root/admin/admin_ug_auth.php

<?php
/***************************************************************************</span>
<span class="code-comment"> *                            admin_ug_auth.php
 *                            -------------------
 *   begin                : Saturday, Feb 13, 2001
 *   copyright            : (C) 2001 The phpBB Group
 *   email                : support@phpbb.com
 *
 *   $Id: admin_ug_auth.php,v 1.13.2.10 2005/09/14 18:14:29 acydburn Exp $
 *
 *
 ***************************************************************************/

/***************************************************************************
 *
 *   This program is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version.
 *
 ***************************************************************************/

if( !empty($setmodules) )</span>
<span class="code-keyword">{
    $filename = basename(__FILE__);
    $module['users']['permissions'] = $filename . "?mode=user";
    $module['groups']['permissions'] = $filename . "?mode=group";

    return;
}

define('IN_PHPBB', 1);

//</span>
<span class="code-comment">// Load default header
//
$no_page_header = TRUE;

$root_path = './../';</span>
<span class="code-lang">require($root_path . 'extension.inc');
require('./pagestart.' . $phpEx);

$user_id = request_var(POST_USERS_URL, 0);
$group_id = request_var(POST_GROUPS_URL, 0);
$adv = request_var('adv', 0);
$mode = request_var('mode', '');
$userlevel = request_var('userlevel', '');
$username = request_var('username', '');

//$moderator_ary = request_var('moderator', array( 0 => 0 ));</span>
<span class="code-comment">//$private_ary = request_var('private', array( 0 => 0 ));

//
// Start program - define vars
//
$forum_auth_fields = array('auth_view', 'auth_read', 'auth_post', 'auth_reply', 'auth_edit', 'auth_delete', 'auth_sticky', 'auth_announce', 'auth_vote', 'auth_pollcreate');

$auth_field_match = array(</span>
<span class="code-lang">    'auth_view' => AUTH_VIEW,
    'auth_read' => AUTH_READ,
    'auth_post' => AUTH_POST,
    'auth_reply' => AUTH_REPLY,
    'auth_edit' => AUTH_EDIT,
    'auth_delete' => AUTH_DELETE,
    'auth_sticky' => AUTH_STICKY,
    'auth_announce' => AUTH_ANNOUNCE,
    'auth_vote' => AUTH_VOTE,
    'auth_pollcreate' => AUTH_POLLCREATE);

$field_names = array(</span>
<span class="code-lang">    'auth_view' => $lang['view'],
    'auth_read' => $lang['read'],
    'auth_post' => $lang['post'],
    'auth_reply' => $lang['reply'],
    'auth_edit' => $lang['edit'],
    'auth_delete' => $lang['delete'],
    'auth_sticky' => $lang['sticky'],
    'auth_announce' => $lang['announce'],
    'auth_vote' => $lang['vote'],
    'auth_pollcreate' => $lang['pollcreate']);

// ---------------</span>
<span class="code-comment">// Start Functions
//
function check_auth($type, $key, $u_access, $is_admin)</span>
<span class="code-keyword">{
    $auth_user = 0;

    if( count($u_access) )
    {
        for($j = 0; $j < count($u_access); $j++)
        {
            $result = 0;
            switch($type)
            {
                case AUTH_ACL:
                    $result = $u_access[$j][$key];

                case AUTH_MOD:
                    $result = $result || $u_access[$j]['auth_mod'];

                case AUTH_ADMIN:
                    $result = $result || $is_admin;
                    break;
            }

            $auth_user = $auth_user || $result;
        }
    }
    else
    {
        $auth_user = $is_admin;
    }

    return $auth_user;
}
//</span>
<span class="code-comment">// End Functions
// -------------

if ( isset($_POST['submit']) && ( ( $mode == 'user' && $user_id ) || ( $mode == 'group' && $group_id ) ) )</span>
<span class="code-keyword">{
    $user_level = '';
    if ( $mode == 'user' )
    {
        //
        // Get group_id for this user_id
        //
        $sql = "SELECT g.group_id, u.user_level
            FROM " . USER_GROUP_TABLE . " ug, " . USERS_TABLE . " u, " . GROUPS_TABLE . " g
            WHERE u.uid = $user_id
                AND ug.user_id = u.uid
                AND g.group_id = ug.group_id
                AND g.group_single_user = " . TRUE;
        $result = $db->sql_query($sql);

        $row = $db->sql_fetchrow($result);

        $group_id = $row['group_id'];
        $user_level = $row['user_level'];

        $db->sql_freeresult($result);
    }

    //
    // Carry out requests
    //
    if ( $mode == 'user' && $userlevel == 'admin' && $user_level != ADMIN )
    {
        //
        // Make user an admin (if already user)
        //
        if ( $userdata['uid'] != $user_id )
        {
            $sql = "UPDATE " . USERS_TABLE . "
                SET user_level = " . ADMIN . "
                WHERE uid = $user_id";
            $result = $db->sql_query($sql);

