1<?php 2# MantisBT - A PHP based bugtracking system 3 4# MantisBT is free software: you can redistribute it and/or modify 5# it under the terms of the GNU General Public License as published by 6# the Free Software Foundation, either version 2 of the License, or 7# (at your option) any later version. 8# 9# MantisBT is distributed in the hope that it will be useful, 10# but WITHOUT ANY WARRANTY; without even the implied warranty of 11# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 12# GNU General Public License for more details. 13# 14# You should have received a copy of the GNU General Public License 15# along with MantisBT. If not, see <http://www.gnu.org/licenses/>. 16 17/** 18 * CALLERS 19 * This page is called from: 20 * - account_prefs_inc.php 21 * 22 * EXPECTED BEHAVIOUR 23 * - Reset the user's preferences to default values 24 * - Redirect to account_prefs_page.php or another page, if given 25 * 26 * CALLS 27 * This page conditionally redirects upon completion 28 * 29 * RESTRICTIONS & PERMISSIONS 30 * - User must be authenticated 31 * - User must not be protected 32 * 33 * @package MantisBT 34 * @copyright Copyright 2000 - 2002 Kenzaburo Ito - kenito@300baud.org 35 * @copyright Copyright 2002 MantisBT Team - mantisbt-dev@lists.sourceforge.net 36 * @link http://www.mantisbt.org 37 * 38 * @uses core.php 39 * @uses access_api.php 40 * @uses authentication_api.php 41 * @uses config_api.php 42 * @uses form_api.php 43 * @uses gpc_api.php 44 * @uses print_api.php 45 * @uses string_api.php 46 * @uses user_api.php 47 * @uses user_pref_api.php 48 */ 49 50require_once( 'core.php' ); 51require_api( 'access_api.php' ); 52require_api( 'authentication_api.php' ); 53require_api( 'config_api.php' ); 54require_api( 'form_api.php' ); 55require_api( 'gpc_api.php' ); 56require_api( 'print_api.php' ); 57require_api( 'string_api.php' ); 58require_api( 'user_api.php' ); 59require_api( 'user_pref_api.php' ); 60 61#============ Parameters ============ 62$f_user_id = gpc_get_int( 'user_id' ); 63$f_redirect_url = string_sanitize_url( gpc_get_string( 'redirect_url', 'account_prefs_page.php' ) ); 64 65#============ Permissions ============ 66form_security_validate( 'account_prefs_reset' ); 67 68auth_ensure_user_authenticated(); 69 70user_ensure_exists( $f_user_id ); 71 72$t_user = user_get_row( $f_user_id ); 73 74# This page is currently called from the manage_* namespace and thus we 75# have to allow authorised users to update the accounts of other users. 76# TODO: split this functionality into manage_user_prefs_reset.php 77if( auth_get_current_user_id() != $f_user_id ) { 78 access_ensure_global_level( config_get( 'manage_user_threshold' ) ); 79 access_ensure_global_level( $t_user['access_level'] ); 80} else { 81 # Protected users should not be able to update the preferences of their 82 # user account. The anonymous user is always considered a protected 83 # user and hence will also not be allowed to update preferences. 84 user_ensure_unprotected( $f_user_id ); 85} 86 87user_pref_reset( $f_user_id, ALL_PROJECTS ); 88 89form_security_purge( 'account_prefs_reset' ); 90 91print_header_redirect( $f_redirect_url, true, true ); 92