| 1 | 
        
            1815
         | 
        
            Luisehahne
         | 
        <?php
  | 
      
      
        | 2 | 
        
         | 
        
         | 
        
  | 
      
      
        | 3 | 
        
         | 
        
         | 
        /**
  | 
      
      
        | 4 | 
        
         | 
        
         | 
         *
  | 
      
      
        | 5 | 
        
         | 
        
         | 
         * @category        admin
  | 
      
      
        | 6 | 
        
         | 
        
         | 
         * @package         pages
  | 
      
      
        | 7 | 
        
         | 
        
         | 
         * @author          Ryan Djurovich (2004-2009), WebsiteBaker Project
  | 
      
      
        | 8 | 
        
         | 
        
         | 
         * @copyright       2009-2012, WebsiteBaker Org. e.V.
  | 
      
      
        | 9 | 
        
         | 
        
         | 
         * @link			http://www.websitebaker2.org/
  | 
      
      
        | 10 | 
        
         | 
        
         | 
         * @license         http://www.gnu.org/licenses/gpl.html
  | 
      
      
        | 11 | 
        
         | 
        
         | 
         * @platform        WebsiteBaker 2.8.x
  | 
      
      
        | 12 | 
        
         | 
        
         | 
         * @requirements    PHP 5.2.2 and higher
  | 
      
      
        | 13 | 
        
         | 
        
         | 
         * @version         $Id$
  | 
      
      
        | 14 | 
        
         | 
        
         | 
         * @filesource		$HeadURL$
  | 
      
      
        | 15 | 
        
         | 
        
         | 
         * @lastmodified    $Date$
  | 
      
      
        | 16 | 
        
         | 
        
         | 
         *
  | 
      
      
        | 17 | 
        
         | 
        
         | 
         */
  | 
      
      
        | 18 | 
        
         | 
        
         | 
        
  | 
      
      
        | 19 | 
        
         | 
        
         | 
        /* -------------------------------------------------------- */
  | 
      
      
        | 20 | 
        
         | 
        
         | 
        // Must include code to stop this file being accessed directly
  | 
      
      
        | 21 | 
        
         | 
        
         | 
        if(!defined('WB_URL')) {
 | 
      
      
        | 22 | 
        
         | 
        
         | 
        	require_once(dirname(dirname(dirname(__FILE__))).'/framework/globalExceptionHandler.php');
  | 
      
      
        | 23 | 
        
         | 
        
         | 
        	throw new IllegalFileException();
  | 
      
      
        | 24 | 
        
         | 
        
         | 
        }
  | 
      
      
        | 25 | 
        
         | 
        
         | 
        /* -------------------------------------------------------- */
  | 
      
      
        | 26 | 
        
         | 
        
         | 
        function delete_user($admin, &$aActionRequest)
  | 
      
      
        | 27 | 
        
         | 
        
         | 
        {
 | 
      
      
        | 28 | 
        
         | 
        
         | 
        	global $TEXT, $MESSAGE;
  | 
      
      
        | 29 | 
        
         | 
        
         | 
        	$database = WbDatabase::getInstance();
  | 
      
      
        | 30 | 
        
         | 
        
         | 
            $aUserID = array();
  | 
      
      
        | 31 | 
        
         | 
        
         | 
            $bRetVal = false;
  | 
      
      
        | 32 | 
        
            1842
         | 
        
            Luisehahne
         | 
            if(isset($aActionRequest['activation_user_id'])) {
 | 
      