            $sql = "DELETE FROM " . AUTH_ACCESS_TABLE . "
                WHERE group_id = $group_id
                    AND auth_mod = 0";
            $result = $db->sql_query($sql);

            //
            // Delete any entries in auth_access, they are not required if user is becoming an
            // admin
            //
            $sql = "UPDATE " . AUTH_ACCESS_TABLE . "
                SET auth_view = 0, auth_read = 0, auth_post = 0, auth_reply = 0, auth_edit = 0, auth_delete = 0, auth_sticky = 0, auth_announce = 0
                WHERE group_id = $group_id";
            $result = $db->sql_query($sql);
        }

        $message = $lang['auth_updated'] . '<br /><br />' . sprintf($lang['click_return_userauth'], '<a href="' . append_sid("admin_ug_auth.$phpEx?mode=$mode") . '">', '</a>') . '<br /><br />' . sprintf($lang['click_return_admin_index'], '<a href="' . append_sid("index.$phpEx?pane=right") . '">', '</a>');
        trigger_error($message);
        return;
    }
    else
    {
        if ( $mode == 'user' && $userlevel == 'user' && $user_level == ADMIN )
        {
            //
            // Make admin a user (if already admin) ... ignore if you're trying
            // to change yourself from an admin to user!
            //
            if ( $userdata['uid'] != $user_id )
            {
                $sql = "UPDATE " . AUTH_ACCESS_TABLE . "
                    SET auth_view = 0, auth_read = 0, auth_post = 0, auth_reply = 0, auth_edit = 0, auth_delete = 0, auth_sticky = 0, auth_announce = 0
                    WHERE group_id = $group_id";
                $result = $db->sql_query($sql);

                //
                // Update users level, reset to USER
                //
                $sql = "UPDATE " . USERS_TABLE . "
                    SET user_level = " . USER . "
                    WHERE uid = $user_id";
                $result = $db->sql_query($sql);
            }

            $message = $lang['auth_updated'] . '<br /><br />' . sprintf($lang['click_return_userauth'], '<a href="' . append_sid("admin_ug_auth.$phpEx?mode=$mode") . '">', '</a>') . '<br /><br />' . sprintf($lang['click_return_admin_index'], '<a href="' . append_sid("index.$phpEx?pane=right") . '">', '</a>');
        }
        else
        {

            $change_mod_list = ( isset($_POST['moderator']) ) ? $_POST['moderator'] : false;

            if ( empty($adv) )
            {
                $change_acl_list = ( isset($_POST['private']) ) ? $_POST['private'] : false;
            }
            else
            {
                $change_acl_list = array();
                for($j = 0; $j < count($forum_auth_fields); $j++)
                {
                    $auth_field = $forum_auth_fields[$j];

                    while( list($forum_id, $value) = @each($_POST['private_' . $auth_field]) )
                    {
                        $change_acl_list[$forum_id][$auth_field] = $value;
                    }
                }
            }

            $sql = 'SELECT f.*
                FROM ' . FORUMS_TABLE . ' f, ' . FORUM_CATEGORIES_TABLE . ' c
                WHERE f.cat_id = c.cat_id
                ORDER BY c.cat_order, f.forum_order';
            $result = $db->sql_query($sql);

            $forum_access = array();
            while( $row = $db->sql_fetchrow($result) )
            {
                $forum_access[] = $row;
            }
            $db->sql_freeresult($result);

            if ( $mode == 'user' ) {
                $sql = "SELECT aa.*
                        FROM " . AUTH_ACCESS_TABLE . " aa, " . USER_GROUP_TABLE . " ug, " . GROUPS_TABLE. " g
                        WHERE ug.user_id = $user_id
                        AND g.group_id = ug.group_id
                        AND aa.group_id = ug.group_id
                        AND g.group_single_user = " . TRUE;
            }
            else {
                $sql = "SELECT *
                        FROM " . AUTH_ACCESS_TABLE . "
                        WHERE group_id = $group_id";
            }

            $result = $db->sql_query($sql);

            $auth_access = array();
            while( $row = $db->sql_fetchrow($result) )
            {
                $auth_access[$row['forum_id']] = $row;
            }
            $db->sql_freeresult($result);

