* @copyright Copyright (c) WHMCS Limited 2005-2013
* @license http://www.whmcs.com/license/ WHMCS Eula
* @version $Id$
* @link http://www.whmcs.com/
*/
class WHMCS_Admin {
public $loginRequired = true;
public $requiredPermission = '';
public $title = '';
public $sidebar = '';
public $icon = '';
public $helplink = '';
public $jscode = '';
public $internaljquerycode = array();
public $jquerycode = '';
public $template = '';
public $content = '';
public $templatevars = array();
public $filename = '';
public $rowLimit = 50;
public $tablePagination = true;
public $inClientsProfile = false;
public $adminTemplate = 'blend';
public $exitmsg = '';
public $language = 'english';
public $extrajscode = array();
public $headOutput = array();
public $chartFunctions = array();
public $sortableTableCount = 0;
public $smarty = '';
public function __construct($reqpermission, $releaseSession = true) {
global $jquerycode;
global $jscode;
global $infobox;
$jquerycode = $jscode = $infobox = '';
if(defined('PERFORMANCE_DEBUG')) {
define('PERFORMANCE_STARTTIME', microtime());
}
$whmcs = WHMCS_Application::getinstance();
$licensing = WHMCS_License::getinstance();
$whmcsAppConfig = $whmcs->getApplicationConfig();
$licensing->remoteCheck();
if($licensing->getStatus() != 'Active') {
$configuration = $whmcs->getApplicationConfig();
if($configuration['license_debug']) {
$msg = implode("\n", $licensing->getDebugLog());
logActivity($msg);
}
redir("licenseerror=" . $licensing->getStatus(), "licenseerror.php");
}
if($whmcs->get_config('AdminForceSSL') && $whmcs->isSSLAvailable() && !$whmcs->in_ssl()) {
$whmcs->redirectSystemSSLURL($whmcs->get_admin_folder_name() . '/' . $whmcs->getCurrentFilename(false), $_REQUEST);
}
if($reqpermission == 'loginonly') {
$this->loginRequired = true;
} else {
if($reqpermission) {
$this->requiredPermission = $reqpermission;
} else {
$this->loginRequired = false;
}
}
if($this->loginRequired) {
$auth = new WHMCS_Auth();
if(!$auth->isLoggedIn()) {
$_SESSION['admloginurlredirect'] = html_entity_decode($_SERVER['REQUEST_URI']);
redir('', "login.php");
}
$auth->getInfobyID($_SESSION['adminid']);
if($auth->isSessionPWHashValid()) {
$auth->updateAdminLog();
$this->adminTemplate = $auth->getAdminTemplate();
if($auth->getAdminLanguage()) {
$this->language = $auth->getAdminLanguage();
}
} else {
$auth->destroySession();
redir('', "login.php");
}
}
if($releaseSession) {
WHMCS_Session::release();
}
if($this->requiredPermission) {
$permid = array_search($this->requiredPermission, getAdminPermsArray());
$result = select_query('tbladmins', 'roleid', array(
'id' => $_SESSION['adminid']
));
$data = mysql_fetch_array($result);
$roleid = $data['roleid'];
$result = select_query('tbladminperms', "COUNT(*)", array(
'roleid' => $roleid,
'permid' => $permid
));
$data = mysql_fetch_array($result);
$match = $data[0];
if(!$match) {
redir("permid=" . $permid, "accessdenied.php");
}
}
$filename = $_SERVER['PHP_SELF'];
$filename = substr($filename, strrpos($filename, '/'));
$filename = str_replace(array(
'/',
".php"
), '', $filename);
if(isset($_SESSION['adminid'])) {
$twofa = new WHMCS_2FA();
$twofa->setAdminID($_SESSION['adminid']);
if($filename != 'myaccount' && $twofa->isForced() && !$twofa->isEnabled() && $twofa->isActiveAdmins()) {
redir("2faenforce=1", "myaccount.php");
}
}
$this->filename = $filename;
$this->rowLimit = $whmcs->get_config('NumRecordstoDisplay');
if(isset($_SESSION['adminlang']) && $_SESSION['adminlang']) {
$this->language = $_SESSION['adminlang'];
}
