-
Notifications
You must be signed in to change notification settings - Fork 120
/
groups.php
50 lines (45 loc) · 1.38 KB
/
groups.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
<?php
/* Copyright (c) Anuko International Ltd. https://www.anuko.com
License: See license.txt */
require_once('initialize.php');
import('ttUser');
import('form.Form');
// Access checks.
if (!ttAccessAllowed('manage_subgroups')) {
header('Location: access_denied.php');
exit();
}
if ($request->isPost()) {
$group_id = $request->getParameter('group');
if (!ttValidInteger($group_id)) {
header('Location: access_denied.php'); // Protection against sql injection.
exit();
}
if (!$user->isGroupValid($group_id)) {
header('Location: access_denied.php'); // Wrong group id in post.
exit();
}
}
// End of access checks.
if ($request->isPost()) {
$group_id = (int)$request->getParameter('group');
$user->setOnBehalfGroup($group_id);
} else {
$group_id = $user->getGroup();
}
$form = new Form('subgroupsForm');
$groups = $user->getGroupsForDropdown();
if (count($groups) > 1) {
$form->addInput(array('type'=>'combobox',
'onchange'=>'this.form.submit();',
'name'=>'group',
'value'=>$group_id,
'data'=>$groups,
'datakeys'=>array('id','name')));
$smarty->assign('group_dropdown', 1);
}
$smarty->assign('subgroups', $user->getSubgroups($group_id));
$smarty->assign('forms', array($form->getName()=>$form->toArray()));
$smarty->assign('title', $i18n->get('label.subgroups'));
$smarty->assign('content_page_name', 'groups.tpl');
$smarty->display('index.tpl');