            $forum_auth_action = array();
            $update_acl_status = array();
            $update_mod_status = array();

            for($i = 0; $i < count($forum_access); $i++)
            {
                $forum_id = $forum_access[$i]['forum_id'];

                if (
                    ( isset($auth_access[$forum_id]['auth_mod']) && $change_mod_list[$forum_id]['auth_mod'] != $auth_access[$forum_id]['auth_mod'] ) ||
                    ( !isset($auth_access[$forum_id]['auth_mod']) && !empty($change_mod_list[$forum_id]['auth_mod']) )
                )
                {
                    $update_mod_status[$forum_id] = $change_mod_list[$forum_id]['auth_mod'];

                    if ( !$update_mod_status[$forum_id] )
                    {
                        $forum_auth_action[$forum_id] = 'delete';
                    }
                    else if ( !isset($auth_access[$forum_id]['auth_mod']) )
                    {
                        $forum_auth_action[$forum_id] = 'insert';
                    }
                    else
                    {
                        $forum_auth_action[$forum_id] = 'update';
                    }
                }

                for($j = 0; $j < count($forum_auth_fields); $j++)
                {
                    $auth_field = $forum_auth_fields[$j];

                    if( $forum_access[$i][$auth_field] == AUTH_ACL && isset($change_acl_list[$forum_id][$auth_field]) )
                    {
                        if ( ( empty($auth_access[$forum_id]['auth_mod']) &&
                            ( isset($auth_access[$forum_id][$auth_field]) && $change_acl_list[$forum_id][$auth_field] != $auth_access[$forum_id][$auth_field] ) ||
                            ( !isset($auth_access[$forum_id][$auth_field]) && !empty($change_acl_list[$forum_id][$auth_field]) ) ) ||
                            !empty($update_mod_status[$forum_id])
                        )
                        {
                            $update_acl_status[$forum_id][$auth_field] = ( !empty($update_mod_status[$forum_id]) ) ? 0 :  $change_acl_list[$forum_id][$auth_field];

                            if ( isset($auth_access[$forum_id][$auth_field]) && empty($update_acl_status[$forum_id][$auth_field]) && $forum_auth_action[$forum_id] != 'insert' && $forum_auth_action[$forum_id] != 'update' )
                            {
                                $forum_auth_action[$forum_id] = 'delete';
                            }
                            else if ( !isset($auth_access[$forum_id][$auth_field]) && !( @$forum_auth_action[$forum_id] == 'delete' && empty($update_acl_status[$forum_id][$auth_field]) ) )
                            {
                                $forum_auth_action[$forum_id] = 'insert';
                            }
                            else if ( isset($auth_access[$forum_id][$auth_field]) && !empty($update_acl_status[$forum_id][$auth_field]) )
                            {
                                $forum_auth_action[$forum_id] = 'update';
                            }
                        }
                        else if ( ( empty($auth_access[$forum_id]['auth_mod']) &&
                            ( isset($auth_access[$forum_id][$auth_field]) && $change_acl_list[$forum_id][$auth_field] == $auth_access[$forum_id][$auth_field] ) ) && @$forum_auth_action[$forum_id] == 'delete' )
                        {
                            $forum_auth_action[$forum_id] = 'update';
                        }
                    }
                }
            }

            //
            // Checks complete, make updates to DB
            //
            $delete_sql = '';
            while( list($forum_id, $action) = @each($forum_auth_action) )
            {
                if ( $action == 'delete' )
                {
                    $delete_sql .= ( ( $delete_sql != '' ) ? ', ' : '' ) . $forum_id;
                }
                else
                {
                    if ( $action == 'insert' )
                    {
                        $sql_field = '';
                        $sql_value = '';
                        while ( list($auth_type, $value) = @each($update_acl_status[$forum_id]) )
                        {
                            $sql_field .= ( ( $sql_field != '' ) ? ', ' : '' ) . $auth_type;
                            $sql_value .= ( ( $sql_value != '' ) ? ', ' : '' ) . $value;
                        }
                        $sql_field .= ( ( $sql_field != '' ) ? ', ' : '' ) . 'auth_mod';
                        $sql_value .= ( ( $sql_value != '' ) ? ', ' : '' ) . ( ( !isset($update_mod_status[$forum_id]) ) ? 0 : $update_mod_status[$forum_id]);

                        $sql = "INSERT INTO " . AUTH_ACCESS_TABLE . " (forum_id, group_id, $sql_field)
                            VALUES ($forum_id, $group_id, $sql_value)";
                    }
                    else
                    {
                        $sql_values = '';
                        while ( list($auth_type, $value) = @each($update_acl_status[$forum_id]) )
                        {
                            $sql_values .= ( ( $sql_values != '' ) ? ', ' : '' ) . $auth_type . ' = ' . $value;
                        }
                        $sql_values .= ( ( $sql_values != '' ) ? ', ' : '' ) . 'auth_mod = ' . ( ( !isset($update_mod_status[$forum_id]) ) ? 0 : $update_mod_status[$forum_id]);

