adminaliaschangesubmit.php

<?php
  include_once dirname(__FILE__) . '/config/variables.php';
  include_once dirname(__FILE__) . '/config/authpostmaster.php';
  include_once dirname(__FILE__) . '/config/functions.php';
  include_once dirname(__FILE__) . '/config/httpheaders.php';

  # confirm that the postmaster is updating an alias they are permitted to change before going further  
  $query = "SELECT localpart,realname,smtp,on_spamassassin,
    admin,enabled FROM users 
	WHERE user_id='{$_POST['user_id']}' AND domain_id='{$_SESSION['domain_id']}' AND type='alias'";
  $result = $db->query($query);
  if ($result->numRows()<1) {
	  header ("Location: adminalias.php?failupdated={$_POST['localpart']}");
	  die();  
  }
  
  # Fix the boolean values
  if (isset($_POST['admin'])) {
    $_POST['admin'] = 1;
  } else {
    $_POST['admin'] = 0;
  }
  if (isset($_POST['enabled'])) {
    $_POST['enabled'] = 1;
  } else {
    $_POST['enabled'] = 0;
  }
    $query = "SELECT spamassassin from domains WHERE domain_id = '{$_SESSION['domain_id']}'";
  $result = $db->query($query);
  $row = $result->fetchRow();
  if ((isset($_POST['on_spamassassin'])) && ($row['spamassassin'] == 1)) {
    $_POST['on_spamassassin'] = 1;
  } else {
    $_POST['on_spamassassin'] = 0;
  }

  # Update the password, if the password was given
  if(isset($_POST['password']) && $_POST['password']!='' ){
	  if (validate_password($_POST['password'], $_POST['vpassword'])) {
		$cryptedpassword = crypt_password($_POST['password']);
		$query = "UPDATE users SET crypt='{$cryptedpassword}',
		  clear='{$_POST['password']}' WHERE user_id='{$_POST['user_id']}' 
		  AND domain_id='{$_SESSION['domain_id']}' AND type='alias'";
		$result = $db->query($query);
		if (!DB::isError($result)) {
		  if ($_POST['localpart'] == $_SESSION['localpart']) {
			$_SESSION['crypt'] = $cryptedpassword;
		  }
		} else {
		  header ('Location: adminalias.php?failedupdated=' . $_POST['localpart']);
		  die();
		}
	  } else {
		header ('Location: adminalias.php?badaliaspass');
		die();
	  }
  }

  # update the actual alias in the users table
  $aliasto = preg_replace("/[', ']+/", ",", $_POST['target']);
  $query = "UPDATE users SET localpart='{$_POST['localpart']}',
    username='{$_POST['localpart']}@{$_SESSION['domain']}',
    smtp='$aliasto',
    pop='$aliasto',
    realname='{$_POST['realname']}',
    admin='{$_POST['admin']}',
    on_spamassassin='{$_POST['on_spamassassin']}',
    enabled='{$_POST['enabled']}'
    WHERE user_id={$_POST['user_id']}
	AND domain_id='{$_SESSION['domain_id']}' AND type='alias'";
  $result = $db->query($query);
  if (!DB::isError($result)) {
    header ("Location: adminalias.php?updated={$_POST['localpart']}");
  } else {
    header ("Location: adminalias.php?failupdated={$_POST['localpart']}");
  }
?>