AMS/edituser.php at master · orangecola/AMS · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
<?php
	include_once('components/config.php');
	$Success=0;
	$noChanges=0;
	$usernameTaken=0;

	if(!($_SESSION['role'] == 'admin'))
	  {
		 header('Location: logout.php');
	  }

	if(!(isset($_GET['id']))) {
			header('Location: userlist.php');
	}

	$result = $user->getUser($_GET['id']);
	$result['password'] = "";

	if (!$result[0]) {
		header('Location: userlist.php');
	}

	if ($_SERVER['REQUEST_METHOD'] === 'POST') {


		$candidate['username'] 	= trim($_POST['username']);
		$candidate['password'] 	= password_hash(trim($_POST['password']), PASSWORD_DEFAULT);
		$candidate['role'] 		= trim($_POST['role']);
		$candidate['status']	= trim($_POST['status']);

		$same = true;

		foreach ($user->userFields as $value) {

			if ($candidate[$value] != $result[1][$value]) {
				$same = false;
				break;
			}
		}
		unset($value);

		if ($same) {
			$noChanges = 1;
		}
		else if (!$user->check($candidate['username']) and $candidate['username'] != $result[1]['username']) {
			$usernameTaken = 1;
		}
		else {
			$user->editUser($result[1], $candidate);
			$result = $user->getUser($_GET['id']);
			$result['password'] = "";

			$Success = 1;
		}
	}

	include('components/sidebar.php');
?>

<script>
	document.getElementById('userlist.php').setAttribute("class", "current-page");
</script>
<!-- page content -->
<div class="right_col" role="main">
  <div class="">
	<div class="page-title">
	  <div class="title_left">
		<h3>User Management</h3>
	  </div>
	</div>
	<div class="clearfix"></div>
	<div class="row">


	  <div class="col-md-12 col-sm-12 col-xs-12">
		<div class="x_panel">
		  <div class="x_title">
			<h2>Editing User <?php echo htmlentities($result[1]['username']);?></h2>

			<div class="clearfix"></div>
		  </div>
		  <div class="x_content">
		  <?php
		  if ($noChanges == 1) {echo '<div class="alert alert-error alert-dismissible fade in" role="alert">
			<button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">×</span>
			</button>
			<strong>Error</strong> No changes made
		  </div>';}
		  if ($usernameTaken == 1) {echo '<div class="alert alert-error alert-dismissible fade in" role="alert">
			<button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">×</span>
			</button>
			<strong>Error</strong> Username already exists
		  </div>';}
		  if ($Success == 1) {echo '<div class="alert alert-success alert-dismissible fade in" role="alert">
			<button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">×</span>
			</button>
			<strong>Success</strong> User edited successfully
		  </div>';}
		  ?>
			<br />
			<form id="demo-form2" data-parsley-validate class="form-horizontal form-label-left" method="post">

			  <div class="item form-group">
				<label class="control-label col-md-3 col-sm-3 col-xs-12" for="username">Username <span class="required">*</span>
				</label>
				<div class="col-md-6 col-sm-6 col-xs-12">
				  <input type="text" id="username" class="form-control col-md-7 col-xs-12 required"  name="username" data-validate-length-range="6">
				</div>
			  </div>
			  <div class="item form-group">
				<label class="control-label col-md-3 col-sm-3 col-xs-12" for="password">Password <span class="required">*</span>
				</label>
				<div class="col-md-6 col-sm-6 col-xs-12">
				  <input type="password" id="password" name="password" class="form-control col-md-7 col-xs-12 optional" placeholder="*unchanged*" >
				</div>
			  </div>
			  <div class="item form-group">
				<label class="control-label col-md-3 col-sm-3 col-xs-12">Confirm Password <span class="required">*</span></label>
				<div class="col-md-6 col-sm-6 col-xs-12">
				  <input id="password2" class="form-control col-md-7 col-xs-12 optional" type="password" data-validate-linked="password">
				</div>
			  </div>
			  <div class="item form-group">
				<label class="control-label col-md-3 col-sm-3 col-xs-12">User Role<span class="required">*</span></label>
				<div class="col-md-6 col-sm-6 col-xs-12">
				  <select class="form-control" name="role">
					<option id="user" value="user">User</option>
					<option id="admin" value="admin">Admin</option>
				  </select>
				</div>
			  </div>
			  <div class="item form-group">
				<label class="control-label col-md-3 col-sm-3 col-xs-12">Status<span class="required">*</span></label>
				<div class="col-md-6 col-sm-6 col-xs-12">
				  <select class="form-control" name="status">
					<option id="active" value="active">Active</option>
					<option id="inactive" value="inactive">Inactive</option>
				  </select>
				</div>
			  </div>
			  <div class="item form-group">
				<div class="col-md-6 col-sm-6 col-xs-12 col-md-offset-3">
				  <a href="userlist.php" class="btn btn-primary" type="cancel">Cancel</a>
				  <button class="btn btn-primary" type="reset">Reset</button>
				  <button type="submit" class="btn btn-success">Submit</button>
				</div>
			  </div>
			</form>
		  </div>
		</div>
	  </div>
	</div>
  </div>
</div>
<script>
	document.getElementById("username").setAttribute("value", <?php echo json_encode($result[1]['username']);?>);
	document.getElementById(<?php echo json_encode($result[1]['role']);?>).setAttribute("selected", "selected");
	document.getElementById(<?php echo json_encode($result[1]['status']);?>).setAttribute("selected", "selected");
</script>
<!-- /page content -->

<?php
	require 'components/footer.php';
	require 'components/closing.php';
?>