                        $sql = "UPDATE " . AUTH_ACCESS_TABLE . "
                            SET $sql_values
                            WHERE group_id = $group_id
                                AND forum_id = $forum_id";
                    }
                    $result = $db->sql_query($sql);
                    $cache->destroy('sql', AUTH_ACCESS_TABLE);
                }
            }

            if ( $delete_sql != '' )
            {
                $sql = "DELETE FROM " . AUTH_ACCESS_TABLE . "
                    WHERE group_id = $group_id
                        AND forum_id IN ($delete_sql)";
                $result = $db->sql_query($sql);
                $cache->destroy('sql', AUTH_ACCESS_TABLE);
            }

            $l_auth_return = ( $mode == 'user' ) ? $lang['click_return_userauth'] : $lang['click_return_groupauth'];
            $message = $lang['auth_updated'] . '<br /><br />' . sprintf($l_auth_return, '<a href="' . append_sid("admin_ug_auth.$phpEx?mode=$mode") . '">', '</a>') . '<br /><br />' . sprintf($lang['click_return_admin_index'], '<a href="' . append_sid("index.$phpEx?pane=right") . '">', '</a>');
        }

        //
        // Update user level to mod for appropriate users
        //
        $sql = "SELECT u.uid
            FROM " . AUTH_ACCESS_TABLE . " aa, " . USER_GROUP_TABLE . " ug, " . USERS_TABLE . " u
            WHERE ug.group_id = aa.group_id
                AND u.uid = ug.user_id
                AND ug.user_pending = 0
                AND u.user_level NOT IN (" . MOD . ", " . ADMIN . ")
            GROUP BY u.uid
            HAVING SUM(aa.auth_mod) > 0";
        $result = $db->sql_query($sql);

        $set_mod = '';
        while( $row = $db->sql_fetchrow($result) )
        {
            $set_mod .= ( ( $set_mod != '' ) ? ', ' : '' ) . $row['uid'];
        }
        $db->sql_freeresult($result);

        //
        // Update user level to user for appropriate users
        //
        switch ( $db_type )
        {
            case 'postgresql':
                $sql = "SELECT u.uid
                    FROM " . USERS_TABLE . " u, " . USER_GROUP_TABLE . " ug, " . AUTH_ACCESS_TABLE . " aa
                    WHERE ug.user_id = u.uid
                        AND aa.group_id = ug.group_id
                        AND u.user_level NOT IN (" . USER . ", " . ADMIN . ")
                    GROUP BY u.uid
                    HAVING SUM(aa.auth_mod) = 0
                    UNION (
                        SELECT u.uid
                        FROM " . USERS_TABLE . " u
                        WHERE NOT EXISTS (
                            SELECT aa.auth_mod
                            FROM " . USER_GROUP_TABLE . " ug, " . AUTH_ACCESS_TABLE . " aa
                            WHERE ug.user_id = u.uid
                                AND aa.group_id = ug.group_id
                        )
                        AND u.user_level NOT IN (" . USER . ", " . ADMIN . ")
                        GROUP BY u.uid
                    )";
                break;
            case 'oracle':
                $sql = "SELECT u.uid
                    FROM " . USERS_TABLE . " u, " . USER_GROUP_TABLE . " ug, " . AUTH_ACCESS_TABLE . " aa
                    WHERE ug.user_id = u.uid(+)
                        AND aa.group_id = ug.group_id(+)
                        AND u.user_level NOT IN (" . USER . ", " . ADMIN . ")
                    GROUP BY u.uid
                    HAVING SUM(aa.auth_mod) = 0";
                break;
            default:
                $sql = "SELECT u.uid
                    FROM ( ( " . USERS_TABLE . " u
                    LEFT JOIN " . USER_GROUP_TABLE . " ug ON ug.user_id = u.uid )
                    LEFT JOIN " . AUTH_ACCESS_TABLE . " aa ON aa.group_id = ug.group_id )
                    WHERE u.user_level NOT IN (" . USER . ", " . ADMIN . ")
                    GROUP BY u.uid
                    HAVING SUM(aa.auth_mod) = 0";
                break;
        }
        $result = $db->sql_query($sql);

        $unset_mod = "";
        while( $row = $db->sql_fetchrow($result) )
        {
            $unset_mod .= ( ( $unset_mod != '' ) ? ', ' : '' ) . $row['uid'];
        }
        $db->sql_freeresult($result);

        if ( $set_mod != '' )
        {
            $sql = "UPDATE " . USERS_TABLE . "
                SET user_level = " . MOD . "
                WHERE uid IN ($set_mod)";
            $db->sql_query($sql);
        }

        if ( $unset_mod != '' )
        {
            $sql = "UPDATE " . USERS_TABLE . "
                SET user_level = " . USER . "
                WHERE uid IN ($unset_mod)";
            $db->sql_query($sql);
        }

        $sql = 'SELECT user_id FROM ' . USER_GROUP_TABLE . "
            WHERE group_id = $group_id";
        $result = $db->sql_query($sql);

