diff --git a/main/admin/user_edit.php b/main/admin/user_edit.php index 5e64350721..ea22d6060b 100644 --- a/main/admin/user_edit.php +++ b/main/admin/user_edit.php @@ -64,6 +64,14 @@ function show_image(image,width,height) { height = parseInt(height) + 20; window_x = window.open(image,\'windowX\',\'width=\'+ width + \', height=\'+ height + \' , resizable=0\'); } + +function confirmation(name) { + if (confirm("'.get_lang('AreYouSureToDelete', '').' " + name + " ?")) { + document.forms["profile"].submit(); + } else { + return false; + } +} //--> '; @@ -311,8 +319,7 @@ $form->setDefaults($user_data); $error_drh = false; // Validate form if ($form->validate()) { - - $user = $form->getSubmitValues(); + $user = $form->getSubmitValues(1); $is_user_subscribed_in_course = CourseManager::is_user_subscribed_in_course($user['user_id']); if ($user['status'] == DRH && $is_user_subscribed_in_course) { @@ -387,8 +394,15 @@ if ($form->validate()) { $value = date('Y-m-d',$time); } } - UserManager::update_extra_field_value($user_id, substr($key, 6), $value); - } + // For array $value -> if exists key 'tmp_name' then must not be empty + // This avoid delete from user field value table when doesn't upload a file + if (!is_array($value) || (!array_key_exists('tmp_name',$value) || !empty($value['tmp_name']))) { + UserManager::update_extra_field_value($user_id, substr($key, 6), $value); + } + } elseif (strpos($key,'remove_extra_') !== false) { + // To remove from user_field_value and folder + UserManager::update_extra_field_value($user_id, substr($key,13), key($value)); + } } $tok = Security::get_token(); header('Location: user_list.php?action=show_message&message='.urlencode(get_lang('UserUpdated')).'&sec_token='.$tok); diff --git a/main/auth/profile.php b/main/auth/profile.php index 65ca9b3000..35ebffa9a5 100644 --- a/main/auth/profile.php +++ b/main/auth/profile.php @@ -416,7 +416,7 @@ if ($form->validate()) { $wrong_current_password = false; // $user_data = $form->exportValues(); - $user_data = $form->getSubmitValues(); + $user_data = $form->getSubmitValues(1); // set password if a new one was provided if (!empty($user_data['password0'])) { @@ -565,6 +565,9 @@ if ($form->validate()) { } else { $extras[$new_key] = $value; } + } elseif (strpos($key, 'remove_extra_') !== false) { + // To remove from user_field_value table and user folder + UserManager::update_extra_field_value($user_id, substr($key,13), key($value)); } else { if (in_array($key, $available_values_to_modify)) { $sql .= " $key = '".Database::escape_string($value)."',"; @@ -623,7 +626,11 @@ if ($form->validate()) { if (is_array($extras) && count($extras)> 0) { foreach ($extras as $key => $value) { //3. Tags are process in the UserManager::update_extra_field_value by the UserManager::process_tags function - UserManager::update_extra_field_value(api_get_user_id(), $key, $value); + // For array $value -> if exists key 'tmp_name' then must not be empty + // This avoid delete from user field value table when doesn't upload a file + if (!is_array($value) || (!array_key_exists('tmp_name',$value) || !empty($value['tmp_name']))) { + UserManager::update_extra_field_value(api_get_user_id(), $key, $value); + } } } diff --git a/main/inc/lib/usermanager.lib.php b/main/inc/lib/usermanager.lib.php index 27c2289aea..1303c59495 100644 --- a/main/inc/lib/usermanager.lib.php +++ b/main/inc/lib/usermanager.lib.php @@ -1262,6 +1262,43 @@ class UserManager return $ok ? $filename : false; } + /** + * Update User extra field file type into {user_folder}/{$extra_field} + * @param $user_id The user internal identification number + * @param $extra_field The extra field name + * @param null $file The filename + * @param null $source_file The temporal filename + * @return bool|null return filename if success, but false + */ + public static function update_user_extra_file($user_id, $extra_field = '', $file = null, $source_file = null) + { + if (empty($user_id)) { + return false; + } + if (empty($source_file)) { + $source_file = $file; + } + + // User-reserved directory where extra file have to be placed. + $path_info = self::get_user_picture_path_by_id($user_id, 'system', true); + $path = $path_info['dir']; + if (!empty($extra_field)) { + $path .= $extra_field . '/'; + } + // If this directory does not exist - we create it. + if (!file_exists($path)) { + @mkdir($path, api_get_permissions_for_new_directories(), true); + } + + if (filter_extension($file)) { + if (@move_uploaded_file($source_file,$path.$file)) { + return $file; + } + } + return false; // this should be returned if anything went wrong with the upload + } + + /** * Deletes user photos. * Note: This method relies on configuration setting from main/inc/conf/profile.conf.php @@ -1308,7 +1345,7 @@ class UserManager foreach ($productions as $file) { $production_list .= '