<?php
# Copyright by: Manuel Staechele
# Support: www.ilch.de
defined (
'main'
)
or
die
(
'no direct access'
);
defined (
'admin'
)
or
die
(
'only admin access'
);
function
user_get_group_list (
$uid
) {
$l
=
'Mitglied in Gruppen:<br />'
;
$erg
= db_query(
"SELECT prefix_groups.name FROM prefix_groupusers LEFT JOIN prefix_groups ON prefix_groups.id = prefix_groupusers.gid WHERE prefix_groupusers.uid = "
.
$uid
);
while
(
$r
= db_fetch_assoc(
$erg
)) {
$l
.=
'- '
.
$r
[
'name'
].
'<br />'
;
}
return
(
$l
);
}
function
user_get_all_mod_list () {
$l
=
''
;
$erg
= db_query(
"SELECT DISTINCT name FROM prefix_modules WHERE fright = 1 ORDER BY prefix_modules.name"
);
while
(
$r
= db_fetch_assoc(
$erg
)) {
$x
=
$r
[
'name'
];
$l
.=
'<th style="font-size: 9px; font-weight: normal;" title="'
.
$r
[
'name'
].
'" valign="bottom">'
.
$x
.
'</th>'
;
}
return
(
$l
);
}
function
user_get_mod_change_list (
$uid
) {
$l
=
''
;
$erg
= db_query(
"SELECT prefix_modules.id, uid FROM prefix_modules LEFT JOIN prefix_modulerights ON prefix_modulerights.mid = prefix_modules.id AND prefix_modulerights.uid = "
.
$uid
.
" WHERE fright = 1 ORDER BY prefix_modules.name"
);
while
(
$r
= db_fetch_assoc(
$erg
)) {
if
(
$r
[
'uid'
] ==
''
) {
$c
=
''
; }
else
{
$c
=
' checked'
; }
$l
.=
'<td align="center"><input onChange="changeModulRecht('
.
$r
[
'id'
].
','
.
$uid
.
')" type="checkbox" id="MN'
.
$r
[
'id'
].
$uid
.
'" name="MN'
.
$r
[
'id'
].
$uid
.
'" '
.
$c
.
' /></td>'
;
}
return
(
$l
);
}
function
user_get_mod_list (
$uid
) {
$l
=
'Modulrechte:<br />'
;
$erg
= db_query(
"SELECT DISTINCT module FROM prefix_modulerights WHERE uid = "
.
$uid
);
while
(
$r
= db_fetch_assoc(
$erg
)) {
$l
.=
'- '
.
$r
[
'module'
].
'<br />'
;
}
return
(
$l
);
}
function
getfl(
$gid
) {
$liste
=
''
;
$erg
= db_query(
"SELECT view,name,reply,start,mods FROM prefix_forums WHERE view = "
.
$gid
.
" OR reply = "
.
$gid
.
" OR start = "
.
$gid
.
" OR mods = "
.
$gid
);
while
(
$row
= db_fetch_assoc(
$erg
) ) {
$v
= (
$row
[
'view'
] ==
$gid
?
'sehen/lesen,'
:
''
);
$r
= (
$row
[
'reply'
] ==
$gid
?
'antworten,'
:
''
);
$s
= (
$row
[
'start'
] ==
$gid
?
'Themen starten,'
:
''
);
$m
= (
$row
[
'mods'
] ==
$gid
?
'Moderieren,'
:
''
);
$liste
.=
$row
[
'name'
].
'<span class="smalfont">('
.
$v
.
$r
.
$s
.
$m
.
