name] = $r->value; } // db results if (strlen($results['theme_name']) > 0) { $results['theme_path'] = "/themes/" . $results['theme_name']; } conf($results,1); } // set_site_preferences /*! @function clean_preference_name @discussion s/_/ /g & upper case first */ function clean_preference_name($name) { $name = str_replace("_"," ",$name); $name = ucwords($name); return $name; } // clean_preference_name /*! @function update_preferences @discussion grabs the current keys that should be added and then runs throught $_REQUEST looking for those values and updates them for this user */ function update_preferences($pref_id=0) { $pref_user = new User($pref_id); /* Get current keys */ $sql = "SELECT id,name,type FROM preferences"; /* If it isn't the System Account's preferences */ if ($pref_id != '-1') { $sql .= " WHERE type!='system'"; } $db_results = mysql_query($sql, dbh()); // Collect the current possible keys while ($r = mysql_fetch_assoc($db_results)) { $results[] = array('id' => $r['id'], 'name' => $r['name'],'type' => $r['type']); } // end collecting keys /* Foreach through possible keys and assign them */ foreach ($results as $data) { /* Get the Value from POST/GET var called $data */ $type = $data['type']; $name = $data['name']; $apply_to_all = "check_" . $data['name']; $id = $data['id']; $value = sql_escape(scrub_in($_REQUEST[$name])); /* Some preferences require some extra checks to be performed */ switch ($name) { case 'theme_name': // If the theme exists and it's different then our current one reset the colors if (theme_exists($value) AND $pref_user->prefs['theme_name'] != $value) { set_theme_colors($value,$pref_id); } break; case 'sample_rate': $value = validate_bitrate($value); break; default: break; } /* Run the update for this preference only if it's set */ if (isset($_REQUEST[$name])) { update_preference($pref_id,$name,$id,$value); } } // end foreach preferences } // update_preferences /** * update_preference * This function updates a single preference and is called by the update_preferences function * @package Preferences * @catagory Update */ function update_preference($username,$name,$pref_id,$value) { $apply_check = "check_" . $name; /* First see if they are an administrator and we are applying this to everything */ if ($GLOBALS['user']->has_access(100) AND make_bool($_REQUEST[$apply_check])) { $sql = "UPDATE user_preference SET `value`='$value' WHERE preference='$pref_id'"; $db_results = mysql_query($sql, dbh()); /* Reset everyones colors! */ if ($name =='theme_name') { set_theme_colors($value,0); } return true; } /* Else make sure that the current users has the right to do this */ if (has_preference_access($name)) { $sql = "UPDATE user_preference SET `value`='$value' WHERE preference='$pref_id' AND user='$username'"; $db_resutls = mysql_query($sql, dbh()); return true; } return false; } // update_preference /*! @function has_preference_access @discussion makes sure that the user has sufficient rights to actually set this preference, handle as allow all, deny X //FIXME: // This is no longer needed, we just need to check against preferences.level */ function has_preference_access($name) { if (conf('demo_mode')) { return false; } switch($name) { case 'download': case 'upload': case 'quarantine': case 'upload_dir': case 'sample_rate': case 'direct_link': $level = 100; break; default: $level = 25; break; } // end switch key if ($GLOBALS['user']->has_access($level)) { return true; } return false; } // has_preference_access /*! @function create_preference_input @discussion takes the key and then creates the correct type of input for updating it */ function create_preference_input($name,$value) { $len = strlen($value); if ($len <= 1) { $len = 8; } if (!has_preference_access($name)) { if ($value == '1') { echo "Enabled"; } elseif ($value == '0') { echo "Disabled"; } elseif ($name == 'upload_dir' || $name == 'quarantine_dir') { /* Show Nothing */ echo " "; } else { echo $value; } return; } // if we don't have access to it switch($name) { case 'display_menu': case 'download': case 'quarantine': case 'upload': case 'access_list': case 'lock_songs': case 'xml_rpc': case 'force_http_play': case 'no_symlinks': case 'use_auth': case 'access_control': case 'demo_mode': case 'condPL': case 'direct_link': if ($value == '1') { $is_true = "selected=\"selected\""; } else { $is_false = "selected=\"selected\""; } echo "\n"; break; case 'play_type': if ($value == 'downsample') { $is_down = 'selected="selected"'; } elseif ($value == 'localplay') { $is_local = 'selected="selected"'; } else { $is_stream = "selected=\"selected\""; } echo "\n"; break; case 'playlist_type': $var_name = $value . "_type"; ${$var_name} = "selected=\"selected\""; echo "\n"; break; case 'lang': $languages = get_languages(); $var_name = $value . "_lang"; ${$var_name} = "selected=\"selected\""; echo "\n"; break; case 'localplay_controller': $controllers = get_localplay_controllers(); echo "\n"; break; case 'localplay_level': if ($GLOBALS['user']->prefs['localplay_level'] == '2') { $is_full = 'selected="selected"'; } elseif ($GLOBALS['user']->prefs['localplay_level'] == '1') { $is_global = 'selected="selected"'; } echo "\n"; break; case 'theme_name': $themes = get_themes(); echo "\n"; break; case 'quarantine_dir': case 'upload_dir': if (!$GLOBALS['user']->has_access(100)) { break; } default: echo ""; break; } } // create_preference_input /** * get_preference_id * This takes the name of a preference and returns it's id this is usefull for calling * the user classes update_preference function * @package Preferences * @catagory Get */ function get_preference_id($name) { $sql = "SELECT id FROM preferences WHERE name='" . sql_escape($name) . "'"; $db_results = mysql_query($sql, dbh()); $results = mysql_fetch_assoc($db_results); return $results['id']; } // get_preference_id /** * insert_preference * This creates a new preference record in the * preferences table this is used by the modules */ function insert_preference($name,$description,$default,$level,$type,$catagory) { /* Clean the incomming variables */ $name = sql_escape($name); $description = sql_escape($description); $default = sql_escape($default); $level = sql_escape($level); $type = sql_escape($type); $catagory = sql_escape($catagory); /* Form the sql statement */ $sql = "INSERT INTO preferences (`name`,`description`,`value`,`type`,`level`,`catagory`) VALUES " . " ('$name','$description','$default','$type','$level','$catagory')"; $db_results = mysql_query($sql, dbh()); if ($db_results) { return true; } return false; } // insert_preference ?>