user-access-manager / user-access-manager.php

user-access-manager.php in User Access Manager 0.9.1.2, at user-access-manager.php

3,712 lines 129.2 KB

Raw Download Zip

1	<?php
2	/*
3	Plugin Name: User Access Manager
4	Plugin URI: http://www.gm-alex.de/projects/wordpress/plugins/user-access-manager/
5	Author URI: http://www.gm-alex.de/
6	Version: 0.9.1.2
7	Author: Alexander Schneider
8	Description: Manage the access to your posts and pages. <strong>Note:</strong> <em>If you activate the plugin your upload dir will protect by a '.htaccess' with a random password and all old media files insert in a previous post/page will not work anymore. You have to update your posts/pages. If you use already a '.htaccess' file to protect your files the plugin will <strong>overwrite</strong> the '.htaccess'. You can disabel the file locking and set up an other password for the '.htaccess' file at the UAM setting page.</em>
9
10	Copyright 2008 Alexander Schneider (email : alexanderschneider85 [at] gmail DOT com)
11
12	This program is free software; you can redistribute it and/or modify
13	it under the terms of the GNU General Public License as published by
14	the Free Software Foundation; either version 2 of the License, or
15	(at your option) any later version.
16
17	This program is distributed in the hope that it will be useful,
18	but WITHOUT ANY WARRANTY; without even the implied warranty of
19	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20	GNU General Public License for more details.
21
22	You should have received a copy of the GNU General Public License
23	along with this program; if not, write to the Free Software
24	Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
25
26	Uses an Image by: Everaldo Coelho - http://www.everaldo.com/
27	*/
28
29	//DB
30	global $wpdb;
31	define('DB_ACCESSGROUP', $wpdb->prefix.'uam_accessgroups');
32	define('DB_ACCESSGROUP_TO_POST', $wpdb->prefix.'uam_accessgroup_to_post');
33	define('DB_ACCESSGROUP_TO_USER', $wpdb->prefix.'uam_accessgroup_to_user');
34	define('DB_ACCESSGROUP_TO_CATEGORY', $wpdb->prefix.'uam_accessgroup_to_category');
35	define('DB_ACCESSGROUP_TO_ROLE', $wpdb->prefix.'uam_accessgroup_to_role');
36
37	//PATH
38	define('UAM_URLPATH', WP_CONTENT_URL.'/plugins/'.plugin_basename( dirname(__FILE__)).'/' );
39	//define('UAM_URLPATH', WP_CONTENT_URL.'/plugins/user-access-manager/' ); //Localhost DEBUG
40
41	if (!class_exists("UserAccessManager"))
42	{
43	class UserAccessManager
44	{
45	var $adminOptionsName = "uamAdminOptions";
46	var $atAdminPanel = false;
47	var $restrictedPost = array();
48	var $postAccess = array();
49	var $postUserGroup = array();
50	var $uam_db_version = "1.1";
51	var $adminOptions;
52
53	function UserAccessManager()
54	{ //constructor
55
56	}
57
58	function init()
59	{
60	echo load_plugin_textdomain('user-access-manager', 'wp-content/plugins/user-access-manager');
61
62	//---Lang Settings---
63	define('TXT_SETTINGS', __('Settings', 'user-access-manager'));
64
65	define('TXT_POST_SETTING', __('Post settings', 'user-access-manager'));
66	define('TXT_POST_SETTING_DESC', __('Set up the behaviour of locked posts', 'user-access-manager'));
67	define('TXT_POST_TITLE', __('Post title', 'user-access-manager'));
68	define('TXT_POST_TITLE_DESC', __('Displayed text as post title if user has no access', 'user-access-manager'));
69	define('TXT_DISPLAY_POST_TITLE', __('Hide post titel', 'user-access-manager'));
70	define('TXT_DISPLAY_POST_TITLE_DESC', sprintf(__('Selecting "Yes" will show the text which is defined at "%s" if user has no access.', 'user-access-manager'), TXT_POST_TITLE));
71	define('TXT_POST_CONTENT', __('Post content', 'user-access-manager'));
72	define('TXT_POST_CONTENT_DESC', __('Content displayed if user has no access. You can add an login-form by adding the keyword <b>[LOGIN_FORM]</b>. This form will shown on single posts, otherwise a link will shown.', 'user-access-manager'));
73	define('TXT_SHOW_POST_CONTENT_BEFORE_MORE', __('Show post content before <!--more--> tag', 'user-access-manager'));
74	define('TXT_SHOW_POST_CONTENT_BEFORE_MORE_DESC', sprintf(__('Shows the post content before the <!--more--> tag and after that the defined text at "%s". If no <!--more--> is set he defined text at "%s" will shown.', 'user-access-manager'), TXT_POST_CONTENT, TXT_POST_CONTENT));
75	define('TXT_HIDE_POST', __('Hide complete posts', 'user-access-manager'));
76	define('TXT_HIDE_POST_DESC', __('Selecting "Yes" will hide posts if the user has no access.', 'user-access-manager'));
77	define('TXT_POST_COMMENT_CONTENT', __('Post commtent text', 'user-access-manager'));
78	define('TXT_POST_COMMENT_CONTENT_DESC', __('Displayed text as post comment text if user has no access', 'user-access-manager'));
79	define('TXT_DISPLAY_POST_COMMENT', __('Hide post comments', 'user-access-manager'));
80	define('TXT_DISPLAY_POST_COMMENT_DESC', sprintf(__('Selecting "Yes" will show the text which is defined at "%s" if user has no access.', 'user-access-manager'), TXT_POST_COMMENT_CONTENT) );
81	define('TXT_ALLOW_COMMENTS_LOCKED', __('Allow comments', 'user-access-manager'));
82	define('TXT_ALLOW_COMMENTS_LOCKED_DESC', __('Selecting "yes" allows users to comment on locked posts', 'user-access-manager'));
83
84	define('TXT_PAGE_SETTING', __('Page settings', 'user-access-manager'));
85	define('TXT_PAGE_SETTING_DESC', __('Set up the behaviour of locked pages', 'user-access-manager'));
86	define('TXT_PAGE_TITLE', __('Page title', 'user-access-manager'));
87	define('TXT_PAGE_TITLE_DESC', __('Displayed text as page title if user has no access', 'user-access-manager'));
88	define('TXT_DISPLAY_PAGE_TITLE', __('Hide page titel', 'user-access-manager'));
89	define('TXT_DISPLAY_PAGE_TITLE_DESC', sprintf(__('Selecting "Yes" will show the text which is defined at "%s" if user has no access.', 'user-access-manager'), TXT_POST_TITLE));
90	define('TXT_PAGE_CONTENT', __('Page content', 'user-access-manager'));
91	define('TXT_PAGE_CONTENT_DESC', __('Content displayed if user has no access. You can add an login-form by adding the keyword <b>[LOGIN_FORM]</b>. This form will shown on single pages, otherwise a link will shown.', 'user-access-manager'));
92	define('TXT_HIDE_PAGE', __('Hide complete pages', 'user-access-manager'));
93	define('TXT_HIDE_PAGE_DESC', __('Selecting "Yes" will hide pages if the user has no access. Pages will also hide in the navigation.', 'user-access-manager'));
94
95	define('TXT_FILE_SETTING', __('File settings', 'user-access-manager'));
96	define('TXT_FILE_SETTING_DESC', __('Set up the behaviour of files', 'user-access-manager'));
97	define('TXT_LOCK_FILE', __('Lock files', 'user-access-manager'));
98	define('TXT_LOCK_FILE_DESC', __('If you select "Yes" all files will locked by a .htaccess file and only users with access can download files.', 'user-access-manager'));
99	define('TXT_SELECTED_FILE_TYPES', __('Filetypes to lock: ', 'user-access-manager'));
100	define('TXT_NOT_SELECTED_FILE_TYPES', __('Filetypes not to lock: ', 'user-access-manager'));
101	define('TXT_DOWNLOAD_FILE_TYPE', __('Locked file types', 'user-access-manager'));
102	define('TXT_DOWNLOAD_FILE_TYPE_DESC', __('Lock all files, type in file types which you will lock if the post/page is locked or define file types which will not be locked. <b>Note:</b> If you have no problems use all to get the maximum security.', 'user-access-manager'));
103	define('TXT_FILE_PASS_TYPE', __('.htaccess password', 'user-access-manager'));
104	define('TXT_FILE_PASS_TYPE_DESC', __('Set up the password for the .htaccess access. This password is only needed if you need a direct access to your files.', 'user-access-manager'));
105	define('TXT_RANDOM_PASS', __('Use a random generated pass word.', 'user-access-manager'));
106	define('TXT_CURRENT_LOGGEDIN_ADMIN_PASS', __('Use the password of the current logged in admin.', 'user-access-manager'));
107	define('TXT_DOWNLOAD_TYPE', __('Download type', 'user-access-manager'));
108	define('TXT_DOWNLOAD_TYPE_DESC', __('Selecting the type for downloading. <strong>Note:</strong> For using fopen you need "safe_mode = off".', 'user-access-manager'));
109	define('TXT_NORMAL', __('Normal', 'user-access-manager'));
110	define('TXT_FOPEN', __('fopen', 'user-access-manager'));
111
112	define('TXT_OTHER_SETTING', __('Other settings', 'user-access-manager'));
113	define('TXT_OTHER_SETTING_DESC', __('Here you will find all other settings', 'user-access-manager'));
114	define('TXT_PROTECT_FEED', __('Protect Feed', 'user-access-manager'));
115	define('TXT_PROTECT_FEED_DESC', __('Selecting "Yes" will also protect your feed entries.', 'user-access-manager'));
116	define('TXT_HIDE_EMPTY_CATEGORIES', __('Hide empty categories', 'user-access-manager'));
117	define('TXT_HIDE_EMPTY_CATEGORIES_DESC', __('Selecting "Yes" will hide empty categories which are containing only empty childs or no childs.', 'user-access-manager'));
118	define('TXT_REDIRECT', __('Redirect user', 'user-access-manager'));
119	define('TXT_REDIRECT_DESC', __('Setup what happen if a user visit a post/page with no access.', 'user-access-manager'));
120	define('TXT_REDIRECT_TO_BOLG', __('To blog startpage', 'user-access-manager'));
121	define('TXT_REDIRECT_TO_PAGE', __('Custom page: ', 'user-access-manager'));
122	define('TXT_REDIRECT_TO_URL', __('Custom URL: ', 'user-access-manager'));
123	define('TXT_LOCK_RECURSIVE', __('Lock recursive', 'user-access-manager'));
124	define('TXT_LOCK_RECURSIVE_DESC', __('Selecting "Yes" will lock all child posts/pages of a post/page if a user has no access to the parent page. Note: Setting this option to "No" could result in display errors relating to the hierarchy.', 'user-access-manager'));
125	define('TXT_BLOG_ADMIN_HINT_TEXT', __('Admin hint text', 'user-access-manager'));
126	define('TXT_BLOG_ADMIN_HINT_TEXT_DESC', __('The text which will shown behinde the post/page.', 'user-access-manager'));
127	define('TXT_BLOG_ADMIN_HINT', __('Show admin hint at Posts', 'user-access-manager'));
128	define('TXT_BLOG_ADMIN_HINT_DESC', sprintf(__('Selecting "Yes" will show the defined text at "%s" behinde the post/page to an logged in admin to show him which posts/pages are locked if he visits his blog.', 'user-access-manager'), TXT_BLOG_ADMIN_HINT_TEXT));
129	define('TXT_CORE_MOD', __('Core modifications installed?', 'user-access-manager'));
130	define('TXT_CORE_MOD_DESC', __('If you installed the core modifications activated this option.', 'user-access-manager'));
131
132	define('TXT_YES', __('Yes', 'user-access-manager'));
133	define('TXT_NO', __('No', 'user-access-manager'));
134
135	define('TXT_UPDATE_SETTING', __('Update settings', 'user-access-manager'));
136	define('TXT_UPDATE_SETTINGS', __('Settings updated.', 'user-access-manager'));
137
138	//---Access groups---
139
140	define('TXT_MANAGE_GROUP', __('Manage user access groups', 'user-access-manager'));
141	define('TXT_GROUP_ROLE', __('Role affiliation', 'user-access-manager'));
142	define('TXT_NAME', __('Name', 'user-access-manager'));
143	define('TXT_DESCRIPTION', __('Description', 'user-access-manager'));
144	define('TXT_READ_ACCESS', __('Read access', 'user-access-manager'));
145	define('TXT_WRITE_ACCESS', __('Write access', 'user-access-manager'));
146	define('TXT_POSTS', __('Posts', 'user-access-manager'));
147	define('TXT_PAGES', __('Pages', 'user-access-manager'));
148	define('TXT_FILES', __('Files', 'user-access-manager'));
149	define('TXT_CATEGORY', __('Categories', 'user-access-manager'));
150	define('TXT_USERS', __('Users', 'user-access-manager'));
151	define('TXT_DELETE', __('Delete', 'user-access-manager'));
152	define('TXT_UPDATE_GROUP', __('Update group', 'user-access-manager'));
153	define('TXT_ADD', __('Add', 'user-access-manager'));
154	define('TXT_ADD_GROUP', __('Add access group', 'user-access-manager'));
155	define('TXT_GROUP_NAME', __('Access group name', 'user-access-manager'));
156	define('TXT_GROUP_NAME_DESC', __('The name is used to identify the access user group.', 'user-access-manager'));
157	define('TXT_GROUP_DESC', __('Access group description', 'user-access-manager'));
158	define('TXT_GROUP_DESC_DESC', __('The description of the group.', 'user-access-manager'));
159	define('TXT_GROUP_IP_RANGE', __('IP range', 'user-access-manager'));
160	define('TXT_GROUP_IP_RANGE_DESC', __('Type in the IP ranges of users which are join these groups by there IP address without loggin. Set ranges like "BEGIN"-"END", seperate ranges by using ";", single IPs are also allowded. Example: 192.168.0.1-192.168.0.10;192.168.0.20-192.168.0.30', 'user-access-manager'));
161	define('TXT_GROUP_READ_ACCESS', __('Read access', 'user-access-manager'));
162	define('TXT_GROUP_READ_ACCESS_DESC', __('The read access.', 'user-access-manager'));
163	define('TXT_GROUP_WRITE_ACCESS', __('Write access', 'user-access-manager'));
164	define('TXT_GROUP_WRITE_ACCESS_DESC', __('The write access.', 'user-access-manager'));
165	define('TXT_GROUP_ADDED', __('Group was added successfully.', 'user-access-manager'));
166	define('TXT_DEL_GROUP', __('Group(s) was deleted successfully.', 'user-access-manager'));
167	define('TXT_NONE', __('none', 'user-access-manager'));
168	define('TXT_ACCESS_GROUP_EDIT_SUC', __('Access group edit successfully.', 'user-access-manager'));
169	define('TXT_CONTAIN_POSTS', __('Contains %1$s of %2$s posts', 'user-access-manager'));
170	define('TXT_CONTAIN_PAGES', __('Contains %1$s of %2$s pages', 'user-access-manager'));
171	define('TXT_CONTAIN_FILES', __('Contains %1$s of %2$s files', 'user-access-manager'));
172	define('TXT_CONTAIN_CATEGORIES', __('Contains %1$s of %2$s categories', 'user-access-manager'));
173	define('TXT_CONTAIN_USERS', __('Contains %1$s of %2$s users', 'user-access-manager'));
174	define('TXT_IP_RANGE', __('IP range', 'user-access-manager'));
175
176	//---Misc---
177	define('TXT_FULL_ACCESS', __('Full access', 'user-access-manager'));
178	define('TXT_FULL_ACCESS_ADMIN', __('Full access (Administrator)', 'user-access-manager'));
179	define('TXT_NO_GROUP', __('No group', 'user-access-manager'));
180	define('TXT_SET_ACCESS', __('Set access', 'user-access-manager'));
181
182	define('TXT_DATE', __('Date', 'user-access-manager'));
183	define('TXT_TITLE', __('Title', 'user-access-manager'));
184	define('TXT_GROUP_ACCESS', __('Group access', 'user-access-manager'));
185	define('TXT_USERNAME', __('Username', 'user-access-manager'));
186
187	define('TXT_MAIL', __('E-mail', 'user-access-manager'));
188	define('TXT_ACCESS', __('Access', 'user-access-manager'));
189	define('TXT_ADMIN_HINT', __('<strong>Note:</strong> An administrator has allways access to all posts/pages.', 'user-access-manager'));
190
191	define('TXT_SET_POST_ACCESS', __('Set post access', 'user-access-manager'));
192	define('TXT_SET_PAGE_ACCESS', __('Set page access', 'user-access-manager'));
193	define('TXT_GROUPS', __('Access Groups', 'user-access-manager'));
194	define('TXT_CREATE_GROUP_FIRST', __('Please create a access group first.', 'user-access-manager'));
195	define('TXT_SET_USER_ACCESS', __('Set user access', 'user-access-manager'));
196
197	define('TXT_SET_UP_USERGROUPS', __('Set up usergroups', 'user-access-manager'));
198
199	define('TXT_ITSELF', __('itself', 'user-access-manager'));
200	define('TXT_INFO', __('Info', 'user-access-manager'));
201	define('TXT_GROUP_INFO', __('Group infos', 'user-access-manager'));
202	define('TXT_GROUP_LOCK_INFO', __('Locked by', 'user-access-manager'));
203	define('TXT_IS_ADMIN', __('User is Admin. Full access.', 'user-access-manager'));
204	define('TXT_EXPAND', __('expand', 'user-access-manager'));
205	define('TXT_EXPAND_ALL', __('expand all', 'user-access-manager'));
206	define('TXT_COLLAPS', __('collaps', 'user-access-manager'));
207	define('TXT_COLLAPS_ALL', __('collaps all', 'user-access-manager'));
208	define('TXT_ALL', __('all', 'user-access-manager'));
209	define('TXT_ONLY_GROUP_USERS', __('only group users', 'user-access-manager'));
