chamilo
/
chamilo-lms
mirror of https://github.com/chamilo/chamilo-lms/tree/1.11.x
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

Feature #306 - Platform admin tool: Cleaning code + minor fixes in add/edit user forms.

Browse Source
skala
Ivan Tcholakov 16 years ago
parent a1dafa630c
commit c2f9d649d7
2 changed files with 311 additions and 405 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 162
      main/admin/user_add.php
  2. 206
      main/admin/user_edit.php

162
main/admin/user_add.php
Unescape View File

@ -5,24 +5,26 @@
* @package dokeos.admin * @package dokeos.admin
============================================================================== ==============================================================================
*/ */
// name of the language file that needs to be included
// Language files that should be included
$language_file = array('admin', 'registration'); $language_file = array('admin', 'registration');
$cidReset = true; $cidReset = true;
// including necessary libraries // Including necessary libraries.
require '../inc/global.inc.php'; require '../inc/global.inc.php';
$libpath = api_get_path(LIBRARY_PATH); $libpath = api_get_path(LIBRARY_PATH);
require_once $libpath.'fileManage.lib.php'; require_once $libpath.'fileManage.lib.php';
require_once $libpath.'fileUpload.lib.php'; require_once $libpath.'fileUpload.lib.php';
require_once $libpath.'usermanager.lib.php'; require_once $libpath.'usermanager.lib.php';
require_once $libpath.'formvalidator/FormValidator.class.php'; require_once $libpath.'formvalidator/FormValidator.class.php';
require_once api_get_path(LIBRARY_PATH).'image.lib.php'; require_once $libpath.'image.lib.php';
require_once api_get_path(INCLUDE_PATH).'lib/mail.lib.inc.php'; require_once $libpath.'mail.lib.inc.php';
// section for the tabs // Section for the tabs
$this_section = SECTION_PLATFORM_ADMIN; $this_section = SECTION_PLATFORM_ADMIN;
// user permissions // User permissions
api_protect_admin_script(); api_protect_admin_script();
// Database table definitions // Database table definitions
@ -31,18 +33,18 @@ $table_user = Database :: get_main_table(TABLE_MAIN_USER);
$database = Database::get_main_database(); $database = Database::get_main_database();
$htmlHeadXtra[] = ' $htmlHeadXtra[] = '
<script language="JavaScript" type="text/JavaScript"> <script type="text/javascript">
<!-- <!--
function enable_expiration_date() { //v2.0 function enable_expiration_date() { //v2.0
document.user_add.radio_expiration_date[0].checked=false; document.user_add.radio_expiration_date[0].checked=false;
document.user_add.radio_expiration_date[1].checked=true; document.user_add.radio_expiration_date[1].checked=true;
} }
function password_switch_radio_button(form, input){ function password_switch_radio_button() {
var NodeList = document.getElementsByTagName("input"); var input_elements = document.getElementsByTagName("input");
for(var i=0; i< NodeList.length; i++){ for (var i = 0; i < input_elements.length; i++) {
if(NodeList.item(i).name=="password[password_auto]" && NodeList.item(i).value=="0"){ if (input_elements.item(i).name == "password[password_auto]" && input_elements.item(i).value == "0") {
NodeList.item(i).checked=true; input_elements.item(i).checked = true;
} }
} }
} }
@ -68,13 +70,13 @@ if(!empty($_GET['message'])){
$message = urldecode($_GET['message']); $message = urldecode($_GET['message']);
} }
$interbreadcrumb[] = array ("url" => 'index.php', "name" => get_lang('PlatformAdmin')); $interbreadcrumb[] = array ('url' => 'index.php', 'name' => get_lang('PlatformAdmin'));
$tool_name = get_lang('AddUsers'); $tool_name = get_lang('AddUsers');
// Create the form // Create the form
$form = new FormValidator('user_add'); $form = new FormValidator('user_add');
$form->addElement('header', '', $tool_name); $form->addElement('header', '', $tool_name);
if (api_is_western_name_order()) if (api_is_western_name_order()) {
{
// Firstname // Firstname
$form->addElement('text', 'firstname', get_lang('FirstName')); $form->addElement('text', 'firstname', get_lang('FirstName'));
$form->applyFilter('firstname', 'html_filter'); $form->applyFilter('firstname', 'html_filter');
@ -85,9 +87,7 @@ if (api_is_western_name_order())
$form->applyFilter('lastname', 'html_filter'); $form->applyFilter('lastname', 'html_filter');
$form->applyFilter('lastname', 'trim'); $form->applyFilter('lastname', 'trim');
$form->addRule('lastname', get_lang('ThisFieldIsRequired'), 'required'); $form->addRule('lastname', get_lang('ThisFieldIsRequired'), 'required');
} } else {
else
{
// Lastname // Lastname
$form->addElement('text', 'lastname', get_lang('LastName')); $form->addElement('text', 'lastname', get_lang('LastName'));
$form->applyFilter('lastname', 'html_filter'); $form->applyFilter('lastname', 'html_filter');
@ -112,6 +112,7 @@ $form->addElement('text','phone',get_lang('PhoneNumber'));
// Picture // Picture
$form->addElement('file', 'picture', get_lang('AddPicture')); $form->addElement('file', 'picture', get_lang('AddPicture'));
$allowed_picture_types = array ('jpg', 'jpeg', 'png', 'gif'); $allowed_picture_types = array ('jpg', 'jpeg', 'png', 'gif');
$form->addRule('picture', get_lang('OnlyImagesAllowed').' ('.implode(',', $allowed_picture_types).')', 'filetype', $allowed_picture_types); $form->addRule('picture', get_lang('OnlyImagesAllowed').' ('.implode(',', $allowed_picture_types).')', 'filetype', $allowed_picture_types);
// Username // Username
$form->addElement('text', 'username', get_lang('LoginName'), array('maxlength' => USERNAME_MAX_LENGTH)); $form->addElement('text', 'username', get_lang('LoginName'), array('maxlength' => USERNAME_MAX_LENGTH));
@ -122,12 +123,10 @@ $form->addRule('username', get_lang('UserTaken'), 'username_available', $user_da
// Password // Password
$group = array(); $group = array();
$auth_sources = 0; //make available wider as we need it in case of form reset (see below) $auth_sources = 0; //make available wider as we need it in case of form reset (see below)
if(count($extAuthSource) > 0) if (count($extAuthSource) > 0) {
{
$group[] =& HTML_QuickForm::createElement('radio', 'password_auto', null, get_lang('ExternalAuthentication').' ', 2); $group[] =& HTML_QuickForm::createElement('radio', 'password_auto', null, get_lang('ExternalAuthentication').' ', 2);
$auth_sources = array(); $auth_sources = array();
foreach($extAuthSource as $key => $info) foreach($extAuthSource as $key => $info) {
{
$auth_sources[$key] = $key; $auth_sources[$key] = $key;
} }
$group[] =& HTML_QuickForm::createElement('select', 'auth_source', null, $auth_sources); $group[] =& HTML_QuickForm::createElement('select', 'auth_source', null, $auth_sources);
@ -135,7 +134,7 @@ if(count($extAuthSource) > 0)
} }