')</span> '
;
}
return
(
$liste
);
}
$um
=
$menu
->get(1);
switch
(
$um
) {
default
:
$design
=
new
design (
'Admins Area'
,
'Admins Area'
, 2 );
$design
->header();
$q
=
''
;
if
( isset(
$_REQUEST
[
'q'
]) ) {
$q
= escape(
$_REQUEST
[
'q'
],
'string'
);
}
$tpl
=
new
tpl (
'user/user'
, 1);
$tpl
->set(
'modlall'
, user_get_all_mod_list());
$tpl
->set(
'anzmods'
, db_result(db_query(
"SELECT COUNT(*) FROM prefix_modules WHERE fright = 1"
),0) );
$tpl
->set_out(
'q'
,unescape(
$q
),0);
$q
=
str_replace
(
'*'
,
'%'
,
$q
);
if
(
strpos
(
$q
,
'%'
) === FALSE ) {
$q
=
$q
.
'%'
;
}
$limit
= 15;
$page
= (
$menu
->getA(1) ==
'p'
?
$menu
->getE(1) : 1 );
$MPL
= db_make_sites (
$page
,
"WHERE name LIKE '"
.
$q
.
"'"
,
$limit
,
'?user'
,
'user'
);
$anfang
= (
$page
- 1) *
$limit
;
$class
=
''
;
$q
=
"SELECT name,recht,id FROM `prefix_user` WHERE name LIKE '"
.
$q
.
"' ORDER by recht,posts DESC LIMIT "
.
$anfang
.
","
.
$limit
;
$erg
= db_query(
$q
);
while
(
$row
= db_fetch_object(
$erg
)) {
if
(
$class
==
'Cmite'
) {
$class
=
'Cnorm'
; }
else
{
$class
=
'Cmite'
; }
$ar
=
array
(
'name'
=>
$row
->name,
'class'
=>
$class
,
'id'
=>
$row
->id,
'grouplist'
=> user_get_group_list(
$row
->id),
'recht'
=> dblistee(
$row
->recht,
"SELECT id,name FROM prefix_grundrechte ORDER BY id ASC"
),
'modslist'
=> user_get_mod_change_list(
$row
->id),
);
$tpl
->set_ar_out(
$ar
,1);
}
$tpl
->set_out(
'MPL'
,
$MPL
,2);
$design
->footer();
break
;
# modulrechte fuer einen user aendern
case
'modulrecht'
:
$uid
=
intval
(
$menu
->get(2));
$modul
=
intval
(
$_REQUEST
[
'modul'
]);
$aktion
=
$_REQUEST
[
'aktion'
];
if
(
$aktion
==
'eintragen'
AND 0 == db_result(db_query(
"SELECT COUNT(*) FROM prefix_modulerights WHERE mid = '"
.
$modul
.
"' AND uid = "
.
$uid
),0) ) {
db_query(
"INSERT INTO prefix_modulerights (mid,uid) VALUES ('"
.
$modul
.
"',"
.
$uid
.
")"
);
}
elseif
(
$aktion
==
'loeschen'
AND 1 == db_result(db_query(
"SELECT COUNT(*) FROM prefix_modulerights WHERE mid = '"
.
$modul
.
"' AND uid = "
.
$uid
),0) ) {
db_query(
"DELETE FROM prefix_modulerights WHERE mid = '"
.
$modul
.
"' AND uid = "
.
$uid
);
}
?><html><head><script language=
"JavaScript"
type=
"text/javascript"
><!-- opener.location.reload();
function
closeThisWindow() { opener.focus(); window.close(); } closeThisWindow()
break
;
# gruppen zugehoerigkeiten eines users aendern
case
'gruppen'
:
$uid
=
$menu
->get(2);
if
(isset(
$_POST
[
'usergroups'
])) {
$erg
= db_query(
"SELECT id FROM prefix_groups"
);
while
(
$row
= db_fetch_assoc(
$erg
) ) {
$ck
= db_count_query(
"SELECT COUNT(uid) FROM prefix_groupusers WHERE uid = "
.
$uid
.
" AND gid = "
.
$row
[
'id'
]);
if
(
$ck
== 0 AND isset (
$_POST
[
'grprhave'
][
$row
[
'id'
]][
$uid
] ) ) {
db_query(
"INSERT INTO prefix_groupusers (uid,gid) VALUES ( "
.
