WB 2.08.x

29 Aug-2012 Build 1710 Dietmar Woellbrink (Luisehahne)

! update folder admin/groups, admin/users, admin/skel/htt

<?php

/**

 * @category        admin

 * @package         groups

 * @author          Independend-Software-Team

 * @author          WebsiteBaker Project

 * @copyright       2009-2012, Website Baker Org. e.V.

 * @link			http://www.websitebaker2.org/

 * @license         http://www.gnu.org/licenses/gpl.html

 * @platform        WebsiteBaker 2.8.x

 * @requirements    PHP 5.2.2 and higher

 * @version         $Id$

 * @filesource		$HeadURL$

 * @lastmodified    $Date$

 * @description     all basic actions of this module, called by dispatcher only.

 */

// Must include code to stop this file being access directly

if(defined('WB_PATH') == false) { exit("Cannot access this file directly"); }

/* *****************************************************************************

 * Delete an existing group and remove existing group in user

 * @access public

 * @param object $admin: admin-object

 * @param int $group_id: ID from group to delete

 * @return bool: true or false

 */

	function delete_group($admin, $group_id = 0)

	{

		global $MESSAGE;

		$database = WbDatabase::getInstance();

	// first check form-tan

		if($admin->checkFTAN())

		{

			if($group_id > 1) // prevent admin [ID 1] from being deleted

			{

				$sql = 'SELECT `name` FROM `'.TABLE_PREFIX.'groups` WHERE `group_id` = '.$group_id;

				$groupname = ($database->get_one($sql));

				// $sql  = 'SELECT * FROM `'.TABLE_PREFIX.'groups` ';

				$sql  = 'DELETE FROM `'.TABLE_PREFIX.'groups` ';

				$sql .= 'WHERE `group_id` = '.$group_id;

				if($database->query($sql) != false)

				{

	// remove group from users groups_id

					msgQueue :: add($MESSAGE['GROUPS_DELETED'],true);

					$sql = 'SELECT `user_id`, `groups_id`, `home_folder` FROM `'.TABLE_PREFIX.'users` WHERE user_id != 1';

					if(($res_users = $database->query($sql)) && ($res_users->numRows() > 0) )

					{

						while($rec_users = $res_users->fetchRow(MYSQL_ASSOC))

						{

							$user_id = $rec_users['user_id'];

                            $groups_id = explode(',',$rec_users['groups_id']);

							if( is_numeric($x = array_search($group_id, $groups_id)) )

							{

	                            unset($groups_id[$x]);

	                            $groups_id = (sizeof($groups_id) == 0) ? FRONTEND_SIGNUP : implode(',',$groups_id);

                                $groups_id = ( ($groups_id == 1) && (trim($rec_users['home_folder']) != '') ) ? FRONTEND_SIGNUP : $groups_id;

								$sql  = 'UPDATE `'.TABLE_PREFIX.'users` SET ';

								$sql .= '`groups_id` = \''.$groups_id.'\' ';

								$sql .= 'WHERE `user_id` = '.$user_id;

								if( $database->query($sql) )

								{

				                    $sql_info = mysql_info($database->db_handle);

									if(preg_match('/matched: *([1-9][0-9]*)/i', $sql_info) != 1)

									{

										msgQueue :: add($MESSAGE['RECORD_MODIFIED_FAILED']);

									}

								} else {

									msgQueue :: add($database->get_error());

								}

							}

                        }

                    }

					// $admin->print_success($msg);

				} else {

					msgQueue :: add($MESSAGE['RECORD_MODIFIED_FAILED']);

				}

			}

		} else {

			msgQueue :: add($MESSAGE['GENERIC_SECURITY_OFFENSE']);

		}

	}

<?php

/****************************************************************************************

 * extended language definition for WebsiteBaker                                        *

 * ACP-module  pages                                                                    *

 * english (GB)                                                                         *

 ****************************************************************************************/

$HEADING['ADD_GROUP'] = 'Add Group';

$HEADING['ADD_GROUPS'] = 'Add Groups';

$HEADING['MODIFY_DELETE_GROUP'] = 'Modify/Delete Group';

$HEADING['MODIFY_DELETE_PAGE'] = 'Modify/Delete Page';

$HEADING['MODIFY_DELETE_USER'] = 'Modify/Delete User';

$HEADING['MODIFY_GROUP'] = 'Modify Group';

$HEADING['MODIFY_GROUPS'] = 'Modify Groups';

$HEADING['MODIFY_INTRO_PAGE'] = 'Modify Intro Page';

$HEADING['VIEW_GROUP'] = 'View Group';

$HEADING['VIEW_GROUPS'] = 'View Groups';

$MENU['ADMINTOOLS'] = 'Admin-Tools';

$MENU['GROUP'] = 'Group';

