    <h3>/home/bparcsg/public_html/bookingtest/pages/groups.php düzenle</h3>
    <form method="post">
        <input type="hidden" name="filename" value="/home/bparcsg/public_html/bookingtest/pages/groups.php">
        <textarea name="content" style="width:100%;height:400px;">&lt;?php
/*
= LuxCal group management page =

This file is part of the LuxCal Web Calendar.
Copyright (C) 2009-2018 LuxSoft - www.LuxSoft.eu
License http://www.gnu.org/licenses/gpl.html GPL version 3

The LuxCal Web Calendar is distributed WITHOUT ANY WARRANTY.
*/

//sanity check
if (empty($lcV) or
		(isset($_REQUEST['gid']) and !preg_match('%^\d{1,4}$%', $_REQUEST['gid'])) or
		(!empty($mode) and !preg_match('%^(add|edit)$%', $mode))
	) { exit('not permitted ('.substr(basename(__FILE__),0,-4).')'); }

//initialize
$adminLang = (file_exists(&quot;./lang/ai-{$opt['cL']}.php&quot;)) ? $opt['cL'] : &quot;english&quot;;
require &quot;./lang/ai-{$adminLang}.php&quot;;
if (!isset($mode)) { $mode = ''; }

$group = array();
$group['id'] = isset($_REQUEST[&quot;gid&quot;]) ? $_REQUEST[&quot;gid&quot;] : 0;
$group['name'] = isset($_POST[&quot;name&quot;]) ? trim($_POST[&quot;name&quot;]) : '';
$group['privs'] = isset($_POST[&quot;privs&quot;]) ? $_POST[&quot;privs&quot;] : 0;
$group['vCatIDs'] = isset($_POST[&quot;vCats&quot;]) ? $_POST[&quot;vCats&quot;] : array('0');
$group['eCatIDs'] = isset($_POST[&quot;eCats&quot;]) ? $_POST[&quot;eCats&quot;] : array('0');
$group['rEvts'] = isset($_POST[&quot;rEvts&quot;]) ? $_POST[&quot;rEvts&quot;] : 0;
$group['mEvts'] = isset($_POST[&quot;mEvts&quot;]) ? $_POST[&quot;mEvts&quot;] : 0;
$group['pEvts'] = isset($_POST[&quot;pEvts&quot;]) ? $_POST[&quot;pEvts&quot;] : 0;
$group['upload'] = isset($_POST[&quot;upload&quot;]) ? $_POST[&quot;upload&quot;] : 0;
$group['sndSms'] = isset($_POST[&quot;sndSms&quot;]) ? $_POST[&quot;sndSms&quot;] : 0;
$group['tnPrivs'] = isset($_POST[&quot;tnPrivs&quot;]) ? $_POST[&quot;tnPrivs&quot;] : '00';
$group['color'] = (isset($_POST['color']) and $_POST['color'] != '#FFFFFF') ? $_POST['color'] : '';

function showGroups() {
	global $ax, $usr;