        $group_user = array();
        while ($row = $db->sql_fetchrow($result))
        {
            $group_user[$row['user_id']] = $row['user_id'];
        }
        $db->sql_freeresult($result);

        $sql = "SELECT ug.user_id, COUNT(auth_mod) AS is_auth_mod
            FROM " . AUTH_ACCESS_TABLE . " aa, " . USER_GROUP_TABLE . " ug
            WHERE ug.user_id IN (" . implode(', ', $group_user) . ")
                AND aa.group_id = ug.group_id
                AND aa.auth_mod = 1
            GROUP BY ug.user_id";
        $result = $db->sql_query($sql);

        while ($row = $db->sql_fetchrow($result))
        {
            if ($row['is_auth_mod'])
            {
                unset($group_user[$row['user_id']]);
            }
        }
        $db->sql_freeresult($result);

        if (sizeof($group_user))
        {
            $sql = "UPDATE " . USERS_TABLE . "
                SET user_level = " . USER . "
                WHERE uid IN (" . implode(', ', $group_user) . ") AND user_level = " . MOD;
            $result = $db->sql_query($sql);
        }

        trigger_error($message);
        return;
    }
}
else if ( ( $mode == 'user' && ( $username || $user_id ) ) || ( $mode == 'group' && $group_id ) )
{
    if ( $username )
    {
        $this_userdata = get_userdata($username, true);
        if ( !is_array($this_userdata) )
        {
            trigger_error($lang['no_such_user']);
            return;
        }
        $user_id = $this_userdata['uid'];
    }

    $optionlist_acl_adv = array();

    //
    // Front end
    //
    $sql = "SELECT f.*
        FROM " . FORUMS_TABLE . " f, " . FORUM_CATEGORIES_TABLE . " c
        WHERE f.cat_id = c.cat_id
        ORDER BY c.cat_order, f.forum_order ASC";
    $result = $db->sql_query($sql);

    $forum_access = array();
    while( $row = $db->sql_fetchrow($result) )
    {
        $forum_access[] = $row;
    }
    $db->sql_freeresult($result);

    if( empty($adv) )
    {
        for($i = 0; $i < count($forum_access); $i++)
        {
            $forum_id = $forum_access[$i]['forum_id'];

            $forum_auth_level[$forum_id] = AUTH_ALL;

            for($j = 0; $j < count($forum_auth_fields); $j++)
            {
                $forum_access[$i][$forum_auth_fields[$j]] . ' :: ';
                if ( $forum_access[$i][$forum_auth_fields[$j]] == AUTH_ACL )
                {
                    $forum_auth_level[$forum_id] = AUTH_ACL;
                    $forum_auth_level_fields[$forum_id][] = $forum_auth_fields[$j];
                }
            }
        }
    }

    $sql = "SELECT u.uid, u.name AS username, u.user_level, g.group_id, g.group_name, g.group_single_user, ug.user_pending
               FROM " . USERS_TABLE . " u, " . GROUPS_TABLE . " g, " . USER_GROUP_TABLE . " ug
               WHERE ";

    $sql .= ( $mode == 'user' ) ? "u.uid = $user_id AND ug.user_id = u.uid AND g.group_id = ug.group_id" : "g.group_id = $group_id AND ug.group_id = g.group_id AND u.uid = ug.user_id";
    $result = $db->sql_query($sql);
    $ug_info = array();

    while( $row = $db->sql_fetchrow($result) )
    {
        $ug_info[] = $row;
    }
    $db->sql_freeresult($result);

    if ( $mode == 'user' ) {
        $sql = "SELECT aa.*, g.group_single_user
                   FROM " . AUTH_ACCESS_TABLE . " aa, " . USER_GROUP_TABLE . " ug, " . GROUPS_TABLE. " g
                   WHERE ug.user_id = $user_id
                   AND g.group_id = ug.group_id
                   AND aa.group_id = ug.group_id
                   AND g.group_single_user = 1";
    }
    else {
        $sql = "SELECT * FROM " . AUTH_ACCESS_TABLE . " WHERE group_id = $group_id";;
    }

    $result = $db->sql_query($sql);

    $auth_access = array();
    $auth_access_count = array();
    while( $row = $db->sql_fetchrow($result) )
    {
        $auth_access[$row['forum_id']][] = $row;
        @$auth_access_count[$row['forum_id']]++;
    }
    $db->sql_freeresult($result);

