61 lines
2.6 KiB
PHP
61 lines
2.6 KiB
PHP
<?php
|
|
/**
|
|
* This function is beign used to add a user to a support group.
|
|
* It will first check if the user who executed this function is an admin. If the user exists it will try to add it to the supportgroup, in case it's not a mod or admin it will not
|
|
* add it to the group. if the executing user is not an admin or not logged in, the page will be redirected to the error page.
|
|
* @author Daan Janssens, mentored by Matthew Lagoe
|
|
*/
|
|
function add_user_to_sgroup(){
|
|
global $INGAME_WEBPATH;
|
|
global $WEBPATH;
|
|
if(WebUsers::isLoggedIn()){
|
|
|
|
//check if the that executed the task is an admin.
|
|
if( Ticket_User::isAdmin(unserialize($_SESSION['ticket_user'])) && isset($_POST['target_id'])){
|
|
$name = filter_var($_POST['Name'],FILTER_SANITIZE_STRING);
|
|
$id = filter_var($_POST['target_id'],FILTER_SANITIZE_NUMBER_INT);
|
|
$user_id = WebUsers::getId($name);
|
|
if ($user_id != ""){
|
|
//if the target user is a mod/admin
|
|
if (Ticket_User::constr_ExternId($user_id)->getPermission()>1){
|
|
//add it to the support group
|
|
$result['RESULT_OF_ADDING'] = Support_Group::addUserToSupportGroup($user_id, $id);
|
|
}else{
|
|
//return error message.
|
|
$result['RESULT_OF_ADDING'] = "NOT_MOD_OR_ADMIN";
|
|
}
|
|
|
|
}else{
|
|
$result['RESULT_OF_ADDING'] = "USER_NOT_EXISTING";
|
|
}
|
|
//$result['permission'] = unserialize($_SESSION['ticket_user'])->getPermission();
|
|
//$result['no_visible_elements'] = 'FALSE';
|
|
//$result['username'] = $_SESSION['user'];
|
|
//global $SITEBASE;
|
|
//require_once($SITEBASE . 'inc/show_sgroup.php');
|
|
//$result= array_merge($result, show_sgroup());
|
|
//helpers :: loadtemplate( 'show_sgroup', $result);
|
|
if (Helpers::check_if_game_client()) {
|
|
header("Cache-Control: max-age=1");
|
|
header("Location: ".$INGAME_WEBPATH."?page=show_sgroup&id=".$id);
|
|
}else{
|
|
header("Cache-Control: max-age=1");
|
|
header("Location: ".$WEBPATH."?page=show_sgroup&id=".$id);
|
|
}
|
|
throw new SystemExit();
|
|
|
|
}else{
|
|
//ERROR: No access!
|
|
$_SESSION['error_code'] = "403";
|
|
header("Cache-Control: max-age=1");
|
|
header("Location: index.php?page=error");
|
|
throw new SystemExit();
|
|
}
|
|
}else{
|
|
//ERROR: not logged in!
|
|
header("Cache-Control: max-age=1");
|
|
header("Location: index.php");
|
|
throw new SystemExit();
|
|
}
|
|
|
|
}
|