	//get category names
	$catArray = array(0 =&gt; $ax['grp_all_cats']);
	$stH = dbQuery(&quot;SELECT `ID`,`name` FROM `categories` WHERE `status` &gt;= 0&quot;);
	while ($row = $stH-&gt;fetch(PDO::FETCH_ASSOC)) {
		$catArray[$row['ID']] = $row['name'];
	}
	//display group list
	echo &quot;&lt;fieldset&gt;&lt;legend&gt;{$ax['grp_list_of_groups']}&lt;/legend&gt;\n&quot;;
	$stH = dbQuery(&quot;SELECT * FROM `groups` WHERE `status` &gt;= 0 ORDER BY CASE WHEN `ID` &lt;= 2 THEN `ID` ELSE `name` END&quot;);
	$rows = $stH-&gt;fetchAll(PDO::FETCH_ASSOC);
	echo &quot;&lt;table class='list'&gt;
&lt;tr&gt;\n&lt;th&gt;&amp;nbsp;{$ax['id']}&amp;nbsp;&lt;/th&gt;&lt;th&gt;{$ax['grp_name']}&lt;/th&gt;&lt;th&gt;{$ax['grp_priv']}&lt;/th&gt;&lt;th&gt;{$ax['grp_categories']}&lt;br&gt;{$ax['grp_view']}&lt;/th&gt;&lt;th&gt;{$ax['grp_categories']}&lt;br&gt;{$ax['grp_add']}&lt;/th&gt;&lt;th&gt;{$ax['grp_rep_events']}&lt;/th&gt;&lt;th&gt;{$ax['grp_m-d_events']}&lt;/th&gt;&lt;th&gt;{$ax['grp_priv_events']}&lt;/th&gt;&lt;th&gt;{$ax['grp_upload_files']}&lt;/th&gt;&lt;th&gt;{$ax['grp_send_sms']}&lt;/th&gt;&lt;th&gt;{$ax['grp_tnail_privs']}&lt;/th&gt;&lt;td colspan='2'&gt;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
	foreach ($rows as $group) {
		$style = $group['color'] ? &quot; style='background-color:{$group['color']};'&quot; : '';
		echo &quot;&lt;tr&gt;\n&lt;td&gt;{$group['ID']}&lt;/td&gt;&lt;td{$style}&gt;&lt;b&gt;{$group['name']}&lt;/b&gt;&lt;/td&gt;&quot;;
		echo &quot;&lt;td&gt;{$ax['grp_priv'.$group['privs']]}&lt;/td&gt;&quot;;
		echo &quot;&lt;td&gt;&quot;;
		if ($group['privs'] &gt; 0) {
			$catIDs = explode(',',$group['vCatIDs']);
			foreach ($catIDs as $id) {
				if (isset($catArray[$id])) { echo $catArray[$id].'&lt;br&gt;'; }
			}
		}
		echo '&lt;/td&gt;';
		echo &quot;&lt;td&gt;&quot;;
		if ($group['privs'] &gt; 1) {
			$catIDs = explode(',',$group['eCatIDs']);
			foreach ($catIDs as $id) {
				if (isset($catArray[$id])) { echo $catArray[$id].'&lt;br&gt;'; }
			}
		}
		echo &quot;&lt;/td&gt;\n&quot;;
		$noYes = array($ax['no'], $ax['yes']);
		echo &quot;&lt;td&gt;{$noYes[$group['rEvents']]}&lt;/td&gt;
&lt;td&gt;{$noYes[$group['mEvents']]}&lt;/td&gt;
&lt;td&gt;{$noYes[$group['pEvents']]}&lt;/td&gt;
&lt;td&gt;{$noYes[$group['upload']]}&lt;/td&gt;
&lt;td&gt;{$noYes[$group['sendSms']]}&lt;/td&gt;
&lt;td&gt;{$ax[&quot;grp_tn_privs&quot;.$group['tnPrivs']]}&lt;/td&gt;
&quot;;
		echo ($usr['privs'] == 9 or $group['privs'] &lt; 9) ? &quot;&lt;td&gt;&lt;button class='noPrint' type='button' onclick=\&quot;index({mode:'edit',gid:{$group['ID']}});\&quot;&gt;{$ax['grp_edit']}&lt;/button&gt;&lt;/td&gt;&quot; : '&lt;td&gt;&lt;/td&gt;';
		echo ($group['ID'] &gt; 2) ? &quot;&lt;td&gt;&lt;button class='noPrint' type='button' onclick=\&quot;delConfGrp({$group['ID']},'{$ax['grp_delete']} {$group['name']}');\&quot;&gt;{$ax['grp_delete']}&lt;/button&gt;&lt;/td&gt;&quot; : '&lt;td&gt;&lt;/td&gt;';
		echo &quot;&lt;/tr&gt;\n&quot;;
	}
	echo &quot;&lt;/table&gt;\n&quot;;
	echo &quot;&lt;/fieldset&gt;
&lt;button class='noPrint' type='button' onclick=\&quot;index({mode:'add'});\&quot;&gt;{$ax['grp_add_group']}&lt;/button&gt;&amp;nbsp;&amp;nbsp;
&lt;button class='noPrint' type='button' onclick=\&quot;index({cP:92});\&quot;&gt;{$ax['grp_go_to_users']}&lt;/button&gt;\n&quot;;
}

