<?php

/**

 * @file

 * Admin page callback file for the user module.

 */

/**

 * Page callback: Generates the appropriate user administration form.

 *

 * This function generates the user registration, multiple user cancellation,

 * or filtered user list admin form, depending on the argument and the POST

 * form values.

 *

 * @param string $callback_arg

 *   (optional) Indicates which form to build. Defaults to '', which will

 *   trigger the user filter form. If the POST value 'op' is present, this

 *   function uses that value as the callback argument.

 *

 * @return string

 *   A renderable form array for the respective request.

 */

function user_admin($callback_arg = '') {

  $op = isset($_POST['op']) ? $_POST['op'] : $callback_arg;

  switch ($op) {

    case t('Create new account'):

    case 'create':

      $build['user_register'] = drupal_get_form('user_register_form');

      break;

    default:

      if (!empty($_POST['accounts']) && isset($_POST['operation']) && ($_POST['operation'] == 'cancel')) {

        $build['user_multiple_cancel_confirm'] = drupal_get_form('user_multiple_cancel_confirm');

      }

      else {

        $build['user_filter_form'] = drupal_get_form('user_filter_form');

        $build['user_admin_account'] = drupal_get_form('user_admin_account');

      }

  }

  return $build;

}

/**

 * Form builder; Return form for user administration filters.

 *

 * @ingroup forms

 * @see user_filter_form_submit()

 */

function user_filter_form() {

  $session = isset($_SESSION['user_overview_filter']) ? $_SESSION['user_overview_filter'] : array();

  $filters = user_filters();

  $i = 0;

  $form['filters'] = array(

    '#type' => 'fieldset',

    '#title' => t('Show only users where'),

    '#theme' => 'exposed_filters__user',

  );

  foreach ($session as $filter) {

    list($type, $value) = $filter;

    if ($type == 'permission') {

      // Merge arrays of module permissions into one.

      // Slice past the first element '[any]' whose value is not an array.

      $options = call_user_func_array('array_merge', array_slice($filters[$type]['options'], 1));

      $value = $options[$value];

    }

    else {

      $value = $filters[$type]['options'][$value];

    }

    $t_args = array('%property' => $filters[$type]['title'], '%value' => $value);

    if ($i++) {

      $form['filters']['current'][] = array('#markup' => t('and where %property is %value', $t_args));

    }

    else {

      $form['filters']['current'][] = array('#markup' => t('%property is %value', $t_args));

    }

  }

  $form['filters']['status'] = array(

    '#type' => 'container',

    '#attributes' => array('class' => array('clearfix')),

    '#prefix' => ($i ? '<div class="additional-filters">' . t('and where') . '</div>' : ''),

  );

  $form['filters']['status']['filters'] = array(

    '#type' => 'container',

    '#attributes' => array('class' => array('filters')),

  );

  foreach ($filters as $key => $filter) {

    $form['filters']['status']['filters'][$key] = array(

      '#type' => 'select',

      '#options' => $filter['options'],

      '#title' => $filter['title'],

      '#default_value' => '[any]',

    );

  }

  $form['filters']['status']['actions'] = array(

    '#type' => 'actions',

    '#attributes' => array('class' => array('container-inline')),

  );

  $form['filters']['status']['actions']['submit'] = array(

    '#type' => 'submit',

    '#value' => (count($session) ? t('Refine') : t('Filter')),

  );

  if (count($session)) {

    $form['filters']['status']['actions']['undo'] = array(

      '#type' => 'submit',

      '#value' => t('Undo'),

    );

    $form['filters']['status']['actions']['reset'] = array(

      '#type' => 'submit',

      '#value' => t('Reset'),

    );

  }

  drupal_add_library('system', 'drupal.form');

  return $form;

}

/**

 * Process result from user administration filter form.

 */

function user_filter_form_submit($form, &$form_state) {

  $op = $form_state['values']['op'];

  $filters = user_filters();

  switch ($op) {

    case t('Filter'):

    case t('Refine'):

      // Apply every filter that has a choice selected other than 'any'.

      foreach ($filters as $filter => $options) {

        if (isset($form_state['values'][$filter]) && $form_state['values'][$filter] != '[any]') {

          // Merge an array of arrays into one if necessary.

          $options = ($filter == 'permission') ? form_options_flatten($filters[$filter]['options']) : $filters[$filter]['options'];

          // Only accept valid selections offered on the dropdown, block bad input.

          if (isset($options[$form_state['values'][$filter]])) {

            $_SESSION['user_overview_filter'][] = array($filter, $form_state['values'][$filter]);

          }

        }

      }

      break;

    case t('Undo'):

      array_pop($_SESSION['user_overview_filter']);

      break;

    case t('Reset'):

      $_SESSION['user_overview_filter'] = array();

      break;

    case t('Update'):

      return;

  }

  $form_state['redirect'] = 'admin/people';

  return;

}

/**

 * Form builder; User administration page.