$group[] =& HTML_QuickForm::createElement('radio', 'password_auto', get_lang('Password'), get_lang('AutoGeneratePassword').'<br />', 1); $group[] =& HTML_QuickForm::createElement('radio', 'password_auto', get_lang('Password'), get_lang('AutoGeneratePassword').'<br />', 1);
$group[] =& HTML_QuickForm::createElement('radio', 'password_auto', 'id="radio_user_password"', null, 0); $group[] =& HTML_QuickForm::createElement('radio', 'password_auto', 'id="radio_user_password"', null, 0);
$group[] =& HTML_QuickForm::createElement('password', 'password',null,'onkeydown=password_switch_radio_button(document.user_add,"password[password_auto]")'); $group[] =& HTML_QuickForm::createElement('password', 'password', null, array('onkeydown' => 'javascript: password_switch_radio_button();'));
$form->addGroup($group, 'password', get_lang('Password'), ''); $form->addGroup($group, 'password', get_lang('Password'), '');
// Status // Status
@ -145,23 +144,21 @@ $status[STUDENT] = get_lang('Learner');
$status[DRH] = get_lang('Drh'); $status[DRH] = get_lang('Drh');
$status[SESSIONADMIN] = get_lang('SessionsAdmin'); $status[SESSIONADMIN] = get_lang('SessionsAdmin');
$form->addElement('select','status',get_lang('Status'),$status,'id="status_select" onchange="display_drh_list()"'); $form->addElement('select', 'status', get_lang('Status'), $status, array('id' => 'status_select', 'onchange' => 'javascript: display_drh_list();'));
$form->addElement('select_language', 'language', get_lang('Language')); $form->addElement('select_language', 'language', get_lang('Language'));
//drh list (display only if student) //drh list (display only if student)
$display = ($_POST['status'] == STUDENT || !isset($_POST['status'])) ? 'block' : 'none'; $display = ($_POST['status'] == STUDENT || !isset($_POST['status'])) ? 'block' : 'none';
$form->addElement('html', '<div id="drh_list" style="display:'.$display.';">'); $form->addElement('html', '<div id="drh_list" style="display:'.$display.';">');
$drh_select = $form->addElement('select', 'hr_dept_id', get_lang('Drh'), array(), 'id="drh_select"'); $drh_select = $form->addElement('select', 'hr_dept_id', get_lang('Drh'), array(), 'id="drh_select"');
$drh_list = UserManager :: get_user_list(array('status'=>DRH),array('lastname','firstname')); $drh_list = UserManager :: get_user_list(array('status' => DRH), api_sort_by_first_name() ? array('firstname', 'lastname') : array('lastname', 'firstname'));
if (count($drh_list) == 0) { if (count($drh_list) == 0) {
$drh_select->addOption('- '.get_lang('ThereIsNotStillAResponsible').' -',0); $drh_select->addOption('- '.get_lang('ThereIsNotStillAResponsible', '').' -', 0);
} else { } else {
$drh_select->addOption('- '.get_lang('SelectAResponsible').' -', 0); $drh_select->addOption('- '.get_lang('SelectAResponsible').' -', 0);
} }
if(is_array($drh_list)) if (is_array($drh_list)) {
{ foreach ($drh_list as $drh) {
foreach($drh_list as $drh)
{
$drh_select->addOption(api_get_person_name($drh['firstname'], $drh['lastname']), $drh['user_id']); $drh_select->addOption(api_get_person_name($drh['firstname'], $drh['lastname']), $drh['user_id']);
} }
} }
@ -184,7 +181,7 @@ $form->addGroup($group, 'mail', get_lang('SendMailToNewUser'), '&nbsp;');
$form->addElement('radio', 'radio_expiration_date', get_lang('ExpirationDate'), get_lang('NeverExpires'), 0); $form->addElement('radio', 'radio_expiration_date', get_lang('ExpirationDate'), get_lang('NeverExpires'), 0);
$group = array (); $group = array ();
$group[] = & $form->createElement('radio', 'radio_expiration_date', null, get_lang('On'), 1); $group[] = & $form->createElement('radio', 'radio_expiration_date', null, get_lang('On'), 1);
$group[] = & $form->createElement('datepicker','expiration_date', null, array ('form_name' => $form->getAttribute('name'), 'onChange'=>'enable_expiration_date()')); $group[] = & $form->createElement('datepicker', 'expiration_date', null, array('form_name' => $form->getAttribute('name'), 'onchange' => 'javascript: enable_expiration_date();'));
$form->addGroup($group, 'max_member_group', null, '', false); $form->addGroup($group, 'max_member_group', null, '', false);
// Active account or inactive account // Active account or inactive account
$form->addElement('radio', 'active', get_lang('ActiveAccount'), get_lang('Active'), 1); $form->addElement('radio', 'active', get_lang('ActiveAccount'), get_lang('Active'), 1);
@ -194,11 +191,9 @@ $form->addElement('radio','active','',get_lang('Inactive'),0);
$extra = UserManager::get_extra_fields(0, 50, 5, 'ASC'); $extra = UserManager::get_extra_fields(0, 50, 5, 'ASC');
$extra_data = UserManager::get_extra_user_data(0, true); $extra_data = UserManager::get_extra_user_data(0, true);
foreach($extra as $id => $field_details) foreach($extra as $id => $field_details) {
{
if ($field_details[6] == 1) { // only show extra fields that are visible if ($field_details[6] == 1) { // only show extra fields that are visible
switch($field_details[2]) switch ($field_details[2]) {
{
case USER_FIELD_TYPE_TEXT: case USER_FIELD_TYPE_TEXT:
$form->addElement('text', 'extra_'.$field_details[1], $field_details[3], array('size' => 40)); $form->addElement('text', 'extra_'.$field_details[1], $field_details[3], array('size' => 40));
$form->applyFilter('extra_'.$field_details[1], 'stripslashes'); $form->applyFilter('extra_'.$field_details[1], 'stripslashes');
@ -212,8 +207,7 @@ foreach($extra as $id => $field_details)
break; break;
case USER_FIELD_TYPE_RADIO: case USER_FIELD_TYPE_RADIO:
$group = array(); $group = array();
foreach($field_details[9] as $option_id => $option_details) foreach ($field_details[9] as $option_id => $option_details) {
{
$options[$option_details[1]] = $option_details[2]; $options[$option_details[1]] = $option_details[2];
$group[] =& HTML_QuickForm::createElement('radio', 'extra_'.$field_details[1], $option_details[1], $option_details[2].'<br />', $option_details[1]); $group[] =& HTML_QuickForm::createElement('radio', 'extra_'.$field_details[1], $option_details[1], $option_details[2].'<br />', $option_details[1]);
} }
@ -221,16 +215,14 @@ foreach($extra as $id => $field_details)
break; break;
case USER_FIELD_TYPE_SELECT: case USER_FIELD_TYPE_SELECT:
$options = array(); $options = array();
foreach($field_details[9] as $option_id => $option_details) foreach($field_details[9] as $option_id => $option_details) {
{
$options[$option_details[1]] = $option_details[2]; $options[$option_details[1]] = $option_details[2];
} }
$form->addElement('select','extra_'.$field_details[1],$field_details[3],$options,''); $form->addElement('select','extra_'.$field_details[1],$field_details[3],$options,'');
break; break;
case USER_FIELD_TYPE_SELECT_MULTIPLE: case USER_FIELD_TYPE_SELECT_MULTIPLE:
$options = array(); $options = array();
foreach($field_details[9] as $option_id => $option_details) foreach($field_details[9] as $option_id => $option_details) {