    $is_admin = ( $mode == 'user' ) ? ( ( $ug_info[0]['user_level'] == ADMIN && $ug_info[0]['uid'] != ANONYMOUS ) ? 1 : 0 ) : 0;
    $auth_ug = array();

    for($i = 0; $i < count($forum_access); $i++)
    {
        $forum_id = $forum_access[$i]['forum_id'];

        unset($prev_acl_setting);
        for($j = 0; $j < count($forum_auth_fields); $j++)
        {
            $key = $forum_auth_fields[$j];
            $value = $forum_access[$i][$key];

            switch( $value )
            {
                case AUTH_ALL:
                case AUTH_REG:
                    $auth_ug[$forum_id][$key] = 1;
                    break;

                case AUTH_ACL:
                    $auth_ug[$forum_id][$key] = ( !empty($auth_access_count[$forum_id]) ) ? check_auth(AUTH_ACL, $key, $auth_access[$forum_id], $is_admin) : 0;
                    $auth_field_acl[$forum_id][$key] = $auth_ug[$forum_id][$key];

                    if ( isset($prev_acl_setting) )
                    {
                        if ( $prev_acl_setting != $auth_ug[$forum_id][$key] && empty($adv) )
                        {
                            $adv = 1;
                        }
                    }

                    $prev_acl_setting = $auth_ug[$forum_id][$key];

                break;

                case AUTH_MOD:
                    $auth_ug[$forum_id][$key] = ( !empty($auth_access_count[$forum_id]) ) ? check_auth(AUTH_MOD, $key, $auth_access[$forum_id], $is_admin) : 0;
                    break;

                case AUTH_ADMIN:
                    $auth_ug[$forum_id][$key] = $is_admin;
                break;

                default:
                    $auth_ug[$forum_id][$key] = 0;
                break;
            }
        }

        //
        // Is user a moderator?
        //
        $auth_ug[$forum_id]['auth_mod'] = ( !empty($auth_access_count[$forum_id]) ) ? check_auth(AUTH_MOD, 'auth_mod', $auth_access[$forum_id], 0) : 0;
    }

    $i = 0;
    @reset($auth_ug);

    foreach ( $auth_ug AS $forum_id => $user_ary ) {
        if ( empty($adv) )
        {
            if ( $forum_auth_level[$forum_id] == AUTH_ACL )
            {
                $allowed = 1;

                for($j = 0; $j < count($forum_auth_level_fields[$forum_id]); $j++)
                {
                    if ( !$auth_ug[$forum_id][$forum_auth_level_fields[$forum_id][$j]] )
                    {
                        $allowed = 0;
                    }
                }

                $optionlist_acl = '<select name="private[' . $forum_id . ']">';

                if ( $is_admin || $user_ary['auth_mod'] )
                {
                    $optionlist_acl .= '<option value="1">' . $lang['allowed_access'] . '</option>';
                }
                else if ( $allowed )
                {
                    $optionlist_acl .= '<option value="1" selected="selected">' . $lang['allowed_access'] . '</option><option value="0">'. $lang['disallowed_access'] . '</option>';
                }
                else
                {
                    $optionlist_acl .= '<option value="1">' . $lang['allowed_access'] . '</option><option value="0" selected="selected">' . $lang['disallowed_access'] . '</option>';
                }

                $optionlist_acl .= '</select>';
            }
            else
            {
                $optionlist_acl = '&nbsp;';
            }
        }
        else
        {
            for($j = 0; $j < count($forum_access); $j++)
            {
                if ( $forum_access[$j]['forum_id'] == $forum_id )
                {
                    for($k = 0; $k < count($forum_auth_fields); $k++)
                    {
                        $field_name = $forum_auth_fields[$k];

                        if( $forum_access[$j][$field_name] == AUTH_ACL )
                        {
                            $optionlist_acl_adv[$forum_id][$k] = '<select name="private_' . $field_name . '[' . $forum_id . ']">';

                            if( isset($auth_field_acl[$forum_id][$field_name]) && !($is_admin || $user_ary['auth_mod']) )
                            {
                                if( !$auth_field_acl[$forum_id][$field_name] )
                                {
                                    $optionlist_acl_adv[$forum_id][$k] .= '<option value="1">' . $lang['on'] . '</option><option value="0" selected="selected">' . $lang['off'] . '</option>';
                                }
                                else
                                {
                                    $optionlist_acl_adv[$forum_id][$k] .= '<option value="1" selected="selected">' . $lang['on'] . '</option><option value="0">' . $lang['off'] . '</option>';
                                }
                            }
                            else
                            {
                                if( $is_admin || $user_ary['auth_mod'] )
                                {
                                    $optionlist_acl_adv[$forum_id][$k] .= '<option value="1">' . $lang['on'] . '</option>';
                                }
                                else
                                {
                                    $optionlist_acl_adv[$forum_id][$k] .= '<option value="1">' . $lang['on'] . '</option><option value="0" selected="selected">' . $lang['off'] . '</option>';
                                }
                            }

                            $optionlist_acl_adv[$forum_id][$k] .= '</select>';

