<?php echo $l['helpPage']['mngradusergroupdel'] ?>
			<br/>
		</div>
		<?php
			include_once('include/management/actionMessages.php');
		?>
		
		<div id="removeDiv" style="display:<?php echo $showRemoveDiv ?>;visibility:visible" >
		<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">

        <fieldset>

                <h302> <?php echo $l['title']['GroupInfo'] ?> </h302>
                <br/>

                <input type="hidden" value="<?php echo $group ?>" name="group"/><br/>

                <ul>

                <li class='fieldset'>
                <label for='username' class='form'><?php echo $l['all']['Username'] ?></label>
                <input name='username' type='text' id='username' value='<?php echo $username ?>' tabindex=100 />
                </li>

                <li class='fieldset'>
                <label for='group' class='form'><?php echo $l['all']['Groupname'] ?></label>
                <input name='group' type='text' id='group' value='<?php echo $group ?>' tabindex=101 />
                <?php   
                        include 'include/management/populate_selectbox.php';
                        populate_groups("Select Groups","long");
                ?>
                <div id='groupTooltip'  style='display:none;visibility:visible' class='ToolTip'>
                        <img src='images/icons/comment.png' alt='Tip' border='0' />
                        <?php echo $l['Tooltip']['groupTooltip'] ?>
                </div>
                </li>


                <li class='fieldset'>
                <br/>
                <hr><br/>
                <input type='submit' name='submit' value='<?php echo $l['buttons']['apply'] ?>' class='button' />
                </li>

		</ul>
	</fieldset>

	</form>
	</div>

<?php
	include('include/config/logging.php');
?>

		</div>
	
		<div id="footer">
	
<?php
	include 'page-footer.php';
?>


		</div>

</div>
</div>


</body>
</html>