{
$options[$option_details[1]] = $option_details[2]; $options[$option_details[1]] = $option_details[2];
} }
$form->addElement('select', 'extra_'.$field_details[1], $field_details[3], $options, array('multiple' => 'multiple')); $form->addElement('select', 'extra_'.$field_details[1], $field_details[3], $options, array('multiple' => 'multiple'));
@ -250,14 +242,10 @@ foreach($extra as $id => $field_details)
$form->applyFilter('theme', 'trim'); $form->applyFilter('theme', 'trim');
break; break;
case USER_FIELD_TYPE_DOUBLE_SELECT: case USER_FIELD_TYPE_DOUBLE_SELECT:
foreach ($field_details[9] as $key=>$element) foreach ($field_details[9] as $key => $element) {
{ if ($element[2][0] == '*') {
if ($element[2][0] == '*')
{
$values['*'][$element[0]] = str_replace('*','',$element[2]); $values['*'][$element[0]] = str_replace('*','',$element[2]);
} } else {
else
{
$values[0][$element[0]] = $element[2]; $values[0][$element[0]] = $element[2];
} }
} }
@ -269,21 +257,16 @@ foreach($extra as $id => $field_details)
if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]); if ($field_details[7] == 0) $form->freeze('extra_'.$field_details[1]);
// recoding the selected values for double : if the user has selected certain values, we have to assign them to the correct select form // recoding the selected values for double : if the user has selected certain values, we have to assign them to the correct select form
if (key_exists('extra_'.$field_details[1], $extra_data)) if (key_exists('extra_'.$field_details[1], $extra_data)) {
{
// exploding all the selected values (of both select forms) // exploding all the selected values (of both select forms)
$selected_values = explode(';', $extra_data['extra_'.$field_details[1]]); $selected_values = explode(';', $extra_data['extra_'.$field_details[1]]);
$extra_data['extra_'.$field_details[1]] = array(); $extra_data['extra_'.$field_details[1]] = array();
// looping through the selected values and assigning the selected values to either the first or second select form // looping through the selected values and assigning the selected values to either the first or second select form
foreach ($selected_values as $key=>$selected_value) foreach ($selected_values as $key => $selected_value) {
{ if (key_exists($selected_value, $values[0])) {
if (key_exists($selected_value,$values[0]))
{
$extra_data['extra_'.$field_details[1]]['extra_'.$field_details[1]] = $selected_value; $extra_data['extra_'.$field_details[1]]['extra_'.$field_details[1]] = $selected_value;
} } else {
else
{
$extra_data['extra_'.$field_details[1]]['extra_'.$field_details[1].'*'] = $selected_value; $extra_data['extra_'.$field_details[1]]['extra_'.$field_details[1].'*'] = $selected_value;
} }
} }
@ -296,7 +279,6 @@ foreach($extra as $id => $field_details)
} }
} }
// Set default values // Set default values
$defaults['admin']['platform_admin'] = 0; $defaults['admin']['platform_admin'] = 0;
$defaults['mail']['send_mail'] = 1; $defaults['mail']['send_mail'] = 1;
@ -312,6 +294,7 @@ $defaults['radio_expiration_date'] = 0;
$defaults['status'] = STUDENT; $defaults['status'] = STUDENT;
$defaults = array_merge($defaults, $extra_data); $defaults = array_merge($defaults, $extra_data);
$form->setDefaults($defaults); $form->setDefaults($defaults);
// Submit button // Submit button
/* /*
$form->addElement('style_submit_button', 'submit', get_lang('Add'), 'class="add"'); $form->addElement('style_submit_button', 'submit', get_lang('Add'), 'class="add"');
@ -323,11 +306,9 @@ $html_results_enabled[] = FormValidator :: createElement ('style_submit_button',
$form->addGroup($html_results_enabled); $form->addGroup($html_results_enabled);
// Validate form // Validate form
if( $form->validate()) if( $form->validate()) {
{
$check = Security::check_token('post'); $check = Security::check_token('post');
if($check) if ($check) {
{
$user = $form->exportValues(); $user = $form->exportValues();
$picture_element = & $form->getElement('picture'); $picture_element = & $form->getElement('picture');
@ -347,22 +328,16 @@ if( $form->validate())
$platform_admin = intval($user['admin']['platform_admin']); $platform_admin = intval($user['admin']['platform_admin']);
$send_mail = intval($user['mail']['send_mail']); $send_mail = intval($user['mail']['send_mail']);
$hr_dept_id = intval($user['hr_dept_id']); $hr_dept_id = intval($user['hr_dept_id']);
if(count($extAuthSource) > 0 && $user['password']['password_auto'] == '2') if (count($extAuthSource) > 0 && $user['password']['password_auto'] == '2') {
{
$auth_source = $user['password']['auth_source']; $auth_source = $user['password']['auth_source'];
$password = 'PLACEHOLDER'; $password = 'PLACEHOLDER';
} } else {
else
{
$auth_source = PLATFORM_AUTH_SOURCE; $auth_source = PLATFORM_AUTH_SOURCE;
$password = $user['password']['password_auto'] == '1' ? api_generate_password() : $user['password']['password']; $password = $user['password']['password_auto'] == '1' ? api_generate_password() : $user['password']['password'];
} }
if ($user['radio_expiration_date']=='1' ) if ($user['radio_expiration_date'] == '1') {
{
$expiration_date = $user['expiration_date']; $expiration_date = $user['expiration_date'];
} } else {
else
{
$expiration_date = '0000-00-00 00:00:00'; $expiration_date = '0000-00-00 00:00:00';
} }
$active = intval($user['active']); $active = intval($user['active']);
@ -388,8 +363,8 @@ if( $form->validate())
@mkdir($picture_path, $perm, true); @mkdir($picture_path, $perm, true);
} }
$picture_infos=@getimagesize($_FILES['picture']['tmp_name']); $picture_info = @getimagesize($_FILES['picture']['tmp_name']);
$type=$picture_infos[2]; $type=$picture_info[2];
$small_picture = UserManager::resize_picture($_FILES['picture']['tmp_name'], 22); $small_picture = UserManager::resize_picture($_FILES['picture']['tmp_name'], 22);
$medium_picture = UserManager::resize_picture($_FILES['picture']['tmp_name'], 85); $medium_picture = UserManager::resize_picture($_FILES['picture']['tmp_name'], 85);
$normal_picture = UserManager::resize_picture($_FILES['picture']['tmp_name'], 200); $normal_picture = UserManager::resize_picture($_FILES['picture']['tmp_name'], 200);
@ -405,21 +380,17 @@ if( $form->validate())
} }
$extras = array(); $extras = array();
foreach($user as $key => $value) foreach($user as $key => $value) {
{ if (substr($key, 0, 6) == 'extra_') { //an extra field
if(substr($key,0,6)=='extra_') //an extra field
{
$myres = UserManager::update_extra_field_value($user_id, substr($key, 6), $value); $myres = UserManager::update_extra_field_value($user_id, substr($key, 6), $value);
} }
} }
if ($platform_admin) if ($platform_admin) {
{
$sql = "INSERT INTO $table_admin SET user_id = '".$user_id."'"; $sql = "INSERT INTO $table_admin SET user_id = '".$user_id."'";
api_sql_query($sql,__FILE__,__LINE__); Database::query($sql,__FILE__,__LINE__);