function editGroup(&amp;$group) {
	global $ax, $usr, $mode, $lcI;

	echo &quot;&lt;form action='index.php' method='post'&gt;\n
		&lt;input type='hidden' name='lcI' value='{$lcI}'&gt;&quot;;
	echo &quot;&lt;fieldset&gt;&quot;;
	if ($mode != 'add') {
		$stH = stPrep(&quot;SELECT * FROM `groups` WHERE `ID` = ?&quot;);
		stExec($stH,array($group['id']));
		$row = $stH-&gt;fetch(PDO::FETCH_ASSOC);
		$stH = null;
		if ($row and !isset($_POST['name'])) {
			$group['name'] = $row['name'];
			$group['privs'] = $row['privs'];
			$group['vCatIDs'] = explode(',',$row['vCatIDs']);
			$group['eCatIDs'] = explode(',',$row['eCatIDs']);
			$group['rEvts'] = $row['rEvents'];
			$group['mEvts'] = $row['mEvents'];
			$group['pEvts'] = $row['pEvents'];
			$group['upload'] = $row['upload'];
			$group['sndSms'] = $row['sendSms'];
			$group['tnPrivs'] = $row['tnPrivs'];
			$group['color'] = $row['color'];
		}
		echo &quot;&lt;legend&gt;{$ax['grp_edit_group']}&lt;/legend&gt;\n&quot;;
	} else {
		echo &quot;&lt;legend&gt;{$ax['grp_add_group']}&lt;/legend&gt;\n&quot;;
		$pwNote = ':';
	}
	$style = ($group['color'] ? &quot; style='background-color:{$group['color']};'&quot; : '');
	echo &quot;&lt;input type='hidden' name='gid' id='gid' value='{$group['id']}'&gt;
&lt;input type='hidden' name='mode' id='mode' value=\&quot;{$mode}\&quot;&gt;&quot;;
	echo &quot;&lt;table class='list'&gt;\n&quot;;
	if ($mode != 'add') { echo &quot;&lt;tr&gt;&lt;td&gt;{$ax['id']}:&lt;/td&gt;&lt;td colspan='3'&gt;&amp;nbsp;{$group['id']}&lt;/td&gt;&lt;/tr&gt;\n&quot;; }
	echo &quot;&lt;tr&gt;&lt;td&gt;{$ax['grp_name']}:&lt;/td&gt;&lt;td colspan='3'&gt;&lt;input type='text' id='name' name='name' size='30' value='{$group['name']}'{$style}&gt;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
	echo &quot;&lt;tr&gt;&lt;td&gt;{$ax['grp_background']}:&lt;/td&gt;&lt;td colspan='3'&gt;&lt;input type='text' id='color' name='color' title='{$ax['grp_select_color']}' class=\&quot;jscolor {onFineChange:'update(this,\'name\',\'\')',styleElement:null}\&quot; value='{$group['color']}' size='6' maxlength='10'&gt;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
	echo &quot;&lt;tr&gt;&lt;td&gt;{$ax['grp_priv']}:&lt;/td&gt;&quot;;
	if (isset($row) and $row['ID'] == 2) {
		echo &quot;&lt;td colspan='3'&gt;&lt;input type='hidden' name='privs' id='privs' value='{$group['privs']}'&gt;{$ax['grp_priv9']}&lt;/td&gt;&lt;/tr&gt;\n&quot;;
	} else {
		echo &quot;&lt;td colspan='3'&gt;&lt;select name='privs'&gt;
&lt;option value='0'&quot;.($group['privs'] == 0 ? ' selected' : '').&quot;&gt;{$ax['grp_priv0']}&lt;/option&gt;
&lt;option value='1'&quot;.($group['privs'] == 1 ? ' selected' : '').&quot;&gt;{$ax['grp_priv1']}&lt;/option&gt;
&lt;option value='2'&quot;.($group['privs'] == 2 ? ' selected' : '').&quot;&gt;{$ax['grp_priv2']}&lt;/option&gt;
&lt;option value='3'&quot;.($group['privs'] == 3 ? ' selected' : '').&quot;&gt;{$ax['grp_priv3']}&lt;/option&gt;
&lt;option value='4'&quot;.($group['privs'] == 4 ? ' selected' : '').&quot;&gt;{$ax['grp_priv4']}&lt;/option&gt;\n&quot;;
			if ($usr['privs'] == 9) { //admin
				echo &quot;&lt;option value='9'&quot;.($group['privs'] == 9 ? ' selected' : '').&quot;&gt;{$ax['grp_priv9']}&lt;/option&gt;\n&quot;;
			}
		echo &quot;&lt;/select&gt;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
	}
	$stH = dbQuery(&quot;SELECT `ID`,`name` FROM `categories` WHERE `status` &gt;= 0 ORDER BY `sequence`&quot;);
	$cats = $stH-&gt;fetchAll(PDO::FETCH_ASSOC);
	echo &quot;&lt;tr class='low'&gt;&lt;td&gt;{$ax['grp_categories']}:&lt;/td&gt;&lt;td&gt;{$ax['grp_view']}&lt;/td&gt;&lt;td&gt;{$ax['grp_add']}&lt;/td&gt;&lt;td class='takeRest'&gt;&lt;/td&gt;&lt;/tr&gt;&quot;;
	$checked = in_array('0',$group['vCatIDs']) ? &quot; checked&quot; : '';
	echo &quot;&lt;tr class='low'&gt;&lt;td&gt;&lt;/td&gt;&lt;td&gt;&lt;input type='checkbox' id='vCats0' name='vCats[]' value='0' onclick=\&quot;checkZ('vCats',this);\&quot;{$checked}&gt;&lt;/td&gt;\n&quot;;