$this->language = $whmcs->validateLanguage($this->language, true);
$whmcs->loadLanguage($this->language, true);
}
public static function getID() {
return (int) $_SESSION['adminid'];
}
public function getAdminID() {
return $this->getID();
}
public static function getRoleID() {
$result = select_query('tbladmins', 'roleid', array(
'id' => WHMCS_Admin::getid()
));
$data = mysql_fetch_array($result);
$roleid = $data['roleid'];
return $roleid;
}
public function requiredFiles($reqfiles) {
if(is_array($reqfiles)) {
foreach($reqfiles as $filename) {
require(ROOTDIR . '/includes/' . $filename . ".php");
}
}
}
public function setTemplate($tplname) {
$this->template = $tplname;
}
public function assign($tplvar, $value = null) {
$this->templatevars[$tplvar] = $value;
}
public function clientsDropDown($selectedval, $autosubmit = '', $fieldname = 'userid', $anyoption = '') {
global $CONFIG;
if($CONFIG['DisableClientDropdown']) {
return "";
}
$clientgroups = getClientGroups();
$code = "";
return $code;
}
public function productStatusDropDown($status, $anyop = false, $name = 'status', $id = '') {
$statuses = array(
'Pending',
'Active',
'Suspended',
'Terminated',
'Cancelled',
'Fraud'
);
$code = "";
return $code;
}
public function getTemplate($template) {
global $_ADMINLANG;
$whmcs = WHMCS_Application::getinstance();
$smarty = new WHMCS_Smarty(true);
$smarty->assign('_ADMINLANG', $_ADMINLANG);
foreach($this->templatevars as $key => $value) {
$smarty->assign($key, $value);
}
$template_output = $smarty->fetch($this->adminTemplate . '/' . $template . ".tpl");
return $template_output;
}
public function getTemplatePath() {
$whmcs = WHMCS_Application::getinstance();
return ROOTDIR . '/' . $whmcs->get_admin_folder_name() . '/templates/';
}
protected function factoryAdminSmarty() {
return new WHMCS_Smarty(true);
}
public function display() {
global $CONFIG;
global $disable_admin_ticket_page_counts;
global $_ADMINLANG;
$whmcs = WHMCS_Application::getinstance();
$this->smarty = $this->factoryAdminSmarty();
if($this->inClientsProfile) {
$this->title = "Clients Profile";
$this->sidebar = 'clients';
$this->icon = 'clientsprofile';
}
if(count($this->chartFunctions)) {
$chartredrawjs = "function redrawCharts() { ";
foreach($this->chartFunctions as $chartfunc) {
$chartredrawjs .= $chartfunc . "(); ";
}
$chartredrawjs .= "}";
$this->extrajscode[] = $chartredrawjs;
$this->extrajscode[] = "\$(window).bind(\"resize\", function(event) { redrawCharts(); });";
}
$jquerycode = count($this->internaljquerycode) ? implode("\n", $this->internaljquerycode) : '';
if($this->jquerycode) {
$jquerycode .= "\n" . $this->jquerycode;
}
$this->assign('charset', $CONFIG['Charset']);
$this->assign('template', $this->adminTemplate);
$this->assign('pagetemplate', $this->template);
if(isset($_SESSION['adminid'])) {
$this->assign('adminid', $_SESSION['adminid']);
}
$this->assign('filename', $this->filename);
$this->assign('pagetitle', $this->title);
$this->assign('helplink', str_replace(" ", '_', $this->helplink));
$this->assign('sidebar', $this->sidebar);
$this->assign('minsidebar', isset($_COOKIE['WHMCSMinSidebar']) ? true : false);
$this->assign('pageicon', $this->icon);
$this->assign('jquerycode', $jquerycode);
$this->assign('jscode', $this->jscode . implode("\n", $this->extrajscode));
$this->assign('_ADMINLANG', $_ADMINLANG);
$this->assign('csrfToken', generate_token('plain'));
$addonmodulesperms = isset($CONFIG['AddonModulesPerms']) ? unserialize($CONFIG['AddonModulesPerms']) : array();
