Login successful. Go to $target_url"; - $message .= '
'.sprintf(get_lang('LoginSuccessfulGoToX'),''.$target_url.''); - Display :: display_header(get_lang('UserList')); - Display :: display_normal_message($message,false); - Display :: display_footer(); - exit; - } else { - exit ("
WARNING UNDEFINED UID !! "); - } - } -} -/** - * Get the total number of users on the platform - * @see SortableTable#get_total_number_of_items() - */ -function get_number_of_users() -{ - $user_table = Database :: get_main_table(TABLE_MAIN_USER); - $sql = "SELECT COUNT(u.user_id) AS total_number_of_items FROM $user_table u"; - - // adding the filter to see the user's only of the current access_url - global $_configuration; - if ((api_is_platform_admin() || api_is_session_admin()) && $_configuration['multiple_access_urls']==true && api_get_current_access_url_id()!=-1) { - $access_url_rel_user_table= Database :: get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER); - $sql.= " INNER JOIN $access_url_rel_user_table url_rel_user ON (u.user_id=url_rel_user.user_id)"; - } - - if ( isset ($_GET['keyword'])) { - $keyword = Database::escape_string($_GET['keyword']); - $sql .= " WHERE (u.firstname LIKE '%".$keyword."%' OR u.lastname LIKE '%".$keyword."%' OR u.username LIKE '%".$keyword."%' OR u.email LIKE '%".$keyword."%' OR u.official_code LIKE '%".$keyword."%') "; - } elseif (isset ($_GET['keyword_firstname'])) { - $admin_table = Database :: get_main_table(TABLE_MAIN_ADMIN); - $keyword_firstname = Database::escape_string($_GET['keyword_firstname']); - $keyword_lastname = Database::escape_string($_GET['keyword_lastname']); - $keyword_email = Database::escape_string($_GET['keyword_email']); - $keyword_officialcode = Database::escape_string($_GET['keyword_officialcode']); - $keyword_username = Database::escape_string($_GET['keyword_username']); - $keyword_status = Database::escape_string($_GET['keyword_status']); - $query_admin_table = ''; - $keyword_admin = ''; - if ($keyword_status == SESSIONADMIN) { - $keyword_status = '%'; - $query_admin_table = " , $admin_table a "; - $keyword_admin = ' AND a.user_id = u.user_id '; - } - $keyword_active = isset($_GET['keyword_active']); - $keyword_inactive = isset($_GET['keyword_inactive']); - $sql .= $query_admin_table . - " WHERE (u.firstname LIKE '%".$keyword_firstname."%' " . - "AND u.lastname LIKE '%".$keyword_lastname."%' " . - "AND u.username LIKE '%".$keyword_username."%' " . - "AND u.email LIKE '%".$keyword_email."%' " . - "AND u.official_code LIKE '%".$keyword_officialcode."%' " . - "AND u.status LIKE '".$keyword_status."'" . - $keyword_admin; - if($keyword_active && !$keyword_inactive) { - $sql .= " AND u.active='1'"; - } elseif($keyword_inactive && !$keyword_active) { - $sql .= " AND u.active='0'"; - } - $sql .= " ) "; - } - - // adding the filter to see the user's only of the current access_url - if ((api_is_platform_admin() || api_is_session_admin()) && $_configuration['multiple_access_urls']==true && api_get_current_access_url_id()!=-1) { - $sql.= " AND url_rel_user.access_url_id=".api_get_current_access_url_id(); - } - - $res = Database::query($sql, __FILE__, __LINE__); - $obj = Database::fetch_object($res); - return $obj->total_number_of_items; -} -/** - * Get the users to display on the current page (fill the sortable-table) - * @param int offset of first user to recover - * @param int Number of users to get - * @param int Column to sort on - * @param string Order (ASC,DESC) - * @see SortableTable#get_table_data($from) - */ -function get_user_data($from, $number_of_items, $column, $direction) -{ - $user_table = Database :: get_main_table(TABLE_MAIN_USER); - $admin_table = Database :: get_main_table(TABLE_MAIN_ADMIN); - $sql = "SELECT - u.user_id AS col0, - u.official_code AS col1, - ".