<?php

/*************************

  Coppermine Photo Gallery

  ************************

  Copyright (c) 2003-2007 Coppermine Dev Team

  v1.1 originally written by Gregory DEMAR



  This program is free software; you can redistribute it and/or modify

  it under the terms of the GNU General Public License as published by

  the Free Software Foundation; either version 2 of the License, or

  (at your option) any later version.

  ********************************************

  Coppermine version: 1.4.12

**********************************************/



if (!defined('IN_COPPERMINE')) die('Not in Coppermine...');



// Switch that allows overriding the bridge manager with hard-coded values

define('USE_BRIDGEMGR', 1);



// include base class

require_once 'bridge/udb_base.inc.php';



//-----------------------------------------------------------------------------

/** return relative path to 'target_file' up from 'source_file'

*/

//-----------------------------------------------------------------------------

function relative_paths($source_file, $target_file)

{



  $_cpg = dirname(realpath($source_file));

  $_bb = dirname(realpath($target_file));

  $sep = strpos($_cpg, '\\') !== false ? '\\' : '/'; // for IIS



  $_cpg = explode($sep, $_cpg);

  $_bb = explode($sep, $_bb);



  if (count($_cpg) > count($_bb))

  {

    // $_cpg is below $_bb

    $npath = '';

    foreach($_bb as $key=>$path)

    {

      if ($path == $_cpg[$key])

        continue;

      $npath.=$_cpg[$key].'/';

    }

    $npath.=implode('/', array_slice($_cpg, $key+1));

  }

  elseif (count($_bb) > count($_cpg))

  {

    // $_bb is below $cpg

    $npath = '';

    foreach($_cpg as $key=>$path)

    {

      if ($path == $_bb[$key])

        continue;

      $npath.='../';

    }

    $npath.=str_repeat('../', count($_bb) - ($key+1));

  }

  else

  {

    // both on same level

    $npath = '';

    foreach($_cpg as $key=>$path)

    {

      if ($path == $_bb[$key])

        continue;

      $npath.='../'.$_cpg[$key];

    }

  }



  return $npath;

}

//-----------------------------------------------------------------------------

/** bridge class for phpbb3 (RC3)

*/

//-----------------------------------------------------------------------------

class phpbb3_udb extends core_udb {

  //---------------------------------------------------------------------------

  /** construct bridge

  */

  function phpbb3_udb()

  {

    global $BRIDGE;

    if (!USE_BRIDGEMGR)

    {

      // the vars that are used when bridgemgr is disabled

      // change them for your needs

      // URL of your phpbb3

      $this->boardurl = 'http://localhost/';

      // local path to your phpbb3 config file

      require_once('../config.php');

    }

    else

    { // the vars from the bridgemgr

      $this->boardurl = $BRIDGE['full_forum_url'];

      require_once($BRIDGE['relative_path_to_config_file'] . 'config.php');

      $this->use_post_based_groups = $BRIDGE['use_post_based_groups'];

    }



    // phpbb3 uses multigroups

    $this->multigroups = 1;



    // Database connection settings from phpbb3's config file

    $this->db = array(

      'name' => $dbname,

      'host' => $dbhost ? $dbhost : 'localhost',

      'user' => $dbuser,

      'password' => $dbpasswd,

      'prefix' =>$table_prefix

    );



    // Board table names

    $this->table = array(

      'users' => 'users',

      'groups' => 'groups',

      'sessions' => 'sessions',

      'usergroups' => 'user_group',

      'sessionskeys' => 'sessions_keys'

    );



    // Derived full table names

    $this->usertable = '`' . $this->db['name'] . '`.' . $this->db['prefix'] . $this->table['users'];

    $this->groupstable =  '`' . $this->db['name'] . '`.' . $this->db['prefix'] . $this->table['groups'];

    $this->sessionstable =  '`' . $this->db['name'] . '`.' . $this->db['prefix'] . $this->table['sessions'];