$uid
.
", "
.
$row
[
'id'
].
" )"
);
}
elseif
(
$ck
== 1 AND !isset (
$_POST
[
'grprhave'
][
$row
[
'id'
]][
$uid
] ) ) {
db_query(
"DELETE FROM prefix_groupusers WHERE uid = "
.
$uid
.
" AND gid = "
.
$row
[
'id'
]);
}
}
}
$user_name
= db_result(db_query(
"SELECT name FROM prefix_user WHERE id = "
.
$uid
),0);
$tpl
=
new
tpl (
'user/gruppen'
, 1);
$tpl
->set_ar_out(
array
(
'username'
=>
$user_name
,
'userid'
=>
$uid
),0);
$class
=
'Cnorm'
;
$erg
= db_query(
"SELECT name,id FROM prefix_groups"
);
while
(
$row
= db_fetch_assoc(
$erg
) ) {
$ck
= db_count_query(
"SELECT COUNT(uid) FROM prefix_groupusers WHERE uid = "
.
$uid
.
" AND gid = "
.
$row
[
'id'
]);
$row
[
'ck'
] = (
$ck
== 0 ?
''
:
'checked'
);
$class
= (
$class
==
'Cnorm'
?
'Cmite'
:
'Cnorm'
);
$row
[
'class'
] =
$class
;
$tpl
->set_ar_out(
$row
,1);
}
$tpl
->out(2);
break
;
# das recht eines users aendern
case
'changeRecht'
:
$uid
=
$menu
->get(2);
$altes_recht
= db_result(db_query(
"SELECT recht FROM prefix_user WHERE id = "
.
$uid
),0);
$neues_recht
= escape(
$_GET
[
'newr'
],
'integer'
);
if
((
$neues_recht
>
$_SESSION
[
'authright'
] AND
$altes_recht
>
$_SESSION
[
'authright'
]) OR (
$_SESSION
[
'authid'
] == 1 AND
$uid
<> 1)) {
$q
=
"UPDATE prefix_user SET recht = "
.
$neues_recht
.
" WHERE id = "
.
$uid
;
db_query(
$q
);
}
?><html><head><script language=
"JavaScript"
type=
"text/javascript"
><!--
function
closeThisWindow() { opener.focus(); window.close(); } closeThisWindow()
break
;
# details eines users anzeigen
case
1 :
$design
=
new
design (
'Admins Area'
,
'Admins Area'
, 2 );
$design
->header();
if
( isset (
$_REQUEST
[
'uID'
])) {
$uid
=
$_REQUEST
[
'uID'
]; }
else
{
$uid
=
$menu
->get(2); }
$erg
= db_query(
"SELECT name,email,id,recht,wohnort,homepage,aim,msn,icq,yahoo,avatar,userpict,status,staat,gebdatum,sig,opt_pm,opt_pm_popup,opt_mail,geschlecht,spezrank FROM prefix_user WHERE id = '"
.
$uid
.
"'"
);
if
( db_num_rows(
$erg
) == 0 ) {
die
(
'Fehler: Username nicht gefunden <a href="?user">zurück</a>'
);
}
else
{
$row
= db_fetch_assoc(
$erg
);
$tpl
=
new
tpl (
'user/details'
, 1);
$row
[
'recht'
] = dbliste (
$row
[
'recht'
] ,
$tpl
,
'recht'
,
"SELECT id,name FROM prefix_grundrechte ORDER BY id ASC"
);
$row
[
'staat'
] =
'<option></option>'
.arliste (
$row
[
'staat'
] , get_nationality_array() ,
$tpl
,
'staat'
);
$row
[
'spezrank'
] =
'<option></option>'
.dbliste (
$row
[
'spezrank'
],
$tpl
,
'spezrank'
,
"SELECT id, bez FROM prefix_ranks WHERE spez = 1"
);
$row
[
'geschlecht0'
] = (
$row
[
'geschlecht'
] < 1 ?
