'; echo "

"; echo "

Invalid user
or
Invalid password

"; session_unset(); exit -1; } else $IsValid=1; return $ret; } /*++ * function : ShowDossier * Parameter : p_type string : all for all dossiers lim for only the * dossier where we've got rights * Return : nothing * Description : * Show the folder where user have access ++*/ function ShowDossier($p_type,$p_first=0,$p_max=10,$p_Num=0) { global $g_user; if ( $p_max == 0 ) { $l_step=""; } else { $l_step="LIMIT $p_max OFFSET $p_first"; } $cn=DbConnect(); if ( $p_type == "all") { $l_sql="select *, 'W' as priv_priv from ac_dossier ORDER BY dos_name "; $p_Num=CountSql($cn,$l_sql); } else { $l_sql="select * from jnt_use_dos natural join ac_dossier natural join ac_users inner join priv_user on priv_jnt=jnt_id where use_login='".$g_user."' and priv_priv !='NO' order by dos_name "; $p_Num=CountSql($cn,$l_sql); } $l_sql=$l_sql.$l_step; $p_res=ExecSql($cn,$l_sql); echo_debug("ShowDossier:".$p_res." Line = $p_Num"); $Max=pg_NumRows($p_res); if ( $Max == 0 ) return null; for ( $i=0;$i<$Max; $i++) { // echo_debug ("i = $i"); $row[]=pg_fetch_array($p_res,$i); //echo $row[dossier]; } return $row; } // Check if the user has admin right // to be complete function CheckAdmin() { global $g_user,$g_pass; $res=0; if ( $g_user != 'webcompta') { $pass5=md5($g_pass); $sql="select use_id from ac_users where use_login='$g_user' and use_active=1 and use_admin=1 and use_pass='$pass5'"; $cn=DbConnect(); $isAdmin=CountSql($cn,$sql); } else $isAdmin=1; return $isAdmin; } /* function DbConnect * purpose : connect to the database * parameter : p_db : db_name * return the connection * todo : replace hardcoded by variable placed in * constant.php */ function DbConnect($p_db="account_repository") { $a=pg_connect("dbname=$p_db host=127.0.0.1 user='webcompta'"); echo_debug ("connect to $p_db"); return $a; } /* function ExecSql * purpose : send a sql string to the database * parameter p_connection db connection * p_string sql string * return false if error otherwise true */ function ExecSql($p_connection, $p_string) { echo_debug("SQL = $p_string"); $ret=pg_exec($p_connection,$p_string); if ( $ret == false ) { echo_error ("SQL ERROR ::: $p_string");} return $ret; } /* * GetAllUser * Return all the users * as an array */ function GetAllUser() { echo_debug("GetUser"); $cn=DbConnect(); $sql="select * from ac_users where use_login!='webcompta'"; echo_debug("ExecSql"); $Res=ExecSql($cn,$sql); $Num=pg_NumRows($Res); if ( $Num == 0 ) return null; for ($i=0;$i < $Num; $i++) { $User[]=pg_fetch_array($Res,$i); } return $User; } /* GetUid * Check if the User is valid * and return an array with his property */ function GetUid($p_uid) { $cn=DbConnect(); $Res=ExecSql($cn,"select * from ac_users where use_id=".$p_uid); $Num=pg_NumRows($Res); if ( $Num == 0 ) { return false; } for ($i=0;$i < $Num; $i++) { $Prop[]=pg_fetch_array($Res,$i); } return $Prop; } /* * GetPriv * Get the privilege of an user on a folder */ function GetPriv($p_dossier,$p_login) { $cn=DbConnect(); $Res=ExecSql($cn,"select priv_priv from priv_user left join jnt_use_dos on jnt_id=priv_jnt inner join ac_users on ac_users.use_id=jnt_use_dos.use_id where use_login='$p_login' and dos_id=$p_dossier"); $Num=pg_NumRows($Res); echo_debug("Found ".