File: D:/web/itpartnership.net (cms)/admin/listusers.php
<?php
#CMS - CMS Made Simple
#(c)2004 by Ted Kulp (wishy@users.sf.net)
#This project's homepage is: http://cmsmadesimple.sf.net
#
#This program is free software; you can redistribute it and/or modify
#it under the terms of the GNU General Public License as published by
#the Free Software Foundation; either version 2 of the License, or
#(at your option) any later version.
#
#This program is distributed in the hope that it will be useful,
#but WITHOUT ANY WARRANTY; without even the implied warranty of
#MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
#GNU General Public License for more details.
#You should have received a copy of the GNU General Public License
#along with this program; if not, write to the Free Software
#Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#
#$Id: listusers.php 6712 2010-10-30 16:49:09Z nuno $
$CMS_ADMIN_PAGE=1;
require_once("../include.php");
require_once(cms_join_path($dirname,'lib','html_entity_decode_utf8.php'));
require_once("../lib/classes/class.user.inc.php");
$urlext='?'.CMS_SECURE_PARAM_NAME.'='.$_SESSION[CMS_USER_KEY];
check_login();
$userid = get_userid();
$access = check_permission($userid, "Modify Users") || check_permission($userid, "Remove Users") || check_permission($userid, "Add Users");
if (!$access) {
die('Permission Denied');
return;
}
include_once("header.php");
global $gCms;
$db =& $gCms->GetDb();
if (isset($_GET["message"])) {
$message = preg_replace('/\</','',$_GET['message']);
echo '<div class="pagemcontainer"><p class="pagemessage">'.$message.'</p></div>';
}
if (isset($_GET["toggleactive"]))
{
if($_GET["toggleactive"]==1) {
$error .= "<li>".lang('errorupdatinguser')."</li>";
} else {
global $gCms;
$userops =& $gCms->GetUserOperations();
$thisuser =& $userops->LoadUserByID($_GET["toggleactive"]);
if($thisuser) {
//modify users, is this enough?
$userid = get_userid();
$permission = check_permission($userid, 'Modify Users');
$result = false;
if($permission)
{
$thisuser->active == 1 ? $thisuser->active = 0 : $thisuser->active=1;
#Perform the edituser_pre callback
foreach($gCms->modules as $key=>$value)
{
if ($gCms->modules[$key]['installed'] == true &&
$gCms->modules[$key]['active'] == true)
{
$gCms->modules[$key]['object']->EditUserPre($thisuser);
}
}
$result = $thisuser->save();
}
if ($result)
{
audit($userid, $thisuser->username, 'Edited User');
#Perform the edituser_post callback
foreach($gCms->modules as $key=>$value)
{
if ($gCms->modules[$key]['installed'] == true &&
$gCms->modules[$key]['active'] == true)
{
$gCms->modules[$key]['object']->EditUserPost($thisuser);
}
}
} else {
$error .= "<li>".lang('errorupdatinguser')."</li>";
}
}
}
}
if (FALSE == empty($error)) {
echo $themeObject->ShowErrors('<ul class="error">'.$error.'</ul>');
}
?>
<div class="pagecontainer">
<div class="pageoverflow">
<?php
$userid = get_userid();
$edit = check_permission($userid, 'Modify Users');
$remove = check_permission($userid, 'Remove Users');
$query = "SELECT user_id, username, active FROM ".cms_db_prefix()."users ORDER BY user_id";
$result = $db->Execute($query);
global $gCms;
$userops =& $gCms->GetUserOperations();
$userlist =& $userops->LoadUsers();
$page = 1;
if (isset($_GET['page'])) $page = $_GET['page'];
$limit = 20;
if (count($userlist) > $limit)
{
echo "<p class=\"pageshowrows\">".pagination($page, count($userlist), $limit)."</p>";
}
echo $themeObject->ShowHeader('currentusers').'</div>';
if ($userlist && count($userlist) > 0){
echo "<table cellspacing=\"0\" class=\"pagetable\">\n";
echo '<thead>';
echo "<tr>\n";
echo "<th class=\"pagew70\">".lang('username')."</th>\n";
echo "<th class=\"pagepos\">".lang('active')."</th>\n";
echo "<th class=\"pageicon\"> </th>\n";
if ($remove)
echo "<th class=\"pageicon\"> </th>\n";
echo "</tr>\n";
echo '</thead>';
echo '<tbody>';
$currow = "row1";
// construct true/false button images
$image_true = $themeObject->DisplayImage('icons/system/true.gif', lang('true'),'','','systemicon');
$image_false = $themeObject->DisplayImage('icons/system/false.gif', lang('false'),'','','systemicon');
$counter=0;
foreach ($userlist as $oneuser){
$this_user = $userid == $oneuser->id;
$access_to_user = $edit && ($userops->UserInGroup($userid,1) || (!$userops->UserInGroup($oneuser->id,1)));
$access_user = $this_user || $access_to_user;
if ($counter < $page*$limit && $counter >= ($page*$limit)-$limit) {
echo "<tr class=\"$currow\" onmouseover=\"this.className='".$currow.'hover'."';\" onmouseout=\"this.className='".$currow."';\">\n";
if( $access_user )
{
echo "<td><a href=\"edituser.php".$urlext."&user_id=".$oneuser->id."\">".$oneuser->username."</a></td>\n";
}
else
{
echo "<td>{$oneuser->username}</td>\n";
}
if( $oneuser->id != 1 && $oneuser->id != $userid )
{
echo "<td class=\"pagepos\"><a href=\"listusers.php".$urlext."&toggleactive=".$oneuser->id."\">".($oneuser->active == 1?$image_true:$image_false)."</a></td>\n";
}
else
{
echo "<td class=\"pagepos\"> </td>\n";
}
if ($access_user)
{
echo "<td><a href=\"edituser.php".$urlext."&user_id=".$oneuser->id."\">";
echo $themeObject->DisplayImage('icons/system/edit.gif', lang('edit'),'','','systemicon');
echo "</a></td>\n";
}
else
{
echo "<td> </td>\n";
}
if ($remove && $oneuser->id != 1 && $oneuser->id != $userid)
{
echo "<td><a href=\"deleteuser.php".$urlext."&user_id=".$oneuser->id."\" onclick=\"return confirm('".cms_html_entity_decode_utf8(lang('deleteconfirm', $oneuser->username),true)."');\">";
echo $themeObject->DisplayImage('icons/system/delete.gif', lang('delete'),'','','systemicon');
echo "</a></td>\n";
}
else
{
echo "<td> </td>\n";
}
echo "</tr>\n";
($currow=="row1"?$currow="row2":$currow="row1");
}
$counter++;
}
echo '</tbody>';
echo "</table>\n";
}
if (check_permission($userid, 'Add Users')) {
?>
<div class="pageoptions">
<p class="pageoptions">
<a href="adduser.php<?php echo $urlext ?>">
<?php
echo $themeObject->DisplayImage('icons/system/newobject.gif', lang('adduser'),'','','systemicon').'</a>';
echo ' <a class="pageoptions" href="adduser.php'.$urlext.'">'.lang("adduser");
?>
</a>
</p>
</div>
</div>
<p class="pageback"><a class="pageback" href="<?php echo $themeObject->BackUrl(); ?>">« <?php echo lang('back')?></a></p>
<?php
}
include_once("footer.php");
# vim:ts=4 sw=4 noet
?>