(api_is_western_name_order() - ? "u.firstname AS col2, - u.lastname AS col3," - : "u.lastname AS col2, - u.firstname AS col3,")." - u.username AS col4, - u.email AS col5, - u.status AS col6, - u.active AS col7, - u.user_id AS col8 ". - ", u.expiration_date AS exp ". - " FROM $user_table u "; - - // adding the filter to see the user's only of the current access_url - global $_configuration; - if ((api_is_platform_admin() || api_is_session_admin()) && $_configuration['multiple_access_urls']==true && api_get_current_access_url_id()!=-1) { - $access_url_rel_user_table= Database :: get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER); - $sql.= " INNER JOIN $access_url_rel_user_table url_rel_user ON (u.user_id=url_rel_user.user_id)"; - } - - if (isset ($_GET['keyword'])) { - $keyword = Database::escape_string($_GET['keyword']); - $sql .= " WHERE (u.firstname LIKE '%".$keyword."%' OR u.lastname LIKE '%".$keyword."%' OR u.username LIKE '%".$keyword."%' OR u.official_code LIKE '%".$keyword."%' OR u.email LIKE '%".$keyword."%' )"; - } elseif (isset ($_GET['keyword_firstname'])) { - $keyword_firstname = Database::escape_string($_GET['keyword_firstname']); - $keyword_lastname = Database::escape_string($_GET['keyword_lastname']); - $keyword_email = Database::escape_string($_GET['keyword_email']); - $keyword_officialcode = Database::escape_string($_GET['keyword_officialcode']); - $keyword_username = Database::escape_string($_GET['keyword_username']); - $keyword_status = Database::escape_string($_GET['keyword_status']); - $query_admin_table = ''; - $keyword_admin = ''; - - if ($keyword_status == SESSIONADMIN) { - $keyword_status = '%'; - $query_admin_table = " , $admin_table a "; - $keyword_admin = ' AND a.user_id = u.user_id '; - } - $keyword_active = isset($_GET['keyword_active']); - $keyword_inactive = isset($_GET['keyword_inactive']); - $sql .= $query_admin_table." WHERE (u.firstname LIKE '%".$keyword_firstname."%' " . - "AND u.lastname LIKE '%".$keyword_lastname."%' " . - "AND u.username LIKE '%".$keyword_username."%' " . - "AND u.email LIKE '%".$keyword_email."%' " . - "AND u.official_code LIKE '%".$keyword_officialcode."%' " . - "AND u.status LIKE '".$keyword_status."'" . - $keyword_admin; - - if ($keyword_active && !$keyword_inactive) { - $sql .= " AND u.active='1'"; - } elseif($keyword_inactive && !$keyword_active) { - $sql .= " AND u.active='0'"; - } - $sql .= " ) "; - } - - // adding the filter to see the user's only of the current access_url - if ((api_is_platform_admin() || api_is_session_admin()) && $_configuration['multiple_access_urls']==true && api_get_current_access_url_id()!=-1) { - $sql.= " AND url_rel_user.access_url_id=".api_get_current_access_url_id(); - } - - if (!in_array($direction, array('ASC','DESC'))) { - $direction = 'ASC'; - } - $column = intval($column); - $from = intval($from); - $number_of_items = intval($number_of_items); - - $sql .= " ORDER BY col$column $direction "; - $sql .= " LIMIT $from,$number_of_items"; - $res = Database::query($sql, __FILE__, __LINE__); - - $users = array (); - $t = time(); - while ($user = Database::fetch_row($res)) { - if ($user[7] == 1 && $user[9] != '0000-00-00 00:00:00') { - // check expiration date - $expiration_time = convert_mysql_date($user[9]); - // if expiration date is passed, store a special value for active field - if ($expiration_time < $t) { - $user[7] = '-1'; - } - } - // forget about the expiration date field - $users[] = array($user[0],$user[1],$user[2],$user[3],$user[4],$user[5],$user[6],$user[7],$user[8]); - } - return $users; -} -/** -* Returns a