View file ä󿪫¬/panel/collective/accesses.php

<?php

foreach (array('start', 'compress', 'sess', 'settings', 'db_connect', 'ipua', 'fnc', 'adm_check', 'user') as $inc) {
    require_once "../../sys/inc/$inc.php";
}

if (access('adm_mysql')){

if (isset($_GET['id_group']) && $pdo->query(("SELECT COUNT(*) FROM `user_group` WHERE `id` = '" . intval($_GET['id_group']) . "'"), 0)->fetchColumn()) {

    $group = $pdo->query(("SELECT * FROM `user_group` WHERE `id` = '" . intval($_GET['id_group']) . "'"))->fetch(PDO::FETCH_ASSOC);

    $set['title'] = toOutput('Группа "' . $group['name'] . '" - Привилегии');
    require_once H . 'sys/inc/thead.php';

    if (isset($_POST['accesses'])) {
        $pdo->query("DELETE FROM `user_group_access` WHERE `id_group` = '$group[id]'");

        $q = $pdo->query("SELECT * FROM `all_accesses`");

        while ($post = $q->fetch(PDO::FETCH_ASSOC)) {
            $type = $post['type'];
            if (isset($_POST[$type]) && $_POST[$type] == 1) {
                $pdo->query("INSERT INTO `user_group_access` (`id_group`, `id_access`) VALUES ('$group[id]', '$post[type]')");
            }
        }

        $_SESSION['message'] = lang('Изменения сохранены');

        header("Location: ?id_group=$group[id]");
        exit();
    }

    aut();

#Навигация
    echo "<div class='card-header'>";
    echo "<a href='/' class='hint--right' data-hint='" . lang('На главную') . "'><i class='fa fa-home fa-lg'></i></a> <i class='fa fa-angle-right fa-fw'></i> ";
    echo "<a href='/panel/'>" . lang('Админ кабинет') . "</a> <i class='fa fa-angle-right fa-fw'></i> ";
    echo "<a href='/panel/collective/accesses.php'>" . lang('Привилегии') . "</a> <i class='fa fa-angle-right fa-fw'></i> настройки";
    echo "</div>";

    echo "<form method='post' class='list-group-item' action='?id_group=$group[id]&amp;$passgen'>\n";
    $q = $pdo->query("SELECT * FROM `all_accesses` ORDER BY `name` ASC");

    while ($post = $q->fetch(PDO::FETCH_ASSOC)) {
        echo "<label class='c-input c-checkbox'><input type='checkbox'" . ($pdo->query(("SELECT COUNT(*) FROM `user_group_access` WHERE `id_group` = '$group[id]' AND `id_access` = '$post[type]' LIMIT 1"), 0)->fetchColumn() == 1 ? " checked='checked'" : null) . " name='$post[type]' value='1' /><span class='c-indicator'></span> $post[name]</label><br />\n";
    }

    $doc->Button('btn btn-success btn-sm', 'accesses', 'save', 'Сохранить');
    echo "</form>\n";

    require_once H . 'sys/inc/tfoot.php';
    exit();
}

$set['title'] = lang('Группы пользователей');
require_once H . 'sys/inc/thead.php';

aut();

#Навигация
    echo "<div class='card-header'>";
    echo "<a href='/' class='hint--right' data-hint='" . lang('На главную') . "'><i class='fa fa-home fa-lg'></i></a> <i class='fa fa-angle-right fa-fw'></i> ";
    echo "<a href='/panel/'>" . lang('Админ кабинет') . "</a> <i class='fa fa-angle-right fa-fw'></i> ";
    echo "" . lang('Привилегии') . "";
    echo "</div>";

$accesses = $pdo->query("SELECT * FROM `user_group` ORDER BY `id` ASC");
while ($res = $accesses->fetch(PDO::FETCH_ASSOC)) {
    echo "<table class='list-group-item-komm'><tr><td class='icon14'>";
    echo "<i class='fa fa-user-secret fa-3x'></i>";
    echo "</td><td class='null'>";
    echo "<div style='float:right;'>";
    echo "<font color='grey' title='" . lang('Уровень') . "'><small>$res[level]</small></font>";
    echo "</div>";
    echo "<a href='?id_group=$res[id]'>$res[name]</a><br />";
    echo "<small><font color='grey'>" . lang('Привелегий') . " " . $pdo->query(("SELECT COUNT(*) FROM `user_group_access` WHERE `id_group` = '$res[id]'"), 0)->fetchColumn() . "</font></small><br />";
    echo "</td></tr></table>";
}

}else{
header('location: /index.php');
$_SESSION['err'] = 'Ошибка доступа';
}

require_once H . 'sys/inc/tfoot.php';