PHP Classes

File: adminuser.php

Recommend this page to a friend!
  Classes of Giorgos   AdminPro class   adminuser.php   Download  
File: adminuser.php
Role: Application script
Content type: text/plain
Description: User management system
Class: AdminPro class
MySQL/Session based user authentication/management
Author: By
Last change: Changed to be compatible with AdminPro version 1.3
Date: 19 years ago
Size: 14,148 bytes
 

Contents

Class file image Download
<?php /*** **** @file: AdminPro Class User Administration **** @project: AdminPro Class **** @version: 1.3; **** @author: Giorgos Tsiledakis; **** @date: 2004-09-04; **** @license: GNU GENERAL PUBLIC LICENSE; ***/ include("adminpro_config.php"); include("adminpro_class.php"); include("adminuser_config.php"); $prot=new protect("1","1"); if ($prot->showPage) { $db=new mysql_dialog("1"); $db->connect($globalConfig['dbhost'],$globalConfig['dbuser'], $globalConfig['dbpass'], $globalConfig['dbase']); $SQL="SELECT ".$globalConfig['tblUserName']." as userName, "; $SQL.=$globalConfig['tblIsAdmin']." as isAdmin"; $SQL.=" FROM ".$globalConfig['tbl']; $db->speak($SQL); $option=""; //for the select tag normal users $optionad=""; //for the select tag admins $action=""; //main navigation $editName=""; $userName=""; $allusers=0; //count all normal users $alladmins=0; //count all admins while ($data=$db->listen()){ $option.="<option value=\"".$data['userName']."\">".$data['userName']; if ($data['isAdmin']==1){ $alladmins++; } else{ $allusers++; } } extract($_POST); ?> <html> <head> <title><?php echo $adminConfig['htmlTitle']; ?></title> <?php if ($adminConfig['htmlCharset']!=""){ echo "<meta http-equiv=\"content-type\" content=\"text/html;charset=".$adminConfig['htmlCharset']."\">\n"; } if ($adminConfig['htmlCss']!=""){ echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"".$adminConfig['htmlCss']."\">"; } ?> </head> <body> <h1 align="center"><?php echo $adminConfig['pageTitle']; ?></h1> <p align="center"><?php echo $adminConfig['curUserMsg']."<b>".$prot->getUser()."</b>"; ?></p> <hr></hr> <table align="center" border="0" cellpadding="2" cellspacing="2"> <tr> <td align="right" valign="top"> <?php if ($option!=""){ ?> <form action="" method="POST"> <input type="hidden" name="action" value="edit"> <?php echo $adminConfig['selectMsg']; ?> </td> <td align="right" valign="top"> <select name="userSelection"><?php echo $option; ?></select> <?php } ?> </td> <td> <?php if ($option!=""){ ?> <input type="submit" id="button" value="<?php echo $adminConfig['editBtn']; ?>"></form> <?php } ?> </td> <td> <form action="" method="POST"> <input type="hidden" name="action" value="addnew"> <input type="submit" id="button" value="<?php echo $adminConfig['newBtn']; ?>"> </form> </td> <td> <form action="" method="POST"> <input type="hidden" name="action" value="showall"> <input type="submit" id="button" value="<?php echo $adminConfig['tableBtn']; ?>"> </form> </td> <td> <form action="" method="POST"> <input type="hidden" name="action" value="logout"> <input type="submit" id="button" value="<?php echo $adminConfig['logoutBtn']; ?>"> </form> </td> </tr> </table> <hr></hr> <div align="center"> <?php if ($action=="" || $action=="login"){ $out="<table cellpadding=\"2\" cellspacing=\"2\" border=\"0\">"; $out.="<tr><td align=\"right\">".$adminConfig['allAdminMsg']."</td><td>".$alladmins."</td></tr>\n"; $out.="<tr><td align=\"right\">".$adminConfig['allUserMsg']."</td><td>".$allusers."</td></tr>\n"; $out.="</table>\n"; echo $out; } if ($action=="edit"){ $SQ="SELECT ".