';
\Noalyss\Dbg::echo_file(__FILE__);
/******************************************************/
// Add user
/******************************************************/
if ( isset ($_POST["ADD"]) )
{
$cn=new Database();
$a_result =check_password_strength($_POST['PASS']);
$pass5=md5($_POST['PASS']);
$new_user=new Noalyss_user($cn,0);
$new_user->first_name=$http->post('FNAME');
$new_user->last_name=$http->post('LNAME');
$new_user->setAdmin(0);
$login=$http->post('LOGIN');
$login=str_replace("'","",$login);
$login=str_replace('"',"",$login);
$login=str_replace(" ","",$login);
$login=strtolower($login);
$new_user->login=$login;
//$new_user->auth_method=
$new_user->email=$http->post('EMAIL',"string",'');
if ( trim($login)=="" || strlen($login)<5)
{
alert(_("Le login ne peut pas être vide et avoir au moins 5 lettres"));
}elseif (count($a_result['msg']) > 0){
// password too weak
$msg=''._("Mot de passe inchangé").'';
foreach ($a_result['msg'] as $result ) {
$msg.="$result
";
}
alert($msg);
}
else
{
$exist_user=$cn->get_value("select count(*) from ac_users where use_login=lower($1)",[$login]);
if ( $exist_user == 0 ) {
$new_user->setPassword($pass5);
$new_user->insert();
$new_user->load();
put_global(array(['key'=>'use_id',"value"=>$new_user->id]));
Noalyss_user::audit_admin(sprintf('ADD USER %s %s',$new_user->id,$login));
} else {
echo_warning(_("Utilisateur existant"));
$uid=$cn->get_value("select use_id from ac_users where use_login=lower($1)",[$login]);
$new_user->setId($uid);
put_global(array(['key'=>'use_id',"value"=>$new_user->id]));
$new_user->load();
}
require_once NOALYSS_INCLUDE.'/user_detail.inc.php';
return;
}
} //SET login
/******************************************************/
// Update user
/******************************************************/
$sbaction=$http->post('sbaction',"string", "");
if ($sbaction == "save")
{
$uid = $http->post("UID");
// Update User
$cn = new Database();
$UserChange = new Noalyss_user($cn, $uid);
if ($UserChange->load() == -1)
{
alert(_("Cet utilisateur n'existe pas"));
}
else
{
$UserChange->first_name =$http->post('fname');
$UserChange->last_name = $http->post('lname');
$UserChange->active = $http->post('Actif');
$UserChange->admin = $http->post('Admin');
$UserChange->email = $http->post('email');
$UserChange->authent_method = $http->post('auth_method',"number");
if ($UserChange->active ==-1 || $UserChange->admin ==-1)
{
die ('Missing data');
}
if ( trim($_POST['password'])<>'')
{
$a_result =check_password_strength($_POST['password']);
if (count($a_result['msg']) > 0){
// password too weak
$msg=''._("Mot de passe inchangé").'';
foreach ($a_result['msg'] as $result ) {
$msg.="$result
";
}
alert($msg);
require_once NOALYSS_INCLUDE.'/user_detail.inc.php';
return;
} else {
$UserChange->setPassword(md5($_POST['password']));
}
}
// if request new secret for OTP
if ( $http->post("generate_otp","number",0)==1){
$UserChange->generate_otp();
}
// save user change
$UserChange->save();
if ( $UserChange->authent_method !=0 && filter_var($UserChange->email, FILTER_VALIDATE_EMAIL) === false ) {
echo_warning(_("Email invalide"));
require_once NOALYSS_INCLUDE.'/user_detail.inc.php';
return;
}
// send a email with link if authen_method !=0 (freeOTP)
if ( $UserChange->authent_method !=0
&& filter_var($UserChange->email, FILTER_VALIDATE_EMAIL) == true
&& $http->post('email_otp','number',0) == 1
) {
// delete previous send for this user
$cn->exec_sql('delete from otp_send_secret where use_id=$1',[$UserChange->getId()]);
// send a email with a link to the qcode
$UserChange->send_link_otp();
}
}
}
else if ($sbaction == "delete")
{
/******************************************************/
// Delete the user
/******************************************************/
// check that the control is correct
try {
$code=$http->post("userdel");
$ctl_code=$http->post('ctlcode');
$uid = $http->request('use_id');
} catch (Exception $ex) {
echo_error($ex->getMessage());
throw $ex;
}
if ( DEBUGNOALYSS > 1) {
echo "code [$code] code control [$ctl_code]";
}
if ( $code != $ctl_code) {
echo_warning (_("Code invalide, effacement refusé"));
require_once NOALYSS_INCLUDE.'/user_detail.inc.php';
return;
}
if ($uid == 1) {
echo_warning(_("Administrateur ne peut pas être effacé"));
require_once NOALYSS_INCLUDE.'/user_detail.inc.php';
return;
}
$cn = new Database();
$auser=$cn->get_row('select use_login from ac_users where use_id = $1',[$uid]);
if ( $auser == null) return;
$Res = $cn->exec_sql("delete from jnt_use_dos where use_id=$1", array($uid));
$Res = $cn->exec_sql("delete from ac_users where use_id=$1", array($uid));
//------------------------------------
// Remove user from all the dossiers
//------------------------------------
$a_dossier=$cn->get_array('select dos_id from ac_dossier');
if ( is_array($a_dossier) ) {
$nb=count($a_dossier);
for ( $i=0;$i<$nb;$i++)
Noalyss_user::remove_inexistant_user($a_dossier[$i]['dos_id']);
}
Noalyss_user::audit_admin(sprintf('DELETE USER %s %s',$uid,$auser['use_login']));
echo "
| '.$header->get_header(0).' | '; echo ''.$header->get_header(1).' | '; echo th(_("Prénom")); echo ''.$header->get_header(5).' | '; echo ''.$header->get_header(2).' | '; echo ''.$header->get_header(4).' | '; echo ""._('Type')." | "; echo ''.$header->get_header(3).' | '; echo '
|---|---|---|---|---|---|---|
| "; echo HtmlInput::anchor($r_user['use_login'],$det_url); echo " | "; echo td($r_user['use_name']); echo td($r_user['use_first_name']); echo td($r_user['use_email']); echo td($a_auth[$r_user['use_auth_method']]); echo td($Active); $type=($r_user['use_admin']==1)?_("Administrateur"):_("Utilisateur"); echo "".$type." | "; if ( $r_user['use_admin'] == 0) echo td($r_user['ag_dossier']); else { echo td(_('Tous')); } echo '