1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
|
<input id="menu1" type="checkbox">
<label id="labelmenu1" for="menu1"></label>
<div id="menu"><ul id="menu-list"><?php
if ($user->isAnon()):
# 20150211 peterdd: pure css toggle using checked status, no js needed
?><li class="first">
<input type="checkbox" id="s_loginbox" />
<label for="s_loginbox" id="show_loginbox" accesskey="l"><?php echo Filters::noXSS(L('login')); ?></label>
<div id="loginbox" class="popup"><?php $this->display('loginbox.tpl'); ?></div>
</li><?php
else: ?><li>
<a id="profilelink" <?php if($do == 'myprofile'): ?> class="active"<?php endif; ?> href="<?php echo Filters::noXSS(CreateURL('myprofile')); ?>" title="<?php echo Filters::noXSS(L('editmydetails')); ?> <?php echo Filters::noXSS($user->infos['real_name']); ?> (<?php echo Filters::noXSS($user->infos['user_name']); ?>)"><i class="fa fa-user fa-lg"></i></a>
</li><li>
<a id="lastsearchlink" href="#" accesskey="m" onclick="showhidestuff('mysearches');return false;" class="inactive"><?php echo Filters::noXSS(L('mysearch')); ?></a>
<div id="mysearches"><?php $this->display('links.searches.tpl'); ?></div>
</li><?php
if ($user->perms('is_admin')):
?><li>
<a id="optionslink"<?php if ($do=='admin'): ?> class="active"<?php endif; ?> href="<?php echo Filters::noXSS(CreateURL('admin', 'prefs')); ?>" title="<?php echo Filters::noXSS(L('admintoolbox')); ?>"><i class="fa fa-gears fa-lg"></i></a>
</li><?php
endif;
?><li>
<a id="logoutlink" href="<?php echo Filters::noXSS(CreateURL('logout', null)); ?>"
accesskey="l" title="<?php echo Filters::noXSS(L('logout')); ?>"><i class="fa fa-power-off fa-lg"></i></a>
</li><?php
if (isset($_SESSION['was_locked'])):
?><li>
<span id="locked"><?php echo Filters::noXSS(L('accountwaslocked')); ?></span>
</li><?php
elseif (isset($_SESSION['login_attempts']) && $_SESSION['login_attempts'] > 0):
?><li>
<span id="locked"><?php echo Filters::noXSS(sprintf(L('failedattempts'), $_SESSION['login_attempts'])); ?></span>
</li><?php
endif;
unset($_SESSION['login_attempts'], $_SESSION['was_locked']);
endif; ?>
</ul>
</div><div id="pm-menu">
<input id="pmmenu" type="checkbox">
<label id="labelpmmenu" for="pmmenu"></label>
<ul id="pm-menu-list"><?php
if ( count($fs->projects) && $user->can_select_project($proj->id) ) {
?><li class="first">
<a id="toplevellink"
<?php if($do == 'toplevel'): ?> class="active" <?php endif; ?>
href="<?php echo Filters::noXSS(CreateURL('toplevel', $proj->id)); ?>"><?php echo Filters::noXSS(L('overview')); ?></a>
</li><?php
}
if( (!$user->isAnon() && $user->perms('view_tasks')) || ($user->isAnon() && $proj->id >0 && $proj->prefs['others_view'])):
?><li>
<a id="homelink"
<?php if($do == 'index' && !(isset($_GET['dev']) && !$user->isAnon() && $_GET['dev'] == $user->id)): ?> class="active" <?php endif; ?>
href="<?php echo Filters::noXSS(CreateURL('tasklist', $proj->id)); ?>"><?php echo Filters::noXSS(L('tasklist')); ?></a>
</li><?php
endif;
if($proj->id && $user->perms('open_new_tasks')):
?><li>
<a id="newtasklink" href="<?php echo Filters::noXSS(CreateURL('newtask', $proj->id)); ?>"
<?php if($do == 'newtask'): ?> class="active" <?php endif; ?>
accesskey="a"><?php echo Filters::noXSS(L('addnewtask')); ?></a>
</li><?php
if($proj->id && $user->perms('add_multiple_tasks')) :
?><li>
<a id="newmultitaskslink" href="<?php echo Filters::noXSS(CreateURL('newmultitasks', $proj->id)); ?>"
<?php if($do == 'newmultitasks'): ?> class="active"<?php endif; ?>><?php echo Filters::noXSS(L('addmultipletasks')); ?></a>
</li><?php
endif;
elseif ($proj->id && $user->isAnon() && $proj->prefs['anon_open'] && $proj->prefs['project_is_active']): ?><li>
<a id="anonopen"
<?php if($do == 'newtask'): ?> class="active" <?php endif; ?>
href="?do=newtask&project=<?php echo Filters::noXSS($proj->id); ?>"><?php echo Filters::noXSS(L('opentaskanon')); ?></a>
</li><?php
