123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140 |
- <?php /**
- * Postfix Admin
- *
- * LICENSE
- * This source file is subject to the GPL license that is bundled with
- * this package in the file LICENSE.TXT.
- *
- * Further details on the project are available at http://postfixadmin.sf.net
- *
- * @version $Id: list.php 1752 2015-03-17 22:22:28Z christian_boltz $
- * @license GNU GPL v2 or later.
- *
- * File: list.php
- * List all items as a quick overview.
- *
- */
-
- require_once('common.php');
-
- # if (safeget('token') != $_SESSION['PFA_token']) die('Invalid token!');
-
- $username = authentication_get_username(); # enforce login
-
- $table = safeget('table');
-
- $handlerclass = ucfirst($table) . 'Handler';
-
- if ( !preg_match('/^[a-z]+$/', $table) || !file_exists("model/$handlerclass.php")) { # validate $table
- die ("Invalid table name given!");
- }
-
- # default: domain admin restrictions
- $is_superadmin = 0;
-
- if (authentication_has_role('global-admin')) { # more permissions? Fine!
- $is_superadmin = 1;
- $username = safepost('username', safeget('username', $username)); # prefer POST over GET variable
- }
-
- $is_admin = authentication_has_role('admin');
-
- $handler = new $handlerclass(0, $username, $is_admin);
-
- $formconf = $handler->webformConfig();
-
- $list_admins = array($username);
- if ($is_superadmin && $formconf['required_role'] != 'global-admin') { # 'simulate admin' dropdown doesn't make sense for superadmin-only modules
- $list_admins = array_keys(list_admins());
- }
-
- if ($is_admin) {
- authentication_require_role($formconf['required_role']);
- } else {
- if (empty($formconf['user_hardcoded_field'])) {
- die($handlerclass . ' is not available for users');
- }
- }
-
- $search = safeget('search', safesession("search_$table", array()));
- $searchmode = safeget('searchmode', safesession("searchmode_$table", array()));
-
- if (!is_array($search) || !is_array($searchmode)) {
- # avoid injection of raw SQL if $search is a string instead of an array
- die("Invalid parameter");
- }
-
- if (safeget('reset_search', 0)) {
- $search = array();
- $searchmode = array();
- }
- $_SESSION["search_$table"] = $search;
- $_SESSION["searchmode_$table"] = $searchmode;
-
- if (count($search)) {
- $handler->getList($search, $searchmode);
- } else {
- $handler->getList('');
- }
- $items = $handler->result();
-
- if (count($handler->errormsg)) flash_error($handler->errormsg);
- if (count($handler->infomsg)) flash_error($handler->infomsg);
-
-
- if (safeget('output') == 'csv') {
-
- $out = fopen('php://output', 'w');
- header( 'Content-Type: text/csv; charset=utf-8' );
- header( 'Content-Disposition: attachment;filename='.$table.'.csv');
-
- print "\xEF\xBB\xBF"; # utf8 byte-order to indicate the file is utf8 encoded
- # print "sep=;"; # hint that ; is used as seperator - breaks the utf8 flag in excel import!
- print "\n";
-
- if (!defined('ENT_HTML401')) { # for compability for PHP < 5.4.0
- define('ENT_HTML401', 0);
- }
-
- # print column headers as csv
- $header = array();
- $columns = array();
- foreach ($handler->getStruct() as $key => $field) {
- if ($field['display_in_list'] && $field['label'] != '') { # don't show fields without a label
- $header[] = html_entity_decode ( $field['label'], ENT_COMPAT | ENT_HTML401, 'UTF-8' );
- $columns[] = $key;
- }
- }
- fputcsv($out, $header, ';');
-
- # print items as csv
- foreach ($items as $item) {
- $fields = array();
- foreach ($columns as $column) {
- $fields[] = $item[$column];
- }
- fputcsv($out, $fields, ';');
- }
-
- fclose($out);
-
- } else { # HTML output
-
- $smarty->assign('admin_list', $list_admins);
- $smarty->assign('admin_selected', $username);
- $smarty->assign('smarty_template', 'list');
- $smarty->assign('struct', $handler->getStruct());
- $smarty->assign('msg', $handler->getMsg());
- $smarty->assign('table', $table);
- $smarty->assign('items', $items);
- $smarty->assign('id_field', $handler->getId_field());
- $smarty->assign('formconf', $formconf);
- $smarty->assign('search', $search);
- $smarty->assign('searchmode', $searchmode);
-
- $smarty->display ('index.tpl');
-
- }
-
- /* vim: set expandtab softtabstop=4 tabstop=4 shiftwidth=4: */
- ?>
|