} }
if (!empty ($email) && $send_mail) if (!empty($email) && $send_mail) {
{
$recipient_name = api_get_person_name($firstname, $lastname, null, PERSON_NAME_EMAIL_ADDRESS); $recipient_name = api_get_person_name($firstname, $lastname, null, PERSON_NAME_EMAIL_ADDRESS);
$emailsubject = '['.api_get_setting('siteName').'] '.get_lang('YourReg').' '.api_get_setting('siteName'); $emailsubject = '['.api_get_setting('siteName').'] '.get_lang('YourReg').' '.api_get_setting('siteName');
@ -436,36 +407,29 @@ if( $form->validate())
else { else {
$emailbody = get_lang('Dear')." ".stripslashes(api_get_person_name($firstname, $lastname)).",\n\n".get_lang('YouAreReg')." ".api_get_setting('siteName') ." ".get_lang('Settings')." ". $username ."\n". get_lang('Pass')." : ".stripslashes($password)."\n\n" .get_lang('Address') ." ". api_get_setting('siteName') ." ". get_lang('Is') ." : ". $_configuration['root_web'] ."\n\n". get_lang('Problem'). "\n\n". get_lang('Formula').",\n\n".api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'))."\n". get_lang('Manager'). " ".api_get_setting('siteName')."\nT. ".api_get_setting('administratorTelephone')."\n" .get_lang('Email') ." : ".api_get_setting('emailAdministrator'); $emailbody = get_lang('Dear')." ".stripslashes(api_get_person_name($firstname, $lastname)).",\n\n".get_lang('YouAreReg')." ".api_get_setting('siteName') ." ".get_lang('Settings')." ". $username ."\n". get_lang('Pass')." : ".stripslashes($password)."\n\n" .get_lang('Address') ." ". api_get_setting('siteName') ." ". get_lang('Is') ." : ". $_configuration['root_web'] ."\n\n". get_lang('Problem'). "\n\n". get_lang('Formula').",\n\n".api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'))."\n". get_lang('Manager'). " ".api_get_setting('siteName')."\nT. ".api_get_setting('administratorTelephone')."\n" .get_lang('Email') ." : ".api_get_setting('emailAdministrator');
} }
@api_mail($recipient_name, $email, $emailsubject, $emailbody, $sender_name, $email_admin); @api_mail($recipient_name, $email, $emailsubject, $emailbody, $sender_name, $email_admin);
} }
Security::clear_token(); Security::clear_token();
if(isset($user['submit_plus'])) if (isset($user['submit_plus'])) {
{
//we want to add more. Prepare report message and redirect to the same page (to clean the form) //we want to add more. Prepare report message and redirect to the same page (to clean the form)
$tok = Security::get_token(); $tok = Security::get_token();
header('Location: user_add.php?message='.urlencode(get_lang('UserAdded')).'&sec_token='.$tok); header('Location: user_add.php?message='.urlencode(get_lang('UserAdded')).'&sec_token='.$tok);
exit (); exit ();
} } else {
else
{
$tok = Security::get_token(); $tok = Security::get_token();
header('Location: user_list.php?action=show_message&message='.urlencode(get_lang('UserAdded')).'&sec_token='.$tok); header('Location: user_list.php?action=show_message&message='.urlencode(get_lang('UserAdded')).'&sec_token='.$tok);
exit (); exit ();
} }
} }
} } else {
else if (isset($_POST['submit'])) {
{
if(isset($_POST['submit']))
{
Security::clear_token(); Security::clear_token();
} }
$token = Security::get_token(); $token = Security::get_token();
$form->addElement('hidden', 'sec_token'); $form->addElement('hidden', 'sec_token');
$form->setConstants(array('sec_token' => $token)); $form->setConstants(array('sec_token' => $token));
} }
// Display form // Display form
Display::display_header($tool_name); Display::display_header($tool_name);
//api_display_tool_title($tool_name); //api_display_tool_title($tool_name);
@ -473,10 +437,6 @@ if(!empty($message)){
Display::display_normal_message(stripslashes($message)); Display::display_normal_message(stripslashes($message));
} }
$form->display(); $form->display();
/*
============================================================================== // Footer
FOOTER
==============================================================================
*/
Display::display_footer(); Display::display_footer();
?>

206
main/admin/user_edit.php
Unescape View File

@ -1,48 +1,39 @@
<?php // $Id: user_edit.php 22233 2009-07-20 09:54:05Z ivantcholakov $ <?php // $Id: user_edit.php 22233 2009-07-20 09:54:05Z ivantcholakov $
/* /* For licensing terms, see /dokeos_license.txt */
==============================================================================
Dokeos - elearning and course management software
Copyright (c) 2004-2008 Dokeos SPRL
Copyright (c) 2003 Ghent University (UGent)
Copyright (c) 2001 Universite catholique de Louvain (UCL)
Copyright (c) Olivier Brouckaert
Copyright (c) Bart Mollet, Hogeschool Gent
For a full list of contributors, see "credits.txt".
The full license can be read in "license.txt".
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
of the License, or (at your option) any later version.
See the GNU General Public License for more details.
Contact: Dokeos, rue du Corbeau, 108, B-1030 Brussels, Belgium, info@dokeos.com
==============================================================================
*/
/** /**
============================================================================== ==============================================================================
* @package dokeos.admin * @package dokeos.admin
============================================================================== ==============================================================================
*/ */
// name of the language file that needs to be included
// Language files that should be included
$language_file = array('admin', 'registration'); $language_file = array('admin', 'registration');
$cidReset = true; $cidReset = true;
include('../inc/global.inc.php');
include '../inc/global.inc.php';
$this_section = SECTION_PLATFORM_ADMIN; $this_section = SECTION_PLATFORM_ADMIN;
api_protect_admin_script(); api_protect_admin_script();
$htmlHeadXtra[] = ' $htmlHeadXtra[] = '
<script language="JavaScript" type="text/JavaScript"> <script type="text/javascript">
<!-- <!--
function enable_expiration_date() { //v2.0 function enable_expiration_date() { //v2.0
document.user_edit.radio_expiration_date[0].checked=false; document.user_edit.radio_expiration_date[0].checked=false;
document.user_edit.radio_expiration_date[1].checked=true; document.user_edit.radio_expiration_date[1].checked=true;
} }
function password_switch_radio_button(){
var input_elements = document.getElementsByTagName("input");
for (var i = 0; i < input_elements.length; i++) {
if(input_elements.item(i).name == "reset_password" && input_elements.item(i).value == "2") {
input_elements.item(i).checked = true;
}
}
}
function display_drh_list(){ function display_drh_list(){
if(document.getElementById("status_select").value=='.STUDENT.') if(document.getElementById("status_select").value=='.STUDENT.')