mailto-link -* @param string $email An email-address -* @return string HTML-code with a mailto-link -*/ -function email_filter($email) -{ - return Display :: encrypted_mailto_link($email, $email); -} -/** - * Build the modify-column of the table - * @param int The user id - * @param string URL params to add to table links - * @param array Row of elements to alter - * @return string Some HTML-code with modify-buttons - */ -function modify_filter($user_id,$url_params,$row) -{ - global $charset; - global $_user; - global $_admins_list; - $is_admin = in_array($user_id,$_admins_list); - $statusname = api_get_status_langvars(); - $user_is_anonymous = false; - if ($row['6'] == $statusname[ANONYMOUS]) { - $user_is_anonymous =true; - } - if (!$user_is_anonymous) { - $result .= ' -
- ',false); - $form->addElement('style_submit_button', 'submit',get_lang('SearchUsers'),'class="search"'); - $defaults['keyword_active'] = 1; - $defaults['keyword_inactive'] = 1; - $form->setDefaults($defaults); - $form->display(); -} -else -{ - $interbreadcrumb[] = array ("url" => 'index.php', "name" => get_lang('PlatformAdmin')); - $tool_name = get_lang('UserList'); - Display :: display_header($tool_name, ""); - - //api_display_tool_title($tool_name); - if (isset ($_GET['action'])) { - $check = Security::check_token('get'); - if($check) { - switch ($_GET['action']) { - case 'show_message' : - if (!empty($_GET['warn'])) { - // to prevent too long messages - if ($_GET['warn'] == 'session_message'){ - $_GET['warn'] = $_SESSION['session_message_import_users']; - } - Display::display_warning_message(urldecode($_GET['warn']),false); - } - if (!empty($_GET['message'])) { - Display :: display_confirmation_message(stripslashes($_GET['message'])); - } - break; - case 'delete_user' : - if (api_is_platform_admin()) { - if ($user_id != $_user['user_id'] && UserManager :: delete_user($_GET['user_id'])) { - Display :: display_normal_message(get_lang('UserDeleted')); - } else { - Display :: display_error_message(get_lang('CannotDeleteUserBecauseOwnsCourse')); - } - } - break; - case 'lock' : - $message=lock_unlock_user('lock',$_GET['user_id']); - Display :: display_normal_message($message); - break; - case 'unlock'; - $message=lock_unlock_user('unlock',$_GET['user_id']); - Display :: display_normal_message($message); - break; - - } - Security::clear_token(); - } - } - if (isset ($_POST['action'])) - { - $check = Security::check_token('get'); - if($check) - { - switch ($_POST['action']) - { - case 'delete' : - if (api_is_platform_admin()) { - $number_of_selected_users = count($_POST['id']); - $number_of_deleted_users = 0; - if (is_array($_POST['id'])) { - foreach ($_POST['id'] as $index => $user_id) - { - if($user_id != $_user['user_id']) - { - if(UserManager :: delete_user($user_id)) - { - $number_of_deleted_users++; - } - } - } - } - if($number_of_selected_users == $number_of_deleted_users) - { - Display :: display_normal_message(get_lang('SelectedUsersDeleted')); - } - else - { - Display :: display_error_message(get_lang('SomeUsersNotDeleted')); - } - } - break; - } - Security::clear_token(); - } - } - // Create a search-box - $form = new FormValidator('search_simple','get','','',null,false); - $renderer =& $form->defaultRenderer(); - $renderer->setElementTemplate('{element} '); - $form->addElement('text','keyword',get_lang('keyword')); - $form->addElement('style_submit_button', 'submit',get_lang('Search'),'class="search"'); - $form->addElement('static','search_advanced_link',null,''.get_lang('AdvancedSearch').''); - echo '
';
- if (api_is_platform_admin()) {
- echo ''.
- ''.Display::return_icon('add_user_big.gif',get_lang('AddUsers')).get_lang('AddUsers').''.
