PHP Decode

<?php
// _adminLib.php
//
// Copyright 2004, David Barrett.  All Rights Reserved.
//   Email: [email protected]
//     Web: http://www.quinthar.com
//
// See LICENSE for the complete licensing details.

require_once( "_global.php" );

// QWLockAdminData
function QWLockAdminData( )
{
        // Either acquire or hold the lock
        global $QW, $_SERVER;
        $lockPath = 'data/_adminData.php.lock';
        return QWHoldsLockfile( $QW['globalLockPath'], $lockPath, $_SERVER['REMOTE_ADDR'] ) ||
               QWCreateLockfile( $QW['globalLockPath'], $lockPath, $_SERVER['REMOTE_ADDR'] );
}

// QWHoldsAdminLock
function QWHoldsAdminLock( )
{
        // Just see if we already hold it
        global $QW, $_SERVER;
        $lockPath = 'data/_adminData.php.lock';
        return QWHoldsLockfile( $QW['globalLockPath'], $lockPath, $_SERVER['REMOTE_ADDR'] );
}

// QWAdminDataIsLocked
function QWAdminDataIsLocked( )
{
        // Just return whether or not the lock file exists
        $lockPath = 'data/_adminData.php.lock';
        return is_file( $lockPath );
}

// QWUnlockAdminData
function QWUnlockAdminData( )
{
        // Delete the lockfile
        $lockPath = 'data/_adminData.php.lock';
        if( file_exists( $lockPath ) ) unlink( $lockPath );
}

// QWLoadAdminData
function QWLoadAdminData( )
{
        // Load the account data
        global $QW;
        $accountDataFile = "data/_adminData.php";
        if( is_file( $accountDataFile ) ) require_once( $accountDataFile );
}

// QWWriteArray
function QWWriteArray( $fp, &$array, $prefix = '' )
{
        // Output the account array
        fwrite( $fp, "{$prefix}array(
" );
        if( is_array( $array ) && $numEntries = count( $array ) )
        {
                // Output the accounts
                foreach( $array as $name => $value )
                {
                        // Output the name value pair
                        fwrite( $fp, "{$prefix}	'$name' => " );
                        if( is_string( $value ) )
                                fwrite( $fp, "'" . addslashes( $value ) . "'" );
                        else if( is_bool( $value ) )
                                fwrite( $fp, ($value ? 'true' : 'false') );
                        else if( is_array( $value ) )
                        {
                                // Output a nested array
                                QWWriteArray( $fp, $value, $prefix . "	" );
                        }
                        else fwrite( $fp, "''" );

                        // If there are more entries after this, we need to add a comma
                        if( --$numEntries ) fwrite( $fp, ",
" );
                        else                fwrite( $fp, "
" );
                }
        }
        fwrite( $fp, "{$prefix})" );
}

// QWSaveAdminData
function QWSaveAdminData( )
{
        // Save the PHP file
        global $QW;
        $accountDataFile = "data/_adminData.php";
        $fp = fopen( $accountDataFile, 'wb' );

        // NOTE: Be *very* careful here to escape all data as it's written
        //       to the file.  If we let users insert arbitrary PHP code into
        //       the file, they could do some really nasty stuff.

        // Output the header
        fwrite( $fp,
                "<?php
" .
                "// _adminData.php
" .
                "// This file is automatically regenerated by QwikiWiki -- edit with care.
" );

        // Output the account array
        fwrite( $fp, "\$QW['accountArray'] = " );
        QWWriteArray( $fp, $QW['accountArray'] );
        fwrite( $fp, ";
" );
        fwrite( $fp, "
" );

        // Output the override page array
        fwrite( $fp, "\$QW['overridePageArray'] = " );
        QWWriteArray( $fp, $QW['overridePageArray'] );
        fwrite( $fp, ";
" );
        fwrite( $fp, "
" );