{ {
@ -63,13 +54,14 @@ function show_image(image,width,height) {
//--> //-->
</script>'; </script>';
$libpath = api_get_path(LIBRARY_PATH);
require_once $libpath.'fileManage.lib.php';
require_once $libpath.'fileUpload.lib.php';
require_once $libpath.'usermanager.lib.php';
require_once $libpath.'formvalidator/FormValidator.class.php';
require_once $libpath.'image.lib.php';
require_once $libpath.'mail.lib.inc.php';
require_once(api_get_path(LIBRARY_PATH).'fileManage.lib.php');
require_once(api_get_path(LIBRARY_PATH).'fileUpload.lib.php');
require_once(api_get_path(LIBRARY_PATH).'usermanager.lib.php');
require_once (api_get_path(LIBRARY_PATH).'formvalidator/FormValidator.class.php');
require_once (api_get_path(LIBRARY_PATH).'image.lib.php');
require_once(api_get_path(INCLUDE_PATH).'lib/mail.lib.inc.php');
$user_id = isset($_GET['user_id']) ? intval($_GET['user_id']) : intval($_POST['user_id']); $user_id = isset($_GET['user_id']) ? intval($_GET['user_id']) : intval($_POST['user_id']);
$noPHP_SELF = true; $noPHP_SELF = true;
$tool_name = get_lang('ModifyUserInfo'); $tool_name = get_lang('ModifyUserInfo');
@ -80,13 +72,13 @@ $interbreadcrumb[]=array('url' => "user_list.php","name" => get_lang('UserList')
$table_user = Database::get_main_table(TABLE_MAIN_USER); $table_user = Database::get_main_table(TABLE_MAIN_USER);
$table_admin = Database::get_main_table(TABLE_MAIN_ADMIN); $table_admin = Database::get_main_table(TABLE_MAIN_ADMIN);
$sql = "SELECT u.*, a.user_id AS is_admin FROM $table_user u LEFT JOIN $table_admin a ON a.user_id = u.user_id WHERE u.user_id = '".$user_id."'"; $sql = "SELECT u.*, a.user_id AS is_admin FROM $table_user u LEFT JOIN $table_admin a ON a.user_id = u.user_id WHERE u.user_id = '".$user_id."'";
$res = api_sql_query($sql,__FILE__,__LINE__); $res = Database::query($sql, __FILE__, __LINE__);
if(mysql_num_rows($res) != 1) if (Database::num_rows($res) != 1) {
{
header('Location: user_list.php'); header('Location: user_list.php');
exit; exit;
} }
$user_data = mysql_fetch_array($res,MYSQL_ASSOC);
$user_data = Database::fetch_array($res, 'ASSOC');
$user_data['platform_admin'] = is_null($user_data['is_admin']) ? 0 : 1; $user_data['platform_admin'] = is_null($user_data['is_admin']) ? 0 : 1;
$user_data['send_mail'] = 0; $user_data['send_mail'] = 0;
$user_data['old_password'] = $user_data['password']; $user_data['old_password'] = $user_data['password'];
@ -99,8 +91,7 @@ $form = new FormValidator('user_edit','post','','',array('style' => 'width: 60%;
$form->addElement('header', '', $tool_name); $form->addElement('header', '', $tool_name);
$form->addElement('hidden', 'user_id', $user_id); $form->addElement('hidden', 'user_id', $user_id);
if (api_is_western_name_order()) if (api_is_western_name_order()) {
{
// Firstname // Firstname
$form->addElement('text', 'firstname', get_lang('FirstName')); $form->addElement('text', 'firstname', get_lang('FirstName'));
$form->applyFilter('firstname', 'html_filter'); $form->applyFilter('firstname', 'html_filter');
@ -111,9 +102,7 @@ if (api_is_western_name_order())
$form->applyFilter('lastname', 'html_filter'); $form->applyFilter('lastname', 'html_filter');
$form->applyFilter('lastname', 'trim'); $form->applyFilter('lastname', 'trim');
$form->addRule('lastname', get_lang('ThisFieldIsRequired'), 'required'); $form->addRule('lastname', get_lang('ThisFieldIsRequired'), 'required');
} } else {
else
{
// Lastname // Lastname
$form->addElement('text', 'lastname', get_lang('LastName')); $form->addElement('text', 'lastname', get_lang('LastName'));
$form->applyFilter('lastname', 'html_filter'); $form->applyFilter('lastname', 'html_filter');
@ -137,8 +126,7 @@ $form->addRule('email', get_lang('EmailWrong'), 'email');
$form->addRule('email', get_lang('EmailWrong'), 'required'); $form->addRule('email', get_lang('EmailWrong'), 'required');
// OpenID // OpenID
if(api_get_setting('openid_authentication')=='true') if (api_get_setting('openid_authentication') == 'true') {
{
$form->addElement('text', 'openid', get_lang('OpenIDURL'), array('size' => '40')); $form->addElement('text', 'openid', get_lang('OpenIDURL'), array('size' => '40'));
} }
@ -149,8 +137,7 @@ $form->addElement('text','phone',get_lang('PhoneNumber'));
$form->addElement('file', 'picture', get_lang('AddPicture')); $form->addElement('file', 'picture', get_lang('AddPicture'));
$allowed_picture_types = array ('jpg', 'jpeg', 'png', 'gif'); $allowed_picture_types = array ('jpg', 'jpeg', 'png', 'gif');
$form->addRule('picture', get_lang('OnlyImagesAllowed').' ('.implode(',', $allowed_picture_types).')', 'filetype', $allowed_picture_types); $form->addRule('picture', get_lang('OnlyImagesAllowed').' ('.implode(',', $allowed_picture_types).')', 'filetype', $allowed_picture_types);
if (strlen($user_data['picture_uri']) > 0 ) if (strlen($user_data['picture_uri']) > 0) {
{
$form->addElement('checkbox', 'delete_picture', '', get_lang('DelImage')); $form->addElement('checkbox', 'delete_picture', '', get_lang('DelImage'));
} }
@ -167,8 +154,7 @@ if(count($extAuthSource) > 0)
{ {
$group[] =& HTML_QuickForm::createElement('radio', 'reset_password', null, get_lang('ExternalAuthentication').' ', 3); $group[] =& HTML_QuickForm::createElement('radio', 'reset_password', null, get_lang('ExternalAuthentication').' ', 3);
$auth_sources = array(); $auth_sources = array();
foreach($extAuthSource as $key => $info) foreach($extAuthSource as $key => $info) {
{
$auth_sources[$key] = $key; $auth_sources[$key] = $key;
} }
$group[] =& HTML_QuickForm::createElement('select', 'auth_source', null, $auth_sources); $group[] =& HTML_QuickForm::createElement('select', 'auth_source', null, $auth_sources);
@ -178,12 +164,12 @@ if(count($extAuthSource) > 0)
$form->addElement('radio', 'reset_password', null, get_lang('AutoGeneratePassword'), 1); $form->addElement('radio', 'reset_password', null, get_lang('AutoGeneratePassword'), 1);
$group = array(); $group = array();
$group[] =& HTML_QuickForm::createElement('radio', 'reset_password', null, null, 2); $group[] =& HTML_QuickForm::createElement('radio', 'reset_password', null, null, 2);
$group[] =& HTML_QuickForm::createElement('password', 'password',null,null); $group[] =& HTML_QuickForm::createElement('password', 'password', null, array('onkeydown' => 'javascript: password_switch_radio_button();'));