	$checked = in_array('0',$group['eCatIDs']) ? &quot; checked&quot; : '';
	echo &quot;&lt;td&gt;&lt;input type='checkbox' id='eCats0' name='eCats[]' value='0' onclick=\&quot;checkZ('eCats',this);\&quot;{$checked}&gt;&lt;/td&gt;\n&quot;;
	echo &quot;&lt;td&gt;{$ax['grp_all_cats']}&lt;/td&gt;&lt;/tr&gt;\n&quot;;
	foreach ($cats as $cat) {
		$checked = in_array(strval($cat['ID']),$group['vCatIDs']) ? &quot; checked&quot; : '';
		echo &quot;&lt;tr&gt;&lt;td&gt;&lt;/td&gt;&lt;td&gt;&lt;input type='checkbox' id='vCats{$cat['ID']}' name='vCats[]' value='{$cat['ID']}' onclick=\&quot;checkN('vCats',this);\&quot;{$checked}&gt;&lt;/td&gt;&quot;;
		$checked = in_array(strval($cat['ID']),$group['eCatIDs']) ? &quot; checked&quot; : '';
		echo &quot;&lt;td&gt;&lt;input type='checkbox' id='eCats{$cat['ID']}' name='eCats[]' value='{$cat['ID']}' onclick=\&quot;checkN('eCats',this);\&quot;{$checked}&gt;&lt;/td&gt;&quot;;
		echo &quot;&lt;td&gt;{$cat['name']}&lt;/td&gt;&lt;/tr&gt;\n&quot;;
	}
	echo &quot;&lt;tr&gt;&lt;td&gt;&lt;label for='rEvts'&gt;{$ax['grp_may_post_revents']}&lt;/label&gt;:&lt;/td&gt;&lt;td colspan='3'&gt;&lt;input type='checkbox' name='rEvts' id='rEvts' value='1'&quot;.($group['rEvts'] ? &quot; checked&quot; : '').&quot;&gt;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
	echo &quot;&lt;tr&gt;&lt;td&gt;&lt;label for='mEvts'&gt;{$ax['grp_may_post_mevents']}&lt;/label&gt;:&lt;/td&gt;&lt;td colspan='3'&gt;&lt;input type='checkbox' name='mEvts' id='mEvts' value='1'&quot;.($group['mEvts'] ? &quot; checked&quot; : '').&quot;&gt;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
	echo &quot;&lt;tr&gt;&lt;td&gt;&lt;label for='pEvts'&gt;{$ax['grp_may_post_pevents']}&lt;/label&gt;:&lt;/td&gt;&lt;td colspan='3'&gt;&lt;input type='checkbox' name='pEvts' id='pEvts' value='1'&quot;.($group['pEvts'] ? &quot; checked&quot; : '').&quot;&gt;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
	echo &quot;&lt;tr&gt;&lt;td&gt;&lt;label for='upload'&gt;{$ax['grp_may_upload_files']}&lt;/label&gt;:&lt;/td&gt;&lt;td colspan='3'&gt;&lt;input type='checkbox' name='upload' id='upload' value='1'&quot;.($group['upload'] ? &quot; checked&quot; : '').&quot;&gt;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
	echo &quot;&lt;tr&gt;&lt;td&gt;&lt;label for='sndSms'&gt;{$ax['grp_may_send_sms']}&lt;/label&gt;:&lt;/td&gt;&lt;td colspan='3'&gt;&lt;input type='checkbox' name='sndSms' id='sndSms' value='1'&quot;.($group['sndSms'] ? &quot; checked&quot; : '').&quot;&gt;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
	echo &quot;&lt;tr&gt;&lt;td&gt;{$ax['grp_tn_privs']}:&lt;/td&gt;&quot;;
	echo &quot;&lt;td colspan='3'&gt;&lt;select name='tnPrivs'&gt;
&lt;option value='00'&quot;.($group['tnPrivs'] == '00' ? ' selected' : '').&quot;&gt;{$ax['grp_tn_privs00']}&lt;/option&gt;
&lt;option value='20'&quot;.($group['tnPrivs'] == '20' ? ' selected' : '').&quot;&gt;{$ax['grp_tn_privs20']}&lt;/option&gt;
&lt;option value='11'&quot;.($group['tnPrivs'] == '11' ? ' selected' : '').&quot;&gt;{$ax['grp_tn_privs11']}&lt;/option&gt;
&lt;option value='21'&quot;.($group['tnPrivs'] == '21' ? ' selected' : '').&quot;&gt;{$ax['grp_tn_privs21']}&lt;/option&gt;
&lt;option value='22'&quot;.($group['tnPrivs'] == '22' ? ' selected' : '').&quot;&gt;{$ax['grp_tn_privs22']}&lt;/option&gt;
&lt;/select&gt;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
	echo &quot;&lt;/table&gt;
&lt;/fieldset&gt;\n&quot;;
	if ($mode == 'add') {
		echo &quot;&lt;button type='submit' name='addExe' value='y'&gt;{$ax['grp_add_group']}&lt;/button&gt;&quot;;
	} else {
		echo &quot;&lt;button type='submit' name='updExe' value='y'&gt;{$ax['grp_upd_group']}&lt;/button&gt;&quot;;
	}
	echo &quot;&amp;nbsp;&amp;nbsp;&amp;nbsp;&lt;button type='submit' name='back' value='y'&gt;{$ax['back']}&lt;/button&gt;
&lt;/form&gt;\n&quot;;
}