                        }
                    }
                }
            }
        }

        $optionlist_mod = '<select name="moderator[' . $forum_id . ']">';
        $optionlist_mod .= ( $user_ary['auth_mod'] ) ? '<option value="1" selected="selected">' . $lang['is_moderator'] . '</option><option value="0">' . $lang['not_moderator'] . '</option>' : '<option value="1">' . $lang['is_moderator'] . '</option><option value="0" selected="selected">' . $lang['not_moderator'] . '</option>';
        $optionlist_mod .= '</select>';

        $row_class = ( !( $i % 2 ) ) ? $theme['td_class2'] : $theme['td_class1'];
        $row_color = ( !( $i % 2 ) ) ? $theme['td_color1'] : $theme['td_color2'];

        $template->assign_block_vars('forums', array(
            'ROW_COLOR' => '#' . $row_color,
            'ROW_CLASS' => $row_class,
            'FORUM_NAME' => $forum_access[$i]['forum_name'],

            'U_FORUM_AUTH' => append_sid("admin_forumauth.$phpEx?f=" . $forum_access[$i]['forum_id']),

            'S_MOD_SELECT' => $optionlist_mod)
        );

        if( !$adv )
        {
            $template->assign_block_vars('forums.aclvalues', array(
                'S_ACL_SELECT' => $optionlist_acl)
            );
        }
        else
        {
            for($j = 0; $j < count($forum_auth_fields); $j++)
            {
                $s_acl_select = ( isset($optionlist_acl_adv[$forum_id][$j]) ? $optionlist_acl_adv[$forum_id][$j] : '' );
                $template->assign_block_vars('forums.aclvalues', array(
                    'S_ACL_SELECT' => $s_acl_select
                ));
            }
        }

        $i++;
    }
//    @reset($auth_user);</span>
<span class="code-comment">
    if ( $mode == 'user' )
    {
        $t_username = $ug_info[0]['username'];
        $s_user_type = ( $is_admin ) ? '<select name="userlevel"><option value="admin" selected="selected">' . $lang['auth_admin'] . '</option><option value="user">' . $lang['auth_user'] . '</option></select>' : '<select name="userlevel"><option value="admin">' . $lang['auth_admin'] . '</option><option value="user" selected="selected">' . $lang['auth_user'] . '</option></select>';
    }
    else
    {
        $t_groupname = $ug_info[0]['group_name'];
    }

    $name = array();
    $id = array();
    for($i = 0; $i < count($ug_info); $i++)
    {
        if( ( $mode == 'user' && !$ug_info[$i]['group_single_user'] ) || $mode == 'group' )
        {
            $name[] = ( $mode == 'user' ) ? $ug_info[$i]['group_name'] :  $ug_info[$i]['username'];
            $id[] = ( $mode == 'user' ) ? intval($ug_info[$i]['group_id']) : intval($ug_info[$i]['uid']);
        }
    }

    $t_usergroup_list = $t_pending_list = '';
    if( $count = sizeof($name) )
    {
        for($i = 0; $i < count($name); $i++)
        {
            $ug = ( $mode == 'user' ) ? 'group&amp;' . POST_GROUPS_URL : 'user&amp;' . POST_USERS_URL;

            if (!$ug_info[$i]['user_pending'])
            {
                $t_usergroup_list .= ( ( $t_usergroup_list != '' ) ? ', ' : '' ) . '<a href="' . append_sid("admin_ug_auth.$phpEx?mode=$ug=" . $id[$i]) . '">' . $name[$i] . '</a>';
            }
            else
            {
                $t_pending_list .= ( ( $t_pending_list != '' ) ? ', ' : '' ) . '<a href="' . append_sid("admin_ug_auth.$phpEx?mode=$ug=" . $id[$i]) . '">' . $name[$i] . '</a>';
            }
        }
    }

    $t_usergroup_list = ($t_usergroup_list == '') ? $lang['none'] : $t_usergroup_list;
    $t_pending_list = ($t_pending_list == '') ? $lang['none'] : $t_pending_list;

    $s_column_span = 2; // Two columns always present
    if( !$adv )
    {
        $template->assign_block_vars('acltype', array(
            'L_UG_ACL_TYPE' => $lang['simple_permission'])
        );
        $s_column_span++;
    }
    else
    {
        for($i = 0; $i < count($forum_auth_fields); $i++)
        {
            $cell_title = $field_names[$forum_auth_fields[$i]];

            $template->assign_block_vars('acltype', array(
                'L_UG_ACL_TYPE' => $cell_title)
            );
            $s_column_span++;
        }
    }

    //
    // Dump in the page header ...
    //
    include('./page_header_admin.'.$phpEx);

    $template->set_filenames(array(
        "body" => '../admin/auth_ug_body.tpl')
    );