    $this->usergroupstable = '`' . $this->db['name'] . '`.' . $this->db['prefix'] . $this->table['usergroups'];

    $this->sessionskeystable = '`' . $this->db['name'] . '`.' . $this->db['prefix'] . $this->table['sessionskeys'];



    // Table field names

    $this->field = array(

      'username' => 'username', // name of 'username' field in users table

      'user_id' => 'user_id', // name of 'id' field in users table

      'password' => 'user_password', // name of 'password' field in users table

      'email' => 'user_email', // name of 'email' field in users table

      'regdate' => 'user_regdate', // name of 'registered' field in users table

      'active' => 'user_active', // is user account active?

      'lastvisit' => 'user_lastvisit', // name of 'location' field in users table

      'location' => 'user_from', // name of 'location' field in users table

      'website' => 'user_website', // name of 'website' field in users table

      'usertbl_group_id' => 'group_id', // name of 'group id' field in users table

      'grouptbl_group_id' => 'group_id', // name of 'group id' field in groups table

      'grouptbl_group_name' => 'group_name' // name of 'group name' field in groups table

    );



    // Pages to redirect to

    $this->page = array(

      'register' => '/ucp.php?mode=register',

      'editusers' => '/memberlist.php',

      'edituserprofile' => "/memberlist.php?mode=viewprofile&u=",

    );



    // Group ids - admin and guest only.

    $this->admingroups = array($BRIDGE['admin_group'],);

    $this->guestgroup = $BRIDGE['guest_group'];

    $this->botgroup =  $BRIDGE['bot_group'];



    // Use a special function to collect groups for cpg groups table

    $this->group_overrride = 1;



    // get path for redirection

    $this->redirect_url = relative_paths(basename($_SERVER['PHP_SELF']), $BRIDGE['relative_path_to_config_file'].'config.php');

    // Cookie settings - used in following functions only

    $this->cookie_name = $BRIDGE['cookie_prefix'];

    // Connect to db

    $this->connect();

  }



  //---------------------------------------------------------------------------

  /** get group definitions from phpbb3

  */

  function collect_groups()

  {

    if (!$this->use_post_based_groups)

    {

    // add initial groups for non post-based groups

      $udb_groups = array(1 =>'Administrators', 2=> 'Registered', 3=>'Guests', 4=> 'Banned');

    }

    else

    {

      // select all groups instead of bots' group

      $sql ="SELECT * FROM {$this->groupstable} WHERE group_id != {$this->botgroup} ORDER BY group_id DESC";



      $result = cpg_db_query($sql, $this->link_id);

      while ($row = mysql_fetch_assoc($result))

      {

        // offset all phpbb3 defined groups by 100

        $udb_groups[$row[$this->field['grouptbl_group_id']]+100] = utf_ucfirst(utf_strtolower($row[$this->field['grouptbl_group_name']]));

      }

      mysql_free_result($result);

    }

    return $udb_groups;

  }

  //---------------------------------------------------------------------------

  /** definition of how to extract id, name from a session

      NOTICE: normally called cookie_extraction, but had to change this because

              session_extraction is called first

  */

  function session_extraction()

  {

    $this->sid=FALSE;

    // check if cookie is set

    if (isset($_COOKIE[$this->cookie_name . '_sid']))

    {

      // extract session id

      $this->sid = addslashes($_COOKIE[$this->cookie_name . '_sid']);

      // select user_id and password, except session belongs to a bot or a guest

      $sql = "SELECT u.{$this->field['user_id']} AS user_id, u.{$this->field['password']} AS password FROM {$this->usertable} AS u, {$this->sessionstable} AS s WHERE u.{$this->field['user_id']}=s.session_user_id ".

        "AND s.session_id = '{$this->sid}' ".

        "AND u.group_id != {$this->botgroup} ".

        "AND u.group_id != {$this->guestgroup}";

      $result = cpg_db_query($sql, $this->link_id);



      if (mysql_num_rows($result))

      {

        $row = mysql_fetch_array($result);

      }

      mysql_free_result($result);

    }

    return isset($row) ? $row : false;

  }

  //---------------------------------------------------------------------------

  /** extract id and password information from a session (cookies not available?)