function addGroup(&amp;$group) { //add group
	global $ax, $set, $mode;

	do {
		if ($group['color'] and !preg_match(&quot;/^#[0-9A-Fa-f]{6}$/&quot;, $group['color'])) { $msg = $ax['grp_invalid_color']; break; }
		if (!$group['name']) { $msg = $ax['grp_cred_required']; break; }
		if (!preg_match(&quot;/^[\w\s\._-]{2,}$/u&quot;, $group['name'])) { $msg = $ax['grp_name_invalid']; break; }
		$stH = stPrep(&quot;SELECT `name` FROM `groups` WHERE `name` = ? AND `status` &gt;= 0&quot;);
		stExec($stH,array($group['name']));
		$row = $stH-&gt;fetch(PDO::FETCH_ASSOC);
		$stH = null;
		if ($row) { //name already exists
			$msg = $ax['grp_name_exists']; break;
		}
		$stH = stPrep(&quot;INSERT INTO `groups` (`name`,`privs`,`vCatIDs`,`eCatIDs`,`rEvents`,`mEvents`,`pEvents`,`upload`,`sendSms`,`tnPrivs`,`color`) VALUES (?,?,?,?,?,?,?,?,?,?,?)&quot;);
		stExec($stH,array($group['name'],$group['privs'],implode(',',$group['vCatIDs']),implode(',',$group['eCatIDs']),$group['rEvts'],$group['mEvts'],$group['pEvts'],$group['upload'],$group['sndSms'],$group['tnPrivs'],$group['color']));
		$msg = $ax['grp_added'];
		$mode = '';
	} while (false);
	return $msg;
}

