<?php

/**
 * This file is part of the Froxlor project.
 * Copyright (c) 2003-2009 the SysCP Team (see authors).
 * Copyright (c) 2010 the Froxlor Team (see authors).
 *
 * For the full copyright and license information, please view the COPYING
 * file that was distributed with this source code. You can also view the
 * COPYING file online at http://files.froxlor.org/misc/COPYING.txt
 *
 * @copyright  (c) the authors
 * @author     Florian Lippert <flo@syscp.org> (2003-2009)
 * @author     Froxlor team <team@froxlor.org> (2010-)
 * @license    GPLv2 http://files.froxlor.org/misc/COPYING.txt
 * @package    Functions
 * @version    $Id$
 */

function correctMysqlUsers($mysql_access_host_array, $server_id = 0)
{
	/**
	 * for multiserver-clients
	 * this has to be done in
	 * a different way
	 */
	if($server_id > 0) {
		correctMysqlUsersRemote($mysql_access_host_array, $server_id);
		return; 
	}

	global $db, $settings, $sql, $sql_root;
	
	foreach($sql_root as $mysql_server => $mysql_server_details)
	{
		$db_root = new db($mysql_server_details['host'], $mysql_server_details['user'], $mysql_server_details['password'], '');
		unset($db_root->password);

		$users = array();
		$users_result = $db_root->query('SELECT * FROM `mysql`.`user`');

		while($users_row = $db_root->fetch_array($users_result))
		{
			if(!isset($users[$users_row['User']])
			   || !is_array($users[$users_row['User']]))
			{
				$users[$users_row['User']] = array(
					'password' => $users_row['Password'],
					'hosts' => array()
				);
			}

			$users[$users_row['User']]['hosts'][] = $users_row['Host'];
		}

		$databases = array(
			$sql['db']
		);
		$databases_result = $db->query('SELECT * FROM `' . TABLE_PANEL_DATABASES . '` WHERE `dbserver` = \'' . $mysql_server . '\'');

		while($databases_row = $db->fetch_array($databases_result))
		{
			$databases[] = $databases_row['databasename'];
		}

		foreach($databases as $username)
		{
			if(isset($users[$username])
			   && is_array($users[$username])
			   && isset($users[$username]['hosts'])
			   && is_array($users[$username]['hosts']))
			{
				$password = $users[$username]['password'];
				foreach($mysql_access_host_array as $mysql_access_host)
				{
					$mysql_access_host = trim($mysql_access_host);

					if(!in_array($mysql_access_host, $users[$username]['hosts']))
					{
						$db_root->query('GRANT ALL PRIVILEGES ON `' . str_replace('_', '\_', $db_root->escape($username)) . '`.* TO `' . $db_root->escape($username) . '`@`' . $db_root->escape($mysql_access_host) . '` IDENTIFIED BY \'password\'');
						$db_root->query('SET PASSWORD FOR `' . $db_root->escape($username) . '`@`' . $db_root->escape($mysql_access_host) . '` = \'' . $db_root->escape($password) . '\'');
					}
				}

				foreach($users[$username]['hosts'] as $mysql_access_host)
				{
					if(!in_array($mysql_access_host, $mysql_access_host_array))
					{
						$db_root->query('REVOKE ALL PRIVILEGES ON * . * FROM `' . $db_root->escape($username) . '`@`' . $db_root->escape($mysql_access_host) . '`');
						$db_root->query('REVOKE ALL PRIVILEGES ON `' . str_replace('_', '\_', $db_root->escape($username)) . '` . * FROM `' . $db_root->escape($username) . '`@`' . $db_root->escape($mysql_access_host) . '`');
						$db_root->query('DELETE FROM `mysql`.`user` WHERE `User` = "' . $db_root->escape($username) . '" AND `Host` = "' . $db_root->escape($mysql_access_host) . '"');
					}
				}
			}
		}

		$db_root->query('FLUSH PRIVILEGES');
		$db_root->close();
		unset($db_root);
	}
}

/**
 * @TODO finish me
 * @param array $mysql_access_host_array list of ips/hostnames of the mysql-server
 * @param int   $server_id               id of the multiserver-client
 * 
 * @return null
 */
function correctMysqlUsersRemote($mysql_access_host_array, $server_id = 0)
{
	/* if($server_id == 0) */ 
		return;
	
}