Project

General

Profile

1 1189 Luisehahne
<?php
2 1246 Luisehahne
/**
3
 *
4 1271 Luisehahne
 * @category        admin
5
 * @package         users
6
 * @author          WebsiteBaker Project
7
 * @copyright       2004-2009, Ryan Djurovich
8 1349 Luisehahne
 * @copyright       2009-2011, Website Baker Org. e.V.
9 1271 Luisehahne
 * @link			http://www.websitebaker2.org/
10
 * @license         http://www.gnu.org/licenses/gpl.html
11
 * @platform        WebsiteBaker 2.8.x
12 1349 Luisehahne
 * @requirements    PHP 5.2.2 and higher
13 1271 Luisehahne
 * @version         $Id$
14
 * @filesource		$HeadURL$
15
 * @lastmodified    $Date$
16
 *
17
*/
18 1189 Luisehahne
19 1246 Luisehahne
 // Include config file and admin class file
20 1189 Luisehahne
require('../../config.php');
21
require_once(WB_PATH.'/framework/class.admin.php');
22
23
// Create new database object
24
$database = new database();
25
26
if(!isset($_POST['action']) OR ($_POST['action'] != "modify" AND $_POST['action'] != "delete")) {
27
	header("Location: index.php");
28
	exit(0);
29
}
30
31 1213 MaGnaL
// Set parameter 'action' as alternative to javascript mechanism
32
if(isset($_POST['modify']))
33
	$_POST['action'] = "modify";
34
if(isset($_POST['delete']))
35
	$_POST['action'] = "delete";
36
37 1189 Luisehahne
// Check if user id is a valid number and doesnt equal 1
38
if(!isset($_POST['user_id']) OR !is_numeric($_POST['user_id']) OR $_POST['user_id'] == 1) {
39
	header("Location: index.php");
40
	exit(0);
41
}
42
43 1304 Luisehahne
if($_POST['action'] == 'modify')
44
{
45 1189 Luisehahne
	// Print header
46
	$admin = new admin('Access', 'users_modify');
47
	// Get existing values
48
	$results = $database->query("SELECT * FROM ".TABLE_PREFIX."users WHERE user_id = '".$_POST['user_id']."'");
49
	$user = $results->fetchRow();
50
51
	// Setup template object
52
	$template = new Template(THEME_PATH.'/templates');
53
	$template->set_file('page', 'users_form.htt');
54
	$template->set_block('page', 'main_block', 'main');
55
	$template->set_var(	array(
56 1353 FrankH
							'ACTION_URL' => ADMIN_URL.'/users/save.php',
57
							'SUBMIT_TITLE' => $TEXT['SAVE'],
58
							'USER_ID' => $user['user_id'],
59
							'USERNAME' => $user['username'],
60
							'DISPLAY_NAME' => $user['display_name'],
61
							'EMAIL' => $user['email'],
62
							'ADMIN_URL' => ADMIN_URL,
63
							'WB_URL' => WB_URL,
64
							'WB_PATH' => WB_PATH,
65
							'THEME_URL' => THEME_URL
66
							)
67
					);
68
69
	$template->set_var('FTAN', $admin->getFTAN());
70 1189 Luisehahne
	if($user['active'] == 1) {
71
		$template->set_var('ACTIVE_CHECKED', ' checked="checked"');
72
	} else {
73
		$template->set_var('DISABLED_CHECKED', ' checked="checked"');
74
	}
75
	// Add groups to list
76
	$template->set_block('main_block', 'group_list_block', 'group_list');
77 1304 Luisehahne
	$results = $database->query("SELECT group_id, name FROM ".TABLE_PREFIX."groups WHERE group_id != '1' ORDER BY name");
78 1189 Luisehahne
	if($results->numRows() > 0) {
79
		$template->set_var('ID', '');
80
		$template->set_var('NAME', $TEXT['PLEASE_SELECT'].'...');
81
		$template->set_var('SELECTED', '');
82
		$template->parse('group_list', 'group_list_block', true);
83
		while($group = $results->fetchRow()) {
84
			$template->set_var('ID', $group['group_id']);
85
			$template->set_var('NAME', $group['name']);
86
			if(in_array($group['group_id'], explode(",",$user['groups_id']))) {
87
				$template->set_var('SELECTED', ' selected="selected"');
88
			} else {
89
				$template->set_var('SELECTED', '');
90
			}
91
			$template->parse('group_list', 'group_list_block', true);
92
		}
93
	}
94 1304 Luisehahne
95 1189 Luisehahne
	// Only allow the user to add a user to the Administrators group if they belong to it
96 1304 Luisehahne