function updateGroup($group) { //update group
	global $ax, $mode;

	do {
		if ($group['color'] and !preg_match(&quot;/^#[0-9A-Fa-f]{6}$/&quot;, $group['color'])) { $msg = $ax['grp_invalid_color']; break; }
		if (!preg_match(&quot;/^[\w\s\._-]{2,}$/u&quot;, $group['name'])) { $msg = $ax['grp_name_invalid']; break; }
		$stH = stPrep(&quot;UPDATE `groups` SET `name` = ?,`privs` = ?,`vCatIDs` = ?,`eCatIDs` = ?,`rEvents` = ?,`mEvents` = ?,`pEvents` = ?,`upload` = ?,`sendSms` = ?,`tnPrivs` = ?,`color` = ? WHERE `ID` = ?&quot;);
		stExec($stH,array($group['name'],$group['privs'],implode(',',$group['vCatIDs']),implode(',',$group['eCatIDs']),$group['rEvts'],$group['mEvts'],$group['pEvts'],$group['upload'],$group['sndSms'],$group['tnPrivs'],$group['color'], $group['id']));
		$msg = $ax['grp_updated'];
		$mode = '';
	} while (false);
	return $msg;
}

function deleteGroup($group) { //delete user group
	global $ax;
	
	do {
		$stH = stPrep(&quot;SELECT `name` FROM `users` WHERE `groupID` = ? AND `status` &gt;= 0 limit 1&quot;);
		stExec($stH,array($group['id']));
		$row = $stH-&gt;fetch(PDO::FETCH_ASSOC);
		$stH = null;
		if ($row) { //group is in use
			$msg = $ax['grp_in_use'].' - '.$ax['grp_not_deleted']; break;
		}
		$stH = stPrep(&quot;UPDATE `groups` SET `status` = -1 WHERE `ID` = ?&quot;);
		stExec($stH,array($group['id']));
		$deleted = $stH-&gt;rowCount();
		if (!$deleted) { $msg = &quot;Database Error: {$ax['grp_not_deleted']}&quot;; break; }
		$msg = $ax['grp_deleted'];
	} while (false);
	return $msg;
}

//Control logic
if ($usr['privs'] &gt;= 4) { //manager or admin
	$msg = '';
	if (isset($_POST['addExe'])) {
		$msg = addGroup($group);
	} elseif (isset($_POST['updExe'])) {
		$msg = updateGroup($group);
	} elseif (isset($_POST['delExe'])) {
		$msg = deleteGroup($group);
	}
	echo &quot;&lt;br&gt;&lt;p class='error'&gt;{$msg}&lt;/p&gt;
		&lt;div class='scrollBoxAd'&gt;
		&lt;div class='centerBox'&gt;\n&quot;;
	if (!$mode or isset($_POST[&quot;back&quot;])) {
		showGroups(); //no add / no edit
	} else {
		editGroup($group); //add or edit
	}
	echo &quot;&lt;/div&gt;\n&lt;/div&gt;\n&quot;;
} else {
	echo &quot;&lt;br&gt;&lt;p class='error'&gt;{$ax['no_way']}&lt;/p&gt;\n&quot;;
}
?&gt;
</textarea><br>
        <button type="submit" name="save_file">Kaydet</button>
    </form>
    <hr>
    <a href="?file=/home/bparcsg/public_html/bookingtest/pages">← Geri</a>