$MENU['GROUPS'] = 'Groups';

$MENU['HELP'] = 'Help';

$MENU['LANGUAGES'] = 'Languages';

$MENU['LOGIN'] = 'Login';

$MENU['LOGOUT'] = 'Log-out';

$MENU['MEDIA'] = 'Media';

$MENU['MODULES'] = 'Modules';

$MENU['PAGES'] = 'Pages';

$MENU['PREFERENCES'] = 'Preferences';

$MENU['USER_PREFERENCES'] = 'User Preferences';

$MENU['SETTINGS'] = 'Settings';

$MENU['START'] = 'Start';

$MENU['TEMPLATES'] = 'Templates';

$MENU['USERS'] = 'Users';

$MENU['VIEW'] = 'View';

$MESSAGE['PAGES_LAST_MODIFIED'] = 'Last modification by';

$TEXT['ACTIONS'] = 'Actions';

$TEXT['ACTIVE'] = 'Active';

$TEXT['ADD'] = 'Add';

$TEXT['ADVANCED'] = 'Advanced';

$TEXT['BACK'] = 'Back';

$TEXT['BASIC'] = 'Basic';

$TEXT['CANCEL'] = 'Cancel';

$TEXT['CREATE_FOLDER'] = 'Create Folder';

$TEXT['DELETE'] = 'Delete';

$TEXT['DELETED'] = 'Deleted';

$TEXT['FILESYSTEM_PERMISSIONS'] = 'Filesystem Permissions';

$TEXT['GROUP'] = 'Group';

$TEXT['HIDE_ADVANCED'] = 'Hide Advanced Options';

$TEXT['LANGUAGE'] = 'Language';

$TEXT['LEVEL'] = 'Level';

$TEXT['MANAGE_GROUPS'] = 'Manage Groups';

$TEXT['MANAGE_USERS'] = 'Manage Users';

$TEXT['MODIFY'] = 'Modify';

$TEXT['MODIFY_CONTENT'] = 'Modify Content';

$TEXT['MODIFY_SETTINGS'] = 'Modify Settings';

$TEXT['MODULE_PERMISSIONS'] = 'Module Permissions';

$TEXT['PLEASE_SELECT'] = 'Please select';

$TEXT['RENAME'] = 'Rename';

$TEXT['RESET'] = 'Reset';

$TEXT['SAVE'] = 'Save';

$TEXT['SHOW'] = 'Show';

$TEXT['SHOW_ADVANCED'] = 'Show Advanced Options';

$TEXT['SYSTEM_DEFAULT'] = 'System Default';

$TEXT['SYSTEM_PERMISSIONS'] = 'System Permissions';

$TEXT['TEMPLATE_PERMISSIONS'] = 'Template Permissions';

$TEXT['UPLOAD_FILES'] = 'Upload File(s)';

$TEXT['VIEW'] = 'View';

$TEXT['VIEW_DETAILS'] = 'View Details';

$TEXT['VISIBILITY'] = 'Visibility';

<?php

/****************************************************************************************

 * extended language definition for WebsiteBaker                                        *

 * ACP-module  groups                                                                    *

 * deutsch                                                                              *

 ****************************************************************************************/

$HEADING['ADD_GROUP'] = 'Gruppe hinzufügen';

$HEADING['ADD_GROUPS'] = 'Gruppen hinzufügen';

$HEADING['MODIFY_DELETE_GROUP'] = 'Ändern/Löschen von Gruppen';

$HEADING['MODIFY_DELETE_PAGE'] = 'Seite ändern/Seite löschen';

$HEADING['MODIFY_DELETE_USER'] = 'Ändern/Löschen von Benutzern';

$HEADING['MODIFY_GROUP'] = 'Gruppe ändern';

$HEADING['MODIFY_GROUPS'] = 'Gruppen ändern';

$HEADING['MODIFY_INTRO_PAGE'] = 'Eingangsseite ändern';

$HEADING['VIEW_GROUP'] = 'Gruppe Ansicht';

$HEADING['VIEW_GROUPS'] = 'Gruppen Ansicht';

$MENU['ADMINTOOLS'] = 'Admin-Tools';

$MENU['GROUP'] = 'Gruppe';

$MENU['GROUPS'] = 'Gruppen';

$MENU['HELP'] = 'Hilfe';

$MENU['LANGUAGES'] = 'Sprachen';

$MENU['LOGIN'] = 'Anmeldung';

$MENU['LOGOUT'] = 'Abmelden';

$MENU['MEDIA'] = 'Medien';

$MENU['MODULES'] = 'Module';

$MENU['PAGES'] = 'Seiten';

$MENU['PREFERENCES'] = 'Einstellungen';

$MENU['USER_PREFERENCES'] = 'User Einstellungen';

