$val) if (!is_numeric($val)) unset ($groups[$key]); // If the primary user group that the user is a member of is not in the list of other groups they are a member of, append the primary group to the list if (!in_array($pri_group, $groups)) array_push($groups, $pri_group); // Set the limitations based on their group membership $result = run_query("SELECT MAX(group_quota) as disk_max, MIN(group_quota) as disk_min, " . "MAX(can_rate_pictures) as can_rate_pictures, MAX(can_send_ecards) as can_send_ecards, " . "MAX(upload_form_config) as ufc_max, MIN(upload_form_config) as ufc_min, " . "MAX(custom_user_upload) as custom_user_upload, MAX(num_file_upload) as num_file_upload, " . "MAX(num_URI_upload) as num_URI_upload, " . "MAX(can_post_comments) as can_post_comments, MAX(can_upload_pictures) as can_upload_pictures, " . "MAX(can_create_albums) as can_create_albums, " . "MAX(has_admin_access) as has_admin_access, " . "MIN(pub_upl_need_approval) as pub_upl_need_approval, MIN( priv_upl_need_approval) as priv_upl_need_approval ". "FROM {$CONFIG['TABLE_USERGROUPS']} WHERE group_id in (" . implode(",", $groups). ")"); // Check to see if any records were returned, if so define an array in USER_DATA if (mysql_num_rows($result)) { // Load the limitations into USER_DATA as an array $USER_DATA = mysql_fetch_assoc($result); // Request the group name of the primary group $result = run_query("SELECT group_name FROM {$CONFIG['TABLE_USERGROUPS']} WHERE group_id= " . $pri_group); $temp_arr = mysql_fetch_assoc($result); // Add the group name to the USER_DATA array $USER_DATA["group_name"] = $temp_arr["group_name"]; // If no results, load the default id (3 for guests) } else { // Request all the settings for a default (guest) user $result = run_query("SELECT * FROM {$CONFIG['TABLE_USERGROUPS']} WHERE group_id = $default_group_id"); if (!mysql_num_rows($result)) die('Coppermine critical error:
The group table does not contain the Anonymous group !'); // Load the default user settings into the USER_DATA array $USER_DATA = mysql_fetch_assoc($result); } // Free up system resources that were used by the query mysql_free_result($result); // Add the group_id as the primary group into the USER_DATA array $USER_DATA["group_id"] = $pri_group; // Add the additional groups into the USER_DATA array $USER_DATA['groups'] = $groups; // If magic quotes are turned off, then escape the string to ensure no problems if (get_magic_quotes_gpc() == 0) $USER_DATA['group_name'] = mysql_escape_string($USER_DATA['group_name']); return($USER_DATA); } // Establish the user ID based on the retrieved session ID function extractSessionInfo() { global $CONFIG, $session_uid; //Generate the client_id $client_id = md5($_SERVER['HTTP_USER_AGENT'].$_SERVER['SERVER_PROTOCOL'].$CONFIG['site_url']); // Get the session cookie value $sessioncookie = $_COOKIE[$client_id]; // Create the session id by concat(session_cookie_value, client_id) $session_id = $sessioncookie.$client_id; // Check for valid session $sql = "SELECT user_id FROM {$CONFIG['TABLE_SESSIONS']} WHERE session_id=md5('$session_id');"; $result = run_query($sql); $row = mysql_fetch_array($result); $session_uid = $row['user_id']; } extractSessionInfo(); // If a user_id can be retrieved from the session, continue, otherwise load basic data if (!empty($session_uid)) { // Get all the user information from the database where the user_id matches that from the cookie, the user is active, the password is not empty, and the password matches that in the cookie $results = run_query("SELECT * FROM {$CONFIG['TABLE_USERS']} WHERE user_id='$session_uid' AND user_active = 'YES'"); $USER_DATA = mysql_fetch_assoc($results); // For security measures, replace the user's password with a null string $USER_DATA['user_password'] = '********'; // Free up the system resources used by the query mysql_free_result($results); // Append the user data from the user database with that gleaned from the usergroups database where the groups matched $USER_DATA = $USER_DATA + cpgGetUserData($USER_DATA['user_group'], explode(',', $USER_DATA['user_group_list'])); // Define global values to be used anywhere on the site define('USER_ID', (int)$USER_DATA['user_id']); define('USER_NAME', $USER_DATA['user_name']); define('USER_GROUP', $USER_DATA['group_name']); define('USER_GROUP_SET', '(' . implode(',', $USER_DATA['groups']) . ')'); define('USER_IS_ADMIN', (int)$USER_DATA['has_admin_access']); define('USER_CAN_SEND_ECARDS', (int)$USER_DATA['can_send_ecards']); define('USER_CAN_RATE_PICTURES', (int)$USER_DATA['can_rate_pictures']); define('USER_CAN_POST_COMMENTS', (int)$USER_DATA['can_post_comments']); define('USER_CAN_UPLOAD_PICTURES', (int)$USER_DATA['can_upload_pictures']); define('USER_CAN_CREATE_ALBUMS', (int)$USER_DATA['can_create_albums']); define('USER_UPLOAD_FORM', (int)$USER_DATA['upload_form_config']); define('CUSTOMIZE_UPLOAD_FORM', (int)$USER_DATA['custom_user_upload']); define('NUM_FILE_BOXES', (int)$USER_DATA['num_file_upload']); define('NUM_URI_BOXES', (int)$USER_DATA['num_URI_upload']); } else { $USER_DATA = cpgGetUserData(3, array(3)); define('USER_ID', 0); define('USER_NAME', 'Anonymous'); define('USER_GROUP', $USER_DATA['group_name']); define('USER_GROUP_SET', '(' . $USER_DATA['group_id'] . ')'); define('USER_IS_ADMIN', 0); define('USER_CAN_SEND_ECARDS', (int)$USER_DATA['can_send_ecards']); define('USER_CAN_RATE_PICTURES', (int)$USER_DATA['can_rate_pictures']); define('USER_CAN_POST_COMMENTS', (int)$USER_DATA['can_post_comments']); define('USER_CAN_UPLOAD_PICTURES', (int)$USER_DATA['can_upload_pictures']); define('USER_CAN_CREATE_ALBUMS', 0); define('USER_UPLOAD_FORM', (int)$USER_DATA['upload_form_config']); define('CUSTOMIZE_UPLOAD_FORM', (int)$USER_DATA['custom_user_upload']); define('NUM_FILE_BOXES', (int)$USER_DATA['num_file_upload']); define('NUM_URI_BOXES', (int)$USER_DATA['num_URI_upload']); } run_query('close'); } /**************************************************************************/ /************************************************************************** Run function **************************************************************************/ auth_me(); /**************************************************************************/ ?>