'checked'
:
''
);
$row
[
'geschlecht1'
] = (
$row
[
'geschlecht'
] == 1 ?
'checked'
:
''
);
$row
[
'geschlecht2'
] = (
$row
[
'geschlecht'
] == 2 ?
'checked'
:
''
);
if
(
$row
[
'status'
] == 1 ) {
$row
[
'status1'
] =
'checked'
;
$row
[
'status0'
] =
''
; }
else
{
$row
[
'status1'
] =
''
;
$row
[
'status0'
] =
'checked'
; }
if
(
$row
[
'opt_mail'
] == 1 ) {
$row
[
'opt_mail1'
] =
'checked'
;
$row
[
'opt_mail0'
] =
''
; }
else
{
$row
[
'opt_mail1'
] =
''
;
$row
[
'opt_mail0'
] =
'checked'
; }
if
(
$row
[
'opt_pm'
] == 1 ) {
$row
[
'opt_pm1'
] =
'checked'
;
$row
[
'opt_pm0'
] =
''
; }
else
{
$row
[
'opt_pm1'
] =
''
;
$row
[
'opt_pm0'
] =
'checked'
; }
if
(
$row
[
'opt_pm_popup'
] == 1 ) {
$row
[
'opt_pm_popup1'
] =
'checked'
;
$row
[
'opt_pm_popup0'
] =
''
; }
else
{
$row
[
'opt_pm_popup1'
] =
''
;
$row
[
'opt_pm_popup0'
] =
'checked'
; }
$row
[
'userpict'
] = (
file_exists
(
$row
[
'userpict'
] ) ?
'<img src="'
.
$row
[
'userpict'
].
'" alt=""><br />'
:
''
);
$row
[
'avatarbild'
] = (
file_exists
(
$row
[
'avatar'
] ) ?
'<img src="'
.
$row
[
'avatar'
].
'" alt=""><br />'
:
''
);
$row
[
'ppicbreite'
] =
$allgAr
[
'ppicbreite'
];
$row
[
'ppichohe'
] =
$allgAr
[
'ppichohe'
];
$row
[
'ppicsize'
] =
$allgAr
[
'ppicsize'
];
$row
[
'Fabreite'
] =
$allgAr
[
'Fabreite'
];
$row
[
'Fahohe'
] =
$allgAr
[
'Fahohe'
];
$row
[
'Fasize'
] =
$allgAr
[
'Fasize'
];
$row
[
'forum_max_sig'
] =
$allgAr
[
'forum_max_sig'
];
$tpl
->set_ar_out (
$row
,0);
profilefields_change (
$row
[
'id'
] );
$tpl
->out(1);
}
$design
->footer();
break
;
# details des users aendern
case
2 :
$design
=
new
design (
'Admins Area'
,
'Admins Area'
, 2 );
$design
->header();
$changeok
= true;
$uid
= escape(
$_POST
[
'uID'
],
'integer'
);
$altes_recht
= db_result(db_query(
"SELECT recht FROM prefix_user WHERE id = "
.
$uid
),0);
$neues_recht
= escape(
$_POST
[
'urecht'
],
'integer'
);
if
((
$neues_recht
<=
$_SESSION
[
'authright'
] OR
$altes_recht
<=
$_SESSION
[
'authright'
]) AND
$_SESSION
[
'authid'
] > 1) {
$changeok
= false;
}
if
(
$changeok
) {
if
(isset(
$_POST
[
'userdel'
])) {
db_query(
'DELETE FROM prefix_user WHERE id = "'
.
$uid
.
'"'
);
db_query(
'DELETE FROM prefix_userfields WHERE uid = "'
.
$uid
.
'"'
);
db_query(
"DELETE FROM prefix_groupusers WHERE uid = "
.