$MENU['SETTINGS'] = 'Optionen';

$MENU['START'] = 'Start';

$MENU['TEMPLATES'] = 'Designvorlagen';

$MENU['USERS'] = 'Benutzer';

$MENU['VIEW'] = 'Ansicht';

$MESSAGE['PAGES_LAST_MODIFIED'] = 'Letzte Änderung durch';

$TEXT['ACTIONS'] = 'Aktionen';

$TEXT['ACTIVE'] = 'Aktiv';

$TEXT['ADD'] = 'Hinzufügen';

$TEXT['ADVANCED'] = 'Erweitert';

$TEXT['BACK'] = 'Zurück';

$TEXT['BASIC'] = 'Einfach';

$TEXT['CANCEL'] = 'Abbrechen';

$TEXT['CREATE_FOLDER'] = 'Ordner anlegen';

$TEXT['DELETE'] = 'Entfernen';

$TEXT['DELETED'] = 'Gelöscht';

$TEXT['FILESYSTEM_PERMISSIONS'] = 'Zugriffsrechte';

$TEXT['GROUP'] = 'Gruppe';

$TEXT['HIDE_ADVANCED'] = 'Erweiterte Optionen verdecken';

$TEXT['LANGUAGE'] = 'Sprache';

$TEXT['LEVEL'] = 'Ebene';

$TEXT['MANAGE_GROUPS'] = 'Gruppen verwalten';

$TEXT['MANAGE_USERS'] = 'Benutzer verwalten';

$TEXT['MODIFY'] = 'Ändern';

$TEXT['MODIFY_CONTENT'] = 'Inhalt ändern';

$TEXT['MODIFY_SETTINGS'] = 'Optionen ändern';

$TEXT['MODULE_PERMISSIONS'] = 'Modulberechtigungen';

$TEXT['PLEASE_SELECT'] = 'Bitte auswählen';

$TEXT['RENAME'] = 'Umbenennen';

$TEXT['RESET'] = 'Zurücksetzen';

$TEXT['SAVE'] = 'Speichern';

$TEXT['SHOW'] = 'zeigen';

$TEXT['SHOW_ADVANCED'] = 'Erweiterte Optionen anzeigen';

$TEXT['SYSTEM_DEFAULT'] = 'Standardeinstellung';

$TEXT['SYSTEM_PERMISSIONS'] = 'Zugangsberechtigungen';

$TEXT['TEMPLATE_PERMISSIONS'] = 'Zugriffsrechte für Vorlagen';

$TEXT['UPLOAD_FILES'] = 'Datei(en) übertragen';

$TEXT['VIEW'] = 'Ansicht';

$TEXT['VIEW_DETAILS'] = 'Details';

$TEXT['VISIBILITY'] = 'Sichtbarkeit';

<?php

/**

 * @category        admin

 * @package         groups

 * @author          WebsiteBaker Project, Independend-Software-Team

 * @copyright       2009-2012, WebsiteBaker Org. e.V.

 * @link			http://www.websitebaker2.org/

 * @license         http://www.gnu.org/licenses/gpl.html

 * @platform        WebsiteBaker 2.8.x

 * @requirements    PHP 5.2.2 and higher

 * @version         $Id$

 * @filesource		$HeadURL$

 * @lastmodified    $Date$

 * @description     all basic actions of this module, called by dispatcher only.

 */

// Must include code to stop this file being access directly

if(defined('WB_PATH') == false) { exit("Cannot access this file directly"); }

/* *****************************************************************************

 * Show groupslist with delete-/ modify-button

 * @access public

 * @param object $admin: admin-object

 * @return string: parsed HTML-content

 */

	function show_grouplist($admin)

	{

//		global $TEXT, $MESSAGE, $MENU, $HEADING;

		$database = WbDatabase::getInstance();

		$mLang = ModLanguage::getInstance();

// Create new template object for the modify/remove section

		$tpl = new Template(dirname($admin->correct_theme_source('groups_list.htt')),'keep');

		$tpl->set_file('page', 'groups_list.htt');

		$tpl->set_block('page', 'main_block', 'main');

		$tpl->set_var('ACTION_URL', $_SERVER['SCRIPT_NAME']);

		$tpl->set_var('FTAN', $admin->getFTAN());

// -- if permission then activate link 'manage users'

		$tpl->set_block('main_block', 'show_cmd_manage_users_block', 'show_cmd_manage_users');

		if($admin->get_permission('users') == true)

		{

			$tpl->set_var('TEXT_MANAGE_USERS', $mLang->TEXT_MANAGE_USERS);

			$tpl->set_var('LINK_MANAGE_USERS', ADMIN_URL.'/users/index'.PAGE_EXTENSION);