$globalConfig['tblUserName']." as userName, "; $SQ.=$globalConfig['tblUserRemark']." as userRemark, "; $SQ.=$globalConfig['tblIsAdmin']." as isAdmin, ".$globalConfig['tblUserGroup']." as userGroup"; $SQ.=" FROM ".$globalConfig['tbl']; $SQ.=" WHERE ".$globalConfig['tblUserName']."='".$userSelection."'"; $db->speak($SQ); $data=$db->listen(); /* ** thanks to robert */ $out="<form action=\"\" method=\"POST\">"; $out.="<input type=\"hidden\" name=\"action\" value=\"\">\n"; $out.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['cancelBtn']."\">\n"; $out.="</form>\n"; $out.="<p>".$adminConfig['editUserMsg']."<b>"; $out.=$userSelection." </b></p>\n"; $out.="<p><i>".$adminConfig['editInfoMsg']."</i></p>\n"; $out.="<form action=\"\" method=\"POST\">\n"; $out.="<table align=\"center\" cellpadding=\"4\" cellspacing=\"4\">\n"; $out.="<tr>\n"; $out.="<td align=\"right\">".$adminConfig['editPassMsg']."</td>\n"; $out.="<td align=\"left\"><input type=\"password\" name=\"userPass\"></td>\n"; $out.="</tr>\n"; $out.="<tr>\n"; $out.="<td align=\"right\">".$adminConfig['editIsAdminMsg']."</td>\n"; $out.="<td align=\"left\"><select name=\"isAdmin\"><option value=\"-1\""; if ($data['isAdmin']=="-1") {$out.=" selected=\"selected\"";} $out.=">".$adminConfig['editNo']."<option value=\"1\""; if ($data['isAdmin']=="1") {$out.=" selected=\"selected\"";} $out.=">".$adminConfig['editYes']."</select></td>\n"; $out.="</tr>\n"; $out.="<tr>\n"; $out.="<td align=\"right\">".$adminConfig['editUserGroupMsg']."</td>\n"; $out.="<td align=\"left\"><select name=\"userGroup\">"; $out.="<option value=\"1\""; if ($data['userGroup']=="1" || !$data['userGroup']) {$out.=" selected=\"selected\"";} $out.=">1"; if ($adminConfig['userGroupNum']){ for ($x=2; $x<=$adminConfig['userGroupNum']; $x++){ $out.="<option value=\"".$x."\""; if ($data['userGroup']==$x) {$out.=" selected=\"selected\"";} $out.=">".$x; } } $out.="</select></td>\n"; $out.="</tr>\n"; $out.="<tr>\n"; $out.="<td align=\"right\">".$adminConfig['editRemarkMsg']."</td>\n"; $out.="<td align=\"left\"><textarea name=\"userRemark\" cols=\"40\" rows=\"4\">".$data['userRemark']."</textarea></td>\n"; $out.="</tr>\n"; $out.="<tr><td></td><td align=\"center\">\n"; $out.="<input type=\"hidden\" name=\"userName\" value=\"".$userSelection."\">\n"; $out.="<input type=\"hidden\" name=\"action\" value=\"edituser\">\n"; $out.="<input type=\"reset\" id=\"button\" value=\"".$adminConfig['resetBtn']."\">\n"; $out.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['submitBtn']."\">\n"; $out.="</td></tr>\n"; $out.="</table>\n"; $out.="</form>\n"; $out.="<form action=\"\" method=\"POST\"><p align=\"right\">\n"; $out.="<input type=\"hidden\" name=\"userName\" value=\"".$userSelection."\">\n"; $out.="<input type=\"hidden\" name=\"action\" value=\"delete\">\n"; $out.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['deleteBtn']."\">\n"; $out.="</p></form>\n"; echo $out; } if ($action=="edituser"){ $SQL="UPDATE ".$globalConfig['tbl']." SET "; $SQL.=$globalConfig['tblIsAdmin']."=".$isAdmin.", "; $SQL.=$globalConfig['tblUserGroup']."=".$userGroup.", "; $SQL.=$globalConfig['tblUserRemark']."='".$userRemark."'"; if ($userPass!=""){ if ($globalConfig['isMd5']=="1"){ $SQL.=", ".$globalConfig['tblUserPass']."='".md5($userPass)."'"; } else{ $SQL.=", ".$globalConfig['tblUserPass']."='".$userPass."'"; } } $SQL.=" WHERE ".$globalConfig['tblUserName']."='".$userName."'"; $db->speak($SQL); $out="<p><b><font color=\"green\">".$adminConfig['editUpdMsg']."</font>"; $out.