admin/user.php

   1 <?php
   2 /*=====================================================================*\
   3 || ###################################################################
   4 || # Bugdar [#]version[#]
   5 || # Copyright ©2002-[#]year[#] Iris Studios, Inc.
   6 || #
   7 || # This program is free software; you can redistribute it and/or modify
   8 || # it under the terms of the GNU General Public License as published by
   9 || # the Free Software Foundation; version [#]gpl[#] of the License.
  10 || #
  11 || # This program is distributed in the hope that it will be useful, but
  12 || # WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
  13 || # or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
  14 || # more details.
  15 || #
  16 || # You should have received a copy of the GNU General Public License along
  17 || # with this program; if not, write to the Free Software Foundation, Inc.,
  18 || # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
  19 || ###################################################################
  20 \*=====================================================================*/
  21
  22 require_once('./global.php');
  23 require_once('./includes/api_user.php');
  24
  25 require_once('./includes/class_api_error.php');
  26 APIError(array(new API_Error_Handler($admin), 'admin_error'));
  27
  28 NavLinks::usersPages();
  29 $navigator->set_focus('tab', 'users', null);
  30
  31 if (!can_perform('canadminusers'))
  32 {
  33         admin_login();
  34 }
  35
  36 // ###################################################################
  37
  38 if (empty($_REQUEST['do']))
  39 {
  40         $_REQUEST['do'] = 'modify';
  41 }
  42
  43 // ###################################################################
  44
  45 if ($_REQUEST['do'] == 'kill')
  46 {
  47         $user = new UserAPI($bugsys);
  48         $user->set('userid',    $bugsys->in['userid']);
  49         $user->set_condition();
  50         $user->delete();
  51
  52         $admin->redirect('user.php');
  53 }
  54
  55 // ###################################################################
  56
  57 if ($_REQUEST['do'] == 'delete')
  58 {
  59         $admin->page_confirm($lang->string('Are you sure you want to delete this user?'), 'user.php?do=kill&amp;userid=' . $bugsys->input_clean('userid', TYPE_UINT));
  60 }
  61
  62 // ###################################################################
  63
  64 if ($_POST['do'] == 'insert')
  65 {
  66         $user = new UserAPI($bugsys);
  67         $user->set('displayname',       $bugsys->in['displayname']);
  68         $user->set('email',                     $bugsys->in['email']);
  69         $user->set('showemail',         $bugsys->in['showemail']);
  70         $user->set('showcolours',       $bugsys->in['showcolours']);
  71         $user->set('usergroupid',       $bugsys->in['usergroupid']);
  72         $user->set('languageid',        $bugsys->in['languageid']);
  73         $user->set('timezone',          $bugsys->in['timezone']);
  74         $user->set('usedst',            $bugsys->in['usedst']);
  75         $user->set('password',          $bugsys->in['password']);
  76         $user->set('hidestatuses',      $bugsys->in['hidestatuses']);
  77         $user->insert();
  78
  79         $admin->redirect('user.php?do=edit&userid=' . $user->insertid);
  80 }
  81
  82 // ###################################################################
  83
  84 if ($_POST['do'] == 'update')
  85 {
  86         $user = new UserAPI($bugsys);
  87         $user->set('userid',            $bugsys->in['userid']);
  88         $user->set_condition();
  89         $user->set('displayname',       $bugsys->in['displayname']);
  90         $user->set('email',                     $bugsys->in['email']);
  91         $user->set('showemail',         $bugsys->in['showemail']);
  92         $user->set('showcolours',       $bugsys->in['showcolours']);
  93         $user->set('usergroupid',       $bugsys->in['usergroupid']);
  94         $user->set('languageid',        $bugsys->in['languageid']);
  95         $user->set('timezone',          $bugsys->in['timezone']);
  96         $user->set('usedst',            $bugsys->in['usedst']);
  97         $user->set('password',          $bugsys->in['password']);
  98         $user->set('hidestatuses',      $bugsys->in['hidestatuses']);
  99         $user->update();
 100
 101         $admin->redirect('user.php?do=edit&userid=' . $user->objdata['userid']);
 102 }
 103
 104 // ###################################################################
 105
 106 if ($_REQUEST['do'] == 'edit' OR $_REQUEST['do'] == 'add')
 107 {
 108         $add = ($_REQUEST['do'] == 'add');
 109         $edit = (!$add);
 110
 111         if ($edit)
 112         {
 113                 NavLinks::usersEdit($bugsys->in['userid']);
 114                 $navigator->set_focus('link', 'users-pages-users', 'users-pages');
 115
 116                 $user = $db->query_first("SELECT * FROM " . TABLE_PREFIX . "user WHERE userid = " . $bugsys->input_clean('userid', TYPE_UINT));
 117                 if (!$user)
 118                 {
 119                         $admin->error($lang->getlex('error_invalid_id'));
 120                 }
 121         }
 122         else
 123         {
 124                 NavLinks::usersAdd();
 125                 $navigator->set_focus('link', 'users-add', 'users');
 126         }
 127
 128         $admin->page_start(($add ? $lang->string('Add User') : $lang->string('Edit User')));
 129
 130         $admin->form_start('user.php', ($add ? 'insert' : 'update'));
 131
 132         if ($edit)
 133         {
 134                 $admin->form_hidden_field('userid', $user['userid']);
 135         }
 136
 137         $admin->table_start();
 138
