fixed sql user rights for group table

[iserv-mod-error-reporter.git] / src / detail.php

diff --git a/src/detail.php b/src/detail.php
index 3b59479..a0af8ac 100644 (file)
--- a/src/detail.php
+++ b/src/detail.php
@@ -30,6 +30,8 @@ require_once("mod_error-reporter/init.inc");
 require_once("sec/secure.inc");
 require_once("js.inc");
 
 require_once("sec/secure.inc");
 require_once("js.inc");
 

+db_user("errorreporter");
+

 PageBlue(_c("error-reporter:Change an error report"), "mod_error-reporter");
 
 if(!$cfgErrors->userHasAccess()) {
 PageBlue(_c("error-reporter:Change an error report"), "mod_error-reporter");
 
 if(!$cfgErrors->userHasAccess()) {


@@ -42,7 +44,7 @@ $getAction = @$_GET["action"];
 $getUid = @intval($_GET["uid"]);
 $postSubmit = @$_POST["submit"];
 
 $getUid = @intval($_GET["uid"]);
 $postSubmit = @$_POST["submit"];
 

-isset($getUid) or      die();
+isset($getUid) or  die();

 
 // Check if the specified report exists
 if(!is_object($doc->getErrorReportByID($getUid))) {
 
 // Check if the specified report exists
 if(!is_object($doc->getErrorReportByID($getUid))) {


@@ -54,7 +56,8 @@ if(!is_object($doc->getErrorReportByID($getUid))) {
 
 // Only admins or owners can view this page
 if(!($cfgErrors->userIsAdmin() or $doc->userIsOwner($getUid))) {
 
 // Only admins or owners can view this page
 if(!($cfgErrors->userIsAdmin() or $doc->userIsOwner($getUid))) {

-  echo sprintf("<p class='err'>%s</div>", _c("error-reporter:You are not allowed to edit this report."));
+  echo sprintf("<p class='err'>%s</div>", _c("error-reporter:You are not ".
+    "allowed to edit this report."));

   _PageBlue();
   die();
 }
   _PageBlue();
   die();
 }


@@ -64,19 +67,19 @@ $er = $doc->getErrorReportByID($getUid);
 $strOldComment = $er->getComment();
 
 // Probably we have to update an error report
 $strOldComment = $er->getComment();
 
 // Probably we have to update an error report

-if($getAction == "update" and $postSubmit == _c("Change"))
+if($getAction == "update" and $postSubmit == _("Change"))

 {
   if($cfgErrors->userIsAdmin()) {
     $postComment = stripslashes(@$_POST["comment"]);
     $postCommentOld = stripslashes(@$_POST["comment_old"]);
   }
 
 {
   if($cfgErrors->userIsAdmin()) {
     $postComment = stripslashes(@$_POST["comment"]);
     $postCommentOld = stripslashes(@$_POST["comment_old"]);
   }
 

-       // change the fields of the old dataset
-       $er->setMachine(stripslashes(@$_POST["machine"]));
-       $er->setText(stripslashes(@$_POST["text"]));
-       $er->setVisibility(isset($_POST["hidden"]) ? true : false);
+  // change the fields of the old dataset
+  $er->setMachine(stripslashes(@$_POST["machine"]));
+  $er->setText(stripslashes(@$_POST["text"]));
+  $er->setVisibility(isset($_POST["hidden"]) ? true : false);

   
   

-       // Do we have to change the comment and his owner?
+  // Do we have to change the comment and his owner?

   if($cfgErrors->userIsAdmin()) {
     if(@$_POST["comment_old"] != @$_POST["comment"]) {
       $er->setComment(stripslashes(@$_POST["comment"]), $_SESSION["act"]);
   if($cfgErrors->userIsAdmin()) {
     if(@$_POST["comment_old"] != @$_POST["comment"]) {
       $er->setComment(stripslashes(@$_POST["comment"]), $_SESSION["act"]);


@@ -84,41 +87,47 @@ if($getAction == "update" and $postSubmit == _c("Change"))
   }
   
   // write into database, reload parent and close window
   }
   
   // write into database, reload parent and close window

-       if($doc->writeErrorReport($er) != -1) {
+  if($doc->writeErrorReport($er) != -1) {

     js_try("opener.location.href = 'index.php';");
     js_close(500);
     js_try("opener.location.href = 'index.php';");
     js_close(500);