      WARNING: since I didn't found how to force coppermine to hand over the

               session id in links, it won't work without cookies!

  */

  function cookie_extraction()

  {

    $id = 0;

    $pass = '';

    if (!isset($this->sid)) $this->sid = FALSE;

    if (!$this->sid)

    {

      if (!($this->sid = $GLOBALS['value']))

      {

        global $_REQUEST;

        if (isset($_REQUEST['sid']))

        {

          $this->sid = $_REQUEST['sid'];

        }

        else

        {

          global $_SERVER;

          $url = parse_url($_SERVER['HTTP_REFERER']);

          parse_str($url['query'], $query);

          if (isset($query['sid']))

          {

            $this->sid = $query['sid'];

          }

        }

      }

    }

    if ($this->sid)

    {

      $sql = "SELECT u.user_id, u.user_password ".

             "FROM {$this->sessionstable} AS s ".

             "  INNER JOIN {$this->usertable} AS u ".

             "  ON s.session_user_id = u.user_id ".

             "WHERE s.session_id = '".mysql_real_escape_string($this->sid, $this->linkid)."'".

             "  AND ".

             "u.user_inactive_reason = 0 ".

             "  AND u.group_id != {$this->botgroup} ".

             "  AND u.group_id != {$this->guestgroup} ".

             "LIMIT 1";



      $result = cpg_db_query($sql, $this->link_id);

      list($id, $pass) = mysql_fetch_row($result);

      mysql_free_result($result);

    }

    return ($id) ? array($id, $pass) : false;

  }

  //---------------------------------------------------------------------------

  /** get users groups

  */

  function get_groups($row)

  {

    global $BRIDGE, $USER_DATA;

    $data = array();

    $user_id = $USER_DATA['user_id'];

    // select all groups of user, for easier handling the maingroup of user is placed in every row

    $sql = "SELECT ug.group_id AS group_id, u.group_id AS maingroup ".

           "FROM {$this->usergroupstable} ug ".

           "LEFT JOIN {$this->usertable} u ON u.user_id = ug.user_id ".

           "WHERE u.user_id = $user_id ".

           "AND u.group_id != {$this->botgroup}";



    $result = cpg_db_query($sql, $this->link_id);



    $first = true;

    $maingroup = -1;



    while ($row=mysql_fetch_assoc($result))

    {

      if ($first)

      {

        // in first iteration step we have to place the maingroup of request into result array

        if (in_array($row['maingroup'], $this->admingroups))

        {

          $data[] = 100 + $BRIDGE['admin_group'];

        }

        // store it for later use

        $maingroup = $row['maingroup'];

        // add maingroup

        $data[] = 100 + $maingroup;

        $first = false;

      }

      // add the rest, if not already in (maingroup is already in)

      if ($row['group_id'] != $maingroup)

      {

        $data[] = 100 + $row['group_id'];

      }

    }



    mysql_free_result($result);



    // if a maingroup was set and not using post-based groups, place main group as first value

    if (!$this->use_post_based_groups && ($maingroup >= 0))

    {

      if ( in_array($maingroup, $this->admingroups) )

      {

        array_unshift($data, 1);

      }

      else

      {

        array_unshift($data, 2);

      }

    }



    return $data;

  }

  //---------------------------------------------------------------------------

  /** definition of actions required to convert a password from user database form to cookie form

  */

  function udb_hash_db($password)

  {

    return $password; // unused

  }

  //---------------------------------------------------------------------------

  /** redirect to login page

  */

  function login_page()

  {

    $this->redirect("ucp.php?mode=login&redirect={$this->redirect_url}");

  }

  //---------------------------------------------------------------------------

  /** redirect to logout page

  */

  function logout_page()

  {

    $this->redirect("ucp.php?mode=logout&sid={$this->sid}&redirect={$this->redirect_url}");

