| 1 |
lars |
1 |
<?
|
|
|
2 |
$self=basename($PHP_SELF);
|
|
|
3 |
$DB="Access";
|
|
|
4 |
require_once "connect.php";
|
|
|
5 |
if (!$rechte[$Rubrik[Rechte]] & $Buttons[admin])
|
|
|
6 |
{
|
|
|
7 |
exit;
|
|
|
8 |
}
|
|
|
9 |
unset($HTTP_POST_VARS[pwdcheck]);
|
|
|
10 |
if ($action=="update")
|
|
|
11 |
{
|
|
|
12 |
if (!$ID)
|
|
|
13 |
{ // insert Dummy-Entry
|
|
|
14 |
$query = "insert into $DB (ID) VALUES (0)";
|
|
|
15 |
$result = mysql_query ($query) or die (mysql_errno().": ".mysql_error()."<hr>".$query."<hr>");
|
|
|
16 |
$ID=mysql_insert_id();
|
|
|
17 |
}
|
|
|
18 |
|
|
|
19 |
unset($HTTP_POST_VARS[action]);
|
|
|
20 |
unset($HTTP_POST_VARS[ID]);
|
|
|
21 |
$HTTP_POST_VARS[user]=$HTTP_POST_VARS[user].'@'.$site;
|
|
|
22 |
if ($HTTP_POST_VARS[passwd])
|
|
|
23 |
{
|
|
|
24 |
$HTTP_POST_VARS[passwd]=crypt($HTTP_POST_VARS[passwd]);
|
|
|
25 |
}
|
|
|
26 |
else
|
|
|
27 |
{
|
|
|
28 |
unset($HTTP_POST_VARS[passwd]);
|
|
|
29 |
}
|
|
|
30 |
|
|
|
31 |
foreach(array_keys($HTTP_POST_VARS) as $elem)
|
|
|
32 |
{
|
|
|
33 |
if ($elem[0] == "_")
|
|
|
34 |
{
|
|
|
35 |
unset($HTTP_POST_VARS[$elem]);
|
|
|
36 |
$button=$$elem;
|
|
|
37 |
$elem=substr($elem,1);
|
|
|
38 |
$Pfad=$HTTP_POST_VARS[$elem."_Pfad"];
|
|
|
39 |
unset($HTTP_POST_VARS[$elem."_Pfad"]);
|
|
|
40 |
$image=$$elem;
|
|
|
41 |
$image_name=$elem."_name";
|
|
|
42 |
$image_name=urlencode($$image_name);
|
|
|
43 |
switch ($button)
|
|
|
44 |
{
|
|
|
45 |
case 0:
|
|
|
46 |
break;
|
|
|
47 |
case 1:
|
|
|
48 |
$HTTP_POST_VARS[$elem]='';
|
|
|
49 |
break;
|
|
|
50 |
case 2:
|
|
|
51 |
//$image_name=$ID."_".$image_name;
|
|
|
52 |
$image_name=$ID.strrchr($image_name,".");
|
|
|
53 |
$HTTP_POST_VARS[$elem]=$image_name;
|
|
|
54 |
copy($image,$Pfad.$image_name);
|
|
|
55 |
break;
|
|
|
56 |
default:
|
|
|
57 |
break;
|
|
|
58 |
}
|
|
|
59 |
}
|
|
|
60 |
}
|
|
|
61 |
$names=array();
|
|
|
62 |
foreach(array_keys($HTTP_POST_VARS) as $elem)
|
|
|
63 |
{
|
|
|
64 |
array_push($names,"$elem='$HTTP_POST_VARS[$elem]'");
|
|
|
65 |
}
|
|
|
66 |
$query="update $DB set ".join($names,', ');
|
|
|
67 |
$query=$query." where ID = '$ID'";
|
|
|
68 |
$result = mysql_query ($query) or die (mysql_errno().": ".mysql_error());
|
|
|
69 |
header("Location: ".$self);
|
|
|
70 |
}
|
|
|
71 |
|
|
|
72 |
if ($action=="delete")
|
|
|
73 |
{
|
|
|
74 |
if ($ID)
|
|
|
75 |
{
|
|
|
76 |
$condition=array();
|
|
|
77 |
foreach ($ID as $elem)
|
|
|
78 |
{
|
|
|
79 |
array_push($condition," ID = '$elem'");
|
|
|
80 |
}
|
|
|
81 |
$cond=join(" or ",$condition);
|
|
|
82 |
$query = "DELETE FROM $DB WHERE $cond";
|
|
|
83 |
$result = mysql_query ("$query") or die (mysql_errno().": ".mysql_error());
|
|
|
84 |
header("Location: ".$self);
|
|
|
85 |
}
|
|
|
86 |
}
|
|
|
87 |
if (!$action)
|
|
|
88 |
{
|
|
|
89 |
$action="select_edit";
|
|
|
90 |
}
|
|
|
91 |
if (!$sort) {$sort='Name';}
|
|
|
92 |
$sort='user';
|
|
|
93 |
?>
|
|
|
94 |
|
|
|
95 |
<html>
|
|
|
96 |
<head>
|
|
|
97 |
<title>Content-Management-System - Webagentur Niewerth</title>
|
|
|
98 |
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
|
|
|
99 |
<link rel=stylesheet type="text/css" href="redaktion.css">
|
|
|
100 |
<style type="text/css"><? require_once "redaktion.css"; ?></style>
|
|
|
101 |
<script language="JavaScript">
|
|
|
102 |
<!--