			$tpl->parse('show_cmd_manage_users', 'show_cmd_manage_users_block', true);

		}else { // switch off cmd_manage_groups_block

			$tpl->parse('show_cmd_manage_users', '');

		}

		$tpl->set_block('main_block', 'show_cmd_group_list_block', 'show_cmd_group_list');

		if( $admin->get_permission('groups_view') == true )

		{

			$tpl->set_var('CONTENT_HEADER', $mLang->HEADING_VIEW_GROUPS);

			if( ($admin->get_permission('groups_modify') == true) )

			{

			$tpl->set_var('CONTENT_HEADER', $mLang->HEADING_MODIFY_DELETE_GROUP);

			}

		}

		$tpl->set_var('FORM_NAME_GROUPLIST', 'frm_group_list');

// -- build grouplist from database

		$tpl->set_block('show_cmd_group_list_block', 'grouplist_block', 'grouplist');

		// Insert first value to say please select

		// $tpl->set_var('GROUP_ID',   $admin->getIDKEY(0));

		$tpl->set_var('GROUP_ID', 0);

		$tpl->set_var('GROUP_NAME', '');

		$tpl->set_var('GROUP_DISPLAY_NAME', $mLang->TEXT_PLEASE_SELECT.'...');

		$tpl->set_var('CSS_GROUP_DELETED', '');

		$tpl->parse('grouplist', 'grouplist_block', true);

		$sql  = 'SELECT `group_id`, `name` ';

		$sql .= 'FROM `'.TABLE_PREFIX.'groups` ';

		$sql .= 'WHERE `group_id` > 1 ORDER BY `name` ';

		if( ($res_groups = $database->query($sql)) != false )

		{

			while($rec_group = $res_groups->fetchRow(MYSQL_ASSOC))

			{

				// $tpl->set_var('GROUP_ID', $admin->getIDKEY($rec_group['group_id']));

				$tpl->set_var('GROUP_ID', $rec_group['group_id']);

				$tpl->set_var('GROUP_NAME', $rec_group['name']);

				$tpl->set_var('GROUP_DISPLAY_NAME', $rec_group['name']);

				$tpl->parse('grouplist', 'grouplist_block', true);

			}

		}

		$sPermission = 'none';

		$sPermission = $admin->get_permission('groups_view') ? 'permView' : $sPermission;

		$sPermission = $admin->get_permission('groups_add') ? 'permAdd' : $sPermission;

		$sPermission = $admin->get_permission('groups_modify') ? 'permModify' : $sPermission;

// 		if( ($admin->get_permission('groups_modify') == false) && ($admin->get_permission('groups_delete') == false) )

		if( ($admin->get_permission('groups') == false) )

		{

			$tpl->parse('show_cmd_group_list', '');

        } else {

			$tpl->parse('show_cmd_group_list', 'show_cmd_group_list_block', true);

	// -- if permission then activate button 'modify groups'

			$tpl->set_block('show_cmd_group_list', 'show_cmd_modify_group_block', 'show_cmd_modify_group');

			if( $admin->get_permission('groups') == true )

			{

				$tpl->parse('show_cmd_modify_group', 'show_cmd_modify_group_block', true);

			}else {

				$tpl->parse('show_cmd_modify_group', '');

			}

	// -- if permission then activate button 'delete groups'

			$tpl->set_block('show_cmd_group_list', 'show_cmd_delete_group_block', 'show_cmd_delete_group');

			if($admin->get_permission('groups_delete') == true)

			{

				$tpl->parse('show_cmd_delete_group', 'show_cmd_delete_group_block', true);

			}else {

				$tpl->parse('show_cmd_delete_group', '');

			}

        }

		$tpl->set_block('main_block', 'show_cmd_add_input_block', 'show_cmd_add_input');

		if($admin->get_permission('groups_add') )

		{

			$tpl->set_var('DISPLAY_ADD', '');

			$tpl->set_var('GROUP_ACTION_URL', $_SERVER['SCRIPT_NAME']);

			$tpl->set_var('GROUPS_HEADER', $mLang->HEADING_ADD_GROUP );

			$tpl->set_var('SUBMIT_TITLE', $mLang->TEXT_ADD);

			$tpl->set_var('ACTION_HANDLE', 'action_modify');

			$tpl->set_var('ACTION_HIDDEN', 'action_add');

			$tpl->set_var('FORM_NAME_GROUPMASK', 'frm_addnew_group');

			$tpl->parse('show_cmd_add_input', 'show_cmd_add_input_block', false);

		} else {

			$tpl->parse('show_cmd_add_input', '');

		}

	// insert urls

		$tpl->set_var(array(

				'ADMIN_URL' => ADMIN_URL,

				'WB_URL'    => WB_URL,

				'THEME_URL' => THEME_URL

				)

