2018/Feb/28 -i állapot hozzáadva, mint a módosítások kiindulási állapota

1 files changed, 110 insertions, 0 deletions

diff --git a/mayor-orig/www/policy/private/session/createAccount-pre.php b/mayor-orig/www/policy/private/session/createAccount-pre.php
new file mode 100644
index 00000000..ce789482
--- /dev/null
+++ b/mayor-orig/www/policy/private/session/createAccount-pre.php
@@ -0,0 +1,110 @@
+<?php
+/*
+    Module:	base/session
+    createAccount => byAdmin esetén csak az érintet policy-n belül az adminGroup tagjainak lehet létrehozni új account-ot
+    createAccount => byRegistration esetén bárki regisztrálhat bármely policy-ből
+*/
+
+    if (_RIGHTS_OK !== true) die();
+
+    if (memberOf(_USERACCOUNT, $AUTH[_POLICY]['adminGroup'])) {
+	$DEFAULTS['userAccount'] = readVariable($_GET['userAccount'],'userAccount');
+	$DEFAULTS['userCn'] = readVariable($_GET['userCn'],'emptystringnull');
+	$DEFAULTS['userPassword'] = readVariable($_GET['userPassword'],'emptystringnull');
+	$DEFAULTS['mail'] = readVariable($_GET['email'],'emptystringnull');
+	$DEFAULTS['telephoneNumber'] = readVariable($_GET['tel'],'emptystringnull');
+    }
+
+    $toPolicy = readVariable($_POST['toPolicy'], 'enum', readVariable($_GET['toPolicy'], 'enum',_POLICY, $POLICIES), $POLICIES);
+
+    @$toPSF = $_REQUEST['toPSF'];
+
+    if ($toPolicy != _POLICY) require_once(_CONFIGDIR."/$toPolicy-conf.php");
+    if (
+	(
+    	    $AUTH[$toPolicy]['createAccount'] == 'byAdmin'
+	    and memberOf(_USERACCOUNT, $AUTH['private']['adminGroup'])
+	)
+	or (
+	    $AUTH[$toPolicy]['createAccount'] == 'byRegistration'
+	    && _USERACCOUNT ==''
+	)
+    ) {
+	define('_ENABLE',true);
+    } else {
+	define('_ENABLE',false);
+	$_SESSION['alert'][] = 'page:insufficient_access:#1';
+    }
+
+    if (_ENABLE && $action == 'createAccount' && isset($_POST['new'])) {
+
+        $file = $_FILES['file']['tmp_name'];
+        if ($file != '' && $file != 'none' && file_exists($file)) {
+
+            $uidfp=fopen($file, 'r');
+            while ($sor=fgets($uidfp, 4096)) {
+                list($userCn, $userAccount, $userPassword, $category, $studyId, $container)=explode("	",chop($sor));
+		// A biztonság kedvéért ez a html form validációval egyező legyen 
+		$userCn = readVariable($userCn,'html');
+		$userAccount = readvariable($userAccount,'html');
+		$studyId = readVariable($studyId,'number');
+		$category = readVariable($category, 'enum','',$AUTH[$toPolicy]['categories']);
+		$container = readVariable($container,'enum','',$AUTH[$toPolicy][$AUTH[$toPolicy]['backend'].'Containers']);
+		$policyAccountAttrs = array();
+		if (is_array($AUTH[$toPolicy]['accountAttrs'])) foreach ($AUTH[$toPolicy]['accountAttrs'] as $attr) {
+		    if (isset($$attr) and $$attr != '') $policyAccountAttrs[$attr] = readVariable($$attr, 'string');
+		}
+		if (createAccount($userCn, $userAccount, $userPassword, $toPolicy, array('container'=> $container, 'category' => $category, 'policyAttrs' => $policyAccountAttrs)) ===false) {
+		    $_SESSION['alert'][] = "info:user_create_failure: cn.$userCn|account.$userAccount|policy.$toPolicy|category.$category|container.$container";
+		}
+            }
+            fclose($uidfp);
+
+	} else {
+
+	    // kötelező paraméterek
+	    $userCn = readVariable($_POST['userCn'],'html');
+	    $userAccount = readvariable($_POST['userAccount'],'html');
+	    $studyId = readVariable($_POST['studyId'],'number');
+	    $userPassword = $_POST['userPassword'];
+	    $verification = $_POST['verification'];
+
+	    // opcionális  paraméterek
+	    $category = readVariable($_POST['category'], 'enum','',$AUTH[$toPolicy]['categories']);
+	    $container = readVariable($_POST['container'],'enum','',$AUTH[$toPolicy][$AUTH[$toPolicy]['backend'].'Containers']);
+
+	    $policyAccountAttrs = array();
+	    if (is_array($AUTH[$toPolicy]['accountAttrs'])) foreach ($AUTH[$toPolicy]['accountAttrs'] as $attr) {
+		if (isset($_POST[$attr]) and $_POST[$attr] != '') $policyAccountAttrs[$attr] = readVariable($_POST[$attr], 'string'); // ???
+	    }
+
+            if ($userCn == '' or $userAccount == '' or $userPassword == '' or $verification == '') {
+		// Csak policy váltás történt
+                // $_SESSION['alert'][] = 'message:empty_field';
+            } elseif ($userPassword != $verification) {
+                $_SESSION['alert'][] = 'message:pw_not_match';
+            } else {
+                if (createAccount($userCn, $userAccount, $userPassword, $toPolicy, 
+            		    array('container'=> $container, 'category' => $category, 'policyAttrs' => $policyAccountAttrs))) {
+		    if (
+			_POLICY == 'private'
+			&& memberOf(_USERACCOUNT, $AUTH[_POLICY]['adminGroup'])
+		    ) header('Location: '.location("index.php?page=session&f=accountInfo&userAccount=$userAccount&toPolicy=$toPolicy"));
+		    elseif (_POLICY == 'public') {
+			$toPSF = ($toPSF=='') ? 'auth::login' : $toPSF;
+			header(
+			    'Location: '.location("index.php?page=auth&f=login&userAccount=$userAccount&policy=public&toPolicy=$toPolicy&toPSF=$toPSF", array('skin','lang','sessionID'))
+			);
+		    } else {
+			$toPSF = ($toPSF=='') ? 'session::accountInfo' : $toPSF;
+			header(
+			    'Location: '.location("index.php?page=auth&f=login&userAccount=$userAccount&policy=public&toPolicy=$toPolicy&toPSF=$toPSF", array('skin','lang','sessionID'))
+			);
+		    }
+		}
+            }
+        }
+
+    }
+
+?>