$uid
);
db_query(
"DELETE FROM prefix_modulerights WHERE uid = "
.
$uid
);
db_query(
"DELETE FROM prefix_pm WHERE eid = "
.
$uid
);
wd (
'?user'
,
'User wurde erfolgreich gelöscht'
);
}
else
{
$abf
=
"SELECT * FROM prefix_user WHERE id = '"
.
$uid
.
"'"
;
$erg
= db_query(
$abf
);
$row
= db_fetch_object(
$erg
);
if
(isset(
$_POST
[
'passw'
])) {
$newPass
= genkey ( 8 );
$newPassMD5
= md5(
$newPass
);
icmail (
$row
->email ,
'neues Password'
,
"Hallo\n\nDein Password wurde soeben von einem Administrator geaendert es ist nun:\n\n$newPass\n\nGru� der Administrator"
);
db_query(
'UPDATE `prefix_user` SET pass = "'
.
$newPassMD5
.
'" WHERE id = "'
.
$_POST
[
'uID'
].
'"'
);
}
profilefields_change_save (
$_POST
[
'uID'
] );
# avatar speichern START
$avatar_sql_update
=
''
;
if
( !
empty
(
$_FILES
[
'avatarfile'
][
'name'
] ) ) {
$file_tmpe
=
$_FILES
[
'avatarfile'
][
'tmp_name'
];
$file_type
=
$_FILES
[
'avatarfile'
][
'type'
];
$file_size
=
$_FILES
[
'avatarfile'
][
'size'
];
$file_name
=
$_FILES
[
'avatarfile'
][
'name'
];
$fmsg
=
$lang
[
'avatarisnopicture'
];
if
(
substr
(
$file_type
, 0 , 6 ) ==
'image/'
) {
$endung
= preg_replace(
"/.*\.([^\.]+)/"
,
"\\1"
,
$file_name
);
$size
=
getimagesize
(
$file_tmpe
);
$breite
=
$size
[0];
$hoehe
=
$size
[1];
$fmsg
=
$lang
[
'avatarcannotupload'
];
if
(
$file_size
<=
$allgAr
[
'Fasize'
] AND
$breite
<=
$allgAr
[
'Fabreite'
] AND
$hoehe
<=
$allgAr
[
'Fahohe'
] ) {
$neuer_name
=
'include/images/avatars/'
.
$uid
.
'.'
.
$endung
;
@unlink (db_result(db_query(
"SELECT avatar FROM prefix_user WHERE id = "
.
$uid
),0));
move_uploaded_file (
$file_tmpe
,
$neuer_name
);
$avatar_sql_update
=
'avatar = "'
.
$neuer_name
.
'",'
;
$fmsg
=
$lang
[
'pictureupload'
].
'(avatar = '
.
$neuer_name
.
')'
;
}
}
}
elseif
( isset(
$_POST
[
'avatardel'
]) ) {
$fmsg
=
$lang
[
'picturedelete'
];
@unlink (db_result(db_query(
"SELECT avatar FROM prefix_user WHERE id = "
.
$uid
),0));
$avatar_sql_update
=
'avatar = "",'
;
}
# avatar speichern ENDE
# userpict speichern START
$userpict_sql_update
=
''
;
if
( !
empty
(
$_FILES
[
'userpictfile'
][
'name'
] ) ) {
$file_tmpe
=
$_FILES
[
'userpictfile'
][
'tmp_name'
];
$file_type
=
$_FILES
[
'userpictfile'
][
'type'
];
$file_size
=
$_FILES
[
'userpictfile'
][
'size'
];
$file_name
=
$_FILES
[
'userpictfile'
][
'name'
];
$fmsg
=
$lang
[
'userpictisnopicture'
];
if
(
substr
(
$file_type
, 0 , 6 ) ==
'image/'
) {
$endung
= preg_replace(
"/.*\.([^\.]+)/"
,
"\\1"
,
$file_name
);
$size
=
getimagesize
(
$file_tmpe
);
$breite
=
$size
[0];
$hoehe
=
$size
[1];
$fmsg
=
$lang
[
'userpictcannotupload'
];
if
(
$file_size
<=
$allgAr
[
'ppicsize'
] AND
$breite
<=
$allgAr
[
'ppicbreite'
] AND
$hoehe
<=
$allgAr
[
'ppichohe'
] ) {
$neuer_name
=
'include/images/userpicts/'
.