=$userName."</b></p>"; $out.="<form action=\"\" method=\"POST\">"; $out.="<input type=\"hidden\" name=\"action\" value=\"\">"; $out.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['okBtn']."\">"; $out.="</form>"; echo $out; } if ($action=="delete"){ $out="<form action=\"\" method=\"POST\">"; $out.="<input type=\"hidden\" name=\"action\" value=\"\">\n"; $out.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['cancelBtn']."\">\n"; $out.="</form>\n"; $out.="<p><b><font color=\"red\">".$adminConfig['delConfirmMsg']."</font>"; $out.=$userName."</b></p>\n"; $out.="<form action=\"\" method=\"POST\">\n"; $out.="<input type=\"hidden\" name=\"userName\" value=\"".$userName."\">\n"; $out.="<input type=\"hidden\" name=\"action\" value=\"deleteuser\">\n"; $out.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['okBtn']."\">\n"; $out.="</form>\n"; echo $out; } if ($action=="deleteuser"){ $SQL="DELETE FROM ".$globalConfig['tbl']; $SQL.=" WHERE ".$globalConfig['tblUserName']."='".$userName."'"; $db->speak($SQL); $SQ="SELECT ".$globalConfig['tblUserName']." as userName FROM ".$globalConfig['tbl']; $db->speak($SQ); $data=$db->listen(); $userNotDel=false; while ($data=$db->listen()){ if ($userName==$data['userName']) { $userNotDel=true; break; } } if ($userNotDel) { $out="<p><b><font color=\"red\">".$adminConfig['delNotDelMsg']."</font>"; $out.=$userName."</b></p>\n"; $out.="<form action=\"\" method=\"POST\">\n"; $out.="<input type=\"hidden\" name=\"action\" value=\"\">\n"; $out.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['okBtn']."\">\n"; $out.="</form>\n"; echo $out; } else{ $out="<p><b><font color=\"green\">".$adminConfig['delDelMsg']."</font>"; $out.=$userName."</b></p>\n"; $out.="<form action=\"\" method=\"POST\">\n"; $out.="<input type=\"hidden\" name=\"action\" value=\"\">\n"; $out.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['okBtn']."\">\n"; $out.="</form>\n"; echo $out; } } if ($action=="showall"){ $SQL="SELECT * FROM ".$globalConfig['tbl']; $button="<form action=\"\" method=\"POST\">\n"; $button.="<input type=\"hidden\" name=\"action\" value=\"\">\n"; $button.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['cancelBtn']."\">\n"; $button.="</form>\n"; echo $button; $db->onscreen($SQL); } if ($action=="addnew"){ $out="<form action=\"\" method=\"POST\">\n"; $out.="<input type=\"hidden\" name=\"action\" value=\"\">\n"; $out.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['cancelBtn']."\">\n"; $out.="</form>\n"; $out.="<form action=\"\" method=\"POST\">\n"; $out.="<table align=\"center\" cellpadding=\"4\" cellspacing=\"4\">\n"; $out.="<tr>\n"; $out.="<td align=\"right\">".$adminConfig['newUserMsg']."</td>\n"; $out.="<td align=\"left\"><input type=\"text\" name=\"userName\"></td>\n"; $out.="</tr>\n"; $out.="<tr>\n"; $out.="<td align=\"right\">".$adminConfig['newPassMsg']."</td>\n"; $out.="<td align=\"left\"><input type=\"password\" name=\"userPass\"></td>\n"; $out.="</tr>\n"; $out.="<tr>\n"; $out.="<td align=\"right\">".$adminConfig['newIsAdminMsg']."</td>\n"; $out.="<td align=\"left\"><select name=\"isAdmin\"><option value=\"-1\">".$adminConfig['newNo']; $out.="<option value=\"1\">".$adminConfig['newYes']."</select></td>\n"; $out.="</tr>\n"; $out.="<tr>\n"; $out.="<td align=\"right\">".$adminConfig['newUserGroupMsg']."</td>\n"; $out.="<td align=\"left\"><select name=\"userGroup\"><option value=\"1\">1"; if ($adminConfig['userGroupNum']){ for ($x=2; $x<=$adminConfig['userGroupNum']; $x++){ $out.="<option value=\"".$x."\">".$x; } } $out.