210
211	define('TXT_SETUP', __('Setup', 'user-access-manager'));
212	define('TXT_RESET_UAM', __('Reset User Access Manager', 'user-access-manager'));
213	define('TXT_RESET_UAM_DESC', __('Warning: The reset of the User Access Manager can not be undone. All settings and user groups will permanently lost.', 'user-access-manager'));
214	define('TXT_RESET', __('reset', 'user-access-manager'));
215	define('TXT_UAM_RESET_SUC', __('User Access Manager was reset successfully', 'user-access-manager'));
216	}
217
218	function install()
219	{
220	$this->create_htaccess();
221	$this->create_htpasswd();
222
223	global $wpdb;
224	$uam_db_version = $this->uam_db_version;
225	require_once(ABSPATH . 'wp-admin/includes/upgrade.php');
226
227	$charset_collate = '';
228
229	if ( version_compare(mysql_get_server_info(), '4.1.0', '>=') )
230	{
231	if ( ! empty($wpdb->charset) )
232	$charset_collate = "DEFAULT CHARACTER SET $wpdb->charset";
233	if ( ! empty($wpdb->collate) )
234	$charset_collate .= " COLLATE $wpdb->collate";
235	}
236
237	if($wpdb->get_var("show tables like '".DB_ACCESSGROUP."'") != DB_ACCESSGROUP)
238	{
239	$sql = "CREATE TABLE " . DB_ACCESSGROUP . " (
240	ID int(11) NOT NULL auto_increment,
241	groupname tinytext NOT NULL,
242	groupdesc text NOT NULL,
243	read_access tinytext NOT NULL,
244	write_access tinytext NOT NULL,
245	ip_range mediumtext NULL,
246	PRIMARY KEY (ID)
247	) $charset_collate;";
248
249	dbDelta($sql);
250	}
251
252	if($wpdb->get_var("show tables like '".DB_ACCESSGROUP_TO_POST."'") != DB_ACCESSGROUP_TO_POST)
253	{
254	$sql = "CREATE TABLE " . DB_ACCESSGROUP_TO_POST . " (
255	post_id int(11) NOT NULL,
256	group_id int(11) NOT NULL,
257	PRIMARY KEY (post_id,group_id)
258	) $charset_collate;";
259
260	dbDelta($sql);
261	}
262
263	if($wpdb->get_var("show tables like '".DB_ACCESSGROUP_TO_USER."'") != DB_ACCESSGROUP_TO_USER)
264	{
265	$sql = "CREATE TABLE " . DB_ACCESSGROUP_TO_USER . " (
266	user_id int(11) NOT NULL,
267	group_id int(11) NOT NULL,
268	PRIMARY KEY (user_id,group_id)
269	) $charset_collate;";
270
271	dbDelta($sql);
272	}
273
274	if($wpdb->get_var("show tables like '".DB_ACCESSGROUP_TO_CATEGORY."'") != DB_ACCESSGROUP_TO_CATEGORY)
275	{
276	$sql = "CREATE TABLE " . DB_ACCESSGROUP_TO_CATEGORY . " (
277	category_id int(11) NOT NULL,
278	group_id int(11) NOT NULL,
279	PRIMARY KEY (category_id,group_id)
280	) $charset_collate;";
281
282	dbDelta($sql);
283	}
284
285	if($wpdb->get_var("show tables like '".DB_ACCESSGROUP_TO_ROLE."'") != DB_ACCESSGROUP_TO_ROLE)
286	{
287	$sql = "CREATE TABLE " . DB_ACCESSGROUP_TO_ROLE . " (
288	role_name varchar(255) NOT NULL,
289	group_id int(11) NOT NULL,
290	PRIMARY KEY (role_name,group_id)
291	) $charset_collate;";
292
293	dbDelta($sql);
294	}
295
296	add_option("uam_db_version", $uam_db_version);
297	}
298
299	function update()
300	{
301	global $wpdb;
302	$uam_db_version = $this->uam_db_version;
303	$installed_ver = get_option( "uam_db_version" );
304
305	if(empty($installed_ver))
306	$this->install();
307
308	if($installed_ver != $uam_db_version)
309	{
310	if($installed_ver == '1.0')
311	{
312	if($wpdb->get_var("show tables like '".DB_ACCESSGROUP."'") == DB_ACCESSGROUP)
313	{
314	$wpdb->query("ALTER TABLE ".DB_ACCESSGROUP." ADD read_access TINYTEXT NOT NULL DEFAULT '', ADD write_access TINYTEXT NOT NULL DEFAULT '', ADD ip_range MEDIUMTEXT NULL DEFAULT ''");
315	$wpdb->query("UPDATE ".DB_ACCESSGROUP." SET read_access = 'group', write_access = 'group'");
316	update_option("uam_db_version", $uam_db_version);
317	}
318	}
319	}
320	if($wpdb->get_var("show tables like '".DB_ACCESSGROUP."'") == DB_ACCESSGROUP)
321	{
322	if($wpdb->get_var("show columns from ".DB_ACCESSGROUP." like 'ip_range'") != 'ip_range')
323	{
324	$wpdb->query("ALTER TABLE ".DB_ACCESSGROUP." ADD ip_range MEDIUMTEXT NULL DEFAULT ''");
325	}
326	}
327	}
328
329	function uninstall()
330	{
331	global $wpdb;
332	$wpdb->query("DROP TABLE ".DB_ACCESSGROUP.", ".DB_ACCESSGROUP_TO_POST.", ".DB_ACCESSGROUP_TO_USER.", ".DB_ACCESSGROUP_TO_CATEGORY.", ".DB_ACCESSGROUP_TO_ROLE);
333	delete_option($this->adminOptionsName);
334	delete_option("uam_db_version");
335	$this->delete_htaccess_files();
336	}
337
338	function deactivate()
339	{
340	$this->delete_htaccess_files();
341	}
342
343	function create_htaccess()
344	{
345	// Make .htaccess file to protect data
346
347	// get url
348	$wud = wp_upload_dir();
349	if(empty($wud['error']))
350	{
351	$url = $wud['basedir']."/";
352
353	$areaname = "WP-Files";
354
355	$uamOptions = $this->getAdminOptions();
356
357	if($uamOptions['lock_file_types'] == 'selected')
358	$file_types = $uamOptions['locked_file_types'];
359	elseif($uamOptions['lock_file_types'] == 'not_selected')
360	$file_types = $uamOptions['not_locked_file_types'];
361
362	if(isset($file_types))
363	$file_types = str_replace(",", "\|", $file_types);
364
365	// make .htaccess and .htpasswd
366
367	$htaccess_txt = "";
368
369	if($uamOptions['lock_file_types'] == 'selected')
370	$htaccess_txt .= "<FilesMatch '\.(".$file_types.")'>\n";
371
372	if($uamOptions['lock_file_types'] == 'not_selected')
373	$htaccess_txt .= "<FilesMatch '^\.(".$file_types.")'>\n";
374
375	$htaccess_txt .= "AuthType Basic"."\n";
376	$htaccess_txt .= "AuthName \"".$areaname."\""."\n";
377	$htaccess_txt .= "AuthUserFile ".$url.".htpasswd"."\n";
378	$htaccess_txt .= "require valid-user"."\n";
379
380	if($uamOptions['lock_file_types'] == 'selected' \|\| $uamOptions['lock_file_types'] == 'not_selected')
381	$htaccess_txt .= "</FilesMatch>\n";
382
383	// save files
384	$htaccess = fopen($url.".htaccess", "w");
385	fwrite($htaccess, $htaccess_txt);
386	fclose($htaccess);
387	}
388	}
389
390	function create_htpasswd($create_new = false)
391	{
392	global $current_user;
393
394	$uamOptions = $this->getAdminOptions();
395
396	// get url
397	$wud = wp_upload_dir();
398
399	if(empty($wud['error']))
400	{
401	$url = $wud['basedir']."/";
402	$cur_userdata = get_userdata($current_user->ID);
403
404	$user = $cur_userdata->user_login;
405
406	if(!file_exists($url.".htpasswd") \|\| $create_new)
407	{
408	if($uamOptions['file_pass_type'] == 'random')
409	{
410	# create password
411	$array = array();
412
413	$length = 10;
414	$capitals = true;
415	$specialSigns = false;
416
417	if($length < 8)
418	$length = mt_rand(8,20);
419
420	# numbers
421	for($i=48;$i<58;$i++)
422	$array[] = chr($i);
423
424	# small
425	for($i=97;$i<122;$i++)
426	$array[] = chr($i);
427
428	# capitals
429	if($capitals)
430	for($i=65;$i<90;$i++)
431	$array[] = chr($i);
432
433	# specialchar:
434	if($specialSigns)
435	{
436	for($i=33;$i<47;$i++)
437	$array[] = chr($i);
438	for($i=59;$i<64;$i++)
439	$array[] = chr($i);
440	for($i=91;$i<96;$i++)
441	$array[] = chr($i);
442	for($i=123;$i<126;$i++)
443	$array[] = chr($i);
444	}
445
446	mt_srand((double)microtime()*1000000);
447	$password = '';
448
449	for ($i=1; $i<=$length; $i++)
450	{
451	$rnd = mt_rand( 0, count($array)-1 );
452	$password .= $array[$rnd];
453	$password = md5($password);
454	}
455	}
456	elseif($uamOptions['file_pass_type'] == 'admin')
457	{
458	$password = $cur_userdata->user_pass;
459	}
460
461	// make .htpasswd
462	$htpasswd_txt = "$user:".$password."\n";
463
464	// save file
465	$htpasswd = fopen($url.".htpasswd", "w");
466	fwrite($htpasswd, $htpasswd_txt);
467	fclose($htpasswd);
468	}
469	}
470	}
471
472	function delete_htaccess_files()
473	{
474	$wud = wp_upload_dir();
475	if(empty($wud['error']))
476	{
477	$url = $wud['basedir']."/";
478	unlink($url.".htaccess");
479	unlink($url.".htpasswd");
480	}
481	}
482
483	//Returns an array of admin options
484	function getAdminOptions()
485	{
486	if($this->atAdminPanel \|\| empty($this->adminOptions))
487	{
488	$uamAdminOptions = array( 'hide_post_title' => 'false',
489	'post_title' => __('No rights!', 'user-access-manager'),
490	'hide_post_comment' => 'false',
491	'post_comment_content' => __('Sorry no rights to view comments!', 'user-access-manager'),
492	'allow_comments_locked' => 'false',
493	'post_content' => 'Sorry no rights!',
494	'hide_post' => 'false',
495	'hide_page_title' => 'false',
496	'page_title' => 'No rights!',
497	'page_content' => __('Sorry you have no rights to view this page!', 'user-access-manager'),
498	'hide_page' => 'false',
499	'redirect' => 'false',
500	'redirect_custom_page' => '',
501	'redirect_custom_url' => '',
502	'lock_recursive' => 'true',
503	'lock_file' => 'true',
504	'file_pass_type' => 'random',
505	'lock_file_types' => 'all',
506	'download_type' => 'fopen',
507	'locked_file_types' => 'zip,rar,tar,gz,bz2',
508	'not_locked_file_types' => 'gif,jpg,jpeg,png',
509	'blog_admin_hint' => 'true',
510	'blog_admin_hint_text' => '[L]',
511	'core_mod' => 'false',
512	'hide_empty_categories' => 'true',
513	'protect_feed' => 'true',
514	'show_post_content_before_more' => 'false');
515
516	$uamOptions = get_option($this->adminOptionsName);
517	if (!empty($uamOptions)) {
518	foreach ($uamOptions as $key => $option)
519	$uamAdminOptions[$key] = $option;
520	}
521	update_option($this->adminOptionsName, $uamAdminOptions);
522	$this->adminOptions = $uamAdminOptions;
523	}
524	return $this->adminOptions;
525	}
526
527	//Prints out the admin page
528	function printAdminPage()
529	{
530	global $wpdb;
531
532	$uamOptions = $this->getAdminOptions();
533
534	if (isset($_POST['update_uam_settings']))
535	{
536	if (isset($_POST['uam_hide_post_title']))
537	{
538	$uamOptions['hide_post_title'] = $_POST['uam_hide_post_title'];
539	}
540	if (isset($_POST['uam_post_title']))
541	{
542	$uamOptions['post_title'] = $_POST['uam_post_title'];
543	}
544	if (isset($_POST['uam_show_post_content_before_more']))
545	{
546	$uamOptions['show_post_content_before_more'] = $_POST['uam_show_post_content_before_more'];
547	}
548	if (isset($_POST['uam_post_content']))
549	{
550	$uamOptions['post_content'] = $_POST['uam_post_content'];
551	}
552	if (isset($_POST['uam_hide_post']))
553	{
554	$uamOptions['hide_post'] = $_POST['uam_hide_post'];
555	}
556	if (isset($_POST['uam_hide_post_comment']))
557	{
558	$uamOptions['hide_post_comment'] = $_POST['uam_hide_post_comment'];
559	}
560	if (isset($_POST['uam_post_comment_content']))
561	{
562	$uamOptions['post_comment_content'] = $_POST['uam_post_comment_content'];
563	}
564	if (isset($_POST['uam_allow_comments_locked']))
565	{
566	$uamOptions['allow_comments_locked'] = $_POST['uam_allow_comments_locked'];
567	}
568	if (isset($_POST['uam_hide_page_title']))
569	{
570	$uamOptions['hide_page_title'] = $_POST['uam_hide_page_title'];
571	}
572	if (isset($_POST['uam_page_title']))
573	{
574	$uamOptions['page_title'] = $_POST['uam_page_title'];
575	}
576	if (isset($_POST['uam_page_content']))
577	{
578	$uamOptions['page_content'] = $_POST['uam_page_content'];
579	}
580	if (isset($_POST['uam_hide_page']))
581	{
582	$uamOptions['hide_page'] = $_POST['uam_hide_page'];
583	}
584	if (isset($_POST['uam_protect_feed']))
585	{
586	$uamOptions['protect_feed'] = $_POST['uam_protect_feed'];
587	}
588	if (isset($_POST['uam_hide_empty_categories']))
589	{
590	$uamOptions['hide_empty_categories'] = $_POST['uam_hide_empty_categories'];
591	}
592	if (isset($_POST['uam_redirect']))
593	{
594	$uamOptions['redirect'] = $_POST['uam_redirect'];
595	}
596	if (isset($_POST['uam_redirect_custom_page']))
597	{
598	$uamOptions['redirect_custom_page'] = $_POST['uam_redirect_custom_page'];
599	}
600	if (isset($_POST['uam_redirect_custom_url']))
601	{
602	$uamOptions['redirect_custom_url'] = $_POST['uam_redirect_custom_url'];
603	}
604	if (isset($_POST['uam_lock_recursive']))
605	{
606	$uamOptions['lock_recursive'] = $_POST['uam_lock_recursive'];
607	}
608	if (isset($_POST['uam_blog_admin_hint']))
609	{
610	$uamOptions['blog_admin_hint'] = $_POST['uam_blog_admin_hint'];
611	}
612	if (isset($_POST['uam_blog_admin_hint_text']))
613	{
614	$uamOptions['blog_admin_hint_text'] = $_POST['uam_blog_admin_hint_text'];
615	}
616	if (isset($_POST['uam_core_mod']))
617	{
618	$uamOptions['core_mod'] = $_POST['uam_core_mod'];
619	}
620	if (isset($_POST['uam_lock_file']))
621	{
622	if($_POST['uam_lock_file'] == 'false')
623	{
624	if($uamOptions['lock_file'] != $_POST['uam_lock_file'])
625	$this->delete_htaccess_files();
626	}
627	else
628	{
629	if($uamOptions['lock_file'] != $_POST['uam_lock_file'])
630	$lock_file_changed = true;
631	}
632	$uamOptions['lock_file'] = $_POST['uam_lock_file'];
633	}
634
635	if (isset($_POST['uam_file_pass_type']))
636	{
637	if($uamOptions['file_pass_type'] != $_POST['uam_file_pass_type'])
638	$file_pass_changed = true;
639	else
640	$file_pass_changed = false;
641
642	$uamOptions['file_pass_type'] = $_POST['uam_file_pass_type'];
643	}
644	if (isset($_POST['uam_download_type']))
645	{
646	$uamOptions['download_type'] = $_POST['uam_download_type'];
647	}
648	if (isset($_POST['uam_locked_file_types']))
649	{
650	if($uamOptions['locked_file_types'] != $_POST['uam_locked_file_types'])
651	$locked_file_types_changed = true;
652	else
653	$locked_file_types_changed = false;
654
655	$uamOptions['locked_file_types'] = $_POST['uam_locked_file_types'];
656	}
657	if (isset($_POST['uam_not_locked_file_types']))
658	{
659	if($uamOptions['not_locked_file_types'] != $_POST['uam_not_locked_file_types'])
660	$not_locked_file_types_changed = true;
661	else
662	$not_locked_file_types_changed = false;
663
664	$uamOptions['not_locked_file_types'] = $_POST['uam_not_locked_file_types'];
665	}
666	if (isset($_POST['uam_lock_file_types']))
667	{
668	if($uamOptions['lock_file_types'] != $_POST['uam_lock_file_types'])
669	$locked_file_types_changed = true;
670
671	$uamOptions['lock_file_types'] = $_POST['uam_lock_file_types'];
672	}
673
674	update_option($this->adminOptionsName, $uamOptions);
675
676	if(($locked_file_types_changed \|\| $not_locked_file_types_changed \|\| isset($lock_file_changed) \|\| $file_pass_changed) && $uamOptions['lock_file'] != 'false')
677	{
678	$this->create_htaccess();
679	$this->create_htpasswd(true);
680	}
681	?>
682	<div class="updated"><p><strong><?php echo TXT_UPDATE_SETTINGS; ?></strong></p></div>
683	<?php
684	}
685
686	if(isset($_GET['page']))
687	$cur_admin_page = $_GET['page'];
688
689	if(isset($_GET['action']))
690	$action = $_GET['action'];
691	else
692	$action = null;
693
694	if(isset($_POST['action']))
695	$post_action = $_POST['action'];
696	else
697	$post_action = null;
698
699	if($post_action == 'delgroup')
700	{
701	if(isset($_POST['delete']))
702	$del_ids = $_POST['delete'];
703
704	if(isset($del_ids))
705	{
706	foreach($del_ids as $del_id)
707	{
708	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP." WHERE ID = $del_id LIMIT 1");
709	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_POST." WHERE group_id = $del_id");
710	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_USER." WHERE group_id = $del_id");
711	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_CATEGORY." WHERE group_id = $del_id");
712	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_ROLE." WHERE group_id = $del_id");
713	}
714	?>
715	<div class="updated"><p><strong><?php echo TXT_DEL_GROUP; ?></strong></p></div>
716	<?php
717	}
718	}
719
720	if($post_action == 'update_group' \|\| $post_action == 'addgroup')
721	{
722	if($post_action == 'addgroup')
723	{
724	$wpdb->query("INSERT INTO ".DB_ACCESSGROUP." (ID, groupname, groupdesc, read_access, write_access, ip_range) VALUES(NULL, '".$_POST['access_group_name']."', '".$_POST['access_group_description']."', '".$_POST['read_access']."', '".$_POST['write_access']."', '".$_POST['ip_range']."')");
725
726	$group_id = $wpdb->insert_id;
727	}
728	elseif($post_action == 'update_group')
729	{
730	$wpdb->query(" UPDATE ".DB_ACCESSGROUP."
731	SET groupname = '".$_POST['access_group_name']."', groupdesc = '".$_POST['access_group_description']."', read_access = '".$_POST['read_access']."', write_access = '".$_POST['write_access']."', ip_range = '".$_POST['ip_range']."'