- '';
- }
- $form->display();
- echo '
';
- if (isset ($_GET['keyword'])) {
- $parameters = array ('keyword' => Security::remove_XSS($_GET['keyword']));
- } elseif (isset ($_GET['keyword_firstname'])) {
- $parameters['keyword_firstname'] = Security::remove_XSS($_GET['keyword_firstname']);
- $parameters['keyword_lastname'] = Security::remove_XSS($_GET['keyword_lastname']);
- $parameters['keyword_email'] = Security::remove_XSS($_GET['keyword_email']);
- $parameters['keyword_officialcode'] = Security::remove_XSS($_GET['keyword_officialcode']);
- $parameters['keyword_status'] = Security::remove_XSS($_GET['keyword_status']);
- $parameters['keyword_active'] = Security::remove_XSS($_GET['keyword_active']);
- $parameters['keyword_inactive'] = Security::remove_XSS($_GET['keyword_inactive']);
- }
- // Create a sortable table with user-data
- $parameters['sec_token'] = Security::get_token();
-
- // get the list of all admins to mark them in the users list
- $admin_table = Database::get_main_table(TABLE_MAIN_ADMIN);
- $sql_admin = "SELECT user_id FROM $admin_table";
- $res_admin = Database::query($sql_admin);
- $_admins_list = array();
- while ($row_admin = Database::fetch_row($res_admin)) {
- $_admins_list[] = $row_admin[0];
- }
-
- $table = new SortableTable('users', 'get_number_of_users', 'get_user_data', (api_is_western_name_order() xor api_sort_by_first_name()) ? 3 : 2);
- $table->set_additional_parameters($parameters);
- $table->set_header(0, '', false);
- $table->set_header(1, get_lang('OfficialCode'));
- if (api_is_western_name_order()) {
- $table->set_header(2, get_lang('FirstName'));
- $table->set_header(3, get_lang('LastName'));
- } else {
- $table->set_header(2, get_lang('LastName'));
- $table->set_header(3, get_lang('FirstName'));
- }
- $table->set_header(4, get_lang('LoginName'));
- $table->set_header(5, get_lang('Email'));
- $table->set_header(6, get_lang('Status'));
- $table->set_header(7, get_lang('Active'));
- $table->set_header(8, get_lang('Modify'));
- $table->set_column_filter(5, 'email_filter');
- $table->set_column_filter(6, 'status_filter');
- $table->set_column_filter(7, 'active_filter');
- $table->set_column_filter(8, 'modify_filter');
- if (api_is_platform_admin())
- $table->set_form_actions(array ('delete' => get_lang('DeleteFromPlatform')));
- $table->display();
-}
-/*
-==============================================================================
- FOOTER
-==============================================================================
-*/
-Display :: display_footer();
-?>
+';
+$htmlHeadXtra[] = '';
+$htmlHeadXtra[] = '';
+
+$this_section = SECTION_PLATFORM_ADMIN;
+api_protect_admin_script(true);
+
+/**
+* Make sure this function is protected because it does NOT check password!
+*
+* This function defines globals.
+* @param int User ID
+* @return bool False on failure, redirection on success
+* @author Evie Embrechts
+* @author Yannick Warnier Login successful. Go to $target_url"; + $message .= '
'.sprintf(get_lang('LoginSuccessfulGoToX'),''.$target_url.''); + Display :: display_header(get_lang('UserList')); + Display :: display_normal_message($message,false); + Display :: display_footer(); + exit; + } else { + exit ("
WARNING UNDEFINED UID !! "); + } + } +} +/** + * Get the total number of users on the platform + * @see SortableTable#get_total_number_of_items() + */ +function get_number_of_users() +{ + $user_table = Database :: get_main_table(TABLE_MAIN_USER); + $sql = "SELECT COUNT(u.user_id) AS total_number_of_items FROM $user_table u"; + + // adding the filter to see the user's only of the current access_url + global $_configuration; + if ((api_is_platform_admin() || api_is_session_admin()) && $_configuration['multiple_access_urls']==true && api_get_current_access_url_id()!=-1) { + $access_url_rel_user_table= Database :: get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER); + $sql.= " INNER JOIN $access_url_rel_user_table url_rel_user ON (u.user_id=url_rel_user.user_id)"; + } + + if ( isset ($_GET['keyword'])) { + $keyword = Database::escape_string($_GET['keyword']); + $sql .= " WHERE (u.firstname LIKE '%".$keyword."