$uid
.
'.'
.
$endung
;
@unlink (db_result(db_query(
"SELECT userpict FROM prefix_user WHERE id = "
.
$uid
),0));
move_uploaded_file (
$file_tmpe
,
$neuer_name
);
$userpict_sql_update
=
'userpict = "'
.
$neuer_name
.
'",'
;
$fmsg
=
$lang
[
'pictureupload'
].
'(userpict = '
.
$neuer_name
.
')'
;
}
}
}
elseif
( isset(
$_POST
[
'userpictdel'
]) ) {
$fmsg
=
$lang
[
'picturedelete'
];
@unlink (db_result(db_query(
"SELECT userpict FROM prefix_user WHERE id = "
.
$uid
),0));
$userpict_sql_update
=
'userpict = "",'
;
}
# userpict speichern ENDE
$usaName1
= escape(
$_POST
[
'usaName1'
],
'string'
);
$email
= escape(
$_POST
[
'email'
],
'string'
);
$homepage
= escape(
$_POST
[
'homepage'
],
'string'
);
$wohnort
= escape(
$_POST
[
'wohnort'
],
'string'
);
$icq
= escape(
$_POST
[
'icq'
],
'string'
);
$msn
= escape(
$_POST
[
'msn'
],
'string'
);
$yahoo
= escape(
$_POST
[
'yahoo'
],
'string'
);
$aim
= escape(
$_POST
[
'aim'
],
'string'
);
$staat
= escape(
$_POST
[
'staat'
],
'string'
);
$spezrank
= escape(
$_POST
[
'spezrank'
],
'integer'
);
$geschlecht
= escape(
$_POST
[
'geschlecht'
],
'integer'
);
$status
= escape(
$_POST
[
'status'
],
'integer'
);
$opt_mail
= escape(
$_POST
[
'opt_mail'
],
'integer'
);
$opt_pm
= escape(
$_POST
[
'opt_pm'
],
'integer'
);
$opt_pm_popup
= escape(
$_POST
[
'opt_pm_popup'
],
'integer'
);
$gebdatum
= escape(
$_POST
[
'gebdatum'
],
'string'
);
$sig
= escape(
$_POST
[
'sig'
],
'string'
);
db_query('UPDATE prefix_user SET
name =
"'.$usaName1.'"
,
recht =
"'.$neues_recht.'"
,
email =
"'.$email.'"
,
homepage =
"'.$homepage.'"
,
wohnort =
"'.$wohnort.'"
,
icq =
"'.$icq.'"
,
msn =
"'.$msn.'"
,
yahoo =
"'.$yahoo.'"
,
aim =
"'.$aim.'"
,
'.$avatar_sql_update.'
'.$userpict_sql_update.'
staat =
"'.$staat.'"
,
spezrank =
"'.$spezrank.'"
,
geschlecht =
"'.$geschlecht.'"
,
status =
"'.$status.'"
,
opt_mail =
"'.$opt_mail.'"
,
opt_pm =
"'.$opt_pm.'"
,
opt_pm_popup =
"'.$opt_pm_popup.'"
,
gebdatum =
"'.$gebdatum.'"
,
sig =
"'.$sig.'"
WHERE id =
'.$uid) OR die('
datenbankprob');
}
}
$fmsg
= ( isset(
$fmsg
) ?
$fmsg
:
''
);
wd(
'admin.php?user-1-'
.
$uid
,
'Das Profil wurde erfolgreich geaendert <br /> '
.