732	WHERE ID = ".$_POST['access_group_id']);
733
734	$group_id = $_POST['access_group_id'];
735
736	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_ROLE." WHERE group_id = ".$group_id);
737	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_POST." WHERE group_id = ".$group_id);
738	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_CATEGORY." WHERE group_id = ".$group_id);
739	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_USER." WHERE group_id = ".$group_id);
740	}
741
742	if(isset($_POST['roles']))
743	$roles = $_POST['roles'];
744	else
745	$roles = null;
746
747	if($roles)
748	{
749	foreach($roles as $role)
750	{
751	$wpdb->query("INSERT INTO ".DB_ACCESSGROUP_TO_ROLE." (group_id, role_name) VALUES('".$group_id."', '".$role."')");
752	}
753	}
754
755	if(isset($_POST['post']))
756	$posts = $_POST['post'];
757	else
758	$posts = null;
759
760	if($posts)
761	{
762	foreach($posts as $post)
763	{
764	$wpdb->query("INSERT INTO ".DB_ACCESSGROUP_TO_POST." (group_id, post_id) VALUES('".$group_id."', '".$post."')");
765	}
766	}
767
768	if(isset($_POST['page']))
769	$pages = $_POST['page'];
770	else
771	$pages = null;
772
773	if($pages)
774	{
775	foreach($pages as $page)
776	{
777	$wpdb->query("INSERT INTO ".DB_ACCESSGROUP_TO_POST." (group_id, post_id) VALUES('".$group_id."', '".$page."')");
778	}
779	}
780
781	if(isset($_POST['file']))
782	$files = $_POST['file'];
783	else
784	$files = null;
785
786	if($files)
787	{
788	foreach($files as $file)
789	{
790	$wpdb->query("INSERT INTO ".DB_ACCESSGROUP_TO_POST." (group_id, post_id) VALUES('".$group_id."', '".$file."')");
791	}
792	}
793
794	if(isset($_POST['category']))
795	$categories = $_POST['category'];
796	else
797	$categories = null;
798
799	if($categories)
800	{
801	foreach($categories as $category)
802	{
803	$wpdb->query("INSERT INTO ".DB_ACCESSGROUP_TO_CATEGORY." (group_id, category_id) VALUES('".$group_id."', '".$category."')");
804	}
805	}
806
807	if(isset($_POST['user']))
808	$users = $_POST['user'];
809	else
810	$users = null;
811
812	if($users)
813	{
814	foreach($users as $user)
815	{
816	$wpdb->query("INSERT INTO ".DB_ACCESSGROUP_TO_USER." (group_id, user_id) VALUES('".$group_id."', '".$user."')");
817	}
818	}
819
820	if($post_action == 'addgroup')
821	{
822	?>
823	<div class="updated"><p><strong><?php echo TXT_GROUP_ADDED; ?></strong></p></div>
824	<?php
825	}
826	elseif($post_action == 'update_group')
827	{
828	?>
829	<div class="updated"><p><strong><?php echo TXT_ACCESS_GROUP_EDIT_SUC; ?></strong></p></div>
830	<?php
831	}
832	}
833
834	if($post_action == 'reset_uam')
835	{
836	if(isset($_POST['uam_reset']))
837	$reset = $_POST['uam_reset'];
838	else
839	$reset = null;
840
841	if($reset == 'true')
842	{
843	$this->uninstall();
844	$this->install();
845	?>
846	<div class="updated"><p><strong><?php echo TXT_UAM_RESET_SUC; ?></strong></p></div>
847	<?php
848	}
849	}
850
851	if($cur_admin_page == 'uam_settings')
852	{
853	?>
854	<div class=wrap>
855	<form method="post" action="<?php echo $_SERVER["REQUEST_URI"]; ?>">
856	<h2><?php echo TXT_SETTINGS; ?></h2>
857	<h3><?php echo TXT_POST_SETTING; ?></h3>
858	<p><?php echo TXT_POST_SETTING_DESC; ?></p>
859	<table class="form-table">
860	<tbody>
861	<tr valign="top">
862	<th scope="row">
863	<?php echo TXT_HIDE_POST; ?>
864	</th>
865	<td>
866	<label for="uam_hide_post_yes">
867	<input type="radio" id="uam_hide_post_yes" class="uam_hide_post" name="uam_hide_post" value="true" <?php if ($uamOptions['hide_post'] == "true") { echo 'checked="checked"'; }?> />
868	<?php echo TXT_YES; ?>
869	</label>
870	<label for="uam_hide_post_no">
871	<input type="radio" id="uam_hide_post_no" class="uam_hide_post" name="uam_hide_post" value="false" <?php if ($uamOptions['hide_post'] == "false") { echo 'checked="checked"'; }?>/>
872	<?php echo TXT_NO; ?>
873	</label>
874	<br />
875	<?php echo TXT_HIDE_POST_DESC; ?>
876	</td>
877	</tr>
878	</tbody>
879	</table>
880	<table class="form-table" id="uam_post_settings">
881	<tbody>
882	<tr valign="top">
883	<th scope="row">
884	<?php echo TXT_DISPLAY_POST_TITLE; ?>
885	</th>
886	<td>
887	<label for="uam_hide_post_title_yes">
888	<input type="radio" id="uam_hide_post_title_yes" name="uam_hide_post_title" value="true" <?php if ($uamOptions['hide_post_title'] == "true") { echo 'checked="checked"'; }?> />
889	<?php echo TXT_YES; ?>
890	</label>
891	<label for="uam_hide_post_title_no">
892	<input type="radio" id="uam_hide_post_title_no" name="uam_hide_post_title" value="false" <?php if ($uamOptions['hide_post_title'] == "false") { echo 'checked="checked"'; }?>/>
893	<?php echo TXT_NO; ?>
894	</label>
895	<br />
896	<?php echo TXT_DISPLAY_POST_TITLE_DESC; ?>
897	</td>
898	</tr>
899	<tr valign="top">
900	<th scope="row">
901	<?php echo TXT_POST_TITLE; ?>
902	</th>
903	<td>
904	<input name="uam_post_title" value="<?php echo $uamOptions['post_title']; ?>" />
905	<br />
906	<?php echo TXT_POST_TITLE_DESC; ?>
907	</td>
908	</tr>
909	<tr valign="top">
910	<th scope="row">
911	<?php echo TXT_SHOW_POST_CONTENT_BEFORE_MORE; ?>
912	</th>
913	<td>
914	<label for="uam_show_post_content_before_more_yes">
915	<input type="radio" id="uam_hide_post_title_yes" name="uam_show_post_content_before_more" value="true" <?php if ($uamOptions['show_post_content_before_more'] == "true") { echo 'checked="checked"'; }?> />
916	<?php echo TXT_YES; ?>
917	</label>
918	<label for="uam_show_post_content_before_more_no">
919	<input type="radio" id="uam_hide_post_title_no" name="uam_show_post_content_before_more" value="false" <?php if ($uamOptions['show_post_content_before_more'] == "false") { echo 'checked="checked"'; }?>/>
920	<?php echo TXT_NO; ?>
921	</label>
922	<br />
923	<?php echo TXT_SHOW_POST_CONTENT_BEFORE_MORE_DESC; ?>
924	</td>
925	</tr>
926	<tr valign="top">
927	<th scope="row">
928	<?php echo TXT_POST_CONTENT; ?>
929	</th>
930	<td>
931	<textarea name="uam_post_content" style="width: 80%; height: 100px;"><?php echo apply_filters('format_to_edit',$uamOptions['post_content']); ?></textarea>
932	<br />
933	<?php echo TXT_POST_CONTENT_DESC; ?>
934	</td>
935	</tr>
936	<tr valign="top">
937	<th scope="row">
938	<?php echo TXT_DISPLAY_POST_COMMENT; ?>
939	</th>
940	<td>
941	<label for="uam_hide_post_comment_yes">
942	<input type="radio" name="uam_hide_post_comment" value="true" <?php if ($uamOptions['hide_post_comment'] == "true") { echo 'checked="checked"'; }?> />
943	<?php echo TXT_YES; ?>
944	</label>
945	<label for="uam_hide_post_comment_no">
946	<input type="radio"name="uam_hide_post_comment" value="false" <?php if ($uamOptions['hide_post_comment'] == "false") { echo 'checked="checked"'; }?>/>
947	<?php echo TXT_NO; ?>
948	</label>
949	<br />
950	<?php echo TXT_DISPLAY_POST_COMMENT_DESC; ?>
951	</td>
952	</tr>
953	<tr valign="top">
954	<th scope="row">
955	<?php echo TXT_POST_COMMENT_CONTENT; ?>
956	</th>
957	<td>
958	<input name="uam_post_comment_content" value="<?php echo $uamOptions['post_comment_content']; ?>" />
959	<br />
960	<?php echo TXT_POST_COMMENT_CONTENT_DESC; ?>
961	</td>
962	</tr>
963	<tr valign="top">
964	<th scope="row">
965	<?php echo TXT_ALLOW_COMMENTS_LOCKED; ?>
966	</th>
967	<td>
968	<label for="uam_allow_comments_locked_yes">
969	<input type="radio" name="uam_allow_comments_locked" value="true" <?php if ($uamOptions['allow_comments_locked'] == "true") { echo 'checked="checked"'; }?> />
970	<?php echo TXT_YES; ?>
971	</label>
972	<label for="uam_allow_comments_locked_no">
973	<input type="radio"name="uam_allow_comments_locked" value="false" <?php if ($uamOptions['allow_comments_locked'] == "false") { echo 'checked="checked"'; }?>/>
974	<?php echo TXT_NO; ?>
975	</label>
976	<br />
977	<?php echo TXT_ALLOW_COMMENTS_LOCKED_DESC; ?>
978	</td>
979	</tr>
980	</tbody>
981	</table>
982	<h3><?php echo TXT_PAGE_SETTING; ?></h3>
983	<p><?php echo TXT_PAGE_SETTING_DESC; ?></p>
984	<table class="form-table">
985	<tbody>
986	<tr>
987	<th>
988	<?php echo TXT_HIDE_PAGE; ?>
989	</th>
990	<td>
991	<label for="uam_hide_page_yes">
992	<input type="radio" id="uam_hide_page_yes" class="uam_hide_page" name="uam_hide_page" value="true" <?php if ($uamOptions['hide_page'] == "true") { echo 'checked="checked"'; }?> />
993	<?php echo TXT_YES; ?>
994	</label>
995	<label for="uam_hide_page_no">
996	<input type="radio" id="uam_hide_page_no" class="uam_hide_page" name="uam_hide_page" value="false" <?php if ($uamOptions['hide_page'] == "false") { echo 'checked="checked"'; }?>/>
997	<?php echo TXT_NO; ?>
998	</label>
999	<br />
1000	<?php echo TXT_HIDE_PAGE_DESC; ?>
1001	</td>
1002	</tr>
1003	</tbody>
1004	</table>
1005	<table class="form-table" id="uam_page_settings">
1006	<tbody>
1007	<tr valign="top">
1008	<th scope="row">
1009	<?php echo TXT_DISPLAY_PAGE_TITLE; ?>
1010	</th>
1011	<td>
1012	<label for="uam_hide_page_title_yes">
1013	<input type="radio" id="uam_hide_page_title_yes" name="uam_hide_page_title" value="true" <?php if ($uamOptions['hide_page_title'] == "true") { echo 'checked="checked"'; }?> />
1014	<?php echo TXT_YES; ?>
1015	</label>
1016	<label for="uam_hide_page_title_no">
1017	<input type="radio" id="uam_hide_page_title_no" name="uam_hide_page_title" value="false" <?php if ($uamOptions['hide_page_title'] == "false") { echo 'checked="checked"'; }?>/>
1018	<?php echo TXT_NO; ?>
1019	</label>
1020	<br />
1021	<?php echo TXT_DISPLAY_PAGE_TITLE_DESC; ?>
1022	</td>
1023	</tr>
1024	<tr>
1025	<th>
1026	<?php echo TXT_PAGE_TITLE; ?>
1027	</th>
1028	<td>
1029	<input name="uam_page_title" value="<?php echo $uamOptions['page_title']; ?>" />
1030	<br />
1031	<?php echo TXT_PAGE_TITLE_DESC; ?>
1032	</td>
1033	</tr>
1034	<tr>
1035	<th>
1036	<?php echo TXT_PAGE_CONTENT; ?>
1037	</th>
1038	<td>
1039	<textarea name="uam_page_content" style="width: 80%; height: 100px;"><?php echo apply_filters('format_to_edit',$uamOptions['page_content']); ?></textarea>
1040	<br />
1041	<?php echo TXT_PAGE_CONTENT_DESC; ?>
1042	</td>
1043	</tr>
1044	</tbody>
1045	</table>
1046	<h3><?php echo TXT_FILE_SETTING; ?></h3>
1047	<p><?php echo TXT_FILE_SETTING_DESC; ?></p>
1048	<table class="form-table">
1049	<tbody>
1050	<tr>
1051	<th>
1052	<?php echo TXT_LOCK_FILE; ?>
1053	</th>
1054	<td>
1055	<label for="uam_lock_file_yes">
1056	<input type="radio" id="uam_lock_file_yes" class="uam_lock_file" name="uam_lock_file" value="true" <?php if ($uamOptions['lock_file'] == "true") { echo 'checked="checked"'; }?> />
1057	<?php echo TXT_YES; ?>
1058	</label>
1059	<label for="uam_lock_file_no">
1060	<input type="radio" id="uam_lock_file_no" class="uam_lock_file" name="uam_lock_file" value="false" <?php if ($uamOptions['lock_file'] == "false") { echo 'checked="checked"'; }?>/>
1061	<?php echo TXT_NO; ?>
1062	</label>
1063	<br />
1064	<?php echo TXT_LOCK_FILE_DESC; ?>
1065	</td>
1066	</tr>
1067	</tbody>
1068	</table>
1069	<table class="form-table" id="uam_file_settings">
1070	<tbody>
1071	<tr>
1072	<th>
1073	<?php echo TXT_DOWNLOAD_FILE_TYPE; ?>
1074	</th>
1075	<td>
1076	<label for="uam_lock_file_types_all">
1077	<input type="radio" id="uam_lock_file_types_all" name="uam_lock_file_types" value="all" <?php if ($uamOptions['lock_file_types'] == "all") { echo 'checked="checked"'; }?> />
1078	<?php echo TXT_ALL; ?>
1079	</label>
1080	<label for="uam_lock_file_types_selected">
1081	<input type="radio" id="uam_lock_file_types_selected" name="uam_lock_file_types" value="selected" <?php if ($uamOptions['lock_file_types'] == "selected") { echo 'checked="checked"'; }?> />
1082	<?php echo TXT_SELECTED_FILE_TYPES; ?>
1083	</label><input name="uam_locked_file_types" value="<?php echo $uamOptions['locked_file_types']; ?>" />
1084	<label for="uam_lock_file_types_not_selected">
1085	<input type="radio" id="uam_lock_file_types_not_selected" name="uam_lock_file_types" value="not_selected" <?php if ($uamOptions['lock_file_types'] == "not_selected") { echo 'checked="checked"'; }?> />
1086	<?php echo TXT_NOT_SELECTED_FILE_TYPES; ?>
1087	</label><input name="uam_not_locked_file_types" value="<?php echo $uamOptions['not_locked_file_types']; ?>" />
1088	<br />
1089	<?php echo TXT_DOWNLOAD_FILE_TYPE_DESC; ?>
1090	</td>
1091	</tr>
1092	<tr>
1093	<th>
1094	<?php echo TXT_FILE_PASS_TYPE; ?>
1095	</th>
1096	<td>
1097	<label for="uam_file_pass_type_admin">
1098	<input type="radio" id="uam_file_pass_type_admin" name="uam_file_pass_type" value="admin" <?php if ($uamOptions['file_pass_type'] == "admin") { echo 'checked="checked"'; }?> />
1099	<?php echo TXT_CURRENT_LOGGEDIN_ADMIN_PASS; ?>
1100	</label>
1101	<label for="uam_file_pass_type_random">
1102	<input type="radio" id="uam_file_pass_type_random" name="uam_file_pass_type" value="random" <?php if ($uamOptions['file_pass_type'] == "random") { echo 'checked="checked"'; }?>/>
1103	<?php echo TXT_RANDOM_PASS; ?>
1104	</label>
1105	<br />
1106	<?php echo TXT_FILE_PASS_TYPE_DESC; ?>
1107	</td>
1108	</tr>
1109	<tr>
1110	<th>
1111	<?php echo TXT_DOWNLOAD_TYPE; ?>
1112	</th>
1113	<td>
1114	<label for="uam_download_type_normal">
1115	<input type="radio" id="uam_download_type_normal" name="uam_download_type" value="normal" <?php if ($uamOptions['download_type'] == "normal") { echo 'checked="checked"'; }?> />
1116	<?php echo TXT_NORMAL; ?>
1117	</label>
1118	<label for="uam_download_type_fopen">
1119	<input type="radio" id="uam_download_type_fopen" name="uam_download_type" value="fopen" <?php if ($uamOptions['download_type'] == "fopen") { echo 'checked="checked"'; }?>/>
1120	<?php echo TXT_FOPEN; ?>
1121	</label>
1122	<br />
1123	<?php echo TXT_DOWNLOAD_TYPE_DESC; ?>
1124	</td>
1125	</tr>
1126	</tbody>
1127	</table>
1128	<h3><?php echo TXT_OTHER_SETTING; ?></h3>
1129	<p><?php echo TXT_OTHER_SETTING_DESC; ?></p>
1130	<table class="form-table">
1131	<tbody>
1132	<tr>
1133	<th>
1134	<?php echo TXT_PROTECT_FEED; ?>
1135	</th>
1136	<td>
1137	<label for="uam_protect_feed_yes">
1138	<input type="radio" id="uam_protect_feed_yes" name="uam_protect_feed" value="true" <?php if ($uamOptions['protect_feed'] == "true") { echo 'checked="checked"'; }?> />
1139	<?php echo TXT_YES; ?>
1140	</label>
1141	<label for="uam_protect_feed_no">
1142	<input type="radio" id="uam_protect_feed_no" name="uam_protect_feed" value="false" <?php if ($uamOptions['protect_feed'] == "false") { echo 'checked="checked"'; }?>/>
1143	<?php echo TXT_NO; ?>
1144	</label>
1145	<br />
1146	<?php echo TXT_PROTECT_FEED_DESC; ?>
1147	</td>
1148	</tr>
1149	<tr>
1150	<th>
1151	<?php echo TXT_HIDE_EMPTY_CATEGORIES; ?>
1152	</th>
1153	<td>
1154	<label for="uam_hide_empty_categories_yes">
1155	<input type="radio" id="uam_hide_empty_categories_yes" name="uam_hide_empty_categories" value="true" <?php if ($uamOptions['hide_empty_categories'] == "true") { echo 'checked="checked"'; }?> />
1156	<?php echo TXT_YES; ?>
1157	</label>
1158	<label for="uam_hide_empty_categories_no">
1159	<input type="radio" id="uam_hide_empty_categories_no" name="uam_hide_empty_categories" value="false" <?php if ($uamOptions['hide_empty_categories'] == "false") { echo 'checked="checked"'; }?>/>
1160	<?php echo TXT_NO; ?>
1161	</label>
1162	<br />
1163	<?php echo TXT_HIDE_EMPTY_CATEGORIES_DESC; ?>
1164	</td>
1165	</tr>
1166	<tr>
1167	<th>
1168	<?php echo TXT_REDIRECT; ?>
1169	</th>
1170	<td>
1171	<label for="uam_redirect_no">
1172	<input type="radio" id="uam_redirect_no" name="uam_redirect" value="false" <?php if ($uamOptions['redirect'] == "false") { echo 'checked="checked"'; }?> />
1173	<?php echo TXT_NO; ?>
1174	</label>
1175	<label for="uam_redirect_blog">
1176	<input type="radio" id="uam_redirect_blog" name="uam_redirect" value="blog" <?php if ($uamOptions['redirect'] == "blog") { echo 'checked="checked"'; }?> />
1177	<?php echo TXT_REDIRECT_TO_BOLG; ?>
1178	</label>
1179	<label for="uam_redirect_custom_page">
1180	<input type="radio" id="uam_redirect_custom_p" name="uam_redirect" value="custom_page" <?php if ($uamOptions['redirect'] == "custom_page") { echo 'checked="checked"'; }?>/>
1181	<?php echo TXT_REDIRECT_TO_PAGE; ?>
1182	</label><select name="uam_redirect_custom_page">
1183	<?php
1184	$pages = get_pages('sort_column=menu_order');
1185
1186	if(isset($pages))
1187	{
1188	foreach($pages as $page)
1189	{
1190	echo '<option value="'.$page->ID;
1191
1192	if($uamOptions['redirect_custom_page'] == $page->ID)
1193	echo ' selected = "selected"';
1194
1195	echo '>'.$page->post_title.'</option>';
1196	}
1197	}
1198	?></select>
1199	<label for="uam_redirect_custom_url">
1200	<input type="radio" id="uam_redirect_custom_u" name="uam_redirect" value="custom_url" <?php if ($uamOptions['redirect'] == "custom_url") { echo 'checked="checked"'; }?>/>
1201	<?php echo TXT_REDIRECT_TO_URL; ?>
1202	</label><input name="uam_redirect_custom_url" value="<?php echo $uamOptions['redirect_custom_url']; ?>" />
1203	<br />
1204	<?php echo TXT_REDIRECT_DESC; ?>
1205	</td>
1206	</tr>
1207	<tr>
1208	<th>
1209	<?php echo TXT_LOCK_RECURSIVE; ?>
1210	</th>
1211	<td>
1212	<label for="uam_lock_recursive_yes">
1213	<input type="radio" id="uam_lock_recursive_yes" name="uam_lock_recursive" value="true" <?php if ($uamOptions['lock_recursive'] == "true") { echo 'checked="checked"'; }?> />
1214	<?php echo TXT_YES; ?>
1215	</label>
1216	<label for="uam_lock_recursive_no">
1217	<input type="radio" id="uam_lock_recursive_no" name="uam_lock_recursive" value="false" <?php if ($uamOptions['lock_recursive'] == "false") { echo 'checked="checked"'; }?>/>
1218	<?php echo TXT_NO; ?>
1219	</label>
1220	<br />
1221	<?php echo TXT_LOCK_RECURSIVE_DESC; ?>
1222	</td>
1223	</tr>
1224	<tr>
1225	<th>
1226	<?php echo TXT_BLOG_ADMIN_HINT; ?>
1227	</th>
1228	<td>
1229	<label for="uam_blog_admin_hint_yes">
1230	<input type="radio" id="uam_blog_admin_hint_yes" name="uam_blog_admin_hint" value="true" <?php if ($uamOptions['blog_admin_hint'] == "true") { echo 'checked="checked"'; }?> />
1231	<?php echo TXT_YES; ?>
1232	</label>
1233	<label for="uam_blog_admin_hint_no">
1234	<input type="radio" id="uam_blog_admin_hint_no" name="uam_blog_admin_hint" value="false" <?php if ($uamOptions['blog_admin_hint'] == "false") { echo 'checked="checked"'; }?>/>
1235	<?php echo TXT_NO; ?>
1236	</label>
1237	<br />
1238	<?php echo TXT_BLOG_ADMIN_HINT_DESC; ?>
1239	</td>
1240	</tr>
1241	<tr>
1242	<th>
1243	<?php echo TXT_BLOG_ADMIN_HINT_TEXT; ?>
1244	</th>
1245	<td>
1246	<input name="uam_blog_admin_hint_text" value="<?php echo $uamOptions['blog_admin_hint_text']; ?>" />
1247	<br />
1248	<?php echo TXT_BLOG_ADMIN_HINT_TEXT_DESC; ?>
1249	</td>
1250	</tr>
1251	<?php
1252	global $wp_version;
1253
1254	if($wp_version < 2.8)
1255	{
1256	?>
1257	<tr>
1258	<th>
1259	<?php echo TXT_CORE_MOD; ?>
1260	</th>
1261	<td>
1262	<label for="uam_core_mod_yes">
1263	<input type="radio" id="uam_core_mod_yes" name="uam_core_mod" value="true" <?php if ($uamOptions['core_mod'] == "true") { echo 'checked="checked"'; }?> />
1264	<?php echo TXT_YES; ?>
1265	</label>
1266	<label for="uam_core_mod_no">
1267	<input type="radio" id="uam_core_mod_no" name="uam_core_mod" value="false" <?php if ($uamOptions['core_mod'] == "false") { echo 'checked="checked"'; }?>/>
1268	<?php echo TXT_NO; ?>
1269	</label>
1270	<br />
1271	<?php echo TXT_CORE_MOD_DESC; ?>
1272	</td>
1273	</tr>
1274	<?php
1275	}
1276	?>
1277	</tbody>
1278	</table>
1279	<div class="submit">
1280	<input type="submit" name="update_uam_settings" value="<?php echo TXT_UPDATE_SETTING; ?>" />
1281	</div>
1282	</form>
1283	</div>
1284	<?php
1285	}
1286	elseif($action == 'edit_group' && isset($_GET['id']))
1287	{
1288	$group_id = $_GET['id'];