%' OR u.lastname LIKE '%".$keyword."%' OR u.username LIKE '%".$keyword."%' OR u.email LIKE '%".$keyword."%' OR u.official_code LIKE '%".$keyword."%') "; + } elseif (isset ($_GET['keyword_firstname'])) { + $admin_table = Database :: get_main_table(TABLE_MAIN_ADMIN); + $keyword_firstname = Database::escape_string($_GET['keyword_firstname']); + $keyword_lastname = Database::escape_string($_GET['keyword_lastname']); + $keyword_email = Database::escape_string($_GET['keyword_email']); + $keyword_officialcode = Database::escape_string($_GET['keyword_officialcode']); + $keyword_username = Database::escape_string($_GET['keyword_username']); + $keyword_status = Database::escape_string($_GET['keyword_status']); + $query_admin_table = ''; + $keyword_admin = ''; + if ($keyword_status == SESSIONADMIN) { + $keyword_status = '%'; + $query_admin_table = " , $admin_table a "; + $keyword_admin = ' AND a.user_id = u.user_id '; + } + $keyword_active = isset($_GET['keyword_active']); + $keyword_inactive = isset($_GET['keyword_inactive']); + $sql .= $query_admin_table . + " WHERE (u.firstname LIKE '%".$keyword_firstname."%' " . + "AND u.lastname LIKE '%".$keyword_lastname."%' " . + "AND u.username LIKE '%".$keyword_username."%' " . + "AND u.email LIKE '%".$keyword_email."%' " . + "AND u.official_code LIKE '%".$keyword_officialcode."%' " . + "AND u.status LIKE '".$keyword_status."'" . + $keyword_admin; + if($keyword_active && !$keyword_inactive) { + $sql .= " AND u.active='1'"; + } elseif($keyword_inactive && !$keyword_active) { + $sql .= " AND u.active='0'"; + } + $sql .= " ) "; + } + + // adding the filter to see the user's only of the current access_url + if ((api_is_platform_admin() || api_is_session_admin()) && $_configuration['multiple_access_urls']==true && api_get_current_access_url_id()!=-1) { + $sql.= " AND url_rel_user.access_url_id=".api_get_current_access_url_id(); + } + + $res = Database::query($sql, __FILE__, __LINE__); + $obj = Database::fetch_object($res); + return $obj->total_number_of_items; +} +/** + * Get the users to display on the current page (fill the sortable-table) + * @param int offset of first user to recover + * @param int Number of users to get + * @param int Column to sort on + * @param string Order (ASC,DESC) + * @see SortableTable#get_table_data($from) + */ +function get_user_data($from, $number_of_items, $column, $direction) +{ + $user_table = Database :: get_main_table(TABLE_MAIN_USER); + $admin_table = Database :: get_main_table(TABLE_MAIN_ADMIN); + $sql = "SELECT + u.user_id AS col0, + u.official_code AS col1, + ".(api_is_western_name_order() + ? "u.firstname AS col2, + u.lastname AS col3," + : "u.lastname AS col2, + u.firstname AS col3,")." + u.username AS col4, + u.email AS col5, + u.status AS col6, + u.active AS col7, + u.user_id AS col8 ". + ", u.expiration_date AS exp ". + " FROM $user_table u "; + + // adding the filter to see the user's only of the current access_url + global $_configuration; + if ((api_is_platform_admin() || api_is_session_admin()) && $_configuration['multiple_access_urls']==true && api_get_current_access_url_id()!=-1) { + $access_url_rel_user_table= Database :: get_main_table(TABLE_MAIN_ACCESS_URL_REL_USER); + $sql.= " INNER JOIN $access_url_rel_user_table url_rel_user ON (u.user_id=url_rel_user.user_id)"; + } + + if (isset ($_GET['keyword'])) { + $keyword = Database::escape_string($_GET['keyword']); + $sql .= " WHERE (u.firstname LIKE '%".$keyword."%' OR u.lastname LIKE '%".$keyword."%' OR u.username LIKE '%".$keyword."%' OR u.official_code LIKE '%".$keyword."%' OR u.email LIKE '%".$keyword."%' )"; + } elseif (isset ($_GET['keyword_firstname'])) { + $keyword_firstname = Database::escape_string($_GET['keyword_firstname']); + $keyword_lastname = Database::escape_string($_GET['keyword_lastname']); + $keyword_email = Database::escape_string($_GET['keyword_email']); + $keyword_officialcode = Database::escape_string($_GET['keyword_officialcode']); + $keyword_username = Database::escape_string($_GET['keyword_username']); + $keyword_status = Database::escape_string($_GET['keyword_status']); + $query_admin_table = ''; + $keyword_admin = ''; + + if ($keyword_status == SESSIONADMIN) { + $keyword_status = '%'; + $query_admin_table = " , $admin_table a "; + $keyword_admin = ' AND a.user_id = u.user_id '; + } + $keyword_active = isset($_GET['keyword_active']); + $keyword_inactive = isset($_GET['keyword_inactive']); + $sql .