';
echo '
Gestion Utilisateurs
';
// User is valid and you're an admin
?>
Password remis à phpcompta';
}
if ( isset ($_POST['SAVE']) ){
$uid = $_POST['UID'];
echo_debug('priv_user.php',__LINE__,"SAVE is set");
// Update User
$cn=DbConnect();
$first_name=pg_escape_string($_POST['fname']);
$last_name=pg_escape_string($_POST['lname']);
$login=$_POST['login'];
$login=str_replace("'","",$login);
$login=str_replace('"',"",$login);
$login=str_replace(" ","",$login);
$login=strtolower($login);
$Sql="update ac_users set use_first_name='".$first_name."', use_name='".$last_name."'
,use_login='".$login."',use_active=".$_POST['Actif'].",use_admin=".$_POST['Admin']." where
use_id=".$uid;
$Res=ExecSql($cn,$Sql);
// Update Priv on Folder
foreach ($_POST as $name=>$elem)
{
echo_debug('priv_user.php',__LINE__,"_POST $name $elem");
if ( substr_count($name,'PRIV')!=0 )
{
echo_debug('priv_user.php',__LINE__,"Found a priv");
$db_id=substr($name,4);
$cn=DbConnect();
if ( ExisteJnt($db_id,$uid) != 1 )
{
$Res=ExecSql($cn,"insert into jnt_use_dos(dos_id,use_id) values(".$db_id.",".$uid.")");
}
$jnt=GetJnt($db_id,$uid);
if (ExistePriv($jnt) > 0)
{
$Res=ExecSql($cn,"update priv_user set priv_priv='".$elem."' where priv_jnt=".$jnt);
} else {
$Res=ExecSql($cn,"insert into priv_user(priv_jnt,priv_priv) values (".$jnt.",'".$elem."')");
}
}
}
} else {
if ( isset ($_POST["DELETE"]) ) {
$cn=DbConnect();
$Res=ExecSql($cn,"delete from priv_user where priv_jnt in ( select jnt_id from jnt_use_dos where use_id=".$uid.")");
$Res=ExecSql($cn,"delete from jnt_use_dos where use_id=".$uid);
$Res=ExecSql($cn,"delete from ac_users where use_id=".$uid);
echo "
User ".$_POST['fname']." ".$_POST['lname']." (".
$_POST['login'].") is deleted
";
require_once("user.inc.php");
return;
}
}
$r_UID=GetUid($uid);
?>