1289	$accessgroup = $wpdb->get_row(" SELECT *
1290	FROM ".DB_ACCESSGROUP."
1291	WHERE ID = ".$group_id."
1292	LIMIT 1", ARRAY_A);
1293	?>
1294	<div class="wrap">
1295	<?php $this->get_print_edit_group($group_id); ?>
1296	</div>
1297	<?php
1298	}
1299	elseif($cur_admin_page == 'uam_usergroup')
1300	{
1301	$accessgroups = $wpdb->get_results("SELECT *
1302	FROM ".DB_ACCESSGROUP."
1303	ORDER BY ID", ARRAY_A);
1304	?>
1305	<div class=wrap>
1306	<form method="post" action="<?php echo $_SERVER["REQUEST_URI"]; ?>">
1307	<input type="hidden" value="delgroup" name="action"/>
1308	<h2><?php echo TXT_MANAGE_GROUP; ?></h2>
1309	<div class="tablenav">
1310	<div class="alignleft">
1311	<input type="submit" class="button-secondary delete" name="deleteit" value="<?php echo TXT_DELETE; ?>"/>
1312	<input type="hidden" id="TXT_COLLAPS_ALL" name="deleteit" value="<?php echo TXT_COLLAPS_ALL; ?>"/>
1313	<input type="hidden" id="TXT_EXPAND_ALL" name="deleteit" value="<?php echo TXT_EXPAND_ALL; ?>"/>
1314	</div>
1315	<br class="clear"/>
1316	</div>
1317	<br class="clear"/>
1318	<table class="widefat">
1319	<thead>
1320	<tr class="thead">
1321	<th scope="col"></th>
1322	<th scope="col"><?php echo TXT_NAME; ?></th>
1323	<th scope="col"><?php echo TXT_DESCRIPTION; ?></th>
1324	<th scope="col"><?php echo TXT_READ_ACCESS; ?></th>
1325	<th scope="col"><?php echo TXT_WRITE_ACCESS; ?></th>
1326	<th scope="col"><?php echo TXT_IP_RANGE; ?></th>
1327	<th scope="col"><?php echo TXT_POSTS; ?></th>
1328	<th scope="col"><?php echo TXT_PAGES; ?></th>
1329	<th scope="col"><?php echo TXT_FILES; ?></th>
1330	<th scope="col"><?php echo TXT_CATEGORY; ?></th>
1331	<th scope="col"><?php echo TXT_USERS; ?></th>
1332	<th></th>
1333	</tr>
1334	</thead>
1335	<tbody>
1336	<?php
1337	if(isset($accessgroups))
1338	{
1339	foreach($accessgroups as $accessgroup)
1340	{
1341	$group_info = $this->get_usergroup_info($accessgroup['ID']);
1342	?>
1343	<tr class="alternate" id="group-<?php echo $accessgroup['ID']; ?>">
1344	<th class="check-column" scope="row"><input type="checkbox" value="<?php echo $accessgroup['ID']; ?>" name="delete[]"/></th>
1345	<td><strong><a href="?page=<?php echo $cur_admin_page; ?>&action=edit_group&id=<?php echo $accessgroup['ID']; ?>"><?php echo $accessgroup['groupname']; ?></a></strong></td>
1346	<td><?php echo $accessgroup['groupdesc']; ?></td>
1347	<td><?php if($accessgroup['read_access'] == "all"){ echo TXT_ALL;}elseif($accessgroup['read_access'] == "group"){ echo TXT_ONLY_GROUP_USERS;} ?></td>
1348	<td><?php if($accessgroup['write_access'] == "all"){ echo TXT_ALL;}elseif($accessgroup['write_access'] == "group"){ echo TXT_ONLY_GROUP_USERS;} ?></td>
1349	<td><?php if(isset($accessgroup['ip_range'])){ echo $accessgroup['ip_range']; }else{ echo TXT_NONE; }?></td>
1350	<td>
1351	<?php
1352	if(isset($group_info->posts))
1353	{
1354	$expandcontent = null;
1355	foreach($group_info->posts as $post)
1356	{
1357	$expandcontent .= "<li>".$post->post_title."</li>";
1358	}
1359	echo "<a class='uam_info_link'>".count($group_info->posts)." ".TXT_POSTS."</a>";;
1360	echo "<ul class='uam_info_content expand_deactive'>".$expandcontent."</ul>";
1361	}
1362	else
1363	{
1364	echo TXT_NONE;
1365	}
1366	?>
1367	</td>
1368	<td>
1369	<?php
1370	if(isset($group_info->pages))
1371	{
1372	$expandcontent = null;
1373	foreach($group_info->pages as $page)
1374	{
1375	$expandcontent .= "<li>".$page->post_title."</li>";
1376	}
1377	echo "<a class='uam_info_link'>".count($group_info->pages)." ".TXT_PAGES."</a>";
1378	echo "<ul class='uam_info_content expand_deactive'>".$expandcontent."</ul>";
1379	}
1380	else
1381	{
1382	echo TXT_NONE;
1383	}
1384	?>
1385	</td>
1386	<td>
1387	<?php
1388	if(isset($group_info->files))
1389	{
1390	$expandcontent = null;
1391	foreach($group_info->files as $file)
1392	{
1393	$expandcontent .= "<li>".$file->post_title."</li>";
1394	}
1395	echo "<a class='uam_info_link'>".count($group_info->files)." ".TXT_FILES."</a>";
1396	echo "<ul class='uam_info_content expand_deactive'>".$expandcontent."</ul>";
1397	}
1398	else
1399	{
1400	echo TXT_NONE;
1401	}
1402	?>
1403	</td>
1404	<td>
1405	<?php
1406	if(isset($group_info->categories))
1407	{
1408	$expandcontent = null;
1409	foreach($group_info->categories as $categorie)
1410	{
1411	$expandcontent .= "<li>".$categorie->cat_name."</li>";
1412	}
1413	echo "<a class='uam_info_link'>".count($group_info->categories)." ".TXT_CATEGORY."</a>";
1414	echo "<ul class='uam_info_content expand_deactive'>".$expandcontent."</ul>";
1415	}
1416	else
1417	{
1418	echo TXT_NONE;
1419	}
1420	?>
1421	</td>
1422	<td>
1423	<?php
1424	if(isset($group_info->users))
1425	{
1426	$expandcontent = null;
1427	foreach($group_info->users as $user)
1428	{
1429	$expandcontent .= "<li>".$user->nickname."</li>";
1430	}
1431	echo "<a class='uam_info_link'>".count($group_info->users)." ".TXT_USERS."</a>";
1432	echo "<ul class='uam_info_content expand_deactive'>".$expandcontent."</ul>";
1433	}
1434	else
1435	{
1436	echo TXT_NONE;
1437	}
1438	?>
1439	</td>
1440	<td>
1441	<a class="uam_info_link_all" href="#"><?php echo TXT_EXPAND_ALL; ?></a>
1442	</td>
1443	</tr>
1444	<?php
1445	}
1446	}
1447	?>
1448	</tbody>
1449	</table>
1450	</form>
1451	</div>
1452	<div class="wrap">
1453	<h2><?php echo TXT_ADD_GROUP; ?></h2>
1454	<div id="ajax-response"/>
1455	<?php $this->get_print_edit_group(); ?>
1456	</div>
1457	<?php
1458	}
1459	elseif($cur_admin_page == 'uam_setup')
1460	{
1461	?>
1462	<div class=wrap>
1463	<form method="post" action="<?php echo $_SERVER["REQUEST_URI"]; ?>">
1464	<input type="hidden" value="reset_uam" name="action"/>
1465	<h2><?php echo TXT_SETUP; ?></h2>
1466	<table class="form-table">
1467	<tbody>
1468	<tr valign="top">
1469	<th scope="row">
1470	<?php echo TXT_RESET_UAM; ?>
1471	</th>
1472	<td>
1473	<label for="uam_reset_yes">
1474	<input type="radio" id="uam_reset_yes" class="uam_reset_yes" name="uam_reset" value="true" />
1475	<?php echo TXT_YES; ?>
1476	</label>
1477	<label for="uam_reset_no">
1478	<input type="radio" id="uam_reset_no" class="uam_reset_no" name="uam_reset" value="false" checked="checked" />
1479	<?php echo TXT_NO; ?>
1480	</label>    <input type="submit" class="button" name="uam_reset_submit" value="<?php echo TXT_RESET; ?>" />
1481	<br />
1482	<p style="color:red; font-size: 12px; font-weight: bold;"><?php echo TXT_RESET_UAM_DESC; ?></p>
1483	</td>
1484	</tr>
1485	</tbody>
1486	</table>
1487	</form>
1488	</div>
1489	<?php
1490	}
1491	}//End function printAdminPage()
1492
1493	function get_print_edit_group($group_id = null)
1494	{
1495	global $wpdb;
1496	$uamOptions = $this->getAdminOptions();
1497
1498	if(isset($group_id))
1499	$group_info = $this->get_usergroup_info($group_id);
1500	?>
1501	<form method="post" action="<?php echo reset(explode("?", $_SERVER["REQUEST_URI"]))."?page=".$_GET['page']; ?>">
1502	<input type="hidden" id="TXT_COLLAPS" name="deleteit" value="<?php echo TXT_COLLAPS; ?>"/>
1503	<input type="hidden" id="TXT_EXPAND" name="deleteit" value="<?php echo TXT_EXPAND; ?>"/>
1504	<?php
1505	if(isset($group_id))
1506	{
1507	?>
1508	<input type="hidden" value="update_group" name="action"/>
1509	<input type="hidden" value="<?php echo $group_id; ?>" name="access_group_id"/>
1510	<?php
1511	}
1512	else
1513	{
1514	?>
1515	<input type="hidden" value="addgroup" name="action"/>
1516	<?php
1517	}
1518	?>
1519	<input type="hidden" value="<?php echo $uamOptions['lock_recursive']; ?>" name="uam_lock_recursive" id="uam_set_lock_recursive"/>
1520	<table class="form-table">
1521	<tbody>
1522	<tr class="form-field form-required">
1523	<th valign="top" scope="row"><?php echo TXT_GROUP_NAME; ?></th>
1524	<td><input type="text" size="40" value="<?php if(isset($group_id)){echo $group_info->group["groupname"]; }?>" id="access_group_name" name="access_group_name"/><br/>
1525	<?php echo TXT_GROUP_NAME_DESC; ?></td>
1526	</tr>
1527	<tr class="form-field form-required">
1528	<th valign="top" scope="row"><?php echo TXT_GROUP_DESC; ?></th>
1529	<td><input type="text" size="40" value="<?php if(isset($group_id)){ echo $group_info->group["groupdesc"]; }?>" id="access_group_description" name="access_group_description"/><br/>
1530	<?php echo TXT_GROUP_DESC_DESC; ?></td>
1531	</tr>
1532	<tr class="form-field form-required">
1533	<th valign="top" scope="row"><?php echo TXT_GROUP_IP_RANGE; ?></th>
1534	<td><input type="text" size="40" value="<?php if(isset($group_id)){ echo $group_info->group["ip_range"]; }?>" id="ip_range" name="ip_range"/><br/>
1535	<?php echo TXT_GROUP_IP_RANGE_DESC; ?></td>
1536	</tr>
1537	<tr class="form-field form-required">
1538	<th valign="top" scope="row"><?php echo TXT_GROUP_READ_ACCESS; ?></th>
1539	<td><select name="read_access">
1540	<option value="group" <?php if(isset($group_id)){ if($group_info->group["read_access"] == "group"){ echo 'selected="selected"'; }} ?> ><?php echo TXT_ONLY_GROUP_USERS ?></option>
1541	<option value="all" <?php if(isset($group_id)){ if($group_info->group["read_access"] == "all"){ echo 'selected="selected"'; }} ?> ><?php echo TXT_ALL ?></option>
1542	</select><br />
1543	<?php echo TXT_GROUP_READ_ACCESS_DESC; ?></td>
1544	</tr>
1545	<tr class="form-field form-required">
1546	<th valign="top" scope="row"><?php echo TXT_GROUP_WRITE_ACCESS; ?></th>
1547	<td><select name="write_access">
1548	<option value="group" <?php if(isset($group_id)){ if($group_info->group["write_access"] == "group"){ echo 'selected="selected"'; }} ?> ><?php echo TXT_ONLY_GROUP_USERS ?></option>
1549	<option value="all" <?php if(isset($group_id)){ if($group_info->group["write_access"] == "all"){ echo 'selected="selected"'; }} ?> ><?php echo TXT_ALL ?></option>
1550	</select><br />
1551	<?php echo TXT_GROUP_WRITE_ACCESS_DESC; ?></td>
1552	</tr>
1553	<tr>
1554	<th valign="top" scope="row"><?php echo TXT_GROUP_ROLE; ?></th>
1555	<td>
1556	<ul class='uam_role'>
1557	<?php
1558	global $wp_roles;
1559
1560	foreach($wp_roles->role_names as $role => $name)
1561	{
1562	if($role != "administrator")
1563	{
1564	?>
1565	<li class="selectit">
1566	<input id="role-<?php echo $role; ?>" type="checkbox" <?php if(isset($group_info->posts[$role])){ echo 'checked="checked"'; } ?> value="<?php echo $role; ?>" name="roles[]"/>
1567	<label for="role-<?php echo $role; ?>"><?php echo $role ?></label>
1568	</li>
1569	<?php
1570	}
1571	}
1572	?>
1573	</ul>
1574	</td>
1575	</tr>
1576	<tr>
1577	<?php
1578	$args = array('numberposts' => -1);
1579	$posts = get_posts($args);
1580	?>
1581	<th valign="top" scope="row"><?php echo TXT_POSTS; if(count($posts) > 0){ echo " <label>(<a class='selectit uam_group_stuff_link'>".TXT_EXPAND."</a>)</label>"; }?></th>
1582	<td>
1583	<?php
1584	if(isset($group_info->posts))
1585	$posts_in_group = count($group_info->posts);
1586	else
1587	$posts_in_group = 0;
1588
1589	echo "<strong>".sprintf(TXT_CONTAIN_POSTS, "<span class='uam_element_count'>".$posts_in_group."</span>", count($posts))."</strong>";
1590
1591	if(isset($posts))
1592	{
1593	echo "<ul class='uam_group_stuff'>";
1594	foreach($posts as $post)
1595	{
1596	$cur_categories = get_the_category($post->ID);
1597	?>
1598	<li class="selectit <?php foreach($cur_categories as $cur_cat){ echo "cat-".$cur_cat->term_id." "; }?>">
1599	<input id="post-<?php echo $post->ID; ?>" type="checkbox" value="<?php echo $post->ID;?>" <?php if(isset($group_info->posts[$post->ID])){ echo 'checked="checked"'; } ?> name="post[]"/>
1600	<label for="post-<?php echo $post->ID; ?>"><strong><?php echo $post->post_title; ?></strong> - <?php echo $post->post_date; ?></label>
1601	<?php
1602
1603	?>
1604	</li>
1605	<?php
1606	}
1607	echo "</ul>";
1608	}
1609	?>
1610	</td>
1611	</tr>
1612	<tr>
1613	<?php
1614	$pages = get_pages('sort_column=menu_order');
1615	?>
1616	<th valign="top" scope="row"><?php echo TXT_PAGES; if(count($pages) > 0){ echo " <label>(<a class='selectit uam_group_stuff_link'>".TXT_EXPAND."</a>)</label>"; } ?></th>
1617	<td>
1618	<?php
1619	if(isset($group_info->pages))
1620	$pages_in_group = count($group_info->pages);
1621	else
1622	$pages_in_group = 0;
1623
1624	echo "<strong>".sprintf(TXT_CONTAIN_PAGES, "<span class='uam_element_count'>".$pages_in_group."</span>", count($pages))."</strong>";
1625
1626	if(isset($pages))
1627	{
1628	echo "<ul class='uam_group_stuff'>";
1629	$deepness = 0;
1630
1631	foreach($pages as $page)
1632	{
1633	$old_deepness = $deepness;
1634	$deepness = 0;
1635
1636	if($page->post_parent != 0)
1637	{
1638	$cur_page = $page;
1639	$cur_id = $page->ID;
1640	while($cur_page->post_parent != 0)
1641	{
1642	$deepness++;
1643	$cur_parent_id = $cur_page->post_parent;
1644	$cur_page = & get_post($cur_parent_id);
1645	}
1646	}
1647
1648	if($old_deepness > $deepness)
1649	{
1650	$count = abs($old_deepness - $deepness);
1651	for($i = 0; $i < $count; $i++)
1652	echo "</ul>";
1653	}
1654	elseif($old_deepness < $deepness)
1655	{
1656	$count = abs($old_deepness - $deepness);
1657	for($i = 0; $i < $count; $i++)
1658	echo "<ul class='uam_group_stuff_child'>";
1659	}
1660
1661	?>
1662	<li class="selectit">
1663	<input id="post-<?php echo $page->ID; ?>" type="checkbox" value="<?php echo $page->ID;?>" <?php if(isset($group_info->pages[$page->ID])){ echo 'checked="checked"'; } ?> name="page[]"/>
1664	<label for="post-<?php echo $page->ID; ?>"><strong><?php echo $page->post_title; ?></strong> - <?php echo $page->post_date; ?></label>
1665	</li>
1666	<?php
1667	}
1668	echo "</ul>";
1669	}
1670	?>
1671	</td>
1672	</tr>
1673	<tr>
1674	<?php
1675	$args = array( 'numberposts' => -1,
1676	'post_type' => 'attachment');
1677	$files = get_posts($args);
1678	?>
1679	<th valign="top" scope="row"><?php echo TXT_FILES; if(count($files) > 0){ echo " <label>(<a class='selectit uam_group_stuff_link'>".TXT_EXPAND."</a>)</label>"; }?></th>
1680	<td>
1681	<?php
1682	if(isset($group_info->files))
1683	$files_in_group = count($group_info->files);
1684	else
1685	$files_in_group = 0;
1686
1687	echo "<strong>".sprintf(TXT_CONTAIN_FILES, "<span class='uam_element_count'>".$files_in_group."</span>", count($files))."</strong>";
1688
1689	if(isset($files))
1690	{
1691	echo "<ul class='uam_group_stuff'>";
1692	foreach($files as $file)
1693	{
1694	$cur_categories = get_the_category($file->ID);
1695	?>
1696	<li class="selectit <?php foreach($cur_categories as $cur_cat){ echo "cat-".$cur_cat->term_id." "; } echo "parent_post-".$file->post_parent." ";?>">
1697	<input id="post-<?php echo $file->ID; ?>" type="checkbox" value="<?php echo $file->ID;?>" <?php if(isset($group_info->files[$file->ID])){ echo 'checked="checked"'; } ?> name="file[]"/>
