WB 2.08.x

<?php

/**

 *

 * @category        admin

 * @package         users

 * @copyright       2009-2012, WebsiteBaker Org. e.V.

 * @license         http://www.gnu.org/licenses/gpl.html

 * @platform        WebsiteBaker 2.8.x

 * @filesource		$HeadURL$

 * @lastmodified    $Date$

 *

 */

// Must include code to stop this file being accessed directly

if(!defined('WB_URL')) {

	require_once(dirname(dirname(dirname(__FILE__))).'/framework/globalExceptionHandler.php');

	throw new IllegalFileException();

	{

        // Create a javascript back link

//        $js_back = ADMIN_URL.'/users/index.php';

        unset($aActionRequest['save']);

		$database = WbDatabase::getInstance();

    	$iMinPassLength = 6;

        {

        }

        if(!isset($aActionRequest['user_id']) OR !is_numeric($aActionRequest['user_id']) OR $aActionRequest['user_id'] == 1) {

        } else {

        	$user_id = intval($aActionRequest['user_id']);

        }

		{

			// if($admin_header) { $admin->print_header(); }

		}

		// Get existing values

        $sql  = 'SELECT * FROM `'.TABLE_PREFIX.'users` ' ;

        $sql .= 'WHERE user_id = '.$user_id.' ';

        $sql .=   'AND user_id != 1 ';

            $olduser = $oRes->fetchRow(MYSQL_ASSOC);

        }

        if($admin->is_group_match($admin->get_groups_id(), '1' )){

            $groups_id = (isset($aActionRequest['groups'])) ? implode(",", $admin->add_slashes($aActionRequest['groups'])) : '';

        } else {

            $groups_id = $olduser['group_id'];

        }

        // there will be an additional ',' when "Please Choose" was selected, too

        $groups_id = trim($groups_id, ',');

        $active = intval(strip_tags($admin->StripCodeFromText($aActionRequest['active'][0])));

        $username_fieldname = strip_tags($admin->StripCodeFromText($aActionRequest['username_fieldname']));

        $username = strtolower(strip_tags($admin->StripCodeFromText($aActionRequest[$username_fieldname])));

        $password = strip_tags($admin->StripCodeFromText($aActionRequest['password']));

        $password2 = strip_tags($admin->StripCodeFromText($aActionRequest['password2']));

        $display_name = strip_tags($admin->StripCodeFromText($aActionRequest['display_name']));

        $email = strip_tags($admin->StripCodeFromText($aActionRequest['email']));

        $home_folder = strip_tags($admin->StripCodeFromText($aActionRequest['home_folder']));

        if($groups_id == "") {

            $aGroups_id = explode(',', $groups_id);

            //if user is in administrator-group, get this group else just get the first one

            if($admin->is_group_match($groups_id,'1')) { $group_id = 1; } else { $group_id = intval($aGroups_id[0]); }

        }

        if(!preg_match('/^[a-z]{1}[a-z0-9_-]{2,}$/i', $username))

        {

        	if(strlen($password) < $iMinPassLength ) {

			if (preg_match($pattern, $password)) {

        }

// check that display_name is unique in whoole system (prevents from User-faking)

    	$sql  = 'SELECT COUNT(*) FROM `'.TABLE_PREFIX.'users` ';

    	$sql .= 'WHERE `user_id` <> '.(int)$user_id.' AND `display_name` LIKE "'.$display_name.'"';

    	if( $database->get_one($sql) > 0 ){

            msgQueue::add($mLang->MESSAGE_MEDIA_CANNOT_RENAME);

//

		if( ($admin->get_user_id() != '1' ) )

		{

            if(findStringInFileList($display_name, dirname(__FILE__).'/disallowedNames')) {

		}

        {

        	if($admin->validate_email($email) == false)

            {

        } else { // e-mail must be present

		$sql  = 'SELECT COUNT(*) FROM `'.TABLE_PREFIX.'users` '.

                'WHERE `email` LIKE \''.$email.'\' '.

                  'AND `user_id` <> '.(int)$user_id;

        // Check if the email already exists

        if( ($iFoundUser = $database->get_one($sql)) != null ) {

            if($iFoundUser) {

            }

        }

        $bRetVal = $user_id;

// no error then save

        if( !msgQueue::getError() )

        {

            if($admin->is_group_match($groups_id,'1')) { $group_id = 1; $groups_id = '1'; }

          // Prevent from renaming user to "admin"

            if($username != 'admin') {

            	$username_code = ", username = '$username'";

            } else {

            	$username_code = '';

            }

                if(!function_exists('media_filename')) { require(WB_PATH.'/framework/functions.php'); }

                // Remove bad characters

                $sHomeFolder = WB_PATH.MEDIA_DIRECTORY.'/home/'.( media_filename($username) );

                if ( sizeof(createFolderProtectFile( $sHomeFolder )) )

                {

            // Update the database

            if($password == "") {

                $sql .= '`group_id`     = '.intval($group_id).', '.

                        '`username` = \''.$database->escapeString($username).'\', '.

                        '`home_folder` = \''.$database->escapeString($home_folder).'\', '.

                        '`email` = \''.$database->escapeString($email).'\' '.

            } else {

                $sql .= '`group_id`     = '.intval($group_id).', '.

                        '`username` = \''.$database->escapeString($username).'\', '.

                        '`active` = '.intval($active).', '.

                        '`home_folder` = \''.$database->escapeString($home_folder).'\', '.

                        '`email` = \''.$database->escapeString($email).'\' '.

            }

            if($database->query($sql)) {

            }

            if($database->is_error()) {

               msgQueue::add( implode('<br />',explode(';',$database->get_error())) );

            }

       } else {

//        return $admin->getIDKEY($user_id);

//if($admin_header) { $admin->print_header(); }

        return $bRetVal;

    }