  }

  //---------------------------------------------------------------------------

  /** redirect to user list (available for admins only)

  */

  function view_users()

  {

    // uncomment the next line if you want to see phpbb3's user list instead of coppermine's one

    // $this->redirect("memberlist.php?sid={$this->sid}");

  }

  //---------------------------------------------------------------------------

  /** redirect to user's profile

  */

   function view_profile($uid)

  {

    global $USER_DATA;

    if ($uid)

        $this->redirect("memberlist.php?mode=viewprofile&sid={$this->sid}&u={$uid}");

    else

        $this->redirect("memberlist.php?mode=viewprofile&sid={$this->sid}&u={$USER_DATA[user_id]}");



  }

  //---------------------------------------------------------------------------

  /** get full user list

  */

  function get_users($options = array())

  {

      global $CONFIG;



    // Copy UDB fields and config variables (just to make it easier to read)

      $f =& $this->field;

      $C =& $CONFIG;



    // Sort codes - global this in usermgr.php in 1.5

        $sort_codes = array('name_a' => 'user_name ASC',

                            'name_d' => 'user_name DESC',

                            'group_a' => 'group_name ASC',

                            'group_d' => 'group_name DESC',

                            'reg_a' => 'user_regdate ASC',

                            'reg_d' => 'user_regdate DESC',

                            'pic_a' => 'pic_count ASC',

                            'pic_d' => 'pic_count DESC',

                            'disku_a' => 'disk_usage ASC',

                            'disku_d' => 'disk_usage DESC',

                            'lv_a' => 'user_lastvisit ASC',

                            'lv_d' => 'user_lastvisit DESC',

                           );



    $sql = "SELECT group_id, group_name, group_quota FROM {$C['TABLE_USERGROUPS']}";



    $result = cpg_db_query($sql, $this->link_id);



    $groups = $quotas = array();



    while ($row = mysql_fetch_assoc($result)) {

      $groups[$row['group_id']] = $row['group_name'];

      $quotas[$row['group_id']] = $row['group_quota'];

    }



    mysql_free_result($result);



    if (in_array($options['sort'], array('group_a', 'group_d', 'pic_a', 'pic_d', 'disku_a', 'disku_d'))){



      $sort = '';

      list($this->sortfield, $this->sortdir) = explode(' ', $sort_codes[$options['sort']]);

      $this->adv_sort = true;



    } else {



      $sort = "ORDER BY " . $sort_codes[$options['sort']];

      $this->adv_sort = false;

    }



    // Build WHERE clause, if this is a username search

        if ($options['search']) {

            $options['search'] = 'AND u.'.$f['username'].' LIKE "'.$options['search'].'" ';

        }



    // Main array to hold our user data

    $userlist = array();



    // These sorting methods need the cpg pics table, do that first

    if (in_array($options['sort'], array('pic_a', 'pic_d', 'disku_a', 'disku_d'))){



      $sql = "SELECT owner_id, COUNT(pid) as pic_count, ROUND(SUM(total_filesize)/1024) as disk_usage FROM {$C['TABLE_PICTURES']} WHERE owner_id <> 0 GROUP BY owner_id ORDER BY {$sort_codes[$options['sort']]} LIMIT {$options['lower_limit']}, {$options['users_per_page']}";

      $result = cpg_db_query($sql, $this->link_id);



      // If no records, return empty value

      if (!mysql_num_rows($result)) {

        return array();

      }



      while ($row = mysql_fetch_assoc($result)) $userlist[$row['owner_id']] = $row;

      mysql_free_result($result);



      $user_list_string = implode(', ', array_keys($userlist));



      $sql = "SELECT u.{$f['user_id']} as user_id, u.group_id, {$f['username']} as user_name, {$f['email']} as user_email, {$f['regdate']} as user_regdate, {$f['lastvisit']} as user_lastvisit ".

               "FROM {$this->usertable} AS u ".