1698	<label for="post-<?php echo $file->ID; ?>"><strong><?php echo $file->post_title; ?></strong> - <?php echo $file->post_date; ?></label>
1699	</li>
1700	<?php
1701	}
1702	echo "</ul>";
1703	}
1704	?>
1705	</td>
1706	</tr>
1707	<tr>
1708	<?php
1709	$categories = get_categories();
1710	?>
1711	<th valign="top" scope="row"><?php echo TXT_CATEGORY; if(count($categories) > 0){ echo " <label>(<a class='selectit uam_group_stuff_link'>".TXT_EXPAND."</a>)</label>"; } ?></th>
1712	<td>
1713	<?php
1714	if(isset($group_info->categories))
1715	$categories_in_group = count($group_info->categories);
1716	else
1717	$categories_in_group = 0;
1718
1719	echo "<strong>".sprintf(TXT_CONTAIN_CATEGORIES, "<span class='uam_element_count'>".$categories_in_group."</span>", count($categories))."</strong>";
1720
1721	function print_elements($group_id, $group_info = null, $category = 0, $deepness = 0)
1722	{
1723	global $wpdb;
1724
1725	$args = array('child_of' => $category);
1726	$categories = get_categories($args);
1727
1728	if(isset($categories))
1729	{
1730	$first_round = true;
1731	foreach($categories as $cat)
1732	{
1733
1734	if($cat->parent == $category)
1735	{
1736	if($first_round == true)
1737	{
1738	if($category == 0)
1739	echo "<ul class='uam_group_stuff uam_category'>";
1740	else
1741	echo "<ul class='uam_group_stuff_child uam_category'>";
1742
1743	$first_round = false;
1744	}
1745	?>
1746	<li class="selectit">
1747	<input id="category-<?php echo $cat->term_id; ?>" type="checkbox" name="category[]" value="<?php echo $cat->term_id;?>" <?php if(isset($group_info[$cat->term_id])){ echo 'checked="checked"'; } ?> />
1748	<label for="category-<?php echo $cat->term_id; ?>"><strong><?php echo $cat->cat_name; ?></strong></label>
1749	</li>
1750	<?php
1751	print_elements($group_id, $group_info, $cat->term_id, $deepness++);
1752	}
1753	}
1754	if($first_round == false)
1755	{
1756	echo "</ul>";
1757	}
1758	}
1759	}
1760
1761	$callFkt = "print_elements";
1762
1763	if(isset($group_info->categories))
1764	echo $callFkt($group_id, $group_info->categories);
1765	else
1766	echo $callFkt($group_id);
1767	?>
1768	</td>
1769	</tr>
1770	<tr>
1771	<?php
1772	$users = $wpdb->get_results(" SELECT ID
1773	FROM $wpdb->users
1774	ORDER BY ID", ARRAY_A);
1775	?>
1776	<th valign="top" scope="row"><?php echo TXT_USERS; if(count($users) > 0){ echo " <label>(<a class='selectit uam_group_stuff_link'>".TXT_EXPAND."</a>)</label>"; } ?></th>
1777	<td>
1778	<?php
1779	if(isset($group_info))
1780	$users_in_group = count($group_info->users);
1781	else
1782	$users_in_group = 0;
1783
1784	echo "<strong>".sprintf(TXT_CONTAIN_USERS, "<span class='uam_element_count'>".$users_in_group."</span>", count($users))."</strong>";
1785
1786	if(isset($users))
1787	{
1788	echo "<ul class='uam_group_stuff'>";
1789	foreach($users as $user)
1790	{
1791	$cur_user = get_userdata($user['ID']);
1792	$user_capabilities = array_keys($cur_user->{$wpdb->prefix."capabilities"})
1793	?>
1794	<li class="selectit <?php foreach($user_capabilities as $user_capability){ echo "usercap_".$user_capability." "; } ?>">
1795	<?php
1796	if(empty($cur_user->{$wpdb->prefix."capabilities"}['administrator']))
1797	{
1798	?>
1799	<input id="user-<?php echo $cur_user->ID; ?>" type="checkbox" value="<?php echo $cur_user->ID; ?>" <?php if(isset($group_info->users[$cur_user->ID])){ echo 'checked="checked"'; } ?> name="user[]"/>
1800	<label for="user-<?php echo $cur_user->ID; ?>"><strong><?php echo $cur_user->nickname; ?></strong> - <?php echo $cur_user->user_firstname." ".$cur_user->user_lastname; ?>
1801	<?php
1802	}
1803	else
1804	{
1805	?>
1806	<input id="user-<?php echo $cur_user->ID; ?>" type="checkbox" value="<?php echo $cur_user->ID; ?>" checked="checked" disabled="disabled" name="user[]"/>
1807	<label for="user-<?php echo $cur_user->ID; ?>"><strong><?php echo $cur_user->nickname; ?></strong> - <?php echo $cur_user->user_firstname." ".$cur_user->user_lastname; ?>
1808	<?php
1809	echo "(".TXT_IS_ADMIN.")";
1810	}
1811	?>
1812
1813	</li>
1814	<?php
1815	}
1816	echo "</ul>";
1817	}
1818	?>
1819	</td>
1820	</tr>
1821	</tbody>
1822	</table>
1823	<p class="submit"><input type="submit" value="<?php if(isset($group_id)) { echo TXT_UPDATE_GROUP; }else{ echo TXT_ADD_GROUP;} ?>" name="submit" class="button"/></p>
1824	</form>
1825	<?php
1826	}
1827
1828	function get_usergroups_for_post($ID)
1829	{
1830	global $wpdb;
1831
1832	if(isset($this->postUserGroup[$ID]))
1833	return $this->postUserGroup[$ID];
1834
1835	$access = $this->get_access($ID);
1836
1837	$post_usergroups = array();
1838
1839	if(isset($access->restricted_by_posts) \|\| isset($access->restricted_by_categories))
1840	{
1841	if(isset($access->restricted_by_posts))
1842	{
1843	foreach($access->restricted_by_posts as $cur_id)
1844	{
1845	$usergroups = $wpdb->get_results(" SELECT ag.ID, ag.groupname
1846	FROM ".DB_ACCESSGROUP." ag, ".DB_ACCESSGROUP_TO_POST." agtp
1847	WHERE agtp.post_id = ".$cur_id."
1848	AND ag.ID = agtp.group_id
1849	GROUP BY ag.groupname", ARRAY_A);
1850
1851	if(isset($usergroups))
1852	{
1853	foreach($usergroups as $usergroup)
1854	{
1855	$cur_usergroup = null;
1856
1857	if(isset($post_usergroups[$usergroup['ID']]))
1858	$cur_usergroup = $post_usergroups[$usergroup['ID']];
1859
1860	$cur_usergroup->ID = $usergroup['ID'];
1861	$cur_usergroup->name = $usergroup['groupname'];
1862
1863	if($cur_id != $ID)
1864	{
1865	if(isset($cur_usergroup->posts))
1866	$posts = $cur_usergroup->posts;
1867
1868	$lock_post = & get_post($cur_id);
1869	$posts[$lock_post->ID] = $lock_post->ID;
1870	$cur_usergroup->posts = $posts;
1871	}
1872	else
1873	{
1874	$cur_usergroup->itself = true;
1875	}
1876
1877	$post_usergroups[$usergroup['ID']] = $cur_usergroup;
1878	}
1879	}
1880	}
1881	}
1882
1883	if(isset($access->restricted_by_categories))
1884	{
1885	foreach($access->restricted_by_categories as $cur_id)
1886	{
1887	$usergroups = $wpdb->get_results(" SELECT ag.ID, ag.groupname
1888	FROM ".DB_ACCESSGROUP." ag, ".DB_ACCESSGROUP_TO_CATEGORY." agtc
1889	WHERE agtc.category_id = ".$cur_id."
1890	AND ag.ID = agtc.group_id
1891	GROUP BY ag.groupname", ARRAY_A);
1892
1893	if(isset($usergroups))
1894	{
1895	foreach($usergroups as $usergroup)
1896	{
1897	$cur_usergroup = null;
1898
1899	if(isset($post_usergroups[$usergroup['ID']]))
1900	$cur_usergroup = $post_usergroups[$usergroup['ID']];
1901
1902	$cur_usergroup->ID = $usergroup['ID'];
1903	$cur_usergroup->name = $usergroup['groupname'];
1904
1905	if(isset($cur_usergroup->categorie))
1906	$categories = $cur_usergroup->categories;
1907
1908	$lock_cat = & get_category($cur_id);
1909	$categories[$lock_cat->term_id] = $lock_cat->term_id;
1910	$cur_usergroup->categories = $categories;
1911
1912	$post_usergroups[$usergroup['ID']] = $cur_usergroup;
1913	}
1914	}
1915
1916
1917	}
1918	}
1919	}
1920
1921	$this->postUserGroup[$ID] = $post_usergroups;
1922
1923	return $post_usergroups;
1924	}
1925
1926	function get_usergroup_info($groupid)
1927	{
1928	global $wpdb;
1929
1930	$uamOptions = $this->getAdminOptions();
1931
1932	$cur_group = $wpdb->get_results(" SELECT *
1933	FROM ".DB_ACCESSGROUP."
1934	WHERE ID = ".$groupid, ARRAY_A);
1935
1936	$info->group = $cur_group[0];
1937
1938	$db_users = $wpdb->get_results(" SELECT *
1939	FROM ".DB_ACCESSGROUP_TO_USER."
1940	WHERE group_id = ".$groupid."
1941	ORDER BY user_id", ARRAY_A);
1942
1943	$db_categories = $wpdb->get_results(" SELECT *
1944	FROM ".DB_ACCESSGROUP_TO_CATEGORY."
1945	WHERE group_id = ".$groupid."
1946	ORDER BY category_id", ARRAY_A);
1947
1948	$db_roles = $wpdb->get_results(" SELECT *
1949	FROM ".DB_ACCESSGROUP_TO_ROLE."
1950	WHERE group_id = ".$groupid, ARRAY_A);
1951
1952	$wp_users = $wpdb->get_results(" SELECT ID, user_nicename
1953	FROM $wpdb->users
1954	ORDER BY user_nicename", ARRAY_A);
1955
1956
1957	$args = array( 'numberposts' => -1,
1958	'post_type' => 'any');
1959
1960	$posts = get_posts($args);
1961
1962	if(isset($posts))
1963	{
1964	foreach($posts as $post)
1965	{
1966	$groupinfo = $this->get_usergroups_for_post($post->ID);
1967
1968	if(isset($groupinfo[$groupid]))
1969	{
1970	if($post->post_type == 'post')
1971	{
1972	$info->posts[$post->ID] = $post;
1973	}
1974	elseif($post->post_type == 'page')
1975	{
1976	$info->pages[$post->ID] = $post;
1977	}
1978	elseif($post->post_type == 'attachment')
1979	{
1980	$info->files[$post->ID] = $post;
1981	}
1982	}
1983	}
1984	}
1985
1986	$args = array( 'numberposts' => -1,
1987	'post_type' => 'attachment');
1988
1989	$files = get_posts($args);
1990
1991	if(isset($files))
1992	{
1993	foreach($files as $file)
1994	{
1995	$groupinfo = $this->get_usergroups_for_post($file->ID);
1996
1997	if(isset($groupinfo[$groupid]))
1998	$info->files[$file->ID] = $file;
1999	}
2000	}
2001
2002	if(isset($db_categories))
2003	{
2004	foreach($db_categories as $db_categorie)
2005	{
2006	$cur_category = get_category($db_categorie['category_id']);
2007
2008	$info->categories[$db_categorie['category_id']] = $cur_category;
2009
2010	if($uamOptions['lock_recursive'] == 'true')
2011	{
2012	$cur_categories = get_categories('child_of='.$db_categorie['category_id']);
2013	if(isset($cur_categories))
2014	{
2015	foreach($cur_categories as $cur_category)
2016	{
2017	$cur_category->recursive_lock_by_category[$db_categorie['category_id']] = $db_categorie['category_id'];
2018	$info->categories[$cur_category->term_id] = $cur_category;
2019	}
2020	}
2021	}
2022	}
2023	}
2024
2025	if(isset($db_users))
2026	{
2027	$expandcontent = null;
2028	foreach($db_users as $db_user)
2029	{
2030	$info->users[$db_user['user_id']] = get_userdata($db_user['user_id']);
2031	}
2032	}
2033
2034	if(isset($db_roles))
2035	{
2036	foreach($db_roles as $db_role)
2037	{
2038	$info->roles[$db_role['role_name']] = $db_role;
2039	}
2040	}
2041
2042	if(isset($wp_users))
2043	{
2044	foreach($wp_users as $wp_user)
2045	{
2046	$cur_userdata = get_userdata($wp_user['ID']);
2047
2048	if(isset($cur_userdata->{$wpdb->prefix."capabilities"}['administrator']))
2049	{
2050	$info->users[$wp_user['ID']] = $cur_userdata;
2051	}
2052	elseif(isset($db_roles) && empty($cur_userdata->{$wpdb->prefix."capabilities"}['administrator']))
2053	{
2054	foreach($db_roles as $db_role)
2055	{
2056	if(isset($cur_userdata->{$wpdb->prefix."capabilities"}[$db_role['role_name']]))
2057	{
2058	$info->users[$wp_user['ID']] = $cur_userdata;
2059	break;
2060	}
2061	}
2062	}
2063	}
2064	}
2065
2066	return $info;
2067	}
2068
2069	function get_usergroup_info_html($group_id, $style = null)
2070	{
2071	$link = '<a class="uam_group_info_link">('.TXT_INFO.')</a>';
2072
2073	$group_info = $this->get_usergroup_info($group_id);
2074
2075	$content = "<ul class='uam_group_info'";
2076
2077	if($style != null)
2078	$content .= " style='".$style."' ";
2079
2080	$content .= "><li class='uam_group_info_head'>".TXT_GROUP_INFO.":</li>";
2081
2082	$content .= "<li>".TXT_READ_ACCESS.": ";
2083	if($group_info->group['read_access'] == "all")
2084	$content .= TXT_ALL;
2085	elseif($group_info->group['read_access'] == "group")
2086	$content .= TXT_ONLY_GROUP_USERS;
2087	$content .= "</li>";
2088
2089	$content .= "<li>".TXT_WRITE_ACCESS.": ";
2090	if($group_info->group['write_access'] == "all")
2091	$content .= TXT_ALL;
2092	elseif($group_info->group['write_access'] == "group")
2093	$content .= TXT_ONLY_GROUP_USERS;
2094	$content .= "</li>";
2095
2096	if(isset($group_info->posts))
2097	{
2098	$expandcontent = null;
2099	foreach($group_info->posts as $post)
2100	{
2101	$expandcontent .= "<li>".$post->post_title."</li>";
2102	}
2103	$content .= "<li><a class='uam_info_link'>".count($group_info->posts)." ".TXT_POSTS."</a>";
2104	$content .= "<ul class='uam_info_content expand_deactive'>".$expandcontent."</ul></li>";
2105	}
2106	else
2107	{
2108	$content .= "<li>".TXT_NONE." ".TXT_POSTS."</li>";
2109	}
2110
2111	if(isset($group_info->pages))
2112	{
2113	$expandcontent = null;
2114	foreach($group_info->pages as $page)
2115	{
2116	$expandcontent .= "<li>".$page->post_title."</li>";
2117	}
2118	$content .= "<li><a class='uam_info_link'>".count($group_info->pages)." ".TXT_PAGES."</a>";
2119	$content .= "<ul class='uam_info_content expand_deactive'>".$expandcontent."</ul></li>";
2120	}
2121	else
2122	{
2123	$content .= "<li>".TXT_NONE." ".TXT_PAGES."</li>";
2124	}
2125
2126	if(isset($group_info->categories))
2127	{
2128	$expandcontent = null;
2129	foreach($group_info->categories as $categorie)
2130	{
2131	$expandcontent .= "<li>".$categorie->cat_name."</li>";
2132	}
2133	$content .= "<li><a class='uam_info_link'>".count($group_info->categories)." ".TXT_CATEGORY."</a>";
2134	$content .= "<ul class='uam_info_content expand_deactive'>".$expandcontent."</ul></li>";
2135	}
2136	else
2137	{
2138	$content .= "<li>".TXT_NONE." ".TXT_CATEGORY."</li>";
2139	}
2140	if(isset($group_info->users))
2141	{
2142	$expandcontent = null;
2143	foreach($group_info->users as $user)
2144	{
2145	$expandcontent .= "<li>".$user->nickname."</li>";
2146	}
2147	$content .= "<li><a class='uam_info_link'>".count($group_info->users)." ".TXT_USERS."</a>";
2148	$content .= "<ul class='uam_info_content expand_deactive'>".$expandcontent."</ul></li>";
2149	}
2150	else
2151	{
2152	$content .= "<li>".TXT_NONE." ".TXT_USERS."</li>";
2153	}
2154	$content .= "</ul>";
2155
2156	$result->link = $link;
2157	$result->content = $content;
2158
2159	return $result;
2160	}
2161
2162	function get_post_info_html($id)
2163	{
2164	$usergroups = $this->get_usergroups_for_post($id);
2165
2166	if(isset($usergroups) && $usergroups != null)
2167	{
2168	$output = "<ul>";
2169	foreach($usergroups as $usergroup)
2170	{
2171	$output .= "<li><a class='uma_user_access_group'>".$usergroup->name."</a>";
2172	$output .= "<ul class='uma_user_access_group_from'>";
2173
2174	if(isset($usergroup->itself))
2175	$output .= "<li>".TXT_ITSELF."</li>";
2176
2177	if(isset($usergroup->posts))
2178	{
2179	foreach($usergroup->posts as $cur_id)
2180	{
2181	$cur_post = & get_post($cur_id);
2182	$output .= "<li>$cur_post->post_title [$cur_post->post_type]</li>";
2183	}
2184	}
2185
2186	if(isset($usergroup->categories))
2187	{
2188	foreach($usergroup->categories as $cur_id)
2189	{
2190	$cur_category = & get_category($cur_id);
2191	$output .= "<li>$cur_category->name [category]</li>";
2192	}
2193	}
2194
2195	$output = substr($output, 0, -2);
2196
2197	$output .= "</ul></li>";
2198	}
2199	$output .= "</ul>";
2200	}
2201	else
2202	{
2203	$output = TXT_FULL_ACCESS;
2204	}
2205	return $output;
2206	}
2207	function add_post_columns_header($defaults)
2208	{
2209	$defaults['uam_access'] = __('Access');
2210	return $defaults;
2211	}
2212
2213	function get_post_edit_info_html($id , $style = null)
2214	{
2215	global $wpdb;