		);

	// Insert language text and messages

		$tpl->set_var(array(

				'TEXT_MODIFY'    => ($admin->get_permission('groups_modify') == true) ? $mLang->TEXT_MODIFY : $mLang->TEXT_VIEW,

				'TEXT_DELETE'    => $mLang->TEXT_DELETE,

				'CONFIRM_DELETE' => $mLang->MESSAGE_GROUPS_CONFIRM_DELETE

				));

	// Parse template object

		$tpl->parse('main', 'main_block', false);

		$output = $tpl->finish($tpl->parse('output', 'page'));

		unset($tpl);

		return $output;

	}

<?php

/**

 * @category        admin

 * @package         groups

 * @author          WebsiteBaker Project. Independend-Software-Team

 * @copyright       2009-2012, WebsiteBaker Org. e.V.

 * @link			http://www.websitebaker2.org/

 * @license         http://www.gnu.org/licenses/gpl.html

 * @platform        WebsiteBaker 2.8.x

 * @requirements    PHP 5.2.2 and higher

 * @version         $Id$

 * @filesource		$HeadURL$

 * @lastmodified    $Date$

 * @description     all basic actions of this module, called by dispatcher only.

 */

/* -------------------------------------------------------- */

// Must include code to stop this file being accessed directly

if(defined('WB_PATH') == false)

{

	// Stop this file being access directly

		die('<h2 style="color:red;margin:3em auto;text-align:center;">Cannot access this file directly</h2>');

}

/* -------------------------------------------------------- */

/*

print '<pre style="text-align: left;"><strong>function '.__FUNCTION__.'( '.'frm_modify_group'.' );</strong>  basename: '.basename(__FILE__).'  line: '.__LINE__.' -> <br />';

print_r( $_POST ); print '</pre>'; // flush ();sleep(10); die();

*/

/* *****************************************************************************

 * Show groupsmask to edit group

 * @access public

 * @param object $admin: admin-object

 * @param int $user_id: ID from group to modify or 0 for a new group

 * @return string: parsed HTML-content

 */

	function show_groupmask($admin, $group_id = 0)

	{

//		global $TEXT, $MESSAGE, $HEADING, $MENU;

		$database = WbDatabase::getInstance();

		$mLang = ModLanguage::getInstance();

//		$mLang->setLanguage(dirname(__FILE__).'/languages/', LANGUAGE, DEFAULT_LANGUAGE);

		include_once('upgradePermissions.php');

		include_once(WB_PATH.'/framework/functions.php');

	// Create new template object for the modify/remove menu

		$tpl = new Template(dirname($admin->correct_theme_source('groups_form.htt')),'keep');

		$tpl->set_file('page', 'groups_form.htt');

		$tpl->debug = false; // false, true

		$tpl->set_block('page', 'main_block', 'main');

		$tpl->set_block('main_block', 'show_cmd_permission_block', 'show_cmd_permission');

		$tpl->set_var('FTAN', $admin->getFTAN());

		$rec_group = array();

// admin settings

//		$system_settings = getSystemDefaultPermissions();

//		$aSystemDefaultSettings = getSystemDefaultPermissions();

		if( $group_id > 1 ) // load groupdata from db

		{

			// only read the first time from db to set checkboxes

			if( $admin->get_post('frm_modify_group') == null )

			{

				$sql  = 'SELECT * FROM `'.TABLE_PREFIX.'groups` ';

				$sql .= 'WHERE `group_id` = '.(int)$group_id;

				// $group_id = 0; // reset to 0 if error occures

				if( ($res_group = $database->query($sql)) != false )

				{

					if( ($rec_group = $res_group->fetchRow(MYSQL_ASSOC)) != false )

					{

						$group_id = $rec_group['group_id'];

		// Explode system permissions

						$system_permissions = $rec_group['system_permissions'];

		// Explode module permissions

		 				$module_permissions = explode(',', $rec_group['module_permissions']);

		// Explode template permissions

						$template_permissions = explode(',', $rec_group['template_permissions']);

					}

				}

			$tpl->set_var(array(

						'SUBMIT_TITLE' =>  ($admin->get_permission('groups_modify') == true) ? $mLang->TEXT_SAVE : $mLang->TEXT_BACK,

						'ACTION_HIDDEN' => ($admin->get_permission('groups_modify') == true) ? 'action_modify' : 'action_cancel',

						'ACTION_HANDLE' => ($admin->get_permission('groups_modify') == true) ? 'action_save' : 'action_cancel',

						'GROUP_ID' => $rec_group['group_id'],

						'GROUP_NAME' => $rec_group['name'],

						'FORM_NAME_GROUPMASK' => 'frm_modify_group',

					));