="</select></td>\n"; $out.="</tr>\n"; $out.="<tr>\n"; $out.="<td align=\"right\">".$adminConfig['newRemarkMsg']."</td>\n"; $out.="<td align=\"left\"><textarea name=\"userRemark\" cols=\"40\" rows=\"4\"></textarea></td>\n"; $out.="</tr>\n"; $out.="<tr><td></td><td align=\"center\">\n"; $out.="<input type=\"hidden\" name=\"action\" value=\"newuser\">\n"; $out.=" <input type=\"reset\" id=\"button\" value=\"".$adminConfig['resetBtn']."\">\n"; $out.=" <input type=\"submit\" id=\"button\" value=\"".$adminConfig['submitBtn']."\">\n"; $out.="</td></tr>\n"; $out.="</table>\n"; $out.="</form>\n"; echo $out; } if ($action=="newuser"){ if ($userName && $userPass){ $userExist=false; $SQL="SELECT ".$globalConfig['tblUserName']." as userName FROM ".$globalConfig['tbl']; $db->speak($SQL); while ($data=$db->listen()){ if ($userName==$data['userName']) { $userExist=true; break; } } if (!$userExist) { $SQL="INSERT INTO ".$globalConfig['tbl']." ( "; $SQL.=$globalConfig['tblID'].", "; $SQL.=$globalConfig['tblUserName'].", "; $SQL.=$globalConfig['tblUserPass'].", "; $SQL.=$globalConfig['tblIsAdmin'].", "; $SQL.=$globalConfig['tblUserGroup'].", "; $SQL.=$globalConfig['tblSessionID'].", "; $SQL.=$globalConfig['tblLastLog'].", "; $SQL.=$globalConfig['tblUserRemark']." ) "; if ($globalConfig['isMd5']=="1"){ $SQL.=" VALUES ( '', '".$userName."', '".md5($userPass)."', '".$isAdmin."', '".$userGroup."', '', '', '".$userRemark."')"; } else{ $SQL.=" VALUES ( '', '".$userName."', '".$userPass."', '".$isAdmin."', '".$userGroup."', '', '', '".$userRemark."')"; } $db->speak($SQL); $SQ="SELECT ".$globalConfig['tblUserName']." as userName FROM ".$globalConfig['tbl']; $SQ.=" WHERE ".$globalConfig['tblUserName']."='".$userName."'"; $db->speak($SQ); $data=$db->listen(); if ($data['userName']){ $out="<p><b><font color=\"green\">".$adminConfig['newAddedMsg']."</font>"; $out.=$data['userName']."</b></p>\n"; $out.="<form action=\"\" method=\"POST\">"; $out.="<input type=\"hidden\" name=\"action\" value=\"\">\n"; $out.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['okBtn']."\">\n"; $out.="</form>\n"; echo $out; } } else { $out="<p><b><font color=\"red\">".$adminConfig['newExistsMsg']."</font>"; $out.=$userName."</b></p>\n"; $out.="<form action=\"\" method=\"POST\">\n"; $out.="<input type=\"hidden\" name=\"action\" value=\"addnew\">\n"; $out.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['okBtn']."\">\n"; $out.="</form>\n"; echo $out; } } elseif (!$userName && $userPass) { $out="<p><b><font color=\"red\">".$adminConfig['newNoUserMsg']."</font></b></p>\n"; $out.="<form action=\"\" method=\"POST\">\n"; $out.="<input type=\"hidden\" name=\"action\" value=\"addnew\">\n"; $out.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['okBtn']."\">\n"; $out.="</form>\n"; echo $out; } elseif (!$userPass && $userName) { $out="<p><b><font color=\"red\">".$adminConfig['newNoPassMsg']."</font></b></p>\n"; $out.="<form action=\"\" method=\"POST\">\n"; $out.="<input type=\"hidden\" name=\"action\" value=\"addnew\">\n"; $out.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['okBtn']."\">\n"; $out.="</form>\n"; echo $out; } elseif (!$userName && !$userPass) { $out="<p><b><font color=\"red\">".$adminConfig['newNoUserPassMsg']."</font></b></p>\n"; $out.="<form action=\"\" method=\"POST\">\n"; $out.="<input type=\"hidden\" name=\"action\" value=\"addnew\">\n"; $out.="<input type=\"submit\" id=\"button\" value=\"".$adminConfig['okBtn']."\">\n"; $out.="</form>\n"; echo $out; } } ?> </div> </body> </html> <?php } ?>