      
        | 33 | 
        
         | 
        
         | 
        		if(!is_array($aActionRequest['activation_user_id'])) {
 | 
      
      
        | 34 | 
        
         | 
        
         | 
        
  | 
      
      
        | 35 | 
        
         | 
        
         | 
        	        $aUserID[] = $aActionRequest['activation_user_id'];
  | 
      
      
        | 36 | 
        
         | 
        
         | 
        	    } else {
 | 
      
      
        | 37 | 
        
         | 
        
         | 
        	        $aUserID = $aActionRequest['activation_user_id'];
  | 
      
      
        | 38 | 
        
         | 
        
         | 
        	    }
  | 
      
      
        | 39 | 
        
            1815
         | 
        
            Luisehahne
         | 
            } else {
 | 
      
      
        | 40 | 
        
            1842
         | 
        
            Luisehahne
         | 
        	    if(isset($aActionRequest['user_id'])) {
 | 
      
      
        | 41 | 
        
         | 
        
         | 
        			if(!is_array($aActionRequest['user_id'])) {
 | 
      
      
        | 42 | 
        
         | 
        
         | 
        
  | 
      
      
        | 43 | 
        
         | 
        
         | 
        		        $aUserID[] = $aActionRequest['user_id'];
  | 
      
      
        | 44 | 
        
         | 
        
         | 
        		    } else {
 | 
      
      
        | 45 | 
        
         | 
        
         | 
        		        $aUserID = $aActionRequest['user_id'];
  | 
      
      
        | 46 | 
        
         | 
        
         | 
        		    }
  | 
      
      
        | 47 | 
        
         | 
        
         | 
        	    }
  | 
      
      
        | 48 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 49 | 
        
            1815
         | 
        
            Luisehahne
         | 
        
  | 
      
      
        | 50 | 
        
         | 
        
         | 
            foreach ( $aUserID AS $key => $value)
  | 
      
      
        | 51 | 
        
         | 
        
         | 
            {
 | 
      
      
        | 52 | 
        
         | 
        
         | 
                switch ($_SERVER['REQUEST_METHOD']) :
  | 
      
      
        | 53 | 
        
         | 
        
         | 
        			case 'GET': // insert/update user
  | 
      
      
        | 54 | 
        
         | 
        
         | 
                        $_GET['user_id'] =$aUserID[$key];
  | 
      
      
        | 55 | 
        
         | 
        
         | 
        				break;
  | 
      
      
        | 56 | 
        
         | 
        
         | 
        			default: // show userlist with empty modify mask
  | 
      
      
        | 57 | 
        
         | 
        
         | 
                        $_POST['user_id'] =$aUserID[$key];
  | 
      
      
        | 58 | 
        
         | 
        
         | 
        		endswitch; // end of switch
  | 
      
      
        | 59 | 
        
         | 
        
         | 
        		$user_id = intval($admin->checkIDKEY('user_id', 0, $_SERVER['REQUEST_METHOD']));
 | 
      
      
        | 60 | 
        
         | 
        
         | 
        
  | 
      
      
        | 61 | 
        
         | 
        
         | 
        		// Check if user id is a valid number and doesnt equal 1
  | 
      
      
        | 62 | 
        
         | 
        
         | 
        		if($user_id == 0){
 | 
      
      
        | 63 | 
        
         | 
        
         | 
        			msgQueue::add($MESSAGE['GENERIC_FORGOT_OPTIONS'] );
  | 
      
      
        | 64 | 
        
         | 
        
         | 
                    return $bRetVal;
  | 
      
      
        | 65 | 
        
         | 
        
         | 
                }
  | 
      
      
        | 66 | 
        
         | 
        
         | 
        
  | 
      
      
        | 67 | 
        
         | 
        
         | 
        		if( ($user_id < 2 ) )
  | 
      
      
        | 68 | 
        
         | 
        
         | 
        		{
 | 
      
      
        | 69 | 
        
         | 
        
         | 
        			// if($admin_header) { $admin->print_header(); }
 | 
      
      
        | 70 | 
        
         | 
        
         | 
        			msgQueue::add($MESSAGE['GENERIC_SECURITY_ACCESS'] );
  | 
      
      
        | 71 | 
        
         | 
        
         | 
                    return $bRetVal;
  | 
      
      
        | 72 | 
        
         | 
        
         | 
        		}
  | 
      
      
        | 73 | 
        
         | 
        
         | 
        
  | 
      
      
        | 74 | 
        
         | 
        
         | 
        		if( ($msg = msgQueue::getError()) == '')
  | 
      
      
        | 75 | 
        
         | 
        
         | 
        		{
 | 
      
      
        | 76 | 
        
         | 
        
         | 
        			$sql  = 'SELECT `active` FROM `'.TABLE_PREFIX.'users` '.
  | 
      
      
        | 77 | 
        
         | 
        
         | 
                            'WHERE `user_id` = '.$user_id;
  | 
      
      
        | 78 | 
        
         | 
        
         | 
                    if( ($iDeleteUser = $database->get_one($sql)) != null ) {
 | 
      
