Check();
/* only the global admin can modify something here
*/
if ($User->admin != 1) {
html_page_stop();
return;
}
if (! isset ($_GET['UID']) && ! isset($_POST['UID']) ) {
//Message d'erreur si UID non positionné
echo_debug('priv_user.php',__LINE__,"UID NOT DEFINED");
html_page_stop();
return;
}
$uid=( isset ($_GET['UID']))? $_GET['UID']: $_POST['UID'];
$UserChange=new User($rep,$uid);
echo_debug('priv_user.php',__LINE__,"UID IS DEFINED");
$r_UID=$UserChange->id;
if ( $r_UID == false ) {
echo_debug('priv_user.php',__LINE__,"UID NOT VALID");
// Message d'erreur
html_page_stop();
return;
}
echo_debug('priv_user.php',__LINE__,"UID IS VALID");
echo '
';
echo '
Gestion Utilisateurs
';
// User is valid and you're an admin
?>
Password remis à phpcompta';
}
/* Save the changes */
if ( isset ($_POST['SAVE']) ){
$uid = $_POST['UID'];
// Update User
$cn=DbConnect();
$last_name=pg_escape_string($_POST['fname']);
$first_name=pg_escape_string($_POST['lname']);
$Sql="update ac_users set use_first_name='".$first_name."', use_name='".$last_name."'
,use_active=".$_POST['Actif'].",use_admin=".$_POST['Admin']." where
use_id=".$uid;
$Res=ExecSql($cn,$Sql);
// Update Priv on Folder
foreach ($_POST as $name=>$elem)
{
echo_debug('priv_user.php',__LINE__,"_POST $name $elem");
if ( substr_count($name,'PRIV')!=0 )
{
echo_debug('priv_user.php',__LINE__,"Found a priv");
$db_id=substr($name,4);
$cn=DbConnect();
if ( ExisteJnt($db_id,$uid) != 1 )
{
$Res=ExecSql($cn,"insert into jnt_use_dos(dos_id,use_id) values(".$db_id.",".$uid.")");
}
$jnt=GetJnt($db_id,$uid);
if (ExistePriv($jnt) > 0)
{
$Res=ExecSql($cn,"update priv_user set priv_priv='".$elem."' where priv_jnt=".$jnt);
} else {
$Res=ExecSql($cn,"insert into priv_user(priv_jnt,priv_priv) values (".$jnt.",'".$elem."')");
}
}
}
} else {
if ( isset ($_POST["DELETE"]) ) {
$cn=DbConnect();
$Res=ExecSql($cn,"delete from priv_user where priv_jnt in ( select jnt_id from jnt_use_dos where use_id=".$uid.")");
$Res=ExecSql($cn,"delete from jnt_use_dos where use_id=".$uid);
$Res=ExecSql($cn,"delete from ac_users where use_id=".$uid);
echo "
User ".$_POST['fname']." ".$_POST['lname']." (".
$_POST['login'].") is deleted
";
require_once("user.inc.php");
return;
}
}
$UserChange->load();
?>