$form->addGroup($group, 'password', null, '', false); $form->addGroup($group, 'password', null, '', false);
// Status // Status
$status = api_get_status_langvars(); $status = api_get_status_langvars();
$form->addElement('select','status',get_lang('Status'),$status,'id="status_select" onchange="display_drh_list()"'); $form->addElement('select', 'status', get_lang('Status'), $status, array('id' => 'status_select', 'onchange' => 'javascript: display_drh_list();'));
//Language //Language
$form->addElement('select_language', 'language', get_lang('Language')); $form->addElement('select_language', 'language', get_lang('Language'));
@ -191,31 +177,28 @@ $form->addElement('select_language', 'language', get_lang('Language'));
$display = $user_data['status'] == STUDENT || $_POST['status'] == STUDENT ? 'block' : 'none'; $display = $user_data['status'] == STUDENT || $_POST['status'] == STUDENT ? 'block' : 'none';
$form->addElement('html', '<div id="drh_list" style="display:'.$display.';">'); $form->addElement('html', '<div id="drh_list" style="display:'.$display.';">');
$drh_select = $form->addElement('select', 'hr_dept_id', get_lang('Drh'), array(), 'id="drh_select"'); $drh_select = $form->addElement('select', 'hr_dept_id', get_lang('Drh'), array(), 'id="drh_select"');
$drh_list = UserManager :: get_user_list(array('status'=>DRH),array('lastname','firstname')); $drh_list = UserManager :: get_user_list(array('status' => DRH), api_sort_by_first_name() ? array('firstname', 'lastname') : array('lastname', 'firstname'));
if (count($drh_list) == 0) { if (count($drh_list) == 0) {
$drh_select->addOption('- '.get_lang('ThereIsNotStillAResponsible').' -',0); $drh_select->addOption('- '.get_lang('ThereIsNotStillAResponsible', '').' -', 0);
} else { } else {
$drh_select->addOption('- '.get_lang('SelectAResponsible').' -', 0); $drh_select->addOption('- '.get_lang('SelectAResponsible').' -', 0);
} }
foreach($drh_list as $drh) foreach($drh_list as $drh) {
{
$drh_select->addOption(api_get_person_name($drh['firstname'], $drh['lastname']), $drh['user_id']); $drh_select->addOption(api_get_person_name($drh['firstname'], $drh['lastname']), $drh['user_id']);
} }
$form->addElement('html', '</div>'); $form->addElement('html', '</div>');
// Platform admin // Platform admin
// Only when changing another user! // Only when changing another user!
if($user_id != $_SESSION['_uid']) if ($user_id != $_SESSION['_uid']) {
{
$group = array(); $group = array();
$group[] =& HTML_QuickForm::createElement('radio', 'platform_admin', null, get_lang('Yes'), 1); $group[] =& HTML_QuickForm::createElement('radio', 'platform_admin', null, get_lang('Yes'), 1);
$group[] =& HTML_QuickForm::createElement('radio', 'platform_admin', null, get_lang('No'), 0); $group[] =& HTML_QuickForm::createElement('radio', 'platform_admin', null, get_lang('No'), 0);
if ($user_data['status'] <> 5) { if ($user_data['status'] <> 5) {
$form->addGroup($group, 'admin', get_lang('PlatformAdmin'), '&nbsp;', false); $form->addGroup($group, 'admin', get_lang('PlatformAdmin'), '&nbsp;', false);
} }
} }
// Send email // Send email
@ -227,13 +210,12 @@ $form->addGroup($group, 'mail', get_lang('SendMailToNewUser'), '&nbsp;',false);
// Registration Date // Registration Date
$form->addElement('static', 'registration_date', get_lang('RegistrationDate'), $user_data['registration_date']); $form->addElement('static', 'registration_date', get_lang('RegistrationDate'), $user_data['registration_date']);
if(! $user_data['platform_admin'] ) if (!$user_data['platform_admin']) {
{
// Expiration Date // Expiration Date
$form->addElement('radio', 'radio_expiration_date', get_lang('ExpirationDate'), get_lang('NeverExpires'), 0); $form->addElement('radio', 'radio_expiration_date', get_lang('ExpirationDate'), get_lang('NeverExpires'), 0);
$group = array (); $group = array ();
$group[] = & $form->createElement('radio', 'radio_expiration_date', null, get_lang('On'), 1); $group[] = & $form->createElement('radio', 'radio_expiration_date', null, get_lang('On'), 1);
$group[] = & $form->createElement('datepicker', 'expiration_date',null, array ('form_name' => $form->getAttribute('name'), 'onChange'=>'enable_expiration_date()')); $group[] = & $form->createElement('datepicker', 'expiration_date', null, array('form_name' => $form->getAttribute('name'), 'onchange' => 'javascript: enable_expiration_date();'));
$form->addGroup($group, 'max_member_group', null, '', false); $form->addGroup($group, 'max_member_group', null, '', false);
// Active account or inactive account // Active account or inactive account
@ -244,14 +226,11 @@ if(! $user_data['platform_admin'] )
// EXTRA FIELDS // EXTRA FIELDS
$extra = UserManager::get_extra_fields(0, 50, 5, 'ASC'); $extra = UserManager::get_extra_fields(0, 50, 5, 'ASC');
foreach($extra as $id => $field_details) foreach ($extra as $id => $field_details) {
{ if ($field_details[6] == 0) {
if($field_details[6] == 0)
{
continue; continue;
} }
switch($field_details[2]) switch ($field_details[2]) {
{
case USER_FIELD_TYPE_TEXT: case USER_FIELD_TYPE_TEXT:
$form->addElement('text', 'extra_'.$field_details[1], $field_details[3], array('size' => 40)); $form->addElement('text', 'extra_'.$field_details[1], $field_details[3], array('size' => 40));
$form->applyFilter('extra_'.$field_details[1], 'stripslashes'); $form->applyFilter('extra_'.$field_details[1], 'stripslashes');
@ -265,8 +244,7 @@ foreach($extra as $id => $field_details)
break; break;
case USER_FIELD_TYPE_RADIO: case USER_FIELD_TYPE_RADIO:
$group = array(); $group = array();
foreach($field_details[9] as $option_id => $option_details) foreach ($field_details[9] as $option_id => $option_details) {
{
$options[$option_details[1]] = $option_details[2]; $options[$option_details[1]] = $option_details[2];
$group[] =& HTML_QuickForm::createElement('radio', 'extra_'.$field_details[1], $option_details[1], $option_details[2].'<br />', $option_details[1]); $group[] =& HTML_QuickForm::createElement('radio', 'extra_'.$field_details[1], $option_details[1], $option_details[2].'<br />', $option_details[1]);
} }
@ -274,16 +252,14 @@ foreach($extra as $id => $field_details)
break; break;
case USER_FIELD_TYPE_SELECT: case USER_FIELD_TYPE_SELECT:
$options = array(); $options = array();
foreach($field_details[9] as $option_id => $option_details) foreach ($field_details[9] as $option_id => $option_details) {
{