 *

 * @ingroup forms

 * @see user_admin_account_validate()

 * @see user_admin_account_submit()

 */

function user_admin_account() {

  $header = array(

    'username' => array('data' => t('Username'), 'field' => 'u.name'),

    'status' => array('data' => t('Status'), 'field' => 'u.status'),

    'roles' => array('data' => t('Roles')),

    'member_for' => array('data' => t('Member for'), 'field' => 'u.created', 'sort' => 'desc'),

    'access' => array('data' => t('Last access'), 'field' => 'u.access'),

    'operations' => array('data' => t('Operations')),

  );

  $query = db_select('users', 'u');

  $query->condition('u.uid', 0, '<>');

  user_build_filter_query($query);

  $count_query = clone $query;

  $count_query->addExpression('COUNT(u.uid)');

  $query = $query->extend('PagerDefault')->extend('TableSort');

  $query

    ->fields('u', array('uid', 'name', 'status', 'created', 'access'))

    ->limit(50)

    ->orderByHeader($header)

    ->setCountQuery($count_query);

  $result = $query->execute();

  $form['options'] = array(

    '#type' => 'fieldset',

    '#title' => t('Update options'),

    '#attributes' => array('class' => array('container-inline')),

  );

  $options = array();

  foreach (module_invoke_all('user_operations') as $operation => $array) {

    $options[$operation] = $array['label'];

  }

  $form['options']['operation'] = array(

    '#type' => 'select',

    '#title' => t('Operation'),

    '#title_display' => 'invisible',

    '#options' => $options,

    '#default_value' => 'unblock',

  );

  $options = array();

  $form['options']['submit'] = array(

    '#type' => 'submit',

    '#value' => t('Update'),

  );

  $destination = drupal_get_destination();

  $status = array(t('blocked'), t('active'));

  $roles = array_map('check_plain', user_roles(TRUE));

  $accounts = array();

  foreach ($result as $account) {

    $users_roles = array();

    $roles_result = db_query('SELECT rid FROM {users_roles} WHERE uid = :uid', array(':uid' => $account->uid));

    foreach ($roles_result as $user_role) {

      $users_roles[] = $roles[$user_role->rid];

    }

    asort($users_roles);

    $options[$account->uid] = array(

      'username' => theme('username', array('account' => $account)),

      'status' =>  $status[$account->status],

      'roles' => theme('item_list', array('items' => $users_roles)),

      'member_for' => format_interval(REQUEST_TIME - $account->created),

      'access' =>  $account->access ? t('@time ago', array('@time' => format_interval(REQUEST_TIME - $account->access))) : t('never'),

      'operations' => array('data' => array('#type' => 'link', '#title' => t('edit'), '#href' => "user/$account->uid/edit", '#options' => array('query' => $destination))),

    );

  }

  $form['accounts'] = array(

    '#type' => 'tableselect',

    '#header' => $header,

    '#options' => $options,

    '#empty' => t('No people available.'),

  );

  $form['pager'] = array('#markup' => theme('pager'));

  return $form;

}

/**

 * Submit the user administration update form.

 */

function user_admin_account_submit($form, &$form_state) {

  $operations = module_invoke_all('user_operations', $form, $form_state);

  $operation = $operations[$form_state['values']['operation']];

  // Filter out unchecked accounts.

  $accounts = array_filter($form_state['values']['accounts']);

  if ($function = $operation['callback']) {

    // Add in callback arguments if present.

    if (isset($operation['callback arguments'])) {

      $args = array_merge(array($accounts), $operation['callback arguments']);

    }

    else {

      $args = array($accounts);

    }

    call_user_func_array($function, $args);

    drupal_set_message(t('The update has been performed.'));

  }

}

function user_admin_account_validate($form, &$form_state) {

  $form_state['values']['accounts'] = array_filter($form_state['values']['accounts']);

  if (count($form_state['values']['accounts']) == 0) {

    form_set_error('', t('No users selected.'));

  }

}

/**

 * Form builder; Configure user settings for this site.

 *

 * @ingroup forms

 * @see system_settings_form()

 */

function user_admin_settings() {

  // Settings for anonymous users.

  $form['anonymous_settings'] = array(

    '#type' => 'fieldset',

    '#title' => t('Anonymous users'),

  );

  $form['anonymous_settings']['anonymous'] = array(

    '#type' => 'textfield',

    '#title' => t('Name'),

    '#default_value' => variable_get('anonymous', t('Anonymous')),

    '#description' => t('The name used to indicate anonymous users.'),

    '#required' => TRUE,

  );

  // Administrative role option.

  $form['admin_role'] = array(

    '#type' => 'fieldset',

    '#title' => t('Administrator role'),

  );

  // Do not allow users to set the anonymous or authenticated user roles as the

  // administrator role.

