MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the License here <http://www.gnu.org/licenses/gpl-3.0.html>.
***********************************************************************/
-include_once($path_to_root . "/includes/prefs/userprefs.inc");
+include_once($path_to_root . "/includes/prefs/userprefs.inc");
+if (!defined('TB_PREF')) {
+ define('TB_PREF', '&TB_PREF&');
+}
//--------------------------------------------------------------------------
class current_user
{
- var $user;
+ var $user = 0;
var $loginname;
var $username;
var $name;
- var $company;
+ var $email;
+ var $company; // user's company
var $pos;
var $access;
var $timeout;
var $last_act;
var $role_set = false;
- var $old_db;
+ var $old_db;
var $logged;
var $ui_mode = 0;
var $prefs;
+ var $cur_con; // current db connection (can be different from $company for superuser)
function current_user()
{
function login($company, $loginname, $password)
{
- global $security_areas, $security_groups, $security_headings, $path_to_root;
-
+ global $security_areas, $security_groups, $security_headings, $path_to_root, $dflt_lang, $login_delay;
+
$this->set_company($company);
$this->logged = false;
- $Auth_Result = get_user_for_login($loginname, $password);
+ set_global_connection($company);
+ $lang = &$_SESSION['language'];
+ $lang->set_language($_SESSION['language']->code);
+ db_set_encoding($_SESSION['language']->encoding);
+
+ // Use external authentication source if any.
+ // Keep in mind you need to have user data set for $loginname
+ // in FA users table anyway to successfully log in.
+ $Auth_Result = hook_authenticate($loginname, $password);
- if (db_num_rows($Auth_Result) > 0)
+ if (!isset($Auth_Result)) // if not used: standard method
+ $Auth_Result = get_user_auth($loginname, md5($password));
+
+ if ($login_delay > 0)
+ write_login_filelog($loginname, $Auth_Result);
+
+ if ($Auth_Result)
{
- $myrow = db_fetch($Auth_Result);
+ $myrow = get_user_by_login($loginname);
+ if ($myrow['language'] != $dflt_lang)
+ { // refresh language and user data
+ $lang->set_language($myrow['language']);
+ db_set_encoding($_SESSION['language']->encoding);
+ $myrow = get_user_by_login($loginname);
+ }
+
$this->old_db = isset($myrow["full_access"]);
if (! @$myrow["inactive"]) {
if ($this->old_db) {
$this->username = $this->loginname;
$this->prefs = new user_prefs($myrow);
$this->user = @$myrow["id"];
+ $this->email = @$myrow["email"];
update_user_visitdate($this->username);
$this->logged = true;
$this->last_act = time();
return !isset($security_groups) && is_array($this->role_set);
}
- function can_access($page_level)
+ function can_access($sec_area)
{
global $security_groups, $security_areas;
if (isset($security_groups)) {
- return $this->company == 0 &&
+ return is_admin_company() &&
in_array(20, $security_groups[$this->access]);
}
- if ($page_level === 'SA_OPEN')
+ if ($sec_area === 'SA_OPEN')
return true;
- if ($page_level === 'SA_DENIED' || $page_level === '')
+ if ($sec_area === 'SA_DENIED' || $sec_area === '')
return false;
- $code = $security_areas[$page_level][0];
+ $code = $security_areas[$sec_area][0];
// only first registered company has site admin privileges
return $code && in_array($code, $this->role_set)
return $this->can_access($page_level);
}
- function get_db_connection($id=-1)
+ function check_application_access($waapp)
{
- global $db_connections;
+ if (!$this->hide_inaccessible_menu_items())
+ {
+ return true;
+ }
+
+ foreach ($waapp->modules as $module)
+ {
+ if ($this->check_module_access($module))
+ {
+ return true;
+ }
+ }
- $connection = $db_connections[$id == -1 ? $this->company : $id];
+ return false;
- //print_r($connection);
+ }
- $db = mysql_connect($connection["host"] ,
- $connection["dbuser"], $connection["dbpassword"]);
- mysql_select_db($connection["dbname"],$db);
+ function check_module_access($module)
+ {
+
+ if (!$this->hide_inaccessible_menu_items())
+ {
+ return true;
+ }
- if (!defined('TB_PREF'))
- define('TB_PREF', $connection["tbpref"]);
+ if (sizeof($module->lappfunctions) > 0)
+ {
+ foreach ($module->lappfunctions as $appfunction)
+ {
+ if ($appfunction->label != "" && $this->can_access_page($appfunction->access))
+ {
+ return true;
+ }
+ }
+ }
+
+ if (sizeof($module->rappfunctions) > 0)
+ {
+ foreach ($module->rappfunctions as $appfunction)
+ {
+ if ($appfunction->label != "" && $this->can_access_page($appfunction->access))
+ {
+ return true;
+ }
+ }
+ }
+
+ return false;
+
+ }
+
+ function hide_inaccessible_menu_items()
+ {
+ global $hide_inaccessible_menu_items;
+
+ if (!isset($hide_inaccessible_menu_items) || $hide_inaccessible_menu_items == 0)
+ {
+ return false;
+ }
+
+ else
+ {
+ return true;
+ }
+ }
- return $db;
+ function set_db_connection($id = -1)
+ {
+ return set_global_connection($id);
}
function update_prefs($prefs)
update_user_prefs($this->user, $prefs);
}
- $this->prefs = new user_prefs($prefs);
+ $this->prefs = new user_prefs(get_user($this->user));
}
}
function round2($number, $decimals=0)
{
- $delta = ($number < 0 ? -.000001 : .000001);
+ $delta = ($number < 0 ? -.0000000001 : .0000000001);
return round($number+$delta, $decimals);
}
+/*
+ Returns number formatted according to user setup and using $decimals digits after dot
+ (defualt is 0). When $decimals is set to 'max' maximum available precision is used
+ (decimals depend on value) and trailing zeros are trimmed.