$options[$option_details[1]] = $option_details[2]; $options[$option_details[1]] = $option_details[2];
} }
$form->addElement('select', 'extra_'.$field_details[1], $field_details[3], $options, ''); $form->addElement('select', 'extra_'.$field_details[1], $field_details[3], $options, '');
break; break;
case USER_FIELD_TYPE_SELECT_MULTIPLE: case USER_FIELD_TYPE_SELECT_MULTIPLE:
$options = array(); $options = array();
foreach($field_details[9] as $option_id => $option_details) foreach ($field_details[9] as $option_id => $option_details) {
{
$options[$option_details[1]] = $option_details[2]; $options[$option_details[1]] = $option_details[2];
} }
$form->addElement('select', 'extra_'.$field_details[1], $field_details[3], $options, array('multiple' => 'multiple')); $form->addElement('select', 'extra_'.$field_details[1], $field_details[3], $options, array('multiple' => 'multiple'));
@ -305,23 +281,19 @@ foreach($extra as $id => $field_details)
} }
} }
// Submit button // Submit button
$form->addElement('style_submit_button', 'submit', get_lang('ModifyInformation'), 'class="save"'); $form->addElement('style_submit_button', 'submit', get_lang('ModifyInformation'), 'class="save"');
// Set default values // Set default values
$user_data['reset_password'] = 0;
$expiration_date = $user_data['expiration_date']; $expiration_date = $user_data['expiration_date'];
if ($expiration_date=='0000-00-00 00:00:00') if ($expiration_date == '0000-00-00 00:00:00') {
{
$user_data['radio_expiration_date'] = 0; $user_data['radio_expiration_date'] = 0;
$user_data['expiration_date'] = array(); $user_data['expiration_date'] = array();
$user_data['expiration_date']['d'] = date('d'); $user_data['expiration_date']['d'] = date('d');
$user_data['expiration_date']['F'] = date('m'); $user_data['expiration_date']['F'] = date('m');
$user_data['expiration_date']['Y'] = date('Y'); $user_data['expiration_date']['Y'] = date('Y');
} } else {
else
{
$user_data['radio_expiration_date'] = 1; $user_data['radio_expiration_date'] = 1;
$user_data['expiration_date'] = array(); $user_data['expiration_date'] = array();
$user_data['expiration_date']['d'] = substr($expiration_date, 8, 2); $user_data['expiration_date']['d'] = substr($expiration_date, 8, 2);
@ -330,10 +302,8 @@ else
} }
$form->setDefaults($user_data); $form->setDefaults($user_data);
// Validate form // Validate form
if( $form->validate()) if ( $form->validate()) {
{
$user = $form->exportValues(); $user = $form->exportValues();
$picture_element = & $form->getElement('picture'); $picture_element = & $form->getElement('picture');
@ -345,8 +315,7 @@ if( $form->validate())
$picture_path_info = UserManager::get_user_picture_path_by_id($user_id, 'system', true); $picture_path_info = UserManager::get_user_picture_path_by_id($user_id, 'system', true);
$picture_path = $picture_path_info['dir']; $picture_path = $picture_path_info['dir'];
if ($user['delete_picture'] || !empty($picture['name'])) if ($user['delete_picture'] || !empty($picture['name'])) {
{
@unlink($picture_path.'small_'.$picture_uri); @unlink($picture_path.'small_'.$picture_uri);
@unlink($picture_path.'medium_'.$picture_uri); @unlink($picture_path.'medium_'.$picture_uri);
@unlink($picture_path.'big_'.$picture_uri); @unlink($picture_path.'big_'.$picture_uri);
@ -354,13 +323,11 @@ if( $form->validate())
$picture_uri = ''; $picture_uri = '';
} }
if (!empty($picture['name'])) if (!empty($picture['name'])) {
{
$picture_uri = $user_id.'_'.uniqid('').'_'.replace_dangerous_char($picture['name']); $picture_uri = $user_id.'_'.uniqid('').'_'.replace_dangerous_char($picture['name']);
$perm = api_get_setting('permissions_for_new_directories'); $perm = api_get_setting('permissions_for_new_directories');
$perm = octdec(!empty($perm) ? $perm : '0770'); $perm = octdec(!empty($perm) ? $perm : '0770');
if(!file_exists($picture_path)) if (!file_exists($picture_path)) {
{
@mkdir($picture_path, $perm, true); @mkdir($picture_path, $perm, true);
} }
$picture_info = @getimagesize($_FILES['picture']['tmp_name']); $picture_info = @getimagesize($_FILES['picture']['tmp_name']);
@ -391,66 +358,51 @@ if( $form->validate())
$reset_password = intval($user['reset_password']); $reset_password = intval($user['reset_password']);
$hr_dept_id = intval($user['hr_dept_id']); $hr_dept_id = intval($user['hr_dept_id']);
$language = $user['language']; $language = $user['language'];
if ($user['radio_expiration_date']=='1' && ! $user_data['platform_admin'] ) if ($user['radio_expiration_date'] == '1' && !$user_data['platform_admin']) {
{
$expiration_date=$user['expiration_date']; $expiration_date=$user['expiration_date'];
} } else {
else
{
$expiration_date='0000-00-00 00:00:00'; $expiration_date='0000-00-00 00:00:00';
} }
$active = $user_data['platform_admin'] ? 1 : intval($user['active']); $active = $user_data['platform_admin'] ? 1 : intval($user['active']);
if( $reset_password == 0) if ($reset_password == 0) {
{
$password = null; $password = null;
$auth_source = $user_data['auth_source']; $auth_source = $user_data['auth_source'];
} }
elseif($reset_password == 1) elseif($reset_password == 1) {
{
$password = api_generate_password(); $password = api_generate_password();
$auth_source = PLATFORM_AUTH_SOURCE; $auth_source = PLATFORM_AUTH_SOURCE;
} }
elseif($reset_password == 2) elseif($reset_password == 2) {
{
$password = $user['password']; $password = $user['password'];
$auth_source = PLATFORM_AUTH_SOURCE; $auth_source = PLATFORM_AUTH_SOURCE;
} }
elseif($reset_password == 3) elseif($reset_password == 3) {
{
$password = $user['password']; $password = $user['password'];
$auth_source = $user['auth_source']; $auth_source = $user['auth_source'];
} }
UserManager::update_user($user_id, $firstname, $lastname, $username, $password, $auth_source, $email, $status, $official_code, $phone, $picture_uri, $expiration_date, $active, null, $hr_dept_id, null, $language); UserManager::update_user($user_id, $firstname, $lastname, $username, $password, $auth_source, $email, $status, $official_code, $phone, $picture_uri, $expiration_date, $active, null, $hr_dept_id, null, $language);
if(api_get_setting('openid_authentication')=='true' && !empty($user['openid'])) if (api_get_setting('openid_authentication') == 'true' && !empty($user['openid'])) {
{
$up = UserManager::update_openid($user_id,$user['openid']); $up = UserManager::update_openid($user_id,$user['openid']);
} }