$this->assign('datepickerformat', str_replace(array(
'DD',
'MM',
'YYYY'
), array(
'dd',
'mm',
'yy'
), $CONFIG['DateFormat']));
if(isset($_SESSION['adminid'])) {
$result = select_query('tbladmins', 'firstname,lastname,notes,supportdepts,roleid', array(
'id' => $_SESSION['adminid']
));
$data = mysql_fetch_array($result);
$admin_username = $data['firstname'] . " " . $data['lastname'];
$admin_notes = $data['notes'];
$admin_supportdepts = $data['supportdepts'];
$admin_roleid = $data['roleid'];
$this->assign('admin_username', ucfirst($admin_username));
$this->assign('admin_notes', $admin_notes);
$admin_perms = array();
$adminpermsarray = getAdminPermsArray();
$result = select_query('tbladminperms', 'permid', array(
'roleid' => $admin_roleid
));
while($data = mysql_fetch_array($result)) {
$admin_perms[] = $adminpermsarray[$data[0]];
}
$this->assign('admin_perms', $admin_perms);
$this->assign('addon_modules', array_key_exists($admin_roleid, $addonmodulesperms) ? $addonmodulesperms[$admin_roleid] : array());
}
$admins = '';
$query = "SELECT DISTINCT adminusername FROM tbladminlog WHERE lastvisit>='" . date("Y-m-d H:i:s", mktime(date('H'), date('i') - 15, date('s'), date('m'), date('d'), date('Y'))) . "' AND logouttime='0000-00-00' ORDER BY lastvisit ASC";
$result = full_query($query);
while($data = mysql_fetch_array($result)) {
$admins .= $data['adminusername'] . ", ";
}
$this->assign('adminsonline', substr($admins, 0, 0 - 2));
$flaggedticketschecked = false;
$flaggedtickets = 0;
$ticketStatusResult = select_query('tblticketstatuses', 'title', '', 'sortorder', 'ASC');
$ticketStatuses = array();
while($ticketStatusData = mysql_fetch_assoc($ticketStatusResult)) {
$ticketStatuses[]['title'] = $ticketStatusData['title'];
}
$this->assign('menuticketstatuses', $ticketStatuses);
if($this->sidebar == 'support') {
$allactive = $awaitingreply = 0;
$ticketcounts = array();
$admin_supportdepts_qry = array();
$admin_supportdepts = explode(',', $admin_supportdepts);
foreach($admin_supportdepts as $deptid) {
if(trim($deptid)) {
$admin_supportdepts_qry[] = (int) $deptid;
}
}
if(count($admin_supportdepts_qry) < 1) {
$admin_supportdepts_qry[] = 0;
}
if($disable_admin_ticket_page_counts) {
$query = "SELECT tblticketstatuses.title, 'x', showactive, showawaiting " . "FROM tblticketstatuses ORDER BY sortorder ASC";
} else {
$query = "SELECT tblticketstatuses.title, " . "(SELECT COUNT(tbltickets.id) FROM tbltickets WHERE did IN " . "(" . db_build_in_array($admin_supportdepts_qry) . ") " . "AND tbltickets.status=tblticketstatuses.title), showactive, showawaiting " . "FROM tblticketstatuses ORDER BY sortorder ASC";
}
$result = full_query($query);
while($data = mysql_fetch_array($result)) {
$ticketcounts[] = array(
'title' => $data[0],
'count' => $data[1]
);
if($data['showactive']) {
$allactive += $data[1];
}
if($data['showawaiting']) {
$awaitingreply += $data[1];
}
}
if(!$disable_admin_ticket_page_counts) {
$result = select_query('tbltickets', "COUNT(*)", "status!='Closed' AND flag='" . (int) $_SESSION['adminid'] . "'");
$data = mysql_fetch_array($result);
$flaggedtickets = $data[0];
$flaggedticketschecked = true;
}
$this->assign('ticketstatuses', $ticketcounts);
$this->assign('ticketsallactive', $allactive);
$this->assign('ticketsawaitingreply', $awaitingreply);
$this->assign('ticketsflagged', $flaggedtickets);
$this->assign('ticketcounts', $ticketcounts);
$departments = array();
$result = select_query('tblticketdepartments', 'id,name', "id IN (" . db_build_in_array($admin_supportdepts_qry) . ")", 'order', 'ASC');
