'; /******************************************************/ // Add user /******************************************************/ if ( isset ($_POST["ADD"]) ) { $cn=new Database(); $pass5=md5($_POST['PASS']); $new_user=new User($cn,0); $new_user->first_name=$http->post('FNAME'); $new_user->last_name=$http->post('LNAME'); $login=$http->post('LOGIN'); $login=str_replace("'","",$login); $login=str_replace('"',"",$login); $login=str_replace(" ","",$login); $login=strtolower($login); $new_user->login=$login; $new_user->pass=$pass5; $new_user->email=$http->post('EMAIL',"string",''); if ( trim($login)=="") { alert(_("Le login ne peut pas être vide")); } else { $new_user->insert(); $new_user->load(); $_REQUEST['use_id']=$new_user->id; User::audit_admin(sprintf('ADD USER %s %s',$new_user->id,$login)); require_once NOALYSS_INCLUDE.'/user_detail.inc.php'; return; } } //SET login /******************************************************/ // Update user /******************************************************/ $sbaction=$http->post('sbaction',"string", ""); if ($sbaction == "save") { $uid = $http->post("UID"); // Update User $cn = new Database(); $UserChange = new User($cn, $uid); if ($UserChange->load() == -1) { alert(_("Cet utilisateur n'existe pas")); } else { $UserChange->first_name =$http->post('fname'); $UserChange->last_name = $http->post('lname'); $UserChange->active = $http->post('Actif'); $UserChange->admin = $http->post('Admin'); $UserChange->email = $http->post('email'); if ($UserChange->active ==-1 || $UserChange->admin ==-1) { die ('Missing data'); } else if ( trim($_POST['password'])<>'') { $UserChange->pass = md5($_POST['password']); $UserChange->save(); } else { $UserChange->pass=$UserChange->password; $UserChange->save(); } } } else if ($sbaction == "delete") { /******************************************************/ // Delete the user /******************************************************/ // check that the control is correct try { $code=$http->post("userdel"); $ctl_code=$http->post('ctlcode'); $uid = $http->request('use_id'); } catch (Exception $ex) { echo_error($ex->getMessage()); throw $ex; } if ( DEBUGNOALYSS > 1) { echo "code [$code] code control [$ctl_code]"; } if ( $code != $ctl_code) { echo _("Code invalide, effacement refusé"); return; } $cn = new Database(); $auser=$cn->get_row('select use_login from ac_users where use_id = $1',[$uid]); if ( $auser == null) return; $Res = $cn->exec_sql("delete from jnt_use_dos where use_id=$1", array($uid)); $Res = $cn->exec_sql("delete from ac_users where use_id=$1", array($uid)); //------------------------------------ // Remove user from all the dossiers //------------------------------------ $a_dossier=$cn->get_array('select dos_id from ac_dossier'); if ( is_array($a_dossier) ) { $nb=count($a_dossier); for ( $i=0;$i<$nb;$i++) User::remove_inexistant_user($a_dossier[$i]['dos_id']); } User::audit_admin(sprintf('DELETE USER %s %s',$uid,$auser['use_login'])); echo "

"; printf (_("Utilisateur %s %s est effacé"),$http->post('fname'),$http->post('lname')) ; echo "

"; } // View user detail if ( isset($_REQUEST['det']) && $sbaction=="") { require_once NOALYSS_INCLUDE.'/user_detail.inc.php'; return; } ?> '; echo HtmlInput::button_action(_("Ajout utilisateur"), "$('create_user').show();","cu"); echo '

'; // Show all the existing user on 7 columns $repo=new Dossier(0); /******************************************************/ // Detail of a user /******************************************************/ $compteur=0; $header=new Sort_Table(); $url=basename($_SERVER['PHP_SELF'])."?action=".$_REQUEST['action']; $header->add(_("Login"), $url," order by use_login asc", "order by use_login desc","la", "ld"); $header->add(_("Nom"), $url," order by use_name asc,use_first_name asc", "order by use_name desc,use_first_name desc","na", "nd"); $header->add(_('Dossier'),$url,' order by ag_dossier asc','order by ag_dossier desc', 'da','dd'); $header->add(_("Actif"), $url," order by use_active asc", "order by use_active desc","aa", "ad"); $ord=(isset($_REQUEST['ord']))?$_REQUEST['ord']:'la'; $sql=$header->get_sql_order($ord); $a_user=$repo->get_user_folder($sql); if ( !empty ($a_user) ) { echo ''; echo _('Cherche').Icon_Action::infobulle(22); echo HtmlInput::filter_table("user", "0,1,2,5","1"); echo ''; echo ''; echo ''; echo ''; echo ''; echo th(_("Prénom")); echo ''; echo ""; echo ''; echo ''; foreach ( $a_user as $r_user) { $compteur++; $class=($compteur%2==0)?"odd":"even"; echo ""; if ( $r_user['use_active'] == 0 ) { $Active=$g_failed; } else { $Active=$g_succeed; } $det_url=$url."&det&use_id=".$r_user['use_id']; echo ""; echo td($r_user['use_name']); echo td($r_user['use_first_name']); echo td($Active); $type=($r_user['use_admin']==1)?_("Administrateur"):_("Utilisateur"); echo ""; if ( $r_user['use_admin'] == 0) echo td($r_user['ag_dossier']); else { echo td(_('Tous')); } echo ''; }// foreach echo '
'.$header->get_header(0).''.$header->get_header(1).''.$header->get_header(3).'"._('Type')."'.$header->get_header(2).'
"; echo HtmlInput::anchor($r_user['use_login'],$det_url); echo "".$type."
'; } // $cn != null ?>