= $query_admin_table." WHERE (u.firstname LIKE '%".$keyword_firstname."%' " . + "AND u.lastname LIKE '%".$keyword_lastname."%' " . + "AND u.username LIKE '%".$keyword_username."%' " . + "AND u.email LIKE '%".$keyword_email."%' " . + "AND u.official_code LIKE '%".$keyword_officialcode."%' " . + "AND u.status LIKE '".$keyword_status."'" . + $keyword_admin; + + if ($keyword_active && !$keyword_inactive) { + $sql .= " AND u.active='1'"; + } elseif($keyword_inactive && !$keyword_active) { + $sql .= " AND u.active='0'"; + } + $sql .= " ) "; + } + + // adding the filter to see the user's only of the current access_url + if ((api_is_platform_admin() || api_is_session_admin()) && $_configuration['multiple_access_urls']==true && api_get_current_access_url_id()!=-1) { + $sql.= " AND url_rel_user.access_url_id=".api_get_current_access_url_id(); + } + + if (!in_array($direction, array('ASC','DESC'))) { + $direction = 'ASC'; + } + $column = intval($column); + $from = intval($from); + $number_of_items = intval($number_of_items); + + $sql .= " ORDER BY col$column $direction "; + $sql .= " LIMIT $from,$number_of_items"; + $res = Database::query($sql, __FILE__, __LINE__); + + $users = array (); + $t = time(); + while ($user = Database::fetch_row($res)) { + if ($user[7] == 1 && $user[9] != '0000-00-00 00:00:00') { + // check expiration date + $expiration_time = convert_mysql_date($user[9]); + // if expiration date is passed, store a special value for active field + if ($expiration_time < $t) { + $user[7] = '-1'; + } + } + // forget about the expiration date field + $users[] = array($user[0],$user[1],$user[2],$user[3],$user[4],$user[5],$user[6],$user[7],$user[8]); + } + return $users; +} +/** +* Returns a mailto-link +* @param string $email An email-address +* @return string HTML-code with a mailto-link +*/ +function email_filter($email) +{ + return Display :: encrypted_mailto_link($email, $email); +} +/** + * Build the modify-column of the table + * @param int The user id + * @param string URL params to add to table links + * @param array Row of elements to alter + * @return string Some HTML-code with modify-buttons + */ +function modify_filter($user_id,$url_params,$row) +{ + global $charset; + global $_user; + global $_admins_list; + $is_admin = in_array($user_id,$_admins_list); + $statusname = api_get_status_langvars(); + $user_is_anonymous = false; + if ($row['6'] == $statusname[ANONYMOUS]) { + $user_is_anonymous =true; + } + if (!$user_is_anonymous) { + $result .= ' +
+ ',false); + $form->addElement('style_submit_button', 'submit',get_lang('SearchUsers'),'class="search"'); + $defaults['keyword_active'] = 1; + $defaults['keyword_inactive'] = 1; + $form->setDefaults($defaults); + $form->display(); +} +else +{ + $interbreadcrumb[] = array ("url" => 'index.php', "name" => get_lang('PlatformAdmin')); + $tool_name = get_lang('UserList'); + Display :: display_header($tool_name, ""); + + //api_display_tool_title($tool_name); + if (isset ($_GET['action'])) { + $check = Security::check_token('get'); + if($check) { + switch ($_GET['action']) { + case 'show_message' : + if (!empty($_GET['warn'])) { + // to prevent too long messages + if ($_GET['warn'] == 'session_message'){ + $_GET['warn'] = $_SESSION['session_message_import_users']; + } + Display::display_warning_message(urldecode($_GET['warn']),false); + } + if (!empty($_GET['message'])) { + Display :: display_confirmation_message(stripslashes($_GET['message'])); + } + break; + case 'delete_user' : + if (api_is_platform_admin()) { + if ($user_id != $_user['user_id'] && UserManager :: delete_user($_GET['user_id'])) { + Display :: display_normal_message(get_lang('UserDeleted')); + } else { + Display :: display_error_message(get_lang('CannotDeleteUserBecauseOwnsCourse')); + } + } + break; + case 