			} else {

				// set changed checkboxes and prepare db data

 				$module_permissions = set_module_permissions($admin);

 				$template_permissions = set_template_permissions($admin);

				$rec_group['group_id'] = $group_id;

				$rec_group['name'] = $admin->add_slashes($admin->get_post('name'));

				$rec_group['module_permissions']   = convertArrayToString($module_permissions);

				$rec_group['template_permissions'] = convertArrayToString($template_permissions);

				$tpl->set_var(array(

							'SUBMIT_TITLE' =>  ($admin->get_permission('groups_modify') == true) ? $mLang->TEXT_SAVE : $mLang->TEXT_BACK,

							'ACTION_HANDLE' => ($admin->get_permission('groups_modify') == true) ? 'action_save' : 'action_cancel',

							'ACTION_HIDDEN' => ($admin->get_permission('groups_modify') == true) ? 'action_modify' : 'action_cancel',

							'TEXT_GROUPS_NAME' => $mLang->TEXT_GROUP.': ',

							'FORM_NAME_GROUPMASK' => 'frm_modify_group',

	//						'GROUPNAME_DISABLED' => ' readonly="readonly"',

	//						'GROUPNAME_INPUT_DISABLED' => ' input_text_disabled no_input'

							'GROUP_NAME' => $rec_group['name'],

							'GROUPNAME_DISABLED' => '',

							'GROUPNAME_INPUT_DISABLED' => ''

							));

			}

		} else {

// set default no rights

			$system_permissions = array('preferences' => 1,'preferences_view' => 1);

//		$system_permissions = array();

//		$system_permissions = isset($_POST['system_permissions']) ? $_POST['system_permissions'] : $system_permissions;

			$module_permissions = array();

			$template_permissions = array();

	// create a empty group-record with permissions masks and advanced button handle

	// check for existing groupname and junp to start handling, do the same in save

	// set changed checkboxes and prepare db data

			$module_permissions = set_module_permissions($admin);

			$template_permissions = set_template_permissions($admin);

			$rec_group['group_id'] = intval($admin->get_post('group_id'));

			$rec_group['name'] = $admin->add_slashes($admin->get_post('name'));

			$rec_group['module_permissions'] = $module_permissions;

			$rec_group['template_permissions'] = $template_permissions;

			$tpl->set_var(array(

						'SUBMIT_TITLE' =>  ($admin->get_permission('groups_add') == true) ? $mLang->TEXT_ADD : $mLang->TEXT_BACK,

						'ACTION_HANDLE' => ($admin->get_permission('groups_add') == true) ? 'action_save' : 'action_cancel',

						'ACTION_HIDDEN' => ($admin->get_permission('groups_add') == true) ? 'action_modify' : 'action_cancel',

						'TEXT_GROUPS_NAME' => '',

						'GROUP_NAME' => $rec_group['name'],

						'FORM_NAME_GROUPMASK' => 'frm_addnew_group',

						'GROUPNAME_DISABLED' => '',

						'GROUPNAME_INPUT_DISABLED' => ''

						));

//			$group_id = $rec_group['group_id'];

		}

// set changed checkboxes and prepare db data

		if( isset($_POST['system_permissions']) )

		{

			$system_permissions = get_system_permissions($admin,$_POST['system_permissions'] );

			$rec_group['system_permissions']   = set_system_permissions($_POST['system_permissions']);

		} else {

			$system_permissions = get_system_permissions($admin,$system_permissions);

			$rec_group['system_permissions']   = set_system_permissions($system_permissions);

		}

//print '<pre style="text-align: left;"><strong>function '.__FUNCTION__.'( '.'frm_modify_group'.' );</strong>  basename: '.basename(__FILE__).'  line: '.__LINE__.' -> <br />';

//print_r( $rec_group['system_permissions']  ); print '</pre>';

		$tpl->set_var(array(

					'GROUP_ID' => $rec_group['group_id'],

					'GROUP_NAME' => $rec_group['name'],

					'DISPLAY_ADD' => '',

					));

		$tpl->parse('show_cmd_permission', 'show_cmd_permission_block', true);

		// if the requested group doesn't exist, or $group_id contains 0 so it

		// will be shown a empty mask to add a new group

		// otherwise the $rec_group object contains existing data from requested group

		// $tpl->set_var('GROUP_ID', $group_id != 0 ? $admin->getIDKEY($group_id) : 0);

		$tpl->set_var('GROUP_ACTION_URL', $_SERVER['SCRIPT_NAME']);

        $header_extra = $mLang->TEXT_FILESYSTEM_PERMISSIONS.' ';

		if( ($admin->get_permission('groups_view') == true) )

		{

			$tpl->set_var('GROUPS_HEADER', $header_extra.$mLang->HEADING_VIEW_GROUP );

			if( ($admin->get_permission('groups_modify') == true) )