endif;
if(!$user->isAnon()): ?><li>
<a id="mytaskslink"
<?php if($do == 'index' && isset($_GET['dev']) && $_GET['dev'] == $user->id): ?> class="active" <?php endif; ?>
href="<?php echo Filters::noXSS(CreateURL('mytasks', $proj->id, $user->id, null)); ?>"><?php echo Filters::noXSS(L('myassignedtasks')); ?></a>
</li><?php
endif;
if($user->perms('view_reports')): ?><li>
<a id="reportslink"
<?php if( $do == 'reports'): ?> class="active" <?php endif; ?>
href="<?php echo Filters::noXSS(CreateURL('reports', $proj->id)); ?>"><?php echo Filters::noXSS(L('reports')); ?></a>
</li><?php
endif;
if($proj->id && ($user->perms('view_roadmap') || ($user->isAnon() && $proj->prefs['others_viewroadmap'])) ): ?><li>
<a id="roadmaplink"
<?php if($do == 'roadmap'): ?> class="active" <?php endif; ?>
href="<?php echo Filters::noXSS(CreateURL('roadmap', $proj->id)); ?>"><?php echo Filters::noXSS(L('roadmap')); ?></a>
</li><?php
endif;
if(file_exists(BASEDIR . '/scripts/gantt.php') && $proj->id && $user->perms('view_roadmap')): ?><li>
<a id="gantt"
<?php if($do == 'gantt'): ?> class="active" <?php endif; ?>
href="<?php echo Filters::noXSS(CreateURL('gantt', $proj->id)); ?>" title="Gantt chart"><i class="fa fa-tasks fa-lg"></i></a>
</li><?php
endif;
if ($proj->id && $user->perms('manage_project')): ?><li>
<a id="projectslink"<?php if($do=='pm'): ?> class="active"<?php endif; ?> href="<?php echo Filters::noXSS(CreateURL('pm', 'prefs', $proj->id)); ?>"><?php echo Filters::noXSS(L('manageproject')); ?></a>
</li><?php
endif;
if ($proj->id && isset($pm_pendingreq_num) && $pm_pendingreq_num):
?><li>
<a class="pendingreq attention"
href="<?php echo Filters::noXSS(CreateURL('pm', 'pendingreq', $proj->id)); ?>"><?php echo Filters::noXSS($pm_pendingreq_num); ?> <?php echo Filters::noXSS(L('pendingreq')); ?></a>
</li><?php
endif;
if ($user->perms('is_admin') && isset($admin_pendingreq_num) && $admin_pendingreq_num):
?><li>
<a class="pendingreq attention"
href="<?php echo Filters::noXSS(CreateURL('admin', 'userrequest')); ?>"><?php echo Filters::noXSS($admin_pendingreq_num); ?> <?php echo Filters::noXSS(L('adminrequestswaiting')); ?></a>
</li><?php
endif; ?>
</ul>
<div id="pmcontrol">
<div id="projectselector"><?php
# $fs->projects is filtered with can_select_project() for the current user/guest in index.php
if(count($fs->projects)>0): ?>
<form id="projectselectorform" action="<?php echo Filters::noXSS($baseurl); ?>index.php" method="get">
<select name="project" onchange="document.getElementById('projectselectorform').submit()">
<?php echo tpl_options(array_merge(array(0 => L('allprojects')), $fs->projects), $proj->id); ?>
</select>
<noscript><button type="submit"><?php echo Filters::noXSS(L('switch')); ?></button></noscript>
<input type="hidden" name="do" value="<?php echo Filters::noXSS($do); ?>" />
<input type="hidden" value="1" name="switch" />
<?php $check = array('area', 'id');
if ($do == 'reports') {
$check = array_merge($check, array('open', 'close', 'edit', 'assign', 'repdate', 'comments', 'attachments',
'related', 'notifications', 'reminders', 'within', 'duein', 'fromdate', 'todate'));
}
foreach ($check as $key):
if (Get::has($key)): ?>
<input type="hidden" name="<?php echo Filters::noXSS($key); ?>" value="<?php echo Filters::noXSS(Get::val($key)); ?>" />
<?php endif;
endforeach; ?>
</form>
<?php endif; ?></div>
<div id="showtask"><?php
# $fs->projects is filtered with can_select_project() for the current user/guest in index.php
if(count($fs->projects)>0): ?>
<form action="<?php echo Filters::noXSS($baseurl); ?>index.php" method="get">
<noscript><button type="submit"><?php echo Filters::noXSS(L('showtask')); ?> #</button></noscript>
<input id="task_id" name="show_task" class="text" type="text" size="10" accesskey="t" placeholder="<?php echo Filters::noXSS(L('showtask')); ?> #" />
</form>
<?php endif; ?></div>
</div>
</div>
|