      
        | 79 | 
        
         | 
        
         | 
                        if($iDeleteUser) {
 | 
      
      
        | 80 | 
        
         | 
        
         | 
            				// Delete the user
  | 
      
      
        | 81 | 
        
         | 
        
         | 
                			$sql  = 'UPDATE `'.TABLE_PREFIX.'users` SET '.
  | 
      
      
        | 82 | 
        
         | 
        
         | 
                                    '`active` = 0 '.
  | 
      
      
        | 83 | 
        
         | 
        
         | 
                                    'WHERE `user_id` = '.$user_id;
  | 
      
      
        | 84 | 
        
         | 
        
         | 
                            if( $database->query($sql) ) {
 | 
      
      
        | 85 | 
        
         | 
        
         | 
                                msgQueue::add($TEXT['USERS_DELETED'], true);
  | 
      
      
        | 86 | 
        
         | 
        
         | 
                            }
  | 
      
      
        | 87 | 
        
         | 
        
         | 
                        } else {
 | 
      
      
        | 88 | 
        
         | 
        
         | 
                			$sql  = 'DELETE FROM `'.TABLE_PREFIX.'users` '.
  | 
      
      
        | 89 | 
        
         | 
        
         | 
                                    'WHERE `user_id` = '.$user_id;
  | 
      
      
        | 90 | 
        
         | 
        
         | 
                            if( $database->query($sql) ) {
 | 
      
      
        | 91 | 
        
         | 
        
         | 
                                msgQueue::add($MESSAGE['USERS_DELETED'], true);
  | 
      
      
        | 92 | 
        
         | 
        
         | 
                            }
  | 
      
      
        | 93 | 
        
         | 
        
         | 
                        }
  | 
      
      
        | 94 | 
        
         | 
        
         | 
                        $bRetVal = true;
  | 
      
      
        | 95 | 
        
         | 
        
         | 
                    }
  | 
      
      
        | 96 | 
        
         | 
        
         | 
                    if($database->is_error()) {
 | 
      
      
        | 97 | 
        
         | 
        
         | 
                        msgQueue::add( implode('<br />',explode(';',$database->get_error())) );
 | 
      
      
        | 98 | 
        
         | 
        
         | 
                        $bRetVal = false;
  | 
      
      
        | 99 | 
        
         | 
        
         | 
                   }
  | 
      
      
        | 100 | 
        
         | 
        
         | 
        		}
  | 
      
      
        | 101 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 102 | 
        
         | 
        
         | 
            if(isset($aActionRequest['clearmsg'])) { msgQueue::clear();  }
 | 
      
      
        | 103 | 
        
            1844
         | 
        
            Luisehahne
         | 
            return $bRetVal;
  | 
      
      
        | 104 | 
        
            1815
         | 
        
            Luisehahne
         | 
        }
  | 
      
      
        | 105 | 
        
         | 
        
         | 
        
  | 
      
      
        | 106 | 
        
         | 
        
         | 
        if(!isset($aActionRequest)) {
 | 
      
      
        | 107 | 
        
         | 
        
         | 
            $requestMethod = '_'.strtoupper($_SERVER['REQUEST_METHOD']);
  | 
      
      
        | 108 | 
        
         | 
        
         | 
            $aActionRequest = (isset(${$requestMethod})) ? ${$requestMethod} : null;
 | 
      
      
        | 109 | 
        
         | 
        
         | 
            $aActionRequest['clearmsg'] = true;
  | 
      
      
        | 110 | 
        
         | 
        
         | 
        }
  |