    $adv_switch = ( empty($adv) ) ? 1 : 0;
    $u_ug_switch = ( $mode == 'user' ) ? POST_USERS_URL . "=" . $user_id : POST_GROUPS_URL . "=" . $group_id;
    $switch_mode = append_sid("admin_ug_auth.$phpEx?mode=$mode&amp;" . $u_ug_switch . "&amp;adv=$adv_switch");
    $switch_mode_text = ( empty($adv) ) ? $lang['advanced_mode'] : $lang['simple_mode'];
    $u_switch_mode = '<a href="' . $switch_mode . '">' . $switch_mode_text . '</a>';

    $s_hidden_fields = '<input type="hidden" name="mode" value="' . $mode . '" /><input type="hidden" name="adv" value="' . $adv . '" />';
    $s_hidden_fields .= ( $mode == 'user' ) ? '<input type="hidden" name="' . POST_USERS_URL . '" value="' . $user_id . '" />' : '<input type="hidden" name="' . POST_GROUPS_URL . '" value="' . $group_id . '" />';

    if ( $mode == 'user' )
    {
        $template->assign_block_vars('switch_user_auth', array());

        $template->assign_vars(array(
            'USERNAME' => $t_username,
            'USER_LEVEL' => $lang['user_level'] . " : " . $s_user_type,
            'USER_GROUP_MEMBERSHIPS' => $lang['group_memberships'] . ' : ' . $t_usergroup_list)
        );
    }
    else
    {
        $template->assign_block_vars("switch_group_auth", array());

        $template->assign_vars(array(
            'USERNAME' => $t_groupname,
            'GROUP_MEMBERSHIP' => $lang['usergroup_members'] . ' : ' . $t_usergroup_list . '<br />' . $lang['pending_members'] . ' : ' . $t_pending_list)
        );
    }

    $template->assign_vars(array(
        'L_USER_OR_GROUPNAME' => ( $mode == 'user' ) ? $lang['username'] : $lang['group_name'],

        'L_AUTH_TITLE' => ( $mode == 'user' ) ? $lang['auth_control_user'] : $lang['auth_control_group'],
        'L_AUTH_EXPLAIN' => ( $mode == 'user' ) ? $lang['user_auth_explain'] : $lang['group_auth_explain'],

        'U_USER_OR_GROUP' => append_sid("admin_ug_auth.$phpEx"),
        'U_SWITCH_MODE' => $u_switch_mode,

        'S_COLUMN_SPAN' => $s_column_span,
        'S_AUTH_ACTION' => append_sid("admin_ug_auth.$phpEx"),
        'S_HIDDEN_FIELDS' => $s_hidden_fields)
    );
}
else
{
    //
    // Select a user/group
    //
    include('./page_header_admin.'.$phpEx);

    $template->set_filenames(array(
        'body' => ( $mode == 'user' ) ? '../admin/user_select_body.tpl' : '../admin/auth_select_body.tpl')
    );

    if ( $mode == 'user' )
    {
        $template->assign_vars(array(
            'L_FIND_USERNAME' => $lang['find_username'],

            //'U_SEARCH_USER' => append_sid("../search.$phpEx?mode=searchuser"))
            'U_SEARCH_USER' => append_sid($root_path . "/phpbb2.php?page=search&mode=searchuser"))
        );
    }
    else
    {
        $sql = "SELECT group_id, group_name
            FROM " . GROUPS_TABLE . "
            WHERE group_single_user <> " . TRUE;
        $result = $db->sql_query($sql);

        if ( $row = $db->sql_fetchrow($result) )
        {
            $select_list = '<select name="' . POST_GROUPS_URL . '">';
            do
            {
                $select_list .= '<option value="' . $row['group_id'] . '">' . $row['group_name'] . '</option>';
            }
            while ( $row = $db->sql_fetchrow($result) );
            $select_list .= '</select>';
        }

        $template->assign_vars(array(
            'S_AUTH_SELECT' => $select_list)
        );
    }

    $s_hidden_fields = '<input type="hidden" name="mode" value="' . $mode . '" />';

    $l_type = ( $mode == 'user' ) ? 'USER' : 'AUTH';

    $template->assign_vars(array(
        'L_' . $l_type . '_TITLE' => ( $mode == 'user' ) ? $lang['auth_control_user'] : $lang['auth_control_group'],
        'L_' . $l_type . '_EXPLAIN' => ( $mode == 'user' ) ? $lang['user_auth_explain'] : $lang['group_auth_explain'],
        'L_' . $l_type . '_SELECT' => ( $mode == 'user' ) ? $lang['select_a_user'] : $lang['select_a_group'],
        'L_LOOK_UP' => ( $mode == 'user' ) ? $lang['look_up_user'] : $lang['look_up_group'],

        'S_HIDDEN_FIELDS' => $s_hidden_fields,
        'S_' . $l_type . '_ACTION' => append_sid("admin_ug_auth.$phpEx"))
    );

}

$template->display('body');</span>
<span class="code-lang">
include('./page_footer_admin.'.$phpEx);

?>