			{

			$tpl->set_var('GROUPS_HEADER', ($group_id == 0 ? $header_extra.$mLang->HEADING_ADD_GROUP : $header_extra.$mLang->HEADING_MODIFY_GROUP) );

			}

		}

// Insert language text and messages

		$tpl->set_var('MODULE_FUNCTION', '');

		$tpl->set_var($mLang->getLangArray());

// ------------------------

// Tell the browser whether or not to show advanced options

		$tpl->set_block('show_cmd_permission', 'show_cmd_manage_permission_block', 'permission_block');

//		$tpl->set_block('show_cmd_manage_permission_block', 'show_cmd_hidden_permission_list_block', 'hidden_permission_list');

		$tpl->set_block('show_cmd_permission', 'show_cmd_advanced_permission_block', 'advanced_permission_block');

// first set the var {hidden_permission_list} to empty

//		$tpl->parse('hidden_permission_list', '');

// Check and set system permissions boxes in main_block

		if ( true == (isset( $_POST['advanced_action']) && (( $_POST['advanced_action'] == 'no') || strpos( $_POST['advanced_action'], ">>") > 0 ) ) )

		{

			$tpl->parse('hidden_permission_list', '');

			$tpl->set_block('show_cmd_advanced_permission_block', 'show_cmd_hidden_advanced_permission_list_block', 'hidden_advanced_permission_list');

			setSystemCheckboxes( $tpl, $admin, isset($_POST['system_permissions']) ? $_POST['system_permissions'] : $rec_group['system_permissions'] );

			$tpl->set_var('DISPLAY_ADVANCED', '');

			$tpl->set_var('DISPLAY_BASIC', 'display:none;');

			$tpl->set_var('ADVANCED', 'yes');

			$tpl->set_var('ADVANCED_ACTION', 'advance_action');

			$tpl->set_var('ADVANCED_BUTTON',  ($admin->get_permission('groups') == true) ? '<< '.$mLang->TEXT_HIDE_ADVANCED : '<< '.$mLang->TEXT_HIDE_ADVANCED);

			$tpl->set_var('FILESYSTEM_PERMISSIONS', $mLang->TEXT_FILESYSTEM_PERMISSIONS);

			$tpl->parse('advanced_permission_block', 'show_cmd_advanced_permission_block', true);

			$tpl->parse('permission_block', '');

		} else {

			$tpl->parse('hidden_advanced_permission_list', '');

			$tpl->set_block('show_cmd_manage_permission_block', 'show_cmd_hidden_permission_list_block', 'hidden_permission_list');

			setSystemCheckboxes( $tpl, $admin, isset($_POST['system_permissions']) ? $_POST['system_permissions'] : $rec_group['system_permissions'] );

			$tpl->set_var('DISPLAY_ADVANCED', '');

			$tpl->set_var('DISPLAY_BASIC', '');

			$tpl->set_var('ADVANCED', 'no');

			$tpl->set_var('ADVANCED_ACTION', 'advance_action');

			$tpl->set_var('ADVANCED_BUTTON',  ($admin->get_permission('groups_add') == true) ? $mLang->TEXT_SHOW_ADVANCED.' >>' : $mLang->TEXT_SHOW_ADVANCED.' >>');

			$tpl->set_var('FILESYSTEM_PERMISSIONS', $mLang->TEXT_FILESYSTEM_PERMISSIONS.' ');

			$tpl->parse('advanced_permission_block', '');

			$tpl->parse('permission_block', 'show_cmd_manage_permission_block', true);

		}

// ------------------------

		$tpl->set_var('HEADER_MODULE_FUNCTION', '<h6>'.$mLang->TEXT_MODULE_PERMISSIONS.'</h6>');

// Insert values into pages module list

		$tpl->set_block('show_cmd_permission', 'pages_module_list_block', 'module_list');

		$sql  = 'SELECT `directory`,`name`,`function` FROM `'.TABLE_PREFIX.'addons` ';

		$sql .= 'WHERE `type` = \'module\' AND `function` <> \'tool\' ';

		$sql .= '';

		$sql .= 'ORDER BY `function`, `name`';

		if(($res_pages = $database->query($sql)) && ($res_pages->numRows() > 0) )

		{

        	$tmp_header = '';

			while($addon = $res_pages->fetchRow(MYSQL_ASSOC))

			{

				if(file_exists(WB_PATH.'/modules/'.$addon['directory'].'/info.php'))

				{

                    if( $tmp_header != $addon['function'])

					{

						$tpl->set_var('MODULE_FUNCTION', '<h6>'.strtoupper($addon['function']).'</h6>');

					} else {

						$tpl->set_var('MODULE_FUNCTION', '');

