mirror of
https://github.com/e107inc/e107.git
synced 2025-01-17 20:58:30 +01:00
135 lines
3.9 KiB
PHP
135 lines
3.9 KiB
PHP
<?php
|
|
/*
|
|
+ ----------------------------------------------------------------------------+
|
|
| e107 website system
|
|
|
|
|
| ©Steve Dunstan 2001-2002
|
|
| http://e107.org
|
|
| jalist@e107.org
|
|
|
|
|
| Released under the terms and conditions of the
|
|
| GNU General Public License (http://gnu.org).
|
|
|
|
|
| $Source: /cvs_backup/e107_0.8/e107_admin/userclass.php,v $
|
|
| $Revision: 1.1.1.1 $
|
|
| $Date: 2006-12-02 04:33:30 $
|
|
| $Author: mcfly_e107 $
|
|
+----------------------------------------------------------------------------+
|
|
*/
|
|
require_once("../class2.php");
|
|
if (!getperms("4")) {
|
|
header("location:".e_BASE."index.php");
|
|
exit;
|
|
}
|
|
|
|
if (!e_QUERY) {
|
|
header("location:".e_ADMIN."admin.php");
|
|
exit;
|
|
} else {
|
|
$qs = explode(".", e_QUERY);
|
|
$id = $qs[0];
|
|
}
|
|
|
|
$sql->db_Select("userclass_classes");
|
|
$c = 0;
|
|
while ($row = $sql->db_Fetch()) {
|
|
if (getperms("0") || check_class($row['userclass_editclass'])) {
|
|
$class[$c][0] = $row['userclass_id'];
|
|
$class[$c][1] = $row['userclass_name'];
|
|
$class[$c][2] = $row['userclass_description'];
|
|
$c++;
|
|
}
|
|
}
|
|
|
|
if (isset($_POST['updateclass'])) {
|
|
$remuser = TRUE;
|
|
$classcount = count($_POST['userclass'])-1;
|
|
for($a = 0; $a <= $classcount; $a++) {
|
|
check_allowed($_POST['userclass'][$a]);
|
|
$svar .= $_POST['userclass'][$a];
|
|
$svar .= ($a < $classcount ) ? "," : "";
|
|
}
|
|
$sql->db_Update("user", "user_class='$svar' WHERE user_id='$id' ");
|
|
$message = UCSLAN_9;
|
|
$sql->db_Select("user", "*", "user_id='$id' ");
|
|
$row = $sql->db_Fetch();
|
|
if ($_POST['notifyuser']) {
|
|
$message .= "<br />".UCSLAN_1.":</b> ".$row['user_name']."<br />";
|
|
require_once(e_HANDLER."mail.php");
|
|
unset($messaccess);
|
|
for($a = 0; $a <= (count($class)-1); $a++) {
|
|
if (check_class($class[$a][0], $row['user_class'])) {
|
|
$messaccess .= $class[$a][1]." - " . $class[$a][2]. "\n";
|
|
}
|
|
}
|
|
$send_to = $row['user_email'];
|
|
$subject = UCSLAN_2;
|
|
$message = UCSLAN_3." " . $row['user_name']. ",\n\n".UCSLAN_4." ".SITENAME."\n( ".SITEURL . " )\n\n".UCSLAN_5.": \n\n".$messaccess."\n".UCSLAN_10."\n".SITEADMIN."\n( ".SITENAME." )";
|
|
sendemail($send_to, $subject, $message);
|
|
}
|
|
|
|
|
|
header("location: ".$_POST['adminreturn']);
|
|
echo "location redirect failed.";
|
|
exit;
|
|
}
|
|
|
|
|
|
$e_sub_cat = 'userclass';
|
|
require_once("auth.php");
|
|
|
|
|
|
|
|
$sql->db_Select("user", "*", "user_id='$id' ");
|
|
$row = $sql->db_Fetch();
|
|
|
|
$caption = UCSLAN_6." <b>".$row['user_name']."</b> (".$row['user_class'].")";
|
|
|
|
$text = " <div style='text-align:center'>
|
|
<form method='post' action='".e_SELF."?".e_QUERY."'>
|
|
<table style='".ADMIN_WIDTH."' class='fborder'>";
|
|
|
|
for($a = 0; $a <= (count($class)-1); $a++) {
|
|
$text .= "<tr><td style='width:30%' class='forumheader3'>";
|
|
if (check_class($class[$a][0], $row['user_class'])) {
|
|
$text .= "<input type='checkbox' name='userclass[]' value='".$class[$a][0]."' checked='checked' />".$class[$a][1]." ";
|
|
} else {
|
|
$text .= "<input type='checkbox' name='userclass[]' value='".$class[$a][0]."' />".$class[$a][1]." ";
|
|
}
|
|
$text .= "</td><td style='width:70%' class='forumheader3'> ".$class[$a][2]."</td></tr>";
|
|
}
|
|
|
|
$adminreturn = e_ADMIN."users.php?cu".($qs[2] ? ".{$qs[2]}.{$qs[3]}.{$qs[4]}" : "");
|
|
|
|
$text .= " <tr><td class='forumheader' colspan='2' style='text-align:center'>
|
|
<input type='hidden' name='adminreturn' value='$adminreturn' />
|
|
<input type='checkbox' name='notifyuser' value='1' /> ".UCSLAN_8."
|
|
<input class='button' type='submit' name='updateclass' value='".UCSLAN_7."' />
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</form>
|
|
</div>";
|
|
|
|
$ns->tablerender($caption, $text);
|
|
|
|
|
|
require_once("footer.php");
|
|
|
|
|
|
// ----------------------------------------------------------
|
|
|
|
function check_allowed($class_id) {
|
|
global $sql;
|
|
if (!$sql->db_Select("userclass_classes", "*", "userclass_id = {$class_id}")) {
|
|
header("location:".SITEURL);
|
|
exit;
|
|
}
|
|
$row = $sql->db_Fetch();
|
|
extract($row);
|
|
if (!getperms("0") && !check_class($userclass_editclass)) {
|
|
header("location:".SITEURL);
|
|
exit;
|
|
}
|
|
}
|
|
?>
|