if($user_id != $_SESSION['_uid']) if ($user_id != $_SESSION['_uid']) {
{ if ($platform_admin == 1) {
if($platform_admin == 1)
{
$sql = "INSERT IGNORE INTO $table_admin SET user_id = '".$user_id."'"; $sql = "INSERT IGNORE INTO $table_admin SET user_id = '".$user_id."'";
api_sql_query($sql,__FILE__,__LINE__); Database::query($sql, __FILE__, __LINE__);
} } else {
else
{
$sql = "DELETE FROM $table_admin WHERE user_id = '".$user_id."'"; $sql = "DELETE FROM $table_admin WHERE user_id = '".$user_id."'";
api_sql_query($sql,__FILE__,__LINE__); Database::query($sql, __FILE__, __LINE__);
} }
} }
$extras = array(); $extras = array();
foreach($user as $key => $value) foreach($user as $key => $value) {
{ if(substr($key, 0, 6) == 'extra_') { //an extra field
if(substr($key,0,6)=='extra_') //an extra field
{
$myres = UserManager::update_extra_field_value($user_id, substr($key, 6), $value); $myres = UserManager::update_extra_field_value($user_id, substr($key, 6), $value);
} }
} }
if (!empty ($email) && $send_mail) if (!empty ($email) && $send_mail) {
{
$recipient_name = api_get_person_name($firstname, $lastname, null, PERSON_NAME_EMAIL_ADDRESS); $recipient_name = api_get_person_name($firstname, $lastname, null, PERSON_NAME_EMAIL_ADDRESS);
$emailsubject = '['.api_get_setting('siteName').'] '.get_lang('YourReg').' '.api_get_setting('siteName'); $emailsubject = '['.api_get_setting('siteName').'] '.get_lang('YourReg').' '.api_get_setting('siteName');
$sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS); $sender_name = api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'), null, PERSON_NAME_EMAIL_ADDRESS);
@ -467,15 +419,12 @@ if( $form->validate())
$emailbody=get_lang('Dear')." ".stripslashes(api_get_person_name($firstname, $lastname)).",\n\n".get_lang('YouAreReg')." ". api_get_setting('siteName') ." ".get_lang('Settings')." ". $username ."\n". get_lang('Pass')." : ".stripslashes($password)."\n\n" .get_lang('Address') ." ". api_get_setting('siteName') ." ". get_lang('Is') ." : ". $_configuration['root_web'] ."\n\n". get_lang('Problem'). "\n\n". get_lang('Formula').",\n\n".api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'))."\n". get_lang('Manager'). " ".api_get_setting('siteName')."\nT. ".api_get_setting('administratorTelephone')."\n" .get_lang('Email') ." : ".api_get_setting('emailAdministrator'); $emailbody=get_lang('Dear')." ".stripslashes(api_get_person_name($firstname, $lastname)).",\n\n".get_lang('YouAreReg')." ". api_get_setting('siteName') ." ".get_lang('Settings')." ". $username ."\n". get_lang('Pass')." : ".stripslashes($password)."\n\n" .get_lang('Address') ." ". api_get_setting('siteName') ." ". get_lang('Is') ." : ". $_configuration['root_web'] ."\n\n". get_lang('Problem'). "\n\n". get_lang('Formula').",\n\n".api_get_person_name(api_get_setting('administratorName'), api_get_setting('administratorSurname'))."\n". get_lang('Manager'). " ".api_get_setting('siteName')."\nT. ".api_get_setting('administratorTelephone')."\n" .get_lang('Email') ." : ".api_get_setting('emailAdministrator');
} }
$emailbody = get_lang('Dear')." ".stripslashes("$firstname $lastname").",\n\n".get_lang('YouAreReg')." ". api_get_setting('siteName') ." ".get_lang('Settings')." ". $username; $emailbody = get_lang('Dear')." ".stripslashes("$firstname $lastname").",\n\n".get_lang('YouAreReg')." ". api_get_setting('siteName') ." ".get_lang('Settings')." ". $username;
// Send password by e-mail if it has been modified, even if encrypted in DB (it doesn't make sense to send an e-mail with login info without the password, even if the password is encrypted) // Send password by e-mail if it has been modified, even if encrypted in DB (it doesn't make sense to send an e-mail with login info without the password, even if the password is encrypted)
if($reset_password > 0) if ($reset_password > 0) {
{
$emailbody .= "\n".get_lang('Pass')." : ".stripslashes($password); $emailbody .= "\n".get_lang('Pass')." : ".stripslashes($password);
} }
@api_mail($recipient_name, $email, $emailsubject, $emailbody, $sender_name, $email_admin); @api_mail($recipient_name, $email, $emailsubject, $emailbody, $sender_name, $email_admin);
} }
$tok = Security::get_token(); $tok = Security::get_token();
header('Location: user_list.php?action=show_message&message='.urlencode(get_lang('UserUpdated')).'&sec_token='.$tok); header('Location: user_list.php?action=show_message&message='.urlencode(get_lang('UserUpdated')).'&sec_token='.$tok);
@ -495,8 +444,9 @@ $img_attributes = 'src="'.$image_file.'?rand='.time().'" '
.'alt="'.api_get_person_name($user_data['firstname'], $user_data['lastname']).'" ' .'alt="'.api_get_person_name($user_data['firstname'], $user_data['lastname']).'" '
.'style="float:'.($text_dir == 'rtl' ? 'left' : 'right').'; padding:5px;" '; .'style="float:'.($text_dir == 'rtl' ? 'left' : 'right').'; padding:5px;" ';
if ($image_size[0] > 300) //limit display width to 300px if ($image_size[0] > 300) { //limit display width to 300px
$img_attributes .= 'width="300" '; $img_attributes .= 'width="300" ';
}
// get the path,width and height from original picture // get the path,width and height from original picture
$big_image = $image_dir.'big_'.$image; $big_image = $image_dir.'big_'.$image;
@ -504,19 +454,15 @@ $big_image_size = @getimagesize(api_url_to_local_path($big_image));
$big_image_width = $big_image_size[0]; $big_image_width = $big_image_size[0];
$big_image_height = $big_image_size[1]; $big_image_height = $big_image_size[1];
$url_big_image = $big_image.'?rnd='.time(); $url_big_image = $big_image.'?rnd='.time();
if ($image == '') { if ($image == '') {
echo '<img '.$img_attributes.' />'; echo '<img '.$img_attributes.' />';
} else { } else {
echo '<input type="image" '.$img_attributes.' onclick="return show_image(\''.$url_big_image.'\',\''.$big_image_width.'\',\''.$big_image_height.'\');"/>'; echo '<input type="image" '.$img_attributes.' onclick="javascript: return show_image(\''.$url_big_image.'\',\''.$big_image_width.'\',\''.$big_image_height.'\');"/>';
} }
// Display form // Display form
$form->display(); $form->display();
/*
============================================================================== // Footer
FOOTER
==============================================================================
*/
Display::display_footer(); Display::display_footer();
?>

Write Preview
Loading…
Cancel
Save