	if(in_array(1, $admin->get_groups_id()))
97
    {
98 1189 Luisehahne
		$template->set_var('ID', '1');
99
		$users_groups = $admin->get_groups_name();
100
		$template->set_var('NAME', $users_groups[1]);
101 1304 Luisehahne
102 1189 Luisehahne
		$in_group = FALSE;
103
		foreach($admin->get_groups_id() as $cur_gid){
104
		    if (in_array($cur_gid, explode(",", $user['groups_id']))) {
105
		        $in_group = TRUE;
106
		    }
107
		}
108
109
		if($in_group) {
110
			$template->set_var('SELECTED', ' selected="selected"');
111
		} else {
112
			$template->set_var('SELECTED', '');
113
		}
114
		$template->parse('group_list', 'group_list_block', true);
115
	} else {
116
		if($results->numRows() == 0) {
117
			$template->set_var('ID', '');
118
			$template->set_var('NAME', $TEXT['NONE_FOUND']);
119
			$template->set_var('SELECTED', ' selected="selected"');
120
			$template->parse('group_list', 'group_list_block', true);
121
		}
122
	}
123 1304 Luisehahne
124 1189 Luisehahne
	// Generate username field name
125
	$username_fieldname = 'username_';
126
	$salt = "abchefghjkmnpqrstuvwxyz0123456789";
127
	srand((double)microtime()*1000000);
128
	$i = 0;
129
	while ($i <= 7) {
130
		$num = rand() % 33;
131
		$tmp = substr($salt, $num, 1);
132
		$username_fieldname = $username_fieldname . $tmp;
133
		$i++;
134
	}
135
136
	// Work-out if home folder should be shown
137
	if(!HOME_FOLDERS) {
138 1246 Luisehahne
		$template->set_var('DISPLAY_HOME_FOLDERS', 'display:none;');
139 1189 Luisehahne
	}
140
141
	// Include the WB functions file
142
	require_once(WB_PATH.'/framework/functions.php');
143
144
	// Add media folders to home folder list
145
	$template->set_block('main_block', 'folder_list_block', 'folder_list');
146 1246 Luisehahne
	foreach(directory_list(WB_PATH.MEDIA_DIRECTORY) AS $name)
147
    {
148 1189 Luisehahne
		$template->set_var('NAME', str_replace(WB_PATH, '', $name));
149
		$template->set_var('FOLDER', str_replace(WB_PATH.MEDIA_DIRECTORY, '', $name));
150
		if($user['home_folder'] == str_replace(WB_PATH.MEDIA_DIRECTORY, '', $name)) {
151
			$template->set_var('SELECTED', ' selected="selected"');
152
		} else {
153
			$template->set_var('SELECTED', ' ');
154
		}
155
		$template->parse('folder_list', 'folder_list_block', true);
156
	}
157
158
	// Insert language text and messages
159
	$template->set_var(array(
160
									'TEXT_RESET' => $TEXT['RESET'],
161
									'TEXT_ACTIVE' => $TEXT['ACTIVE'],
162
									'TEXT_DISABLED' => $TEXT['DISABLED'],
163
									'TEXT_PLEASE_SELECT' => $TEXT['PLEASE_SELECT'],
164
									'TEXT_USERNAME' => $TEXT['USERNAME'],
165
									'TEXT_PASSWORD' => $TEXT['PASSWORD'],
166
									'TEXT_RETYPE_PASSWORD' => $TEXT['RETYPE_PASSWORD'],
167
									'TEXT_DISPLAY_NAME' => $TEXT['DISPLAY_NAME'],
168
									'TEXT_EMAIL' => $TEXT['EMAIL'],
169
									'TEXT_GROUP' => $TEXT['GROUP'],
170
									'TEXT_NONE' => $TEXT['NONE'],
171
									'TEXT_HOME_FOLDER' => $TEXT['HOME_FOLDER'],
172
									'USERNAME_FIELDNAME' => $username_fieldname,
173
									'CHANGING_PASSWORD' => $MESSAGE['USERS']['CHANGING_PASSWORD'],
174
									'HEADING_MODIFY_USER' => $HEADING['MODIFY_USER']
175
									)
176
							);
177
178
	// Parse template object
179
	$template->parse('main', 'main_block', false);
180
	$template->pparse('output', 'page');
181
} elseif($_POST['action'] == 'delete') {
182
	// Print header
183
	$admin = new admin('Access', 'users_delete');
184
	// Delete the user
185
	$database->query("DELETE FROM ".TABLE_PREFIX."users WHERE user_id = '".$_POST['user_id']."' LIMIT 1");
186
	if($database->is_error()) {
187
		$admin->print_error($database->get_error());
188
	} else {
189
		$admin->print_success($MESSAGE['USERS']['DELETED']);
190
	}
191
}
192
193
// Print admin footer
194
$admin->print_footer();
195
196 4 ryan
?>