               "WHERE u.{$f['user_id']} IN ($user_list_string) GROUP BY u.{$f['user_id']}";

      $result = cpg_db_query($sql, $this->link_id);



      // If no records, return empty value

      if (!mysql_num_rows($result)) {

        return array();

      }



      while ($row = mysql_fetch_assoc($result)) $userlist[$row['user_id']] = array_merge($userlist[$row['user_id']], $row);

      mysql_free_result($result);



    } else {



      $sql = "SELECT u.{$f['user_id']} as user_id, u.group_id, {$f['username']} as user_name, {$f['email']} as user_email, {$f['regdate']} as user_regdate, {$f['lastvisit']} as user_lastvisit, 0 as pic_count ".

               "FROM {$this->usertable} AS u ".

               "WHERE u.group_id != {$this->guestgroup} " . // no guests

               "AND u.group_id != {$this->botgroup} ". // no bots

               $options['search'].

               "GROUP BY u.{$f['user_id']} " . $sort .

         " LIMIT {$options['lower_limit']}, {$options['users_per_page']}";



      $result = cpg_db_query($sql, $this->link_id);



      // If no records, return empty value

      if (!mysql_num_rows($result)) {

        return array();

      }



      while ($row = mysql_fetch_assoc($result)) $userlist[$row['user_id']] = $row;

      mysql_free_result($result);



      $user_list_string = implode(', ', array_keys($userlist));



      $sql = "SELECT owner_id, COUNT(pid) as pic_count, ROUND(SUM(total_filesize)/1024) as disk_usage FROM {$C['TABLE_PICTURES']} WHERE owner_id IN ($user_list_string) GROUP BY owner_id";



      $result = cpg_db_query($sql, $this->link_id);



      while ($owner = mysql_fetch_assoc($result)) $userlist[$owner['owner_id']] = array_merge($userlist[$owner['owner_id']], $owner);



      mysql_free_result($result);

    }



    foreach ($userlist as $uid => $user){



      $grps = array();

      if ($this->use_post_based_groups)

      {

        $sql = "SELECT ug.{$this->field['usertbl_group_id']}+100 AS group_id FROM

          {$this->usertable} AS u,

          {$this->usergroupstable} AS ug,

          {$this->groupstable} as g

          WHERE u.{$this->field['user_id']}=ug.{$this->field['user_id']}

          AND u.user_id = '$uid'

          AND g.{$this->field['grouptbl_group_id']} = ug.{$this->field['grouptbl_group_id']}";



        $result = cpg_db_query($sql, $this->link_id);



        while ($row2 = mysql_fetch_array($result)) {

          $grps[] = $row2['group_id'];

        }



        mysql_free_result($result);



      } else {

        $grps[0] = in_array($user['group_id'], $this->admingroups) ? 1 : 2;

      }



      $groupnames = $q = array();



      foreach ($grps as $gid){

        if ($this->use_post_based_groups && $gid == ($user['group_id'] + 100))

          $groupnames[] = '<b>'.$groups[$gid].'</b>';

        else

          $groupnames[] = $groups[$gid];

        $q[] = $quotas[$gid];

      }



      sort($groupnames);



      $userlist[$uid]['group_name'] = implode('<br />' ,$groupnames);

      $userlist[$uid]['group_quota'] = max($q);

    }



    foreach ($userlist as $uid => $user) if (!isset($user['user_name'])) unset($userlist[$uid]);



    if ($this->adv_sort) usort($userlist, array('core_udb', 'adv_sort'));



        return $userlist;

    }

    //---------------------------------------------------------------------------

    function session_update()

    {

      if (isset($this->sid) && $this->sid)

      {

        $sql = "update {$this->sessionstable} set session_time='".time()."' where session_id='{$this->sid}';";

        cpg_db_query($sql, $this->link_id);

      }

    }

    //---------------------------------------------------------------------------

}

//-------------------------------------------------------------------------------

// and go !

$cpg_udb = new phpbb3_udb;

?>