+*/
function number_format2($number, $decimals=0)
{
global $thoseps, $decseps;
$tsep = $thoseps[$_SESSION["wa_current_user"]->prefs->tho_sep()];
$dsep = $decseps[$_SESSION["wa_current_user"]->prefs->dec_sep()];
//return number_format($number, $decimals, $dsep, $tsep);
- $delta = ($number < 0 ? -.000001 : .000001);
- return number_format($number+$delta, $decimals, $dsep, $tsep);
+ if($decimals==='max')
+ $dec = 15 - floor(log10(abs($number)));
+ else {
+ $delta = ($number < 0 ? -.0000000001 : .0000000001);
+ $number += $delta;
+ $dec = $decimals;
+ }
+
+ $num = number_format($number, $dec, $dsep, $tsep);
+
+ return $decimals==='max' ? rtrim($num, '0') : $num;
+
+}
+
+/* price/float comparision helper to be used in any suspicious place for zero values?
+usage:
+if (!floatcmp($value1, $value2))
+ compare value is 0
+*/
+
+define('FLOAT_COMP_DELTA', 0.004);
+
+function floatcmp($a, $b)
+{
+ return $a - $b > FLOAT_COMP_DELTA ? 1 : ($b - $a > FLOAT_COMP_DELTA ? -1 : 0);
}
+
//
// Current ui mode.
//
$dec = get_qty_dec($stock_id);
return number_format2($number, $dec);
}
+
// and get_qty_dec
function get_qty_dec($stock_id=null)
{
return $dec;
}
//-------------------------------------------------------------------
+//
+// Maximum precision format. Strips trailing unsignificant digits.
+//
+function maxprec_format($number) {
+ return number_format2($number, 'max');
+}
+
function exrate_format($number) {
return number_format2($number,
$_SESSION["wa_current_user"]->prefs->exrate_dec());
function user_company()
{
- return $_SESSION["wa_current_user"]->company;
+ global $def_coy;
+
+ return isset($_SESSION["wa_current_user"]) ? $_SESSION["wa_current_user"]->company : $def_coy;
}
function user_pos()
function user_theme()
{
- return $_SESSION["wa_current_user"]->prefs->get_theme();
+ return isset($_SESSION["wa_current_user"]) ?
+ $_SESSION["wa_current_user"]->prefs->get_theme() : 'default';
}
function user_pagesize()
return $_SESSION["wa_current_user"]->prefs->start_up_tab();
}
+function user_transaction_days()
+{
+ return $_SESSION["wa_current_user"]->prefs->transaction_days();
+}
+
+
+function user_check_access($sec_area)
+{
+ return $_SESSION["wa_current_user"]->can_access($sec_area);
+}
+
function set_user_prefs($prefs)
{
$_SESSION["wa_current_user"]->update_prefs($prefs);
function array_search_value($needle, $haystack, $valuekey=null)
{
foreach($haystack as $key => $value) {
- $val = isset($valuekey) ? $value[$valuekey] : $value;
+ $val = isset($valuekey) ? @$value[$valuekey] : $value;
if ($needle == $val){
return $value;
}
function array_search_keys($needle, $haystack, $valuekey=null)
{
$keys = array();
- foreach($haystack as $key => $value) {
- $val = isset($valuekey) ? $value[$valuekey] : $value;
- if ($needle == $val){
- $keys[] = $key;
+ if($haystack)
+ foreach($haystack as $key => $value) {
+ $val = isset($valuekey) ? @$value[$valuekey] : $value;
+ if ($needle == $val){
+ $keys[] = $key;
+ }
}
- }
return $keys;
}
//
$keys = array_search_keys($needle, $haystack, $valuekey);
return @$keys[0];
}
+
+// Recalculate report columns if orientation is landscape.
+function recalculate_cols(&$cols)
+{
+ $factor = (user_pagesize() == "A4" ? 1.4 : 1.3);
+ foreach($cols as $key => $col)
+ $cols[$key] = intval($col * $factor);
+}
+
+function flush_dir($path, $wipe = false)
+{
+ $dir = opendir($path);
+ if(!$dir)
+ return;
+
+ while(false !== ($fname = readdir($dir))) {
+ if($fname=='.' || $fname=='..' || $fname=='CVS' || (!$wipe && $fname=='index.php')) continue;
+ if(is_dir($path.'/'.$fname)) {
+ flush_dir($path.'/'.$fname, $wipe);
+ if ($wipe) @rmdir($path.'/'.$fname);
+ } else
+ @unlink($path.'/'.$fname);
+ }
+}
+/*
+ Returns current path to company private folder.
+ (Current path can change after chdir).
+*/
+function company_path($comp=null)
+{
+ global $path_to_root, $comp_path;
+
+ if (!isset($comp))
+ $comp = user_company();
+
+ // if path is relative, set current path_to_root
+ return ($comp_path[0]=='.' ? $path_to_root.'/'.basename($comp_path) : $comp_path)
+ . '/'.$comp;
+}
+
+function is_admin_company()
+{
+ return $this->company == 0;
+}
+
?>
\ No newline at end of file