mirror of https://github.com/fspc/biketree.git
Bike Tree - https://biketree.bikelover.org
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
140 lines
3.4 KiB
140 lines
3.4 KiB
7 years ago
|
<?php session_start(); ?>
|
||
|
|
|
||
|
|
<html>
|
||
|
|
<head>
|
||
|
|
|
||
|
|
</head>
|
||
|
|
|
||
|
|
<body>
|
||
|
|
<?php
|
||
|
|
|
||
|
|
include ("../settings.php");
|
||
|
|
include ("../language/$cfg_language");
|
||
|
|
include ("../classes/db_functions.php");
|
||
|
|
include ("../classes/security_functions.php");
|
||
|
|
|
||
|
|
//creates 3 objects needed for this script.
|
||
|
|
$lang=new language();
|
||
|
|
$dbf=new db_functions($cfg_server,$cfg_username,$cfg_password,$cfg_database,$cfg_tableprefix,$cfg_theme,$lang);
|
||
|
|
$sec=new security_functions($dbf,'Admin',$lang);
|
||
|
|
|
||
|
|
//checks if user is logged in.
|
||
|
|
if(!$sec->isLoggedIn())
|
||
|
|
{
|
||
|
|
header ("location: ../login.php");
|
||
|
|
exit ();
|
||
|
|
}
|
||
|
|
|
||
|
|
//variables needed globably in this file.
|
||
|
|
$tablename="$cfg_tableprefix".'users';
|
||
|
|
$field_names=null;
|
||
|
|
$field_data=null;
|
||
|
|
$id=-1;
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
//checks to see if action is delete and an ID is specified. (only delete uses $_GET.)
|
||
|
|
if(isset($_GET['action']) and isset($_GET['id']))
|
||
|
|
{
|
||
|
|
$action=$_GET['action'];
|
||
|
|
$id=$_GET['id'];
|
||
|
|
}
|
||
|
|
//checks to make sure data is comming from form ($action is either delete or update)
|
||
|
|
elseif(isset($_POST['first_name']) and isset($_POST['last_name']) and isset($_POST['username'])
|
||
|
|
and isset($_POST['password']) and isset($_POST['cpassword']) and isset($_POST['type'])
|
||
|
|
and isset($_POST['id']) and isset($_POST['action']) )
|
||
|
|
{
|
||
|
|
|
||
|
|
$action=$_POST['action'];
|
||
|
|
$id = $_POST['id'];
|
||
|
|
|
||
|
|
//gets variables entered by user.
|
||
|
|
$first_name = $_POST['first_name'];
|
||
|
|
$last_name = $_POST['last_name'];
|
||
|
|
$username = $_POST['username'];
|
||
|
|
$password = $_POST['password'];
|
||
|
|
$cpassword = $_POST['cpassword'];
|
||
|
|
$type = $_POST['type'];
|
||
|
|
|
||
|
|
|
||
|
|
//insure all fields are filled in.
|
||
|
|
if($first_name=='' or $last_name=='' or $username=='' or $password=='' or $cpassword=='' or $type=='')
|
||
|
|
{
|
||
|
|
echo "$lang->forgottenFields";
|
||
|
|
exit();
|
||
|
|
}
|
||
|
|
elseif($password!=$cpassword)
|
||
|
|
{
|
||
|
|
echo "$lang->passwordsDoNotMatch";
|
||
|
|
exit();
|
||
|
|
}
|
||
|
|
elseif($action=='insert')
|
||
|
|
{
|
||
|
|
//encrypts password for new user and creates arrays to be used later.
|
||
|
|
$password=md5($password);
|
||
|
|
$field_names=array('first_name','last_name','username','password','type');
|
||
|
|
$field_data=array("$first_name","$last_name","$username","$password","$type");
|
||
|
|
|
||
|
|
}
|
||
|
|
elseif($password=="*notchanged*")
|
||
|
|
{
|
||
|
|
/*
|
||
|
|
Does NOT encrypt password because user did not change their password, but other
|
||
|
|
info might have changed and needs to be updated. Info stored in arrays.
|
||
|
|
*/
|
||
|
|
|
||
|
|
$field_names=array('first_name','last_name','username','type');
|
||
|
|
$field_data=array("$first_name","$last_name","$username","$type");
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
/*
|
||
|
|
user did change password and the new password is encrypted. Stores
|
||
|
|
info in arrays
|
||
|
|
*/
|
||
|
|
|
||
|
|
$password=md5($password);
|
||
|
|
$field_names=array('first_name','last_name','username','password','type');
|
||
|
|
$field_data=array("$first_name","$last_name","$username","$password","$type");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
//outputs error message because user did not use form to fill out data.
|
||
|
|
echo "$lang->mustUseForm";
|
||
|
|
exit();
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
switch ($action)
|
||
|
|
{
|
||
|
|
//finds out what action needs to be taken and preforms it by calling methods from dbf class.
|
||
|
|
case $action=="insert":
|
||
|
|
$dbf->insert($field_names,$field_data,$tablename,true);
|
||
|
|
|
||
|
|
break;
|
||
|
|
|
||
|
|
case $action=="update":
|
||
|
|
$dbf->update($field_names,$field_data,$tablename,$id,true);
|
||
|
|
|
||
|
|
break;
|
||
|
|
|
||
|
|
case $action=="delete":
|
||
|
|
$dbf->deleteRow($tablename,$id);
|
||
|
|
|
||
|
|
break;
|
||
|
|
|
||
|
|
default:
|
||
|
|
echo "$lang->noActionSpecified";
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
$dbf->closeDBlink();
|
||
|
|
|
||
|
|
?>
|
||
|
|
<br>
|
||
|
|
<a href="manage_users.php"><?php echo "$lang->manageUsers"; ?>--></a>
|
||
|
|
<br>
|
||
|
|
<a href="form_users.php?action=insert"><?php echo "$lang->createUser"; ?>--></a>
|
||
|
|
</body>
|
||
|
|
</html>
|