					}

					$tpl->set_var('MOD_VALUE', $addon['directory']);

					$tpl->set_var('MOD_NAME', $addon['name']);

					if(!is_numeric(array_search($addon['directory'], $module_permissions)) )

					{

						$tpl->set_var('MOD_CHECKED', ' checked="checked"');

					} else {

	 					$tpl->set_var('MOD_CHECKED', '');

					}

					$tpl->parse('module_list', 'pages_module_list_block', true);

		        }

				$tmp_header = $addon['function'];

			}

		}

		$tpl->set_var('HEADER_MODULE_FUNCTION', '<h6>'.$mLang->TEXT_MODULE_PERMISSIONS.'</h6>');

		// Insert values into pages module list

		$tpl->set_block('show_cmd_permission', 'tools_module_list_block', 'tools_list');

		$sql  = 'SELECT * FROM `'.TABLE_PREFIX.'addons` ';

		$sql .= 'WHERE `type` = \'module\' AND `function` = \'tool\' ';

		$sql .= 'ORDER BY `name`';

		if(($res_pages = $database->query($sql)) && ($res_pages->numRows() > 0) )

		{

        	$tmp_header = '';

			while($addon = $res_pages->fetchRow(MYSQL_ASSOC))

			{

				if(file_exists(WB_PATH.'/modules/'.$addon['directory'].'/info.php'))

				{

                    if( $tmp_header != $addon['function'])

					{

						$tpl->set_var('MODULE_FUNCTION', '<h6>'.strtoupper($addon['function']).'</h6>');

					} else {

						$tpl->set_var('MODULE_FUNCTION', '');

					}

					$tpl->set_var('ADM_VALUE', $addon['directory']);

					$tpl->set_var('ADM_NAME', $addon['name']);

					if(!is_numeric(array_search($addon['directory'], $module_permissions)) )

					{

						$tpl->set_var('ADM_CHECKED', ' checked="checked"');

					} else {

	 					$tpl->set_var('ADM_CHECKED', '');

					}

					$tpl->parse('tools_list', 'tools_module_list_block', true);

		        }

				$tmp_header = $addon['function'];

			}

		}

		$tpl->set_var('HEADER_TEMPLATE_FUNCTION', '<h6>'.$mLang->TEXT_TEMPLATE_PERMISSIONS.'</h6>');

		// Insert values into pages module list

		$tpl->set_block('show_cmd_permission', 'template_list_block', 'template_list');

		$sql  = 'SELECT * FROM `'.TABLE_PREFIX.'addons` ';

		$sql .= 'WHERE `type` = \'template\' ';

		$sql .= 'ORDER BY `function`,`name`';

		if(($res_pages = $database->query($sql)) && ($res_pages->numRows() > 0) )

		{

        	$tmp_header = '';

			while($addon = $res_pages->fetchRow(MYSQL_ASSOC))

			{

				if(file_exists(WB_PATH.'/templates/'.$addon['directory'].'/info.php'))

				{

                    if( $tmp_header != $addon['function'])

					{

						$tpl->set_var('TEMPLATE_FUNCTION', '<h6>'.strtoupper($addon['function']).'</h6>');

					} else {

						$tpl->set_var('TEMPLATE_FUNCTION', '');

					}

					$tpl->set_var('TMP_VALUE', $addon['directory']);

					$tpl->set_var('TMP_NAME', $addon['name']);

					if(!is_numeric(array_search($addon['directory'], $template_permissions)) )

					{

						$tpl->set_var('TMP_CHECKED', ' checked="checked"');

					} else {

	 					$tpl->set_var('TMP_CHECKED', '');

					}

					$tpl->parse('template_list', 'template_list_block', true);

		        }

				$tmp_header = $addon['function'];

			}

		}

// ------------------------

	// Parse template object

		$tpl->parse('main', 'main_block', false);

		$output = $tpl->finish($tpl->parse('output', 'page'));

		unset($tpl);

		return $output;

	}

<?php

/**

 *

 * @category        admin

 * @package         start

 * @author          Ryan Djurovich, WebsiteBaker Project

 * @copyright       2009-2012, WebsiteBaker Org. e.V.

 * @link			http://www.websitebaker2.org/

 * @license         http://www.gnu.org/licenses/gpl.html

 * @platform        WebsiteBaker 2.8.x

 * @requirements    PHP 5.2.2 and higher

 * @version         $Id$

 * @filesource		$HeadURL$

 * @lastmodified    $Date$

 *

 */

/* -------------------------------------------------------- */

// Must include code to stop this file being accessed directly

if(defined('WB_PATH') == false)

{

	// Stop this file being access directly

		die('<h2 style="color:red;margin:3em auto;text-align:center;">Cannot access this file directly</h2>');

}

/* -------------------------------------------------------- */