$fmsg
,2);
$design
->footer();
break
;
# mal kurz nen neuen user anlegen
case
'createNewUser'
:
$msg
=
''
;
if
(!
empty
(
$_POST
[
'name'
]) AND !
empty
(
$_POST
[
'pass'
]) AND !
empty
(
$_POST
[
'email'
])) {
$erg
= db_query(
"SELECT id FROM prefix_user WHERE name = BINARY '"
.
$_POST
['name
']."'
");
if
( db_num_rows(
$erg
) > 0 ) {
$msg
=
'Der Name ist leider schon vorhanden!'
;
}
else
{
$new_pass
=
$_POST
[
'pass'
];
$md5_pass
= md5(
$new_pass
);
db_query("INSERT INTO prefix_user (name,pass,recht,regist,llogin,email)
VALUES(
'".$_POST['
name
']."'
,
'".$md5_pass."'
,
".$_POST['recht']."
,
'".time()."'
,
'".time()."'
,
'".$_POST['
email
']."'
)");
$userid
= db_last_id();
db_query(
"INSERT INTO prefix_userfields (uid,fid,val) VALUES ("
.
$userid
.
",2,'1')"
);
db_query(
"INSERT INTO prefix_userfields (uid,fid,val) VALUES ("
.
$userid
.
",3,'1')"
);
if
(isset(
$_POST
[
'info'
]) ) {
$page
=
$_SERVER
[
"HTTP_HOST"
].
$_SERVER
[
"SCRIPT_NAME"
];
$page
=
str_replace
(
'admin.php'
,
'index.php'
,
$page
);
$tpl
=
new
tpl (
'user/new_user_email'
, 1);
$tpl
->set(
'name'
,
$_POST
[
'name'
]);
$tpl
->set(
'pass'
,
$_POST
[
'pass'
]);
$tpl
->set(
'page'
,
$page
);
$txt
=
$tpl
->get(0);
unset(
$tpl
);
icmail (
$_POST
[
'email'
],
'Admin hat dich angelegt'
,
$txt
);
}
$msg
=
'Benutzer angelegt <a href="javascript:closeThisWindow()">Fenster schliesen</a>'
;
}
}
$pass
=
''
;
$email
=
''
;
$recht
=
''
;
if
(isset(
$_POST
[
'pass'
])) {
$pass
=
$_POST
[
'pass'
]; }
if
(isset(
$_POST
[
'email'
])) {
$email
=
$_POST
[
'email'
]; }
if
(isset(
$_POST
[
'recht'
])) {
$recht
=
$_POST
[
'recht'
]; }
else
{
$recht
=
'-1'
;}
$tpl
=
new
tpl (
'user/new_user'
, 1);
$tpl
->set(
'msg'
,
$msg
);
$tpl
->set(
'pass'
,
$pass
);
$tpl
->set(
'email'
,
$email
);
$tpl
->set(
'recht'
,dblistee(
$recht
,
"SELECT id,name FROM prefix_grundrechte ORDER BY id ASC"
));
$tpl
->out(0);
break
;
# einen user komplett loeschen
case
'deleteUser'
:
$uid
=
$menu
->get(2);
if
(
$uid
<> 1 ) {
db_query(
"DELETE FROM prefix_user WHERE id = "
.
$uid
);
db_query(
"DELETE FROM prefix_userfields WHERE uid = "
.
$uid
);
db_query(
"DELETE FROM prefix_groupusers WHERE uid = "
.
$uid
);
db_query(
"DELETE FROM prefix_modulerights WHERE uid = "
.
$uid
);
db_query(
"DELETE FROM prefix_pm WHERE eid = "
.
$uid
);
?><html><head><script language=
"JavaScript"
type=
"text/javascript"
><!--
function
closeThisWindow() { opener.location.reload(); opener.focus(); window.close(); } closeThisWindow()
}
break
;
}
?>