  $roles = user_roles();

  unset($roles[DRUPAL_ANONYMOUS_RID]);

  unset($roles[DRUPAL_AUTHENTICATED_RID]);

  $roles[0] = t('disabled');

  $form['admin_role']['user_admin_role'] = array(

    '#type' => 'select',

    '#title' => t('Administrator role'),

    '#default_value' => variable_get('user_admin_role', 0),

    '#options' => $roles,

    '#description' => t('This role will be automatically assigned new permissions whenever a module is enabled. Changing this setting will not affect existing permissions.'),

  );

  // User registration settings.

  $form['registration_cancellation'] = array(

    '#type' => 'fieldset',

    '#title' => t('Registration and cancellation'),

  );

  $form['registration_cancellation']['user_register'] = array(

    '#type' => 'radios',

    '#title' => t('Who can register accounts?'),

    '#default_value' => variable_get('user_register', USER_REGISTER_VISITORS_ADMINISTRATIVE_APPROVAL),

    '#options' => array(

      USER_REGISTER_ADMINISTRATORS_ONLY => t('Administrators only'),

      USER_REGISTER_VISITORS => t('Visitors'),

      USER_REGISTER_VISITORS_ADMINISTRATIVE_APPROVAL => t('Visitors, but administrator approval is required'),

    )

  );

  $form['registration_cancellation']['user_email_verification'] = array(

    '#type' => 'checkbox',

    '#title' => t('Require e-mail verification when a visitor creates an account.'),

    '#default_value' => variable_get('user_email_verification', TRUE),

    '#description' => t('New users will be required to validate their e-mail address prior to logging into the site, and will be assigned a system-generated password. With this setting disabled, users will be logged in immediately upon registering, and may select their own passwords during registration.')

  );

  module_load_include('inc', 'user', 'user.pages');

  $form['registration_cancellation']['user_cancel_method'] = array(

    '#type' => 'item',

    '#title' => t('When cancelling a user account'),

    '#description' => t('Users with the %select-cancel-method or %administer-users <a href="@permissions-url">permissions</a> can override this default method.', array('%select-cancel-method' => t('Select method for cancelling account'), '%administer-users' => t('Administer users'), '@permissions-url' => url('admin/people/permissions'))),

  );

  $form['registration_cancellation']['user_cancel_method'] += user_cancel_methods();

  foreach (element_children($form['registration_cancellation']['user_cancel_method']) as $element) {

    // Remove all account cancellation methods that have #access defined, as

    // those cannot be configured as default method.

    if (isset($form['registration_cancellation']['user_cancel_method'][$element]['#access'])) {

      $form['registration_cancellation']['user_cancel_method'][$element]['#access'] = FALSE;

    }

    // Remove the description (only displayed on the confirmation form).

    else {

      unset($form['registration_cancellation']['user_cancel_method'][$element]['#description']);

    }

  }

  // Account settings.

  $form['personalization'] = array(

    '#type' => 'fieldset',

    '#title' => t('Personalization'),

  );

  $form['personalization']['user_signatures'] = array(

    '#type' => 'checkbox',

    '#title' => t('Enable signatures.'),

    '#default_value' => variable_get('user_signatures', 0),

  );

  // If picture support is enabled, check whether the picture directory exists.

  if (variable_get('user_pictures', 0)) {

    $picture_path =  file_default_scheme() . '://' . variable_get('user_picture_path', 'pictures');

    if (!file_prepare_directory($picture_path, FILE_CREATE_DIRECTORY)) {

      form_set_error('user_picture_path', t('The directory %directory does not exist or is not writable.', array('%directory' => $picture_path)));

      watchdog('file system', 'The directory %directory does not exist or is not writable.', array('%directory' => $picture_path), WATCHDOG_ERROR);

    }

  }

  $picture_support = variable_get('user_pictures', 0);

  $form['personalization']['user_pictures'] = array(

    '#type' => 'checkbox',

    '#title' => t('Enable user pictures.'),

    '#default_value' => $picture_support,

  );

  drupal_add_js(drupal_get_path('module', 'user') . '/user.js');

  $form['personalization']['pictures'] = array(

    '#type' => 'container',

    '#states' => array(

      // Hide the additional picture settings when user pictures are disabled.

      'invisible' => array(

        'input[name="user_pictures"]' => array('checked' => FALSE),

      ),

    ),

  );

  $form['personalization']['pictures']['user_picture_path'] = array(

    '#type' => 'textfield',

    '#title' => t('Picture directory'),

    '#default_value' => variable_get('user_picture_path', 'pictures'),

    '#size' => 30,

    '#maxlength' => 255,

    '#description' => t('Subdirectory in the file upload directory where pictures will be stored.'),