while($data = mysql_fetch_array($result)) {
$departments[] = array(
'id' => $data['id'],
'name' => $data['name']
);
}
$this->assign('ticketdepts', $departments);
}
if(checkPermission("Sidebar Statistics", true)) {
$templatevars = array(
'orders' => array(),
'clients' => array(),
'services' => array(),
'domains' => array(),
'invoices' => array(),
'tickets' => array()
);
$pendingorderstatuses = array();
$result = select_query('tblorderstatuses', 'title', "showpending=1");
while($data = mysql_fetch_array($result)) {
$pendingorderstatuses[] = $data['title'];
}
if(0 < count($pendingorderstatuses)) {
$query = "SELECT COUNT(*) FROM tblorders INNER JOIN tblclients ON tblclients.id=tblorders.userid WHERE tblorders.status IN (" . db_build_in_array($pendingorderstatuses) . ")";
$result = full_query($query);
$data = mysql_fetch_array($result);
$templatevars['orders']['pending'] = $data[0];
$templatevars['clients']['closed'] = 0;
$templatevars['clients']['inactive'] = $templatevars['clients']['closed'];
$templatevars['clients']['active'] = $templatevars['clients']['inactive'];
}
$query = "SELECT status,COUNT(*) FROM tblclients GROUP BY status";
$result = full_query($query);
while($data = mysql_fetch_array($result)) {
$templatevars['clients'][strtolower($data[0])] = $data[1];
}
$templatevars['services']['fraud'] = 0;
$templatevars['services']['cancelled'] = $templatevars['services']['fraud'];
$templatevars['services']['terminated'] = $templatevars['services']['cancelled'];
$templatevars['services']['suspended'] = $templatevars['services']['terminated'];
$templatevars['services']['active'] = $templatevars['services']['suspended'];
$templatevars['services']['pending'] = $templatevars['services']['active'];
$query = "SELECT domainstatus,COUNT(*) FROM tblhosting GROUP BY domainstatus";
$result = full_query($query);
while($data = mysql_fetch_array($result)) {
$templatevars['services'][strtolower($data[0])] = $data[1];
}
$templatevars['domains']['fraud'] = 0;
$templatevars['domains']['cancelled'] = $templatevars['domains']['fraud'];
$templatevars['domains']['expired'] = $templatevars['domains']['cancelled'];
$templatevars['domains']['pendingtransfer'] = $templatevars['domains']['expired'];
$templatevars['domains']['active'] = $templatevars['domains']['pendingtransfer'];
$templatevars['domains']['pending'] = $templatevars['domains']['active'];
$query = "SELECT status,COUNT(*) FROM tbldomains GROUP BY status";
$result = full_query($query);
while($data = mysql_fetch_array($result)) {
$templatevars['domains'][str_replace(" ", '', strtolower($data[0]))] = $data[1];
}
$query = "SELECT COUNT(id) FROM tblinvoices WHERE status='Unpaid'";
$result = full_query($query);
$data = mysql_fetch_array($result);
$templatevars['invoices']['unpaid'] = $data[0];
$query = "SELECT COUNT(id) FROM tblinvoices WHERE status='Unpaid' AND duedate<'" . date('Ymd') . "'";
$result = full_query($query);
$data = mysql_fetch_array($result);
$templatevars['invoices']['overdue'] = $data[0];
if(!$disable_admin_ticket_page_counts) {
$query = "SELECT COUNT(*) FROM tbltickets WHERE status!='Closed'";
$result = full_query($query);
$data = mysql_fetch_array($result);
$templatevars['tickets']['active'] = $data[0];
$query = "SELECT COUNT(*) FROM tbltickets, tblticketstatuses WHERE tbltickets.status=tblticketstatuses.title AND tblticketstatuses.showawaiting=1";
$result = full_query($query);
$data = mysql_fetch_array($result);
$templatevars['tickets']['awaitingreply'] = $data[0];
