Check();
/* only the global admin can modify something here
*/
if ($User->admin != 1)
{
html_page_stop();
return;
}
if (! isset ($_REQUEST['UID']) )
{
html_page_stop();
exit();
}
$uid=$_REQUEST['UID'];
$UserChange=new User($rep,$uid);
$r_UID=$UserChange->id;
if ( $r_UID == false )
{
// Message d'erreur
html_page_stop();
}
echo '
';
echo '
Gestion Utilisateurs
';
// User is valid and you're an admin
?>
exec_sql( "update ac_users set use_pass='$l_pass' where use_id=$uid");
echo '
Password remis à phpcompta
';
}
/* Save the changes */
if ( isset ($_POST['SAVE']) )
{
$uid = $_POST['UID'];
// Update User
$cn=new Database();
$last_name=$_POST['fname'];
$first_name=$_POST['lname'];
$UserChange=new User($cn,$uid);
if ( $UserChange->load()==-1)
{
alert("Cet utilisateur n'existe pas");
}
else
{
$UserChange->first_name=$first_name;
$UserChange->last_name=$last_name;
$UserChange->active=$_POST['Actif'];
$UserChange->admin=$_POST['Admin'];
$UserChange->save();
// Update Priv on Folder
foreach ($_POST as $name=>$elem)
{
if ( substr_count($name,'PRIV')!=0 )
{
$db_id=substr($name,4);
$cn=new Database();
$UserChange->set_folder_access($db_id,$elem);
}
}
}
}
else
{
if ( isset ($_POST["DELETE"]) )
{
$cn=new Database();
$Res=$cn->exec_sql("delete from priv_user where priv_jnt in ( select jnt_id from jnt_use_dos where use_id=$1",array($uid));
$Res=$cn->exec_sql("delete from jnt_use_dos where use_id=$1",array($uid));
$Res=$cn->exec_sql("delete from ac_users where use_id=$1",array($uid));
echo "
User ".h($_POST['fname'])." ".h($_POST['lname'])." (".
h($_POST['login']).") est effacé
";
require_once("class_iselect.php");
require_once("user.inc.php");
return;
}
}
$UserChange->load();
?>