<?php
!defined('P_W') && exit('Forbidden');

InitGP(array('gid'),'GP',2);
if (!$action) {
	$setdb = array(); $unsetdb = '';
	$query = $db->query("SELECT g.gid,g.grouptitle,p.rvalue as allowadmincp FROM pw_usergroups g LEFT JOIN pw_permission p ON p.uid='0' AND p.fid='0' AND p.gid=g.gid AND p.rkey='allowadmincp' WHERE g.gptype IN ('system','special')");
	while ($rt = $db->fetch_array($query)) {
		if ($rt['allowadmincp']==1) {
			$setdb[$rt['gid']] = $rt['grouptitle'];
		} else {
			$unsetdb .= '<option value="'.$rt['gid'].'">'.$rt['grouptitle'].'</option>';
		}
	}
	$db->free_result($query);
	include PrintEot('rightset');exit;
} elseif ($action=='edit') {
	if ($_POST['step']!=2) {
		!$gid && adminmsg('rightset_setgroup');
		require GetLang('left');
		include_once(D_P.'data/bbscache/level.php');

		$right = $db->get_value('SELECT value FROM pw_adminset WHERE gid='.pwEscape($gid));
		if (!$right || !(is_array($right = unserialize($right)))) {
			$right = array();
		}
		$editset = $checkvar = '';
		foreach ($nav_left as $cate => $left) {
			foreach ($left as $title => $value) {
				$checkvar .= ",'chk_$title' : true";
				$editset .= '<tr class="tr3"><td width="15%"><a style="cursor:pointer" onclick="CheckForm(getObj(\''.$title.'\'))">'.$value[name].'</a></td><td id="'.$title.'"><ul class="list2">';
				foreach ($value['option'] as $key => $option) {
					if (isset($option[0]) && !is_array($option[0])) {
						$checked = (!empty($right) && (int)$right[$key]==1) ? 'CHECKED' : '';
						$editset .= ' <li><input type="checkbox" name="rightdb['.$key.']" value="1" '.$checked.'> '.$option[0].'</li>';
					} else {
						foreach ($option as $k => $v) {
							$checked = (!empty($right) && is_array($right[$key]) && (int)$right[$key][$k]==1) ? 'CHECKED' : '';
							$editset .= ' <li><input type="checkbox" name="rightdb['.$key.'_'.$k.']" value="1" '.$checked.'> '.$v[0].'</li>';
						}
					}
				}
				$editset .= "</ul></td></tr>";
			}
		}
		$checkvar && $checkvar = substr($checkvar,1);
		include PrintEot('rightset');exit;
	} else {
		InitGP(array('rightdb'),'P',2);
		!$gid && adminmsg('undefined_action');
		if (!empty($rightdb) && is_array($rightdb)) {
			$right = array();
			foreach ($rightdb as $key => $value) {
				list($k1,$k2) = explode('_',$key);
				if ($k2) {
					$right[$k1][$k2] = $value;
				} else {
					$right[$k1] = $value;
				}
			}
			$rightdb = addslashes(serialize($right));
		} else {
			adminmsg('rightset_empty',$basename.'&action=edit&gid='.$gid);
		}
		$ckid = $db->get_value('SELECT gid FROM pw_adminset WHERE gid='.pwEscape($gid));
		if ($ckid) {
			$db->update('UPDATE pw_adminset SET value='.pwEscape($rightdb).' WHERE gid='.pwEscape($gid));
		} else {
			$db->update('INSERT INTO pw_adminset SET '.pwSqlSingle(array('gid' => $gid,'value' => $rightdb)));
		}
		$db->update("REPLACE INTO pw_permission SET uid='0',fid='0',gid=".pwEscape($gid).",rkey='allowadmincp',rvalue='1'");
		adminmsg('operate_success');
	}
} elseif ($action=='delete') {
	if ($_POST['step']!=2) {
		$inputmsg = '<input name="step" type="hidden" value="2" /><input name="action" type="hidden" value="delete" /><input name="gid" type="hidden" value="'.$gid.'" />';
		pwConfirm('rightset_delgroup',$inputmsg);
	} else {
		!$gid && adminmsg('rightset_setgroup');
		$db->update("REPLACE INTO pw_permission SET uid='0',fid='0',gid=".pwEscape($gid).",rkey='allowadmincp',rvalue='0'");
		adminmsg('operate_success');
	}
} else {
	ObHeader($basename);
}
?>