$Num." rows in GetPriv"); if ( $Num==0) { return 0;} for($i=0;$i < $Num;$i++) { $Right=pg_fetch_array($Res,$i); $Priv[]=$Right['priv_priv']; } return $Priv; } /* ExisteJnt * Get the number of rows * from table jnt_use_dos where $p_dossier = dos_id and * use_id=$p_user */ function ExisteJnt($p_dossier,$p_user) { $cn=DbConnect(); $Res=ExecSql($cn,"select * from jnt_use_dos where dos_id=".$p_dossier." and use_id=".$p_user); return pg_NumRows($Res); } /* ExistePriv * * * */ function ExistePriv($p_jntid) { $cn=DbConnect(); $Res=ExecSql($cn,"select * from priv_user where priv_jnt=".$p_jntid); return pg_NumRows($Res); } /* GetJnt * Get the jnt * * */ function GetJnt($p_dossier,$p_user) { $cn=DbConnect(); $Res=ExecSql($cn,"select jnt_id from jnt_use_dos where dos_id=".$p_dossier." and use_id=".$p_user); $R=pg_fetch_array($Res,0); return $R['jnt_id']; } /* GetDbId * Get the dos_id of a dossier * parm: name of the folder */ function GetDbId($p_name) { $cn=DbConnect(); $r_sql=ExecSql($cn,"select dos_id from ac_dossier where dos_name='".$p_name."'"); $num=pg_NumRows($r_sql); if ( $num == 0 ) { return 0; } else { $l_db=pg_fetch_array($r_sql,0); return $l_db['dos_id']; } } /* CountSql * Count the number of row * * parm: p_conn connection handler * p_sql sql string */ function CountSql($p_conn,$p_sql) { $r_sql=ExecSql($p_conn,$p_sql); return pg_NumRows($r_sql); } /* GetDossierName * Param: id of a dossier * return : Name of the dossier */ function GetDossierName($p_dossier) { $cn=DbConnect(); $Ret=ExecSql($cn,"select dos_name from ac_dossier where dos_id=".$p_dossier); $r= pg_fetch_array($Ret,0); return $r['dos_name']; } /* GetSequence * get the current sequence */ function GetSequence($p_cn,$p_seq) { $Res=ExecSql($p_cn,"select currval('$p_seq') as seq"); $seq=pg_fetch_array($Res,0); return $seq['seq']; } function StartSql($p_cn) { $Res=ExecSql($p_cn,"start transaction"); } function EndSql($p_cn) { $Res=ExecSql($p_cn,"end transaction"); } function Commit($p_cn) { $Res=ExecSql($p_cn,"commit"); } function Rollback($p_cn) { $Res=ExecSql($p_cn,"rollback"); } function AlterSequence($p_cn,$p_name,$p_value) { $Res=ExecSql($p_cn,"drop sequence $p_name"); $Res=ExecSql($p_cn,"create sequence $p_name start $p_value"); } function GetLogin($p_uid) { $cn=DbConnect(); $Res=ExecSql($cn,"select use_login from ac_users where use_id=$p_uid"); if ( pg_NumRows($Res) == 0 ) return null; $a_login=pg_fetch_array($Res,0); return $a_login['use_login']; } /* function SyncRight * Purpose : Synchronize les droits par défaut * avec les journaux existants * parm : * - * gen : * - * return: * - * */ function SyncRight($p_dossier,$p_user) { $priv=GetPriv($p_dossier,$p_user); $right=$priv[0]; $ldb=sprintf("dossier%d",$p_dossier); $cn=DbConnect($ldb); $sql="insert into user_sec_jrn(uj_login,uj_jrn_id,uj_priv) ". "select '".$p_user."',jrn_def_id,'".$right."' from jrn_def ". "where jrn_def_id not in ". "(select uj_jrn_id from user_sec_jrn where uj_login='".$p_user."')"; $Res=ExecSql($cn,$sql); } /* function GetUserProperty * Purpose : Get the properties of an user * it means theme, profile, admin... * * parm : * - $p_user user login * - $p_cn connection resource * - * gen : * - * return: an array */ function GetUserProperty($p_cn,$p_user) { $sql="select use_admin,use_usertype,use_theme from ac_users where use_login='$p_user'"; $Ret=ExecSql($p_cn,$sql); if ( pg_NumRows($Ret) == 0) return array('use_admin'=>0, 'use_usertype'=>'user', 'use_theme'=>'classic'); $a=pg_fetch_array($Ret,0); return $a; } ?>