if($flaggedticketschecked) {
$templatevars['tickets']['flagged'] = $flaggedtickets;
} else {
$query = "SELECT COUNT(*) FROM tbltickets WHERE status!='Closed' AND flag='" . (int) $_SESSION['adminid'] . "'";
$result = full_query($query);
$data = mysql_fetch_array($result);
$templatevars['tickets']['flagged'] = $data[0];
}
$ticketstats = array();
$query = "SELECT status,COUNT(*) FROM tbltickets GROUP BY status";
$result = full_query($query);
while($data = mysql_fetch_array($result)) {
$ticketstats[$data[0]] = $data[1];
}
$templatevars['tickets']['onhold'] = array_key_exists("On Hold", $ticketstats) ? $ticketstats["On Hold"] : '0';
$templatevars['tickets']['inprogress'] = array_key_exists("In Progress", $ticketstats) ? $ticketstats["In Progress"] : '0';
}
$this->assign('sidebarstats', $templatevars);
}
$licensing = WHMCS_License::getinstance();
if($admin_roleid == 1 && $licensing->isClientLimitsEnabled() && $licensing->isNearClientLimit()) {
$clientLimit = $licensing->getClientLimit();
if($licensing->getNumberOfActiveClients() < $clientLimit) {
$warningMsg = "You are nearing your client limit.";
} else {
if($clientLimit == $licensing->getNumberOfActiveClients()) {
$warningMsg = "You are at your client limit.";
} else {
$warningMsg = "You have exceeded your client limit.";
}
}
$this->assign('topBarNotification', "");
}
$this->assignToSmarty();
$this->output();
}
public function assignToSmarty() {
foreach($this->templatevars as $key => $value) {
$this->smarty->assign($key, $value);
}
}
public function output() {
$whmcs = WHMCS_Application::getinstance();
$hookvars = $this->templatevars;
unset($hookvars['_ADMINLANG']);
$hookres = run_hook('AdminAreaPage', $hookvars);
foreach($hookres as $arr) {
foreach($arr as $k => $v) {
$hookvars[$k] = $v;
$this->smarty->assign($k, $v);
}
}
$hookres = run_hook('AdminAreaHeadOutput', $hookvars);
$headoutput = count($this->headOutput) ? implode("\n", $this->headOutput) : '';
if(count($hookres)) {
$headoutput .= "\n" . implode("\n", $hookres);
}
$this->smarty->assign('headoutput', $headoutput);
$hookres = run_hook('AdminAreaHeaderOutput', $hookvars);
$headeroutput = count($hookres) ? implode("\n", $hookres) : '';
$this->smarty->assign('headeroutput', $headeroutput);
$hookres = run_hook('AdminAreaFooterOutput', $hookvars);
$footeroutput = count($hookres) ? implode("\n", $hookres) : '';
$this->smarty->assign('footeroutput', $footeroutput);
$this->smarty->display($this->adminTemplate . "/header.tpl");
if($this->inClientsProfile) {
$this->profileHeader();
}
$content = $this->content;
if($this->template) {
$content = $this->smarty->fetch($this->adminTemplate . '/' . $this->template . ".tpl");
}
if($whmcs->getCurrentFilename() != 'systemintegrationcode') {
$content = $this->autoAddTokensToForms($content);
}
if($this->exitmsg) {
$content = $this->exitmsg;
}
echo $content;
if($this->inClientsProfile) {
echo "";
}
$footer_output = $this->smarty->fetch($this->adminTemplate . "/footer.tpl");
$clientArea = new WHMCS_ClientArea();
$licenseBannerMsg = $clientArea->getLicenseBannerMessage();
if($licenseBannerMsg) {
$licenseBannerHtml = "
" . $licenseBannerMsg . "
";
$bodypos = strpos($footer_output, " ");
if($bodypos === false) {
$footer_output = $footer_output . $licenseBannerHtml;
} else {
$footer_output = substr($footer_output, 0, $bodypos) . $licenseBannerHtml . substr($footer_output, $bodypos + 7);
}
}
echo $footer_output;
if(defined('PERFORMANCE_DEBUG')) {
global $query_count;
$exectime = microtime() - PERFORMANCE_STARTTIME;
echo "