kb.php

<?php
/**
 * @file 		kb.php
 * @author		Nils Laumaillé
 * @version 	2.1
 * @copyright 	(c) 2009-2011 Nils Laumaillé
 * @licensing 	GNU AFFERO GPL 3.0
 * @link		http://www.teampass.net
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
 */

if (!isset($_SESSION['CPM'] ) || $_SESSION['CPM'] != 1)
	die('Hacking attempt...');


//load language
require_once('includes/language/'.$_SESSION['user_language'].'_kb.php');

//build list of categories
$tab_users = array();
$rows = $db->fetch_all_array("SELECT id, login FROM ".$pre."users ORDER BY login ASC");
if (count($rows)>0) {
	foreach($rows AS $reccord){
		$tab_users[$reccord['login']] = array(
			'id'=>$reccord['id'],
			'login'=>$reccord['login']
		);
	}
}


echo '
<div class="title ui-widget-content ui-corner-all">
    '.$txt['kb'].'&nbsp;&nbsp;&nbsp;
	<button title="'.$txt['new_kb'].'" onclick="OpenDialog(\'kb_form\')" id="button_new_kb">
		<img src="includes/images/direction_plus.png" alt="" />
	</button>
    <span style="float:right;margin-right:5px;"><img src="includes/images/question-white.png" style="cursor:pointer" title="'.$txt['show_help'].'" onclick="OpenDialog(\'help_on_users\')" /></span>
</div>';


//Show the KB in a table view
echo '
<div style="margin:10px auto 25px auto;min-height:250px;" id="kb_page">
<table id="t_kb" cellspacing="0" cellpadding="5" width="100%">
    <thead><tr>
        <th style="width:50px;"></th>
        <th style="width:25%;">'.$txt['category'].'</th>
        <th style="width:50%;">'.$txt['label'].'</th>
        <th style="width:15%;">'.$txt['author'].'</th>
    </tr></thead>
    <tbody>
    	<tr><td></td></tr>
    </tbody>
</table>
</div>';

//Hidden things
echo '
<input type="hidden" id="kb_id" value="" />';

/* DIV FOR ADDING A KN */
echo '
<div id="kb_form" style="display:none;">
    <label for="kb_label" class="label">'.$txt['label'].'</label>
	<input type="text" id="kb_label" class="input text ui-widget-content ui-corner-all" />
	<br />

	<div style="width:100%;">
		<div style="float:left;width:50%;">
			<label for="kb_category" class="label">'.$txt['category'].'</label>
			<input name="kb_category" id="kb_category" class="kb_text ui-widget-content ui-corner-all" width="300px;" value="">
		</div>
		<div style="float:right;width:50%;">
		    <label for="" class="">'.$txt['kb_anyone_can_modify'].' : </label>
			<span class="div_radio">
				<input type="radio" id="modify_kb_yes" name="modify_kb" value="1" checked="checked" /><label for="modify_kb_yes">'.$txt['yes'].'</label>
				<input type="radio" id="modify_kb_no" name="modify_kb" value="0" /><label for="modify_kb_no">'.$txt['no'].'</label>
			</span>
		</div>
	</div>

	<div style="float:left;width:100%;">
	    <label for="kb_description" class="label">'.$txt['description'].'</label>
		<textarea rows="5" name="kb_description" id="kb_description" class="input"></textarea>
	</div>

    <div style="float:left;width:100%;margin-top:15px;">
        <label for="kb_associated_to" class="label">'.$txt['associate_kb_to_items'].'</label>
        <select id="kb_associated_to" class="multiselect" multiple="multiple" name="kb_associated_to[]" style="width: 860px; height: 150px;">';
            //get list of available items
            $items_id_list = array();
            $rows = $db->fetch_all_array("
                SELECT i.id AS id, i.restricted_to AS restricted_to, i.perso AS perso, i.label AS label, i.description AS description, i.pw AS pw, i.login AS login, i.anyone_can_modify AS anyone_can_modify,
                    l.date AS date,
                    n.renewal_period AS renewal_period
                FROM ".$pre."items AS i
                INNER JOIN ".$pre."nested_tree AS n ON (i.id_tree = n.id)
                INNER JOIN ".$pre."log_items AS l ON (i.id = l.id_item)
                WHERE i.inactif = 0
                AND (l.action = 'at_creation' OR (l.action = 'at_modification' AND l.raison LIKE 'at_pw :%'))
                ORDER BY i.label ASC, l.date DESC");
            foreach( $rows as $reccord ) {
                if (!in_array($reccord['id'], $items_id_list) && !empty($reccord['label'])){
                    echo '
                    <option value="'.$reccord['id'].'">'.$reccord['label'].'</option>';
                    array_push($items_id_list, $reccord['id']);
                }
            }
        echo '
        </select>
    </div>
</div>';

//DELETE DIALOG
echo '
<div id="div_kb_delete" style="display:none;">
    <p><span class="ui-icon ui-icon-alert" style="float:left; margin:0 7px 20px 0;">&nbsp;</span>'.$txt['confirm_deletion'].'</p>
</div>';


//Hidden things
echo '
<input type="hidden" id="kb_id" value="" />';

//Call javascript stuff
require_once("kb.load.php");

//If redirection is done to a speoific KB then open it
if(isset($_GET['id']) && !empty($_GET['id'])){
	echo '
	    <script language="javascript" type="text/javascript">
	    <!--
	    openKB('.$_GET['id'].');
	    -->
	    </script>';
}
?>