engelsystem/www-ssl/admin/userChangeSecure.php

105 lines
3.8 KiB
PHP
Raw Blame History

<?php
require_once ('../bootstrap.php');
$title = "User-Liste";
$header = "Editieren der Engelliste";
include ("includes/header.php");
include ("includes/funktion_db_list.php");
if (IsSet ($_GET["enterUID"])) {
// UserID wurde mit uebergeben --> Aendern...
echo "Hallo,<br />" .
"hier kannst du den Eintrag &auml;ndern. Unter dem Punkt 'Gekommen' " .
"wird der Engel als anwesend markiert, ein Ja bei Aktiv bedeutet, " .
"dass der Engel aktiv war und damit ein Anspruch auf ein T-Shirt hat. " .
"Wenn T-Shirt ein 'Ja' enth&auml;lt, bedeutet dies, dass der Engel " .
"bereits sein T-Shirt erhalten hat.<br /><br />\n";
$SQL_CVS = "SELECT * FROM `UserCVS` WHERE `UID`='" . $_GET["enterUID"] . "'";
$Erg_CVS = mysql_query($SQL_CVS, $con);
if (mysql_num_rows($Erg_CVS) != 1)
echo "Sorry, der Engel (UID=" . $_GET["enterUID"] . ") wurde in der Liste nicht gefunden.";
else {
// Rename if is an group
if ($_GET["enterUID"] < 0) {
$SQLname = "SELECT `Name` FROM `UserGroups` WHERE `UID`='" . $_GET["enterUID"] . "'";
$ErgName = mysql_query($SQLname, $con);
echo mysql_error($con);
echo "<form action=\"./userSaveSecure.php?action=changeGroupName\" method=\"POST\">\n";
echo "<input type=\"hidden\" name=\"enterUID\" value=\"" . $_GET["enterUID"] . "\">\n";
echo "<input type=\"text\" name=\"GroupName\" value=\"" . mysql_result($ErgName, 0, "Name") . "\">\n";
echo "<input type=\"submit\" value=\"rename\">\n";
echo "</form>";
}
echo "<form action=\"./userSaveSecure.php?action=change\" method=\"POST\">\n";
echo "<table border=\"0\">\n";
echo "<input type=\"hidden\" name=\"Type\" value=\"Secure\">\n";
echo " <tr><td><br /><u>Rights of \"" . UID2Nick($_GET["enterUID"]) . "\":</u></td></tr>\n";
$CVS_Data = mysql_fetch_array($Erg_CVS);
$CVS_Data_i = 1;
foreach ($CVS_Data as $CVS_Data_Name => $CVS_Data_Value) {
$CVS_Data_i++;
//nur jeder zweiter sonst wird f<>r jeden text noch die position (Zahl) ausgegeben
if ($CVS_Data_i % 2 && $CVS_Data_Name != "UID") {
if ($CVS_Data_Name == "GroupID") {
if ($_GET["enterUID"] > 0) {
echo "<tr><td><b>Group</b></td>\n" .
"<td><select name=\"GroupID\">";
$SQL_Group = "SELECT * FROM `UserGroups`";
$Erg_Group = mysql_query($SQL_Group, $con);
for ($n = 0; $n < mysql_num_rows($Erg_Group); $n++) {
$UID = mysql_result($Erg_Group, $n, "UID");
echo "\t<option value=\"$UID\"";
if ($CVS_Data_Value == $UID)
echo " selected";
echo ">" . mysql_result($Erg_Group, $n, "Name") . "</option>\n";
}
echo "</select></td></tr>";
}
} else {
echo "<tr><td>$CVS_Data_Name</td>\n<td>";
echo "<input type=\"radio\" name=\"" . ($CVS_Data_i -1) . "\" value=\"Y\" ";
if ($CVS_Data_Value == "Y")
echo " checked";
echo ">allow \n";
echo "<input type=\"radio\" name=\"" . ($CVS_Data_i -1) . "\" value=\"N\" ";
if ($CVS_Data_Value == "N")
echo " checked";
echo ">denied \n";
if ($_GET["enterUID"] > 0) {
echo "<input type=\"radio\" name=\"" . ($CVS_Data_i -1) . "\" value=\"G\" ";
if ($CVS_Data_Value == "G")
echo " checked";
echo ">group-setting \n";
echo "</td></tr>";
}
}
} //IF
} //Foreach
echo "</td></tr>\n";
// Ende Formular
echo "</td></tr>\n";
echo "</table>\n<br />\n";
echo "<input type=\"hidden\" name=\"enterUID\" value=\"" . $_GET["enterUID"] . "\">\n";
echo "<input type=\"submit\" value=\"sichern...\">\n";
echo "</form>";
echo "<br /><form action=\"./userSaveSecure.php?action=delete\" method=\"POST\">\n";
echo "<input type=\"hidden\" name=\"enterUID\" value=\"" . $_GET["enterUID"] . "\">\n";
echo "<input type=\"submit\" value=\"l&ouml;schen...\">\n";
echo "</form>";
}
}
include ("includes/footer.php");
?>