'lock' : + $message=lock_unlock_user('lock',$_GET['user_id']); + Display :: display_normal_message($message); + break; + case 'unlock'; + $message=lock_unlock_user('unlock',$_GET['user_id']); + Display :: display_normal_message($message); + break; + + } + Security::clear_token(); + } + } + if (isset ($_POST['action'])) + { + $check = Security::check_token('get'); + if($check) + { + switch ($_POST['action']) + { + case 'delete' : + if (api_is_platform_admin()) { + $number_of_selected_users = count($_POST['id']); + $number_of_deleted_users = 0; + if (is_array($_POST['id'])) { + foreach ($_POST['id'] as $index => $user_id) + { + if($user_id != $_user['user_id']) + { + if(UserManager :: delete_user($user_id)) + { + $number_of_deleted_users++; + } + } + } + } + if($number_of_selected_users == $number_of_deleted_users) + { + Display :: display_normal_message(get_lang('SelectedUsersDeleted')); + } + else + { + Display :: display_error_message(get_lang('SomeUsersNotDeleted')); + } + } + break; + } + Security::clear_token(); + } + } + // Create a search-box + $form = new FormValidator('search_simple','get','','',null,false); + $renderer =& $form->defaultRenderer(); + $renderer->setElementTemplate('{element} '); + $form->addElement('text','keyword',get_lang('keyword')); + $form->addElement('style_submit_button', 'submit',get_lang('Search'),'class="search"'); + $form->addElement('static','search_advanced_link',null,''.get_lang('AdvancedSearch').''); + echo '
';
+ if (api_is_platform_admin()) {
+ echo ''.
+ ''.Display::return_icon('add_user_big.gif',get_lang('AddUsers')).get_lang('AddUsers').''.
+ '';
+ }
+ $form->display();
+ echo '
';
+ if (isset ($_GET['keyword'])) {
+ $parameters = array ('keyword' => Security::remove_XSS($_GET['keyword']));
+ } elseif (isset ($_GET['keyword_firstname'])) {
+ $parameters['keyword_firstname'] = Security::remove_XSS($_GET['keyword_firstname']);
+ $parameters['keyword_lastname'] = Security::remove_XSS($_GET['keyword_lastname']);
+ $parameters['keyword_email'] = Security::remove_XSS($_GET['keyword_email']);
+ $parameters['keyword_officialcode'] = Security::remove_XSS($_GET['keyword_officialcode']);
+ $parameters['keyword_status'] = Security::remove_XSS($_GET['keyword_status']);
+ $parameters['keyword_active'] = Security::remove_XSS($_GET['keyword_active']);
+ $parameters['keyword_inactive'] = Security::remove_XSS($_GET['keyword_inactive']);
+ }
+ // Create a sortable table with user-data
+ $parameters['sec_token'] = Security::get_token();
+
+ // get the list of all admins to mark them in the users list
+ $admin_table = Database::get_main_table(TABLE_MAIN_ADMIN);
+ $sql_admin = "SELECT user_id FROM $admin_table";
+ $res_admin = Database::query($sql_admin);
+ $_admins_list = array();
+ while ($row_admin = Database::fetch_row($res_admin)) {
+ $_admins_list[] = $row_admin[0];
+ }
+
+ $table = new SortableTable('users', 'get_number_of_users', 'get_user_data', (api_is_western_name_order() xor api_sort_by_first_name()) ? 3 : 2);
+ $table->set_additional_parameters($parameters);
+ $table->set_header(0, '', false);
+ $table->set_header(1, get_lang('OfficialCode'));
+ if (api_is_western_name_order()) {
+ $table->set_header(2, get_lang('FirstName'));
+ $table->set_header(3, get_lang('LastName'));
+ } else {
+ $table->set_header(2, get_lang('LastName'));
+ $table->set_header(3, get_lang('FirstName'));
+ }
+ $table->set_header(4, get_lang('LoginName'));
+ $table->set_header(5, get_lang('Email'));
+ $table->set_header(6, get_lang('Status'));
+ $table->set_header(7, get_lang('Active'));
+ $table->set_header(8, get_lang('Action'), false);
+ $table->set_column_filter(5, 'email_filter');
+ $table->set_column_filter(6, 'status_filter');
+ $table->set_column_filter(7, 'active_filter');
+ $table->set_column_filter(8, 'modify_filter');
+ if (api_is_platform_admin())
+ $table->set_form_actions(array ('delete' => get_lang('DeleteFromPlatform')));
+ $table->display();
+}
+/*
+==============================================================================
+ FOOTER
+==============================================================================
+*/
+Display :: display_footer();
+?>