-       } else {
-         printLastError();
-         _PageBlue();
-         die();
-       }
+  } else {
+    printLastError();
+    _PageBlue();
+    die();
+  }

 }
 
 // output form
 $hidctrl = "input type='hidden'";
 Title(_c("error-reporter:Change an error report"));
 }
 
 // output form
 $hidctrl = "input type='hidden'";
 Title(_c("error-reporter:Change an error report"));

-echo sprintf("<form action='?action=update&amp;uid=%d' method='post'>\n", $getUid);
+echo sprintf("<form action='?action=update&amp;uid=%d' method='post'>\n", 
+  $getUid);

 echo "<table>\n";
 echo "<table>\n";

-echo sprintf("<tr><td>%s</td><td>%s</td></tr>\n", _c("error-reporter:Reported by:"),  
-  q(erGetRealUserName($er->getOwner())));
-echo sprintf("<tr><td>%s</td><td>%s</td></tr>\n", _c("error-reporter:Date:"), SmartDate($er->getDate()));
-echo sprintf("<tr><td>%s</td><td><{$GLOBALS["stdedt"]} name='machine' value='%s' /></td></tr>\n",
-  _c("error-reporter:Affected machine:"), q($er->getMachine()));
+echo sprintf("<tr><td>%s</td><td>%s</td></tr>\n", 
+  _c("error-reporter:Reported by:"), q(erGetRealUserName($er->getOwner())));
+echo sprintf("<tr><td>%s</td><td>%s</td></tr>\n", _c("error-reporter:Date:"),
+  SmartDate($er->getDate()));
+echo sprintf("<tr><td>%s</td><td><{$GLOBALS["stdedt"]} name='machine' ".
+  "value='%s' /></td></tr>\n", _c("error-reporter:Affected machine:"), 
+  q($er->getMachine()));

 echo sprintf("<tr><td>%s</td><td><textarea name='text' cols='40' rows='7'>%s".
   "</textarea></td></tr>\n", _c("error-reporter:Text:"), $er->getText());
 echo sprintf("<tr><td>%s</td><td><textarea name='text' cols='40' rows='7'>%s".
   "</textarea></td></tr>\n", _c("error-reporter:Text:"), $er->getText());

-echo sprintf("<tr><td><label for='hidden'>%s</label></td><td><input type='checkbox' id='hidden' ".
-  "name='hidden' value='true'%s /></td></tr>\n", _c("error-reporter:Hidden:"),
-  $er->isHidden() ? " checked='checked'" : "");
+echo sprintf("<tr><td><label for='hidden'>%s</label></td><td>".
+  "<input type='checkbox' id='hidden' name='hidden' value='true'%s /></td>".
+  "</tr>\n", _c("error-reporter:Hidden:"), $er->isHidden() ? 
+  " checked='checked'" : "");

 if($cfgErrors->userIsAdmin()) {
 if($cfgErrors->userIsAdmin()) {

-  echo sprintf("<tr><td>%s</td><td><textarea name='comment' cols='40' rows='3'>%s</textarea>",
-    _c("error-reporter:Comment:"), $er->getComment());
+  echo sprintf("<tr><td>%s</td><td><textarea name='comment' cols='40' ".
+  "rows='3'>%s</textarea>", _c("error-reporter:Comment:"), $er->getComment());

   if($er->getComment() != "") {
   if($er->getComment() != "") {

-    echo sprintf("<input type='hidden' name='comment_old' value='%s' /></td></tr>\n", $strOldComment);
-    echo sprintf("<tr><td>%s</td><td>%s</td></tr>\n", _c("error-reporter:Comment written by:"), 
-      erGetRealUserName($er->getCommentOwner()));
+    echo sprintf("<input type='hidden' name='comment_old' value='%s' /></td>".
+      "</tr>\n", $strOldComment);
+    echo sprintf("<tr><td>%s</td><td>%s</td></tr>\n", _c("error-reporter:".
+      "Comment written by:"), erGetRealUserName($er->getCommentOwner()));

   }
 }
   }
 }

-echo sprintf("<tr><td /><td><{$GLOBALS["smlbtn"]} value='%s' /></td></tr>\n", _("Change"));
+echo sprintf("<tr><td /><td><{$GLOBALS["smlbtn"]} name='submit' value='%s' ".
+  "/></td></tr>\n", _("Change"));

 echo "</table></form><p />\n";
 _PageBlue();
 ?>
 echo "</table></form><p />\n";
 _PageBlue();
 ?>