2216	$accessgroups = $wpdb->get_results("SELECT *
2217	FROM ".DB_ACCESSGROUP."
2218	ORDER BY groupname", ARRAY_A);
2219
2220	$recursive_set = $this->get_usergroups_for_post($id);
2221
2222	if(isset($accessgroups))
2223	{
2224	$content = "";
2225
2226	foreach($accessgroups as $accessgroup)
2227	{
2228	$checked = $wpdb->get_results(" SELECT *
2229	FROM ".DB_ACCESSGROUP_TO_POST."
2230	WHERE post_id = ".$id."
2231	AND group_id = ".$accessgroup['ID'], ARRAY_A);
2232
2233	$set_recursive = null;
2234	if(isset($recursive_set[$accessgroup['ID']]))
2235	$set_recursive = $recursive_set[$accessgroup['ID']];
2236
2237	$content .= '<p><label for="uam_accesssgroup-'.$accessgroup['ID'].'" class="selectit" style="display:inline;" >';
2238	$content .= '<input type="checkbox" id="uam_accesssgroup-'.$accessgroup['ID'].'"';
2239	if(isset($checked) \|\| isset($set_recursive->posts) \|\| isset($set_recursive->categories))
2240	$content .= 'checked="checked"';
2241	if(isset($set_recursive->posts) \|\| isset($set_recursive->categories))
2242	$content .= 'disabled=""';
2243	$content .= 'value="'.$accessgroup['ID'].'" name="accessgroups[]"/>';
2244	$content .= $accessgroup['groupname'];
2245	$content .= "</label>";
2246
2247	$group_info_html = $this->get_usergroup_info_html($accessgroup['ID'], $style);
2248
2249	$content .= $group_info_html->link;
2250
2251	if(isset($set_recursive->posts) \|\| isset($set_recursive->categories))
2252	$content .= ' <a class="uam_group_lock_info_link">[LR]</a>';
2253
2254	$content .= $group_info_html->content;
2255
2256	if(isset($set_recursive->posts) \|\| isset($set_recursive->categories))
2257	{
2258	$recursive_info = '<ul class="uam_group_lock_info" ';
2259	if($style != null)
2260	$recursive_info .= " style='".$style."' ";
2261	$recursive_info .= '><li class="uam_group_lock_info_head">'.TXT_GROUP_LOCK_INFO.':</li>';
2262
2263	if(isset($set_recursive->posts))
2264	{
2265	foreach($set_recursive->posts as $cur_id)
2266	{
2267	$cur_post = & get_post($cur_id);
2268	$recursive_info .= "<li>$cur_post->post_title [$cur_post->post_type]</li>";
2269	}
2270	}
2271
2272	if(isset($set_recursive->categories))
2273	{
2274	foreach($set_recursive->categories as $cur_id)
2275	{
2276	$cur_category = & get_category($cur_id);
2277	$recursive_info .= "<li>$cur_category->name [".TXT_CATEGORY."]</li>";
2278	}
2279	}
2280	$recursive_info .= "</ul>";
2281	$content .= $recursive_info;
2282	}
2283	$content .= "</p>";
2284	}
2285	}
2286	else
2287	{
2288	$content = "<a href='admin.php?page=uam_usergroup'>";
2289	$content .= TXT_CREATE_GROUP_FIRST;
2290	$content .= "</a>";
2291	}
2292
2293	return $content;
2294	}
2295	function add_post_column($column_name, $id)
2296	{
2297	if( $column_name == 'uam_access' )
2298	{
2299	echo $this->get_post_info_html($id);
2300	}
2301	}
2302
2303	function edit_post_content($post)
2304	{
2305	echo $this->get_post_edit_info_html($post->ID, "padding:0 0 0 36px;");
2306	}
2307
2308	function save_postdata($post_id)
2309	{
2310	global $current_user, $wpdb;
2311	$cur_userdata = get_userdata($current_user->ID);
2312
2313	if(empty($cur_userdata->{$wpdb->prefix."capabilities"}['administrator']))
2314	{
2315	$uamOptions = $this->getAdminOptions();
2316
2317	$cur_categories = wp_get_post_categories($post_id);
2318
2319	$allowded_categories = get_categories();
2320
2321	foreach($cur_categories as $category)
2322	{
2323	foreach($allowded_categories as $allowded_category)
2324	{
2325	if($allowded_category->term_id == $category)
2326	{
2327	$post_categories[] = $allowded_category->term_id;
2328	break;
2329	}
2330	}
2331	}
2332
2333	if(!isset($post_categories))
2334	{
2335	$last_category = array_pop($allowded_categories);
2336	$post_categories[] = $last_category->term_id;
2337	}
2338
2339	wp_set_post_categories($post_id, $post_categories);
2340	}
2341
2342	if(isset($_POST['accessgroups']))
2343	$accessgroups = $_POST['accessgroups'];
2344
2345	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_POST." WHERE post_id = $post_id");
2346	if(isset($accessgroups))
2347	{
2348	foreach($accessgroups as $accessgroup)
2349	{
2350	$wpdb->query("INSERT INTO ".DB_ACCESSGROUP_TO_POST." (post_id,group_id) VALUES(".$post_id.", ".$accessgroup.")");
2351	}
2352	}
2353	}
2354
2355	function save_attachmentdata($post)
2356	{
2357	global $wpdb;
2358
2359	if(isset($post['ID']))
2360	{
2361	$post_id = $post['ID'];
2362
2363	if(isset($_POST['accessgroups']))
2364	$accessgroups = $_POST['accessgroups'];
2365
2366	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_POST." WHERE post_id = $post_id");
2367	if(isset($accessgroups))
2368	{
2369	foreach($accessgroups as $accessgroup)
2370	{
2371	$wpdb->query("INSERT INTO ".DB_ACCESSGROUP_TO_POST." (post_id,group_id) VALUES(".$post_id.", ".$accessgroup.")");
2372	}
2373	}
2374	}
2375
2376	return $post;
2377	}
2378
2379	function remove_postdata($post_id)
2380	{
2381	global $wpdb;
2382	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_POST." WHERE post_id = $post_id");
2383	}
2384
2385	function add_user_columns_header($defaults)
2386	{
2387	$defaults['uam_access'] = __('Access');
2388	return $defaults;
2389	}
2390
2391	function add_user_column($column_name, $id)
2392	{
2393	global $wpdb;
2394
2395	if( $column_name == 'uam_access' )
2396	{
2397	$usergroups = $wpdb->get_results(" SELECT ag.groupname
2398	FROM ".DB_ACCESSGROUP." ag, ".DB_ACCESSGROUP_TO_USER." agtp
2399	WHERE agtp.user_id = ".$id."
2400	AND ag.ID = agtp.group_id
2401	GROUP BY ag.groupname", ARRAY_A);
2402
2403	if(isset($usergroups))
2404	{
2405	$content .= "<ul>";
2406	foreach($usergroups as $usergroup)
2407	{
2408	$content .= "<li>".$usergroup['groupname']."</li>";
2409	}
2410	$content .= "</ul>";
2411	}
2412	else
2413	{
2414	$content = TXT_NO_GROUP;
2415	}
2416	return $content;
2417	}
2418	}
2419
2420	function show_user_profile()
2421	{
2422	global $wpdb, $current_user;
2423
2424	$user_id = $_GET['user_id'];
2425	$cur_userdata = get_userdata($current_user->ID);
2426	$cur_edit_userdata = get_userdata($user_id);
2427
2428	if(isset($cur_userdata->{$wpdb->prefix."capabilities"}['administrator']))
2429	{
2430	$accessgroups = $wpdb->get_results("SELECT *
2431	FROM ".DB_ACCESSGROUP."
2432	ORDER BY groupname", ARRAY_A);
2433
2434	?>
2435	<h3><?php echo TXT_GROUPS; ?></h3>
2436	<table class="form-table">
2437	<tbody>
2438	<tr>
2439	<th>
2440	<label for="usergroups"><?php echo TXT_SET_UP_USERGROUPS; ?></label>
2441	</th>
2442	<td>
2443	<?php
2444	if(empty($cur_edit_userdata->{$wpdb->prefix."capabilities"}['administrator']))
2445	{
2446	if(isset($accessgroups))
2447	{
2448	foreach($accessgroups as $accessgroup)
2449	{
2450	$checked = $wpdb->get_results(" SELECT *
2451	FROM ".DB_ACCESSGROUP_TO_USER."
2452	WHERE user_id = ".$user_id."
2453	AND group_id = ".$accessgroup['ID'], ARRAY_A)
2454	?>
2455	<p style="margin:6px 0;">
2456	<label for="uam_accesssgroup-<?php echo $accessgroup['ID'];?>" class="selectit" >
2457	<input type="checkbox" id="uam_accesssgroup-<?php echo $accessgroup['ID'];?>" <?php if(isset($checked)){ echo 'checked="checked"'; } ?> value="<?php echo $accessgroup['ID']; ?>" name="accessgroups[]"/>
2458	<?php echo $accessgroup['groupname']; ?>
2459	</label>
2460	<?php
2461	$group_info_html = $this->get_usergroup_info_html($accessgroup['ID'], "padding: 0 0 0 32px");
2462
2463	echo $group_info_html->link;
2464	echo $group_info_html->content;
2465	echo "</p>";
2466	}
2467	}
2468	else
2469	{
2470	echo "<a href='admin.php?page=uam_usergroup'>";
2471	echo TXT_CREATE_GROUP_FIRST;
2472	echo "</a>";
2473	}
2474	}
2475	else
2476	{
2477	echo TXT_ADMIN_HINT;
2478	}
2479	?>
2480	</td>
2481	</tr>
2482	</tbody>
2483	</table>
2484	<?php
2485	}
2486	}
2487
2488	function show_media_file($meta = '', $post)
2489	{
2490	$content = $meta;
2491	$content .= '</td></tr><tr><th class="label"><label>'.TXT_SET_UP_USERGROUPS.'</label></th><td class="field">';
2492	$content .= $this->get_post_edit_info_html($post->ID, "padding:0 0 0 38px;top:-12px;");
2493
2494	return $content;
2495	}
2496
2497	function save_userdata($user_id)
2498	{
2499	global $wpdb, $current_user;
2500
2501	$cur_userdata = get_userdata($current_user->ID);
2502
2503	if(isset($cur_userdata->{$wpdb->prefix."capabilities"}['administrator']))
2504	{
2505	$accessgroups = $_POST['accessgroups'];
2506	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_USER." WHERE user_id = $user_id");
2507	if(isset($accessgroups))
2508	{
2509	foreach($accessgroups as $accessgroup)
2510	{
2511	$wpdb->query("INSERT INTO ".DB_ACCESSGROUP_TO_USER." (user_id,group_id) VALUES(".$user_id.", ".$accessgroup.")");
2512	}
2513	}
2514	}
2515	}
2516
2517	function remove_userdata($user_id)
2518	{
2519	global $wpdb, $current_user;
2520
2521	$cur_userdata = get_userdata($current_user->ID);
2522
2523	if(isset($cur_userdata->{$wpdb->prefix."capabilities"}['administrator']))
2524	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_USER." WHERE user_id = $user_id");
2525	}
2526
2527	function add_category_columns_header($defaults)
2528	{
2529	$defaults['uam_access'] = __('Access');
2530	return $defaults;
2531	}
2532
2533	function add_category_column($column_name, $id)
2534	{
2535	global $wpdb;
2536
2537	if( $column_name == 'uam_access' )
2538	{
2539	$usergroups = $wpdb->get_results(" SELECT ag.groupname
2540	FROM ".DB_ACCESSGROUP." ag, ".DB_ACCESSGROUP_TO_CATEGORY." agtc
2541	WHERE agtc.category_id = ".$id."
2542	AND ag.ID = agtc.group_id
2543	GROUP BY ag.groupname", ARRAY_A);
2544
2545	if(isset($usergroups))
2546	{
2547	$content = "<ul>";
2548	foreach($usergroups as $usergroup)
2549	{
2550	$content .= "<li>".$usergroup['groupname']."</li>";
2551	}
2552	$content .= "</ul>";
2553	}
2554	else
2555	{
2556	$content = TXT_NO_GROUP;
2557	}
2558	return $content;
2559	}
2560	}
2561
2562	function show_cat_edit_form($cat)
2563	{
2564	global $wpdb, $current_user;
2565
2566	if(isset($cat->cat_ID))
2567	$cat_id = $cat->cat_ID;
2568
2569	$accessgroups = $wpdb->get_results("SELECT *
2570	FROM ".DB_ACCESSGROUP."
2571	ORDER BY groupname", ARRAY_A);
2572
2573	if(isset($_GET['action']))
2574	$action = $_GET['action'];
2575	else
2576	$action = null;
2577
2578	if($action == 'edit')
2579	{
2580	?>
2581	<table class="form-table">
2582	<tbody>
2583	<tr>
2584	<th>
2585	<label for="description"><?php echo TXT_SET_UP_USERGROUPS; ?></label>
2586	</th>
2587	<td>
2588	<?php
2589	if(isset($accessgroups))
2590	{
2591	$recursive_set = $this->get_usergroups_for_post($cat_id);
2592
2593	foreach($accessgroups as $accessgroup)
