GetDb();
$error = '';
$dropdown = '';
$adminaccess = 1;
$active = 1;
$tplmaster = 0;
$copyfromtemplate = 1;
$message = '';
$user_id = $userid;
// Post data
$user = isset($_POST["user"]) ? cleanValue($_POST["user"]) : '';
$password = isset($_POST["password"]) ? $_POST["password"] : '';
$passwordagain = isset($_POST["passwordagain"]) ? $_POST["passwordagain"] : '';
$firstname = isset($_POST["firstname"]) ? cleanValue($_POST["firstname"]) : '';
$lastname = isset($_POST["lastname"]) ? cleanValue($_POST["lastname"]) : '';
$email = isset($_POST["email"]) ? trim(strip_tags($_POST["email"])) : '';
if (isset($_POST["user_id"])) {
$user_id = cleanValue($_POST["user_id"]);
} elseif (isset($_GET["user_id"])) {
$user_id = cleanValue($_GET["user_id"]);
}
// this is now always true... but we may want to change how things work, so I'll leave it
$userops = $gCms->GetUserOperations();
$groupops = $gCms->GetGroupOperations();
$group_list = $groupops->LoadGroups();
$access_user = ($userid == $user_id);
$access_group = $userops->UserInGroup($userid, 1) || (!$userops->UserInGroup($user_id, 1));
$access = $access_user && $access_group;
$assign_group_perm = check_permission($userid, 'Manage Groups');
$manage_users = check_permission($userid, 'Manage Users');
$thisuser = $userops->LoadUserByID($user_id);
/*--------------------
* Logic
---------------------*/
if (isset($_POST['cancel'])) {
redirect('listusers.php?' . $urlext);
return;
}
if (isset($_POST["submit"])) {
if( !$access_user && isset($_POST['active']) ) $active = (int) $_POST['active'];
$adminaccess = !isset($_POST["adminaccess"]) ? 0 : 1;
$validinfo = true;
// check for errors
if ($user == '') {
$validinfo = false;
$error .= "" . lang('nofieldgiven', array(lang('username'))) . "";
}
if (!preg_match("/^[a-zA-Z0-9\._ ]+$/", $user)) {
$validinfo = false;
$error .= "" . lang('illegalcharacters', array(lang('username'))) . "";
}
if ($password != $passwordagain) {
$validinfo = false;
$error .= "" . lang('nopasswordmatch') . "";
}
if (!empty($email) && !is_email($email)) {
$validinfo = false;
$error .= '' . lang('invalidemail') . ': ' . $email . '';
}
if (isset($_POST['copyusersettings']) && $_POST['copyusersettings'] > 0) {
if (isset($_POST['clearusersettings'])) {
// error: both can't be set
$validinfo = false;
$error .= '' . lang('error_multiusersettings') . '';
}
}
// save data
if ($validinfo) {
$result = false;
if ($thisuser) {
$thisuser->username = $user;
$thisuser->firstname = $firstname;
$thisuser->lastname = $lastname;
$thisuser->email = $email;
$thisuser->adminaccess = $adminaccess;
$thisuser->active = $active;
if ($password != '')
$thisuser->SetPassword($password);
\CMSMS\HookManager::do_hook('Core::EditUserPre', [ 'user'=>&$thisuser ] );
$result = $thisuser->save();
if ($assign_group_perm && isset($_POST['groups'])) {
$dquery = "delete from " . cms_db_prefix() . "user_groups where user_id=?";
$iquery = "insert into " . cms_db_prefix() . "user_groups (user_id,group_id) VALUES (?,?)";
$result = $db->Execute($dquery, array($thisuser->id));
foreach ($group_list as $thisGroup) {
if (isset($_POST['g' . $thisGroup->id]) && $_POST['g' . $thisGroup->id] == 1) {
$result = $db->Execute($iquery, array(
$thisuser->id,
$thisGroup->id
));
}
}
}
}
audit($userid, 'Admin Username: ' . $thisuser->username, ' Edited');
$message = lang('edited_user');
if ($result) {
if (isset($_POST['copyusersettings']) && $_POST['copyusersettings'] > 0) {
// copy user preferences from the template user to this user.
$prefs = cms_userprefs::get_all_for_user((int)$_POST['copyusersettings']);
if (is_array($prefs) && count($prefs)) {
cms_userprefs::remove_for_user($user_id);
foreach ($prefs as $k => $v) {
cms_userprefs::set_for_user($user_id, $k, $v);
}
audit($user_id, 'Admin Username: ' . $thisuser->username, 'settings copied from template user');
$message = lang('msg_usersettingscopied');
}
} else if (isset($_POST['clearusersettings'])) {
// clear all preferences for this user.
audit($user_id, 'Admin Username: ' . $thisuser->username, ' settings cleared');
cms_userprefs::remove_for_user($user_id);
$message = lang('msg_usersettingscleared');
}
// put mention into the admin log
\CMSMS\HookManager::do_hook('Core::EditUserPost', [ 'user'=>&$thisuser ] );
$gCms->clear_cached_files();
$url = 'listusers.php?' . $urlext;
if ($message) {
$message = urlencode($message);
$url .= '&message=' . $message;
}
redirect($url);
} else {
$error .= "" . lang('errorupdatinguser') . "";
}
}
} elseif ($user_id != -1) {
$user = $thisuser->username;
$firstname = $thisuser->firstname;
$lastname = $thisuser->lastname;
$email = $thisuser->email;
$adminaccess = $thisuser->adminaccess;
$active = $thisuser->active;
}
/*--------------------
* Display view
---------------------*/
include_once ('header.php');
if (false == empty($error)) echo $themeObject->ShowErrors('');
$out = array(-1 => lang('none'));
$userlist = UserOperations::get_instance()->LoadUsers();
foreach ($userlist as $one) {
if ($one->id == $user_id) continue;
$out[$one->id] = $one->username;
}
if ($assign_group_perm && !$access_user) {
$groups = GroupOperations::get_instance()->LoadGroups();
$smarty->assign('groups', $groups);
$smarty->assign('membergroups', UserOperations::get_instance()->GetMemberGroups($user_id));
}
$smarty->assign('user_id', $user_id);
$smarty->assign('user', $user);
$smarty->assign('firstname', $firstname);
$smarty->assign('lastname', $lastname);
$smarty->assign('email', $email);
$smarty->assign('adminaccess', $adminaccess);
$smarty->assign('active', $active);
$smarty->assign('tplmaster', $tplmaster);
$smarty->assign('copyfromtemplate', $copyfromtemplate);
$smarty->assign('access_user', $access_user);
$smarty->assign('manage_users', $manage_users);
$smarty->assign('users', $out);
$smarty->display('edituser.tpl');
include_once ('footer.php');
?>