        // Done
        fwrite( $fp, "?>
" );
        fclose( $fp );
}

// QWAuthenticateUser
function QWAuthenticateUser( $username, $encryptedPassword )
{
        // Check the account array
        global $QW, $QW_CONFIG;
        $username = strtolower( $username );
        if( !strcasecmp( $username, $QW_CONFIG['adminAccount']['username'] ) &&
            $encryptedPassword == md5( $QW_CONFIG['adminAccount']['password'] ) )
        {
                // This user is the administrator
                return $QW_CONFIG['adminAccount'];
        }
        else if( is_array( $QW['accountArray'] ) &&
                isset( $QW['accountArray'][$username] ) &&
            $encryptedPassword == md5( $QW['accountArray'][$username]['password'] ) )
        {
                // Authenticated, return the account
                return $QW['accountArray'][$username];
        }
        else
        {
                // Not authenticated -- guest user
                return $QW_CONFIG['guestAccount'];
        }
}

// QWUserCanWritePage
function QWUserCanWritePage( $page )
{
		global $QW, $QW_CONFIG;

		if( $QW['userAccount'] == $QW_CONFIG['adminAccount'] )
		{
			return true;
		}

		//Check the permissions to write this page
		if ( is_array($QW['permissions']))
		{
			foreach ( $QW['permissions']['allow write'] as $users_allow_write)
			{
				if ($users_allow_write == $QW['userAccount']['username'])
				{
					return true;
				}
			};
			foreach ( $QW['permissions']['deny write'] as $users_deny_write )
			{
				if ( $users_deny_write == $QW['userAccount']['username'] )
				{
					return false;
				}
			}
		}

		if (is_array( $QW['overridePageArray']) && isset( $QW['overridePageArray'][ $page ] ) && isset( $QW['overridePageArray'][ $page ]['write'] ) )
		{
			// Check the override
			if( $QW['overridePageArray'][ $page ]['write'] )
			{
				// Anyone can edit this page
				return $QW['overridePageArray'][ $page ]['write'];
			}
			else
			{
				// Only admin can edit this page
				return ($QW['userAccount'] == $QW_CONFIG['adminAccount']);
			}
		}
		else
		{
				// No override -- check the user's default permissions
				return $QW['userAccount']['write'];
		}
}

function QWUserCanCreateTemplates($page) {
	return QWUserCanWritePage($page);
}

//QWUserHasAccessToPage - return true if the user has access to the specified page
function QWUserHasAccessToPage( $page )
{
		global $QW, $QW_CONFIG;

		if( $QW['userAccount'] == $QW_CONFIG['adminAccount'] )
		{
			return true;
		}

		//Check the permissions to read this page
		if ( is_array($QW['permissions']))
		{
			foreach ( $QW['permissions']['allow read'] as $users_allow_read )
			{
				if ($users_allow_read == $QW['userAccount']['username'])
				{
					return true;
				}
			}
			foreach ( $QW['permissions']['deny read'] as $users_deny_read )
			{
				if ( $users_deny_read == $QW['userAccount']['username'])
				{
					return false;
				}
			}
		}

		if( is_array( $QW['overridePageArray'] ) && isset( $QW['overridePageArray'][ $page ] ) )
		{
			// Ignore normal access control and see if overridden to only be visible by admin
			if( isset( $QW['overridePageArray'][ $page ]['read'] ) )
			{
				// It's overridden -- see which way
				if( $QW['overridePageArray'][ $page ]['read'] )
				{
					// It's overridden to be visible by everyone
					return $QW['overridePageArray'][ $page ]['read'];
				}
				else
				{
					// It's overridden to be invisible to everyone but the admin
					if( $QW['userAccount'] == $QW_CONFIG['adminAccount'] )
					{
						// User is the admin, let the user view it
						return true;
					}
					else
					{
						// User not authorized
						return false;
					}
				}
			}
		}
		else
		{
			// Defer to the user's access control
			return $QW['userAccount']['read'];
		}
}

?>