2594	{
2595	$checked = $wpdb->get_results(" SELECT *
2596	FROM ".DB_ACCESSGROUP_TO_CATEGORY."
2597	WHERE category_id = ".$cat_id."
2598	AND group_id = ".$accessgroup['ID'], ARRAY_A)
2599
2600	//$set_recursive = $recursive_set[$accessgroup['groupname']];
2601	?>
2602	<p style="margin:6px 0;">
2603	<label for="uam_accesssgroup-<?php echo $accessgroup['ID'];?>" class="selectit" >
2604	<input type="checkbox" id="uam_accesssgroup-<?php echo $accessgroup['ID'];?>" <?php if(isset($checked)){ echo 'checked="checked"'; } ?> value="<?php echo $accessgroup['ID']; ?>" name="accessgroups[]"/>
2605	<?php echo $accessgroup['groupname']; ?>
2606	</label>
2607	<?php
2608	$group_info_html = $this->get_usergroup_info_html($accessgroup['ID'], "padding:0 0 0 32px;");
2609
2610	echo $group_info_html->link;
2611
2612	if(isset($set_recursive->posts) \|\| isset($set_recursive->categories))
2613	echo ' <a class="uam_group_lock_info_link">[LR]</a>';
2614
2615	echo $group_info_html->content;
2616
2617	if(isset($set_recursive->posts) \|\| isset($set_recursive->categories))
2618	{
2619	$recursive_info = '<ul class="uam_group_lock_info" style="padding:0 0 0 32px;"><li class="uam_group_lock_info_head">'.TXT_GROUP_LOCK_INFO.':</li>';
2620	if(isset($set_recursive->posts))
2621	{
2622	foreach($set_recursive->posts as $cur_id)
2623	{
2624	$cur_post = & get_post($cur_id);
2625	$recursive_info .= "<li>$cur_post->post_title [$cur_post->post_type]</li>";
2626	}
2627	}
2628
2629	if(isset($set_recursive->categories))
2630	{
2631	foreach($set_recursive->categories as $cur_id)
2632	{
2633	$cur_category = & get_category($cur_id);
2634	$recursive_info .= "<li>$cur_category->name [".TXT_CATEGORY."]</li>";
2635	}
2636	}
2637	$recursive_info .= "</ul>";
2638	echo $recursive_info;
2639	}
2640	echo "</p>";
2641	}
2642	}
2643	else
2644	{
2645	echo "<a href='admin.php?page=uam_usergroup'>";
2646	echo TXT_CREATE_GROUP_FIRST;
2647	echo "</a>";
2648	}
2649	?>
2650	</td>
2651	</tr>
2652	</tbody>
2653	</table>
2654	<style type="text/css">
2655	.submit {
2656	display: none;
2657	position: relative;
2658	}
2659	</style>
2660	<p class="submit" style="display:block;position:relative;">
2661	<input class="button-primary" type="submit" value="Update Category" name="submit"/>
2662	</p>
2663	<?php
2664	}
2665	}
2666
2667	function add_styles()
2668	{
2669	wp_enqueue_style('UserAccessManager', UAM_URLPATH."css/uma_admin.css", false, '1.0', 'screen' );
2670	}
2671
2672	function add_scripts()
2673	{
2674	wp_enqueue_script('UserAccessManager', UAM_URLPATH .'js/functions.js', array('jquery'), '1.0' );
2675	}
2676
2677	function save_categorydata($category_id)
2678	{
2679	global $wpdb;
2680
2681	if(isset($_POST['accessgroups']))
2682	$accessgroups = $_POST['accessgroups'];
2683
2684	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_CATEGORY." WHERE category_id = $category_id");
2685	if(isset($accessgroups))
2686	{
2687	foreach($accessgroups as $accessgroup)
2688	{
2689	$wpdb->query("INSERT INTO ".DB_ACCESSGROUP_TO_CATEGORY." (category_id,group_id) VALUES(".$category_id.", ".$accessgroup.")");
2690	}
2691	}
2692	}
2693
2694	function remove_categorydata($category_id)
2695	{
2696	global $wpdb;
2697
2698	$wpdb->query("DELETE FROM ".DB_ACCESSGROUP_TO_CATEGORY." WHERE category_id = $category_id");
2699	}
2700
2701	function get_login_bar()
2702	{
2703	if(!is_user_logged_in())
2704	{
2705	if(!is_single())
2706	{
2707	$output = '<a href="'.get_bloginfo('wpurl').'/wp-login.php?redirect_to='.urlencode($_SERVER['REQUEST_URI']).'">'.__('Login', 'user-access-manager').'</a>';
2708	}
2709	else
2710	{
2711	if(! isset ($user_login))
2712	$user_login = '';
2713	// login form
2714	$output = '<form action="'.get_bloginfo('wpurl').'/wp-login.php" method="post" >';
2715	$output .= '<p><label for="user_login">'.__('Username:', 'user-access-manager').'<input name="log" value="'.wp_specialchars(stripslashes($user_login), 1).'" class="input" id="user_login" type="text" /></label></p>';
2716	$output .= '<p><label for="user_pass">'.__('Password:', 'user-access-manager').'<input name="pwd" class="imput" id="user_pass" type="password" /></label></p>';
2717	$output .= '<p class="forgetmenot"><label for="rememberme"><input name="rememberme" class="checkbox" id="rememberme" value="forever" type="checkbox" /> '. __('Remember me', 'user-access-manager').'</label></p>';
2718	$output .= '<p class="submit"><input type="submit" name="wp-submit" id="wp-submit" value="'.__('Login', 'user-access-manager').' »" />';
2719	$output .= '<input type="hidden" name="redirect_to" value="' . $_SERVER['REQUEST_URI'] . '" />';
2720	$output .= '</form>';
2721
2722	$output .= '<p>';
2723	if (get_option('users_can_register'))
2724	$output .= '<a href="'.get_bloginfo('wpurl').'/wp-login.php?action=register">'.__('Register', 'user-access-manager').'</a></br>';
2725	$output .= '<a href="'.get_bloginfo('wpurl').'/wp-login.php?action=lostpassword" title="'. __('Password Lost and Found', 'user-access-manager').'">'. __('Lost your password?', 'user-access-manager').'</a>';
2726	$output .= '</p>';
2727	}
2728
2729	return $output;
2730	}
2731	return null;
2732	}
2733
2734	function get_access($post_id = null)
2735	{
2736	global $wpdb;
2737
2738	if(isset($this->restrictedPost[$post_id]))
2739	return $this->restrictedPost[$post_id];
2740
2741	$access = null;
2742	$cur_id = $post_id;
2743	$cur_post = & get_post($cur_id);
2744	if(isset($cur_post->ID))
2745	$cur_categories = get_the_category($cur_post->ID);
2746
2747	$uamOptions = $this->getAdminOptions();
2748
2749	if($this->atAdminPanel)
2750	$sqlCheckLocation = "ag.write_access != 'all'";
2751	else
2752	$sqlCheckLocation = "ag.read_access != 'all'";
2753
2754	$restricted_by_categories = array();
2755	$restricted_by_posts = array();
2756
2757	//check categories access
2758	if(isset($cur_categories))
2759	{
2760	foreach($cur_categories as $cur_category)
2761	{
2762	if($cur_post->post_type == "post" \|\| $cur_post->post_type == "attachment")
2763	{
2764	$restricted_access_by_cat = $wpdb->get_results(" SELECT *
2765	FROM ".DB_ACCESSGROUP_TO_CATEGORY." atc, ".DB_ACCESSGROUP." ag
2766	WHERE atc.category_id = ".$cur_category->term_id."
2767	AND atc.group_id = ag.ID
2768	AND ".$sqlCheckLocation, ARRAY_A);
2769	if(isset($restricted_access_by_cat))
2770	$restricted_by_categories[$cur_category->term_id] = $cur_category->term_id;
2771
2772	if($uamOptions['lock_recursive'] == 'true')
2773	{
2774	$cur_id = $cur_category->parent;
2775	while($cur_id != 0)
2776	{
2777	$restricted_access_by_cat = $wpdb->get_results(" SELECT *
2778	FROM ".DB_ACCESSGROUP_TO_CATEGORY." atc, ".DB_ACCESSGROUP." ag
2779	WHERE atc.category_id = ".$cur_id."
2780	AND atc.group_id = ag.ID
2781	AND ".$sqlCheckLocation, ARRAY_A);
2782
2783	if(isset($cur_category->term_id) && isset($restricted_access_by_cat))
2784	$restricted_by_categories[$cur_category->term_id] = $cur_category->term_id;
2785
2786	if(isset($cur_category->parent))
2787	{
2788	$cur_id = $cur_category->parent;
2789	$cur_category = & get_category($cur_id);
2790	}
2791	else
2792	{
2793	$cur_id = 0;
2794	}
2795	}
2796	}
2797	}
2798	}
2799	}
2800
2801	//check posts access
2802	if(isset($cur_post->ID))
2803	{
2804	$restricted_access_by_post = $wpdb->get_results(" SELECT *
2805	FROM ".DB_ACCESSGROUP_TO_POST." atp, ".DB_ACCESSGROUP." ag
2806	WHERE atp.post_id = ".$cur_post->ID."
2807	AND atp.group_id = ag.ID
2808	AND ".$sqlCheckLocation, ARRAY_A);
2809	if(isset($restricted_access_by_post))
2810	$restricted_by_posts[$cur_post->ID] = $cur_post->ID;
2811
2812	if($uamOptions['lock_recursive'] == 'true')
2813	{
2814	if(isset($cur_post->post_parent))
2815	$cur_id = $cur_post->post_parent;
2816
2817	if($cur_id != 0 && isset($cur_id))
2818	{
2819	$restricted_access = $this->get_access($cur_id);
2820
2821	if(isset($restricted_access->restricted_by_categories))
2822	$restricted_by_categories = array_unique(array_merge($restricted_by_categories, $restricted_access->restricted_by_categories));
2823
2824	if(isset($restricted_access->restricted_by_posts))
2825	$restricted_by_posts = array_unique(array_merge($restricted_by_posts, $restricted_access->restricted_by_posts));
2826	}
2827	}
2828	elseif($uamOptions['lock_recursive'] == 'false' && $cur_post->post_type == "attachment")
2829	{
2830	if(isset($cur_post->post_parent))
2831	$cur_id = $cur_post->post_parent;
2832
2833	if($cur_id != 0 && isset($cur_id))
2834	{
2835	$restricted_access = $this->get_access($cur_id);
2836
2837	if(isset($restricted_access->restricted_by_categories))
2838	$restricted_by_categories = array_unique(array_merge($restricted_by_categories, $restricted_access->restricted_by_categories));
2839
2840	if(isset($restricted_access->restricted_by_posts))
2841	$restricted_by_posts = array_unique(array_merge($restricted_by_posts, $restricted_access->restricted_by_posts));
2842	}
2843	}
2844	}
2845
2846	if(isset($restricted_by_categories) && count($restricted_by_categories) != 0)
2847	$access->restricted_by_categories = $restricted_by_categories;
2848	if(isset($restricted_by_posts) && count($restricted_by_posts) != 0)
2849	$access->restricted_by_posts = $restricted_by_posts;
2850
2851	if(empty($access))
2852	$access = -1;
2853
2854	$this->restrictedPost[$post_id] = $access;
2855
2856	return $access;
2857	}
2858
2859	function check_access($post_id = null)
2860	{
2861	global $wpdb, $current_user;
2862
2863	if(isset($this->postAccess[$post_id]))
2864	return $this->postAccess[$post_id];
2865
2866	$access = $this->get_access($post_id);
2867	$cur_user_ip = explode(".", $_SERVER['REMOTE_ADDR']);
2868
2869	if(isset($access->restricted_by_posts) \|\| isset($access->restricted_by_categories))
2870	{
2871	if(is_user_logged_in())
2872	{
2873	$cur_userdata = get_userdata($current_user->ID);
2874
2875	if(empty($cur_userdata->{$wpdb->prefix."capabilities"}['administrator']))
2876	{
2877	if(isset($access->restricted_by_categories))
2878	{
2879	foreach($access->restricted_by_categories as $cur_cat_id)
2880	{
2881	$user_access = $wpdb->get_results(" SELECT *
2882	FROM ".DB_ACCESSGROUP_TO_CATEGORY." atc, ".DB_ACCESSGROUP_TO_USER." atu
2883	WHERE atc.category_id = ".$cur_cat_id."
2884	AND atc.group_id = atu.group_id
2885	AND atu.user_id = ".$current_user->ID, ARRAY_A);
2886	if(isset($user_access))
2887	{
2888	$this->postAccess[$post_id] = true;
2889	return true;
2890	}
2891
2892	$access_roles = $wpdb->get_results("SELECT atr.role_name
2893	FROM ".DB_ACCESSGROUP_TO_CATEGORY." atc, ".DB_ACCESSGROUP_TO_ROLE." atr
2894	WHERE atc.category_id = ".$cur_cat_id."
2895	AND atc.group_id = atr.group_id", ARRAY_A);
2896
2897	if(isset($access_roles))
2898	{
2899	foreach($access_roles as $access_role)
2900	{
2901	if(isset($cur_userdata->wp_capabilities[$access_role['role_name']]))
2902	{
2903	$this->postAccess[$post_id] = true;
2904	return true;
2905	}
2906	}
2907	}
2908
2909	$db_ip_ranges = $wpdb->get_var("SELECT ag.ip_range
2910	FROM ".DB_ACCESSGROUP_TO_CATEGORY." atc, ".DB_ACCESSGROUP." ag
2911	WHERE atc.category_id = ".$cur_cat_id."
2912	AND atc.group_id = ag.ID", ARRAY_A);
2913
2914	if($this->check_user_ip($cur_user_ip, $db_ip_ranges))
2915	{
2916	$this->postAccess[$post_id] = true;
2917	return true;
2918	}
2919	}
2920	}
2921
2922	if(isset($access->restricted_by_posts))
2923	{
2924	foreach($access->restricted_by_posts as $cur_post_id)
2925	{
2926	$user_access = $wpdb->get_results(" SELECT *
2927	FROM ".DB_ACCESSGROUP_TO_POST." atp, ".DB_ACCESSGROUP_TO_USER." atu
2928	WHERE atp.post_id = ".$cur_post_id."
2929	AND atp.group_id = atu.group_id
2930	AND atu.user_id = ".$current_user->ID, ARRAY_A);
2931	if(isset($user_access))
2932	{
2933	$this->postAccess[$post_id] = true;
2934	return true;
2935	}
2936
2937	$access_roles = $wpdb->get_results("SELECT atr.role_name
2938	FROM ".DB_ACCESSGROUP_TO_POST." atp, ".DB_ACCESSGROUP_TO_ROLE." atr
2939	WHERE atp.post_id = ".$cur_post_id."
2940	AND atp.group_id = atr.group_id", ARRAY_A);
2941	if(isset($access_roles))
2942	{
2943	foreach($access_roles as $access_role)
2944	{
2945	if(isset($cur_userdata->wp_capabilities[$access_role['role_name']]))
2946	{
2947	$this->postAccess[$post_id] = true;
2948	return true;
2949	}
2950	}
2951	}
2952
2953	$db_ip_ranges = $wpdb->get_var("SELECT ag.ip_range
2954	FROM ".DB_ACCESSGROUP_TO_POST." atp, ".DB_ACCESSGROUP." ag
2955	WHERE atp.post_id = ".$cur_post_id."
2956	AND atp.group_id = ag.ID", ARRAY_A);
2957
2958	if($this->check_user_ip($cur_user_ip, $db_ip_ranges))
2959	{
2960	$this->postAccess[$post_id] = true;
2961	return true;
2962	}
2963	}
2964	}
2965
2966	if(empty($user_access))
2967	{
2968	$this->postAccess[$post_id] = false;
2969	return false;
2970	}
2971	}
2972	else
2973	{
2974	$this->postAccess[$post_id] = true;
2975	return true;
2976	}
2977	}
2978	else
2979	{
2980	if(isset($access->restricted_by_categories))
2981	{
2982	foreach($access->restricted_by_categories as $cur_cat_id)
2983	{
2984	$db_ip_ranges = $wpdb->get_var("SELECT ag.ip_range
2985	FROM ".DB_ACCESSGROUP_TO_CATEGORY." atc, ".DB_ACCESSGROUP." ag
2986	WHERE atc.category_id = ".$cur_cat_id."
2987	AND atc.group_id = ag.ID");
2988
2989	if($this->check_user_ip($cur_user_ip, $db_ip_ranges))
2990	{
2991	$this->postAccess[$post_id] = true;
2992	return true;
2993	}
2994	}
2995	}
2996
2997	if(isset($access->restricted_by_posts))
2998	{
2999	foreach($access->restricted_by_posts as $cur_post_id)
3000	{
3001	$db_ip_ranges = $wpdb->get_var("SELECT ag.ip_range
3002	FROM ".DB_ACCESSGROUP_TO_POST." atp, ".DB_ACCESSGROUP." ag
3003	WHERE atp.post_id = ".$cur_post_id."
3004	AND atp.group_id = ag.ID");
3005
3006	if($this->check_user_ip($cur_user_ip, $db_ip_ranges))
3007	{
3008	$this->postAccess[$post_id] = true;
3009	return true;
3010	}
3011	}
3012	}
3013
3014	$this->postAccess[$post_id] = false;
3015	return false;
3016	}
3017	}
3018	else
3019	{
3020	$this->postAccess[$post_id] = true;
3021	return true;
3022	}
3023	}
3024
3025	function check_user_ip($cur_user_ip, $db_ip_ranges)
3026	{
3027	if(isset($db_ip_ranges))
3028	{
3029	$ip_ranges = explode(";", $db_ip_ranges);
3030
3031	if(isset($ip_ranges))
3032	{
3033	foreach($ip_ranges as $ip_range)
3034	{
3035	$ip_range = explode("-", $ip_range);
3036
3037	$range_begin = explode(".",$ip_range[0]);
3038
3039	if(isset($ip_range[1]))
3040	$range_end = explode(".",$ip_range[1]);
3041	else
3042	$range_end = explode(".",$ip_range[0]);
3043
3044	if( $range_begin[0] <= $cur_user_ip[0] && $cur_user_ip[0] <= $range_end[0] &&
3045	$range_begin[1] <= $cur_user_ip[1] && $cur_user_ip[1] <= $range_end[1] &&
3046	$range_begin[2] <= $cur_user_ip[2] && $cur_user_ip[2] <= $range_end[2] &&
3047	$range_begin[3] <= $cur_user_ip[3] && $cur_user_ip[3] <= $range_end[3])
3048	{
3049	return true;
3050	}
3051	}
3052	}
3053	}
3054	return false;
3055	}
3056
3057	function show_post($posts = array())
3058	{
3059	$show_posts = null;
3060	$uamOptions = $this->getAdminOptions();
3061
3062	if(!is_feed() \|\| ($uamOptions['protect_feed'] == 'true' && is_feed()))
3063	{
3064	foreach($posts as $post)
3065	{
3066	if( ($uamOptions['hide_post'] == 'true' && $post->post_type == "post") \|\| ($uamOptions['hide_page'] == 'true' && $post->post_type == "page") \|\| $this->atAdminPanel)
3067	{
3068	if($this->check_access($post->ID))
3069	{
3070	$post->post_title .= $this->admin_output($post->ID);
3071	$show_posts[] = $post;
3072	}
3073	}
3074	else
3075	{
3076	if(!$this->check_access($post->ID))
3077	{
3078	if($post->post_type == "post")
3079	{
3080	$uam_post_content = $uamOptions['post_content'];
3081	$uam_post_content = str_replace("[LOGIN_FORM]", $this->get_login_bar(), $uam_post_content);
3082
3083	if($uamOptions['hide_post_title'] == 'true')
3084	$post->post_title = $uamOptions['post_title'];
3085
3086	if($uamOptions['show_post_content_before_more'] == 'true' && preg_match('/<!--more(.*?)?-->/', $post->post_content, $matches))
3087	{
3088	$post->post_content = explode($matches[0], $post->post_content, 2);
3089	$post->post_content = $post->post_content[0]." ".$uam_post_content;
3090	}
3091	else
3092	{
3093	$post->post_content = $uam_post_content;
3094	}
3095
3096	if($uamOptions['allow_comments_locked'] == 'false')
3097	$post->comment_status = 'close';
3098	}
3099	elseif($post->post_type == "page")
3100	{
3101	if($uamOptions['hide_page_title'] == 'true')
3102	$post->post_title = $uamOptions['page_title'];
3103
3104	$uam_post_content = $uamOptions['page_content'];
3105	$uam_post_content = str_replace("[LOGIN_FORM]", $this->get_login_bar(), $uam_post_content);
3106
3107	$post->post_content = $uam_post_content;
3108	}
3109	}
3110	$post->post_title .= $this->admin_output($post->ID);
3111	$show_posts[] = $post;
3112	}
3113	}
3114
3115	$posts = $show_posts;
3116	}
3117	return $posts;
3118	}
3119
3120	function show_comment($comments = array())
3121	{
3122	$show_comments = null;
3123	$uamOptions = $this->getAdminOptions();
3124
3125	foreach($comments as $comment)
3126	{
3127	if($uamOptions['hide_post_comment'] == 'true' \|\| $uamOptions['hide_post'] == 'true' \|\|$this->atAdminPanel)
3128	{
3129	if($this->check_access($comment->comment_post_ID))
3130	{
3131	$show_comments[] = $comment;
3132	}
3133	}
3134	else
3135	{
3136	if(!$this->check_access($comment->comment_post_ID))
3137	{
3138	$comment->comment_content = $uamOptions['post_comment_content'];
3139	}
3140	$show_comments[] = $comment;
3141	}
3142
3143	}
3144
3145	$comments = $show_comments;
3146
3147	return $comments;
3148	}
3149
3150	function show_page($pages = array())
3151	{
3152	$show_pages = null;
3153	$uamOptions = $this->getAdminOptions();
3154
3155	foreach($pages as $page)
3156	{
3157	if($uamOptions['hide_page'] == 'true' \|\| $this->atAdminPanel)
3158	{
3159	if($this->check_access($page->ID))
3160	{
3161	$page->post_title .= $this->admin_output($page->ID);
3162	$show_pages[] = $page;
3163	}
3164	}
3165	else
3166	{
3167	if(!$this->check_access($page->ID))
3168	{
3169	if($uamOptions['hide_page_title'] == 'true')
3170	$page->post_title = $uamOptions['page_title'];
3171
3172	$page->post_content = $uamOptions['page_content'];
3173	}
3174	$page->post_title .= $this->admin_output($page->ID);
3175	$show_pages[] = $page;
3176	}
3177	}
3178
3179	$pages = $show_pages;
3180
3181	return $pages;
3182	}
3183
3184	function show_category($categories = array())
3185	{
3186	global $current_user, $wpdb;
3187	$cur_userdata = get_userdata($current_user->ID);
3188
3189	if(empty($cur_userdata->{$wpdb->prefix."capabilities"}['administrator']))
3190	{
3191	$uamOptions = $this->getAdminOptions();
3192
3193	if($this->atAdminPanel)