 139         $admin->table_head(($add ? $lang->string('Add User') : sprintf($lang->string('Edit User (userid: %1$s)'), $user['userid'])));
 140
 141         $admin->row_input($lang->string('Display Name'), 'displayname', $user['displayname']);
 142         $admin->row_input($lang->string('Email'), 'email', $user['email']);
 143         $admin->row_input(($add ? $lang->string('Password') : $lang->string('Password (Leave blank for no change)')), 'password');
 144
 145         foreach ($bugsys->datastore['usergroup'] AS $group)
 146         {
 147                 $admin->list_item($group['title'], $group['usergroupid'], ($user['usergroupid'] == $group['usergroupid']));
 148         }
 149         $admin->row_list($lang->string('Usergroup'), 'usergroupid');
 150
 151         $admin->row_yesno($lang->string('Show Email Publicly'), 'showemail', $user['showemail']);
 152         $admin->row_yesno($lang->string('Show Status Colours on Bug Listings'), 'showcolours', $user['showcolours']);
 153
 154         foreach ($bugsys->datastore['language'] AS $language)
 155         {
 156                 $admin->list_item($language['title'], $language['languageid'], ($user['languageid'] == $language['languageid']));
 157         }
 158         $admin->row_list($lang->string('Language'), 'languageid');
 159
 160         foreach ($datef->fetch_timezone_list() AS $value => $string)
 161         {
 162                 $admin->list_item($string, $value, ($user['timezone'] == $value));
 163         }
 164         $admin->row_list($lang->string('Timezone'), 'timezone');
 165
 166         $admin->row_yesno($lang->string('Observe Daylight Savings Time (DST)'), 'usedst', $user['usedst']);
 167         $admin->row_text($lang->string('Hidden Statuses on Bug Listing'), construct_option_select('hidestatuses', $bugsys->datastore['status'], $user['hidestatuses'], 'statusid', 'status', 0, true));
 168
 169         $admin->row_submit();
 170
 171         $admin->table_end();
 172         $admin->form_end();
 173
 174         $admin->page_end();
 175 }
 176
 177 // ###################################################################
 178
 179 if ($_REQUEST['do'] == 'search')
 180 {
 181         $fail = false;
 182
 183         NavLinks::usersAdd();
 184         $navigator->set_focus('link', 'users-pages-users', 'users-pages');
 185
 186         if (is_numeric($bugsys->in['userdata']))
 187         {
 188                 $bugsys->input_clean('userdata', TYPE_UINT);
 189                 if ($db->query_first("SELECT * FROM " . TABLE_PREFIX . "user WHERE userid = " . $bugsys->in['userdata']))
 190                 {
 191                         header('Location: user.php?do=edit&userid=' . $bugsys->in['userdata']);
 192                 }
 193                 else
 194                 {
 195                         $fail = true;
 196                 }
 197         }
 198         else
 199         {
 200                 $bugsys->in['userdata'] = str_replace('%', '\%', $bugsys->in['userdata']);
 201                 $results = $db->query("SELECT * FROM " . TABLE_PREFIX . "user WHERE email LIKE '%" . $bugsys->input_escape('userdata') . "%' OR displayname LIKE '%" . $bugsys->input_escape('userdata') . "%'");
 202
 203                 if ($db->num_rows($results) < 1)
 204                 {
 205                         $fail = true;
 206                 }
 207                 else
 208                 {
 209                         $admin->page_start($lang->string('Search Results'));
 210
 211                         $admin->table_start();
 212                         $admin->table_head($lang->string('Search Results'), 4);
 213                         $admin->table_column_head(array($lang->string('Display Name'), $lang->string('Email'), $lang->string('User ID'), $lang->string('Actions')));
 214
 215                         while ($row = $db->fetch_array($results))
 216                         {
 217                                 $admin->row_multi_item(array(
 218                                         $row['displayname'] => 'l',
 219                                         $row['email'] => 'c',
 220                                         $row['userid'] => 'c',
 221                                         '<a href="user.php?do=edit&amp;userid=' . $row['userid'] . '">[' . $lang->string('Edit') . ']</a>' => 'c'
 222                                 ));
 223                         }
 224
 225                         $admin->table_end();
 226
 227                         $admin->page_end();
 228                 }
 229         }
 230
 231         if ($fail)
 232         {
 233                 $admin->error($lang->string('Sorry, we could not find any users that matched your criteria.'));
 234         }
 235 }
 236
 237 // ###################################################################
 238
 239 if ($_REQUEST['do'] == 'modify')
 240 {
 241         NavLinks::usersAdd();
 242         $navigator->set_focus('link', 'users-pages-users', 'users-pages');
 243
 244         $admin->page_start($lang->string('User Search'));
 245
 246         $admin->form_start('user.php', 'search');
 247         $admin->table_start(true, '45%');
 248
 249         $admin->table_head($lang->string('User Search'));
 250         $admin->row_input($lang->string('Name/Email/ID'), 'userdata');
 251
 252         $admin->row_submit('', ':save:', '');
 253
 254         $admin->table_end();
 255         $admin->form_end();
 256
 257         $admin->page_end();
 258 }
 259
 260 /*=====================================================================*\
 261 || ###################################################################
 262 || # $HeadURL$
 263 || # $Id$
 264 || ###################################################################
 265 \*=====================================================================*/
 266 ?>