3194	{
3195	$accesscategories = $wpdb->get_results("SELECT agtc.category_id
3196	FROM ".DB_ACCESSGROUP_TO_USER." agtu, ".DB_ACCESSGROUP_TO_CATEGORY." agtc
3197	WHERE agtu.user_id = ".$current_user->ID."
3198	AND agtu.group_id = agtc.group_id", ARRAY_A);
3199
3200	if(isset($accesscategories))
3201	{
3202	foreach($accesscategories as $accesscategory)
3203	{
3204	foreach($categories as $category)
3205	{
3206	if($accesscategory['category_id'] == $category->term_id)
3207	{
3208	$show_categories[$category->term_id] = $category;
3209
3210	if(isset($empty_categories[$category->term_id]))
3211	unset($empty_categories[$category->term_id]);
3212	}
3213	else
3214	{
3215	if(empty($show_categories[$category->term_id]))
3216	$empty_categories[$category->term_id] = $category;
3217	}
3218	}
3219	}
3220
3221	if(isset($empty_categories) && $uamOptions['lock_recursive'] == 'true')
3222	{
3223	foreach($empty_categories as $empty_category)
3224	{
3225	$cur_cat = $empty_category;
3226	while($cur_cat->parent != 0 && isset($show_categories))
3227	{
3228	if(isset($show_categories[$cur_cat->parent]))
3229	{
3230	$show_categories[$empty_category->term_id] = $empty_category;
3231	break;
3232	}
3233
3234	$cur_id = $cur_cat->parent;
3235	$cur_cat = & get_category($cur_id);
3236	}
3237	}
3238	}
3239	}
3240
3241	if(isset($show_categories))
3242	$categories = $show_categories;
3243	else
3244	$categories = null;
3245	}
3246	else
3247	{
3248	if($uamOptions['hide_post'] == 'true' \|\| $uamOptions['hide_page'] == 'true')
3249	{
3250	$args = array( 'numberposts' => -1);
3251	$posts = get_posts($args);
3252
3253	foreach($categories as $category)
3254	{
3255	$count = 0;
3256
3257	if(isset($posts))
3258	{
3259	foreach($posts as $cur_post)
3260	{
3261	$post_cat_ids = array();
3262	$post_cats = get_the_category($cur_post->ID);
3263	foreach($post_cats as $post_cat)
3264	{
3265	$post_cat_ids[] = $post_cat->term_id;
3266	}
3267
3268	if(in_array($category->term_id, $post_cat_ids) )
3269	{
3270	if( ($uamOptions['hide_post'] == 'true' && $cur_post->post_type == "post") \|\| ($uamOptions['hide_page'] == 'true' && $cur_post->post_type == "page"))
3271	{
3272	if($this->check_access($cur_post->ID))
3273	$count++;
3274	}
3275	else
3276	{
3277	$count++;
3278	}
3279	}
3280	}
3281	}
3282
3283	if(($count != 0 \|\| ($uamOptions['hide_empty_categories'] == 'false' && !$this->atAdminPanel )))
3284	{
3285	$category->count = $count;
3286	$cur_show_categories[$category->term_id] = $category;
3287	}
3288	elseif($category->taxonomy == "link_category" \|\| $category->taxonomy == "post_tag")
3289	{
3290	$show_categories[$category->term_id] = $category;
3291	}
3292	elseif($count == 0)
3293	{
3294	$category->count = $count;
3295	$empty_categories[$category->term_id] = $category;
3296	}
3297	}
3298
3299	if($uamOptions['hide_empty_categories'] == 'true')
3300	{
3301	if(isset($cur_show_categories))
3302	{
3303	foreach($cur_show_categories as $cur_show_category)
3304	{
3305	$cur_count = $cur_show_category->count;
3306	$show_categories[$cur_show_category->term_id] = $cur_show_category;
3307
3308	$cur_cat = $cur_show_category;
3309	while($cur_cat->parent != 0 && isset($empty_categories))
3310	{
3311	if(empty($show_categories[$cur_cat->parent]))
3312	{
3313	if(isset( $empty_categories[$cur_cat->parent]))
3314	{
3315	$cur_empty_cat = $empty_categories[$cur_cat->parent];
3316	$cur_empty_cat->count = $cur_count;
3317	$show_categories[$cur_cat->parent] = $cur_empty_cat;
3318	}
3319	}
3320
3321	$cur_id = $cur_cat->parent;
3322	$cur_cat = & get_category($cur_id);
3323	}
3324	}
3325	}
3326	}
3327	else
3328	{
3329	if(isset($cur_show_categories))
3330	{
3331	foreach($cur_show_categories as $cur_show_category)
3332	{
3333	$show_categories[$cur_show_category->term_id] = $cur_show_category;
3334	}
3335	}
3336	}
3337
3338	if(isset($show_categories))
3339	$categories = $show_categories;
3340	else
3341	$categories = null;
3342	}
3343	}
3344
3345	}
3346
3347	return $categories;
3348	}
3349
3350	function show_title($title, $post = null)
3351	{
3352	$uamOptions = $this->getAdminOptions();
3353
3354	if(isset($post))
3355	$post_id = $post->ID;
3356	else
3357	$post_id = null;
3358
3359	if(!$this->check_access($post_id) && $post != null)
3360	{
3361	if($post->post_type == "post")
3362	$title = $uamOptions['post_title'];
3363	elseif($post->post_type == "page")
3364	$title = $uamOptions['page_title'];
3365	}
3366	return $title;
3367	}
3368
3369	function show_next_previous_post($sql)
3370	{
3371	$uamOptions = $this->getAdminOptions();
3372
3373	if($uamOptions['hide_post'] == 'true')
3374	{
3375	$posts = get_posts();
3376	if(isset($posts))
3377	{
3378	foreach($posts as $post)
3379	{
3380	if(!$this->check_access($post->ID))
3381	$excluded_posts[] = $post->ID;
3382	}
3383	if(isset($excluded_posts))
3384	{
3385	$excluded_posts_str = implode(",", $excluded_posts);
3386	$sql .= "AND ID NOT IN($excluded_posts_str)";
3387	}
3388	}
3389	}
3390
3391	return $sql;
3392	}
3393
3394	function show_post_sql($sql)
3395	{
3396	$uamOptions = $this->getAdminOptions();
3397
3398	if(($uamOptions['hide_post'] == 'true' && !is_feed()) \|\| (is_feed() && $uamOptions['protect_feed'] == 'true'))
3399	{
3400	$posts = get_posts();
3401	if(isset($posts))
3402	{
3403	foreach($posts as $post)
3404	{
3405	if(!$this->check_access($post->ID))
3406	$excluded_posts[] = $post->ID;
3407	}
3408	if(isset($excluded_posts))
3409	{
3410	$excluded_posts_str = implode(",", $excluded_posts);
3411	$sql .= "AND ID NOT IN($excluded_posts_str)";
3412	}
3413	}
3414	}
3415
3416	return $sql;
3417	}
3418
3419	function admin_output($post_id)
3420	{
3421	global $wpdb;
3422	if(!$this->atAdminPanel)
3423	{
3424	$uamOptions = $this->getAdminOptions();
3425
3426	if($uamOptions['blog_admin_hint'] == 'true')
3427	{
3428	global $current_user;
3429	$cur_userdata = get_userdata($current_user->ID);
3430
3431	$output = "";
3432
3433	$access = $this->get_access($post_id);
3434	if(isset($cur_userdata->{$wpdb->prefix."capabilities"}['administrator']) && (isset($access->restricted_by_posts) \|\| isset($access->restricted_by_categories)))
3435	{
3436	$output = " ".$uamOptions['blog_admin_hint_text'];
3437	}
3438	return $output;
3439	}
3440	}
3441	return null;
3442	}
3443
3444	function redirect_user()
3445	{
3446	global $wp_query;
3447
3448	$uamOptions = $this->getAdminOptions();
3449
3450	if(isset($_GET['getfile']))
3451	$cur_file_id = $_GET['getfile'];
3452
3453	if( $uamOptions['redirect'] != 'false' && ( ( !$this->check_access() && !$this->atAdminPanel && empty($cur_file_id) ) \|\|
3454	( !$this->check_access($cur_file_id) && !wp_attachment_is_image($cur_file_id) && isset($cur_file_id) )) )
3455	{
3456	$cur_id = null;
3457	$cur_post = & get_post($cur_id);
3458
3459	if($uamOptions['redirect'] == 'blog')
3460	$url = get_option('siteurl');
3461	elseif($uamOptions['redirect'] == 'custom_page')
3462	{
3463	$post_to_go = & get_post($uamOptions['redirect_custom_page']);
3464	$url = $post_to_go->guid;
3465	}
3466	elseif( $uamOptions['redirect'] == 'custom_url')
3467	$url = $uamOptions['redirect_custom_url'];
3468
3469	$cur_posts = $wp_query->get_posts();
3470	if(isset($cur_posts))
3471	{
3472	foreach($cur_posts as $cur_post)
3473	{
3474	if($this->check_access($cur_post->ID))
3475	{
3476	$post_to_show = true;
3477	break;
3478	}
3479	}
3480	}
3481
3482	if($url != "http://".$_SERVER['HTTP_HOST'].$_SERVER["REQUEST_URI"] && empty($post_to_show))
3483	{
3484	header("Location: $url");
3485	exit;
3486	}
3487	}
3488	elseif(isset($_GET['getfile']))
3489	{
3490	$cur_id = $_GET['getfile'];
3491	$cur_post = & get_post($cur_id);
3492
3493	if($cur_post->post_type == 'attachment' && $this->check_access($cur_post->ID))
3494	{
3495	$file = str_replace(get_option('siteurl').'/', "", $cur_post->guid);
3496	$filename = basename($file);
3497
3498	if(file_exists($file))
3499	{
3500	$len = filesize($file);
3501	header('content-type: '.$cur_post->post_mime_type);
3502	header('content-length: '.$len);
3503
3504	if(wp_attachment_is_image($cur_id))
3505	{
3506	readfile($file);
3507	exit;
3508	}
3509	else
3510	{
3511	header('content-disposition: attachment; filename='.basename($file));
3512	if($uamOptions['download_type'] == 'fopen')
3513	{
3514	$fp=fopen($file, 'rb');
3515
3516	while ( ! feof($fp) )
3517	{
3518	set_time_limit(30);
3519	$buffer = fread($fp, 1024);
3520	echo $buffer;
3521	}
3522	exit;
3523	}
3524	else
3525	{
3526	readfile($file);
3527	exit;
3528	}
3529	}
3530	}
3531	else
3532	{
3533	echo 'Error: File not found';
3534	}
3535	}
3536	elseif(wp_attachment_is_image($cur_id))
3537	{
3538	$file = UAM_URLPATH .'gfx/no_access_pic.png';
3539	$filename = basename($file);
3540
3541	if(file_exists($file))
3542	{
3543	$len = filesize($file);
3544	header('content-type: '.$cur_post->post_mime_type);
3545	header('content-length: '.$len);
3546
3547	readfile($file);
3548	exit;
3549	}
3550	else
3551	{
3552	echo 'Error: File not found';
3553	}
3554	}
3555	}
3556	}
3557
3558	function get_file($URL, $ID)
3559	{
3560	$uamOptions = $this->getAdminOptions();
3561
3562	if($uamOptions['lock_file'] == 'true')
3563	{
3564	$cur_id = $ID;
3565	$cur_post = & get_post($cur_id);
3566	$cur_parent_id = $cur_post->post_parent;
3567	$cur_parent = & get_post($cur_parent_id);
3568
3569	$type = explode("/", $cur_post->post_mime_type);
3570	$type = $type[1];
3571
3572	$file_types = $uamOptions['locked_file_types'];
3573	$file_types = explode(",", $file_types);
3574
3575	if(in_array($type, $file_types) \|\| $uamOptions['lock_file_types'] == 'all')
3576	{
3577	$cur_guid = get_bloginfo('url');
3578
3579	$URL = $cur_guid.'?getfile='.$cur_post->ID;
3580	}
3581	}
3582	return $URL;
3583	}
3584	}
3585	}
3586
3587	if(class_exists("UserAccessManager"))
3588	{
3589	$userAccessManager = new UserAccessManager();
3590	}
3591
3592	//Initialize the admin panel
3593	if(!function_exists("UserAccessManager_AP")) {
3594	function UserAccessManager_AP()
3595	{
3596	global $userAccessManager, $wp_version, $current_user, $wpdb;
3597
3598	$userAccessManager->atAdminPanel = true;
3599
3600	if (!isset($userAccessManager))
3601	{
3602	return;
3603	}
3604	if (function_exists('add_menu_page'))
3605	{
3606	add_menu_page('User Access Manager', 'UAM', 9, 'uam_usergroup', array(&$userAccessManager, 'printAdminPage'), UAM_URLPATH."gfx/icon.png");
3607	}
3608	if (function_exists('add_submenu_page'))
3609	{
3610	add_submenu_page('uam_usergroup', TXT_MANAGE_GROUP, TXT_MANAGE_GROUP, 9, 'uam_usergroup', array(&$userAccessManager, 'printAdminPage'));
3611	add_submenu_page('uam_usergroup', TXT_SETTINGS, TXT_SETTINGS, 9, 'uam_settings', array(&$userAccessManager, 'printAdminPage'));
3612	add_submenu_page('uam_usergroup', TXT_SETUP, TXT_SETUP, 9, 'uam_setup', array(&$userAccessManager, 'printAdminPage'));
3613	}
3614	if( function_exists( 'add_meta_box' ))
3615	{
3616	get_currentuserinfo();
3617	$cur_userdata = get_userdata($current_user->ID);
3618
3619	if(isset($cur_userdata->{$wpdb->prefix."capabilities"}['administrator']))
3620	{
3621	add_meta_box( 'uma_post_access', 'Access', array(&$userAccessManager, 'edit_post_content'), 'post', 'side' );
3622	add_meta_box( 'uma_post_access', 'Access', array(&$userAccessManager, 'edit_post_content'), 'page', 'side' );
3623	}
3624	}
3625
3626
3627	//Admin actions
3628
3629	$userAccessManager->update();
3630
3631	add_action('manage_posts_custom_column', array(&$userAccessManager, 'add_post_column'), 10, 2);
3632	add_action('manage_pages_custom_column', array(&$userAccessManager, 'add_post_column'), 10, 2);
3633	add_action('manage_media_custom_column', array(&$userAccessManager, 'add_post_column'), 10, 2);
3634	add_action('save_post', array(&$userAccessManager, 'save_postdata'));
3635	add_action('add_attachment', array(&$userAccessManager, 'save_postdata'));
3636	add_action('attachment_fields_to_save', array(&$userAccessManager, 'save_attachmentdata'));
3637	add_action('delete_post', array(&$userAccessManager, 'remove_postdata'));
3638	add_action('delete_attachment', array(&$userAccessManager, 'remove_postdata'));
3639
3640	add_action('edit_user_profile', array(&$userAccessManager, 'show_user_profile'));
3641	add_action('profile_update', array(&$userAccessManager, 'save_userdata'));
3642	add_action('delete_user', array(&$userAccessManager, 'remove_userdata'));
3643
3644	add_action('edit_category_form', array(&$userAccessManager, 'show_cat_edit_form'));
3645	add_action('edit_category', array(&$userAccessManager, 'save_categorydata'));
3646	add_action('delete_category', array(&$userAccessManager, 'remove_categorydata'));
3647
3648	add_action('wp_print_scripts', array(&$userAccessManager, 'add_scripts') );
3649	add_action('wp_print_styles', array(&$userAccessManager, 'add_styles') );
3650
3651
3652	//Admin filters
3653
3654	add_filter('manage_posts_columns', array(&$userAccessManager, 'add_post_columns_header'));
3655	add_filter('manage_pages_columns', array(&$userAccessManager, 'add_post_columns_header'));
3656
3657	$uamOptions = $userAccessManager->getAdminOptions();
3658
3659	if($uamOptions['lock_file'] == 'true')
3660	{
3661	add_action('media_meta', array(&$userAccessManager, 'show_media_file'), 10 , 2);
3662	add_filter('manage_media_columns', array(&$userAccessManager, 'add_post_columns_header'));
3663	}
3664
3665	if($wp_version >= 2.8 \|\| $uamOptions['core_mod'] == 'true')
3666	{
3667	add_filter('manage_users_columns', array(&$userAccessManager, 'add_user_columns_header'), 10);
3668	add_filter('manage_users_custom_column', array(&$userAccessManager, 'add_user_column'), 10, 2);
3669	add_filter('manage_categories_columns', array(&$userAccessManager, 'add_category_columns_header'));
3670	add_filter('manage_categories_custom_column', array(&$userAccessManager, 'add_category_column'), 10, 2);
3671	}
3672	}
3673	}
3674
3675	//Actions and Filters
3676	if(isset($userAccessManager))
3677	{
3678	add_action('init', array(&$userAccessManager, 'init'));
3679	$uamOptions = $userAccessManager->getAdminOptions();
3680
3681	//install
3682	if(function_exists('register_activation_hook'))
3683	register_activation_hook(__FILE__, array(&$userAccessManager, 'install'));
3684
3685	if(function_exists('register_uninstall_hook'))
3686	register_uninstall_hook(__FILE__, array(&$userAccessManager, 'uninstall'));
3687	elseif(function_exists('register_deactivation_hook'))
3688	register_deactivation_hook(__FILE__, array(&$userAccessManager, 'uninstall'));
3689
3690	if(function_exists('register_deactivation_hook'))
3691	register_deactivation_hook(__FILE__, array(&$userAccessManager, 'deactivate'));
3692
3693	//Actions
3694	add_action('admin_menu', 'UserAccessManager_AP');
3695
3696	if($uamOptions['redirect'] != 'false' \|\| isset($_GET['getfile']))
3697	add_action('template_redirect', array(&$userAccessManager, 'redirect_user'));
3698
3699	//Filters
3700	add_filter('wp_get_attachment_url', array(&$userAccessManager, 'get_file'), 10, 2);
3701	add_filter('the_posts', array(&$userAccessManager, 'show_post'));
3702	add_filter('comments_array', array(&$userAccessManager, 'show_comment'));
3703	add_filter('get_pages', array(&$userAccessManager, 'show_page'));
3704	add_filter('get_terms', array(&$userAccessManager, 'show_category'));
3705	add_filter('get_next_post_where', array(&$userAccessManager, 'show_next_previous_post'));
3706	add_filter('get_previous_post_where', array(&$userAccessManager, 'show_next_previous_post'));
3707	add_filter('get_previous_post_where', array(&$userAccessManager, 'show_next_previous_post'));
3708	add_filter('the_title', array(&$userAccessManager, 'show_title'), 10, 2);
3709	add_filter('posts_where', array(&$userAccessManager, 'show_post_sql'));
3710	}
3711	?>
3712