|
|
|
103 |
function MM_swapImgRestore() { //v3.0
|
|
|
104 |
var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
|
|
|
105 |
}
|
|
|
106 |
|
|
|
107 |
function MM_preloadImages() { //v3.0
|
|
|
108 |
var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
|
|
|
109 |
var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
|
|
|
110 |
if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
|
|
|
111 |
}
|
|
|
112 |
|
|
|
113 |
function MM_swapImage() { //v3.0
|
|
|
114 |
var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
|
|
|
115 |
if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
|
|
|
116 |
}
|
|
|
117 |
|
|
|
118 |
function MM_findObj(n, d) { //v4.01
|
|
|
119 |
var p,i,x; if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
|
|
|
120 |
d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
|
|
|
121 |
if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
|
|
|
122 |
for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
|
|
|
123 |
if(!x && d.getElementById) x=d.getElementById(n); return x;
|
|
|
124 |
}
|
|
|
125 |
//-->
|
|
|
126 |
</script>
|
|
|
127 |
<meta name="description" content="Redaktionssystem">
|
|
|
128 |
<meta name="author" content="Webagentur Niewerth">
|
|
|
129 |
<meta name="robots" content="noindex">
|
|
|
130 |
</head>
|
|
|
131 |
|
|
|
132 |
<body bgcolor="#FFFFFF" leftmargin="20" topmargin="10" marginwidth="20" marginheight="10" onLoad="MM_preloadImages('images/navigation/bt_neu_f2.gif','images/navigation/bt_bearbeiten_f2.gif','images/navigation/bt_delete_f2.gif')" text="#000096">
|
|
|
133 |
<form method="post" action="#" name="formname" enctype="multipart/form-data">
|
|
|
134 |
<table width="662" border="0" cellspacing="0" cellpadding="0">
|
|
|
135 |
<tr valign="top">
|
|
|
136 |
<td width="585">
|
|
|
137 |
<!-- Auswahl Löschen START -->
|
|
|
138 |
<?
|
|
|
139 |
if ($action=="delete")
|
|
|
140 |
{
|
|
|
141 |
$query="SELECT * FROM $DB where ID > 0 and user like '%@$site' ";
|
|
|
142 |
$query=$query."order by $sort";
|
|
|
143 |
$result = mysql_query ($query) or die (mysql_errno().": ".mysql_error());
|
|
|
144 |
if (mysql_num_rows($result) == 0)
|
|
|
145 |
{
|
|
|
146 |
?>
|
|
|
147 |
<p class="error">Es sind keine Daten eingetragen !</p>
|
|
|
148 |
<p></p>
|
|
|
149 |
<?
|
|
|
150 |
}
|
|
|
151 |
else
|
|
|
152 |
{
|
|
|
153 |
?>
|
|
|
154 |
<table width="100%" border="1" cellspacing="0" cellpadding="3" bordercolorlight="#FFFFFF" bordercolordark="#999999">
|
|
|
155 |
<tr bgcolor="#000099">
|
|
|
156 |
<td colspan="2" class="headline">Benutzer: Löschen</td>
|
|
|
157 |
</tr>
|
|
|
158 |
<?
|
|
|
159 |
while ($zeile=mysql_fetch_array($result))
|
|
|
160 |
{
|
|
|
161 |
?>
|
|
|
162 |
<tr>
|
|
|
163 |
<td><a href="<? echo $self?>?action=edit&ID=<? echo $zeile[ID]; ?>"><? echo $zeile[user]?></a> </td>
|
|
|
164 |
<td width="5%" align="center">
|
|
|
165 |
<input type="checkbox" name="ID[]" value="<? echo $zeile[ID] ?>">
|
|
|
166 |
</td>
|
|
|
167 |
</tr>
|
|
|
168 |
<?
|
|
|
169 |
}
|
|
|
170 |
?>
|
|
|
171 |
<tr bgcolor="#000099">
|
|
|
172 |
<td colspan="2" align="right">
|
|
|
173 |
<input type="hidden" name="action" value='delete'>
|
|
|
174 |
<input type="submit" value="LÖSCHEN">
|
|
|
175 |
<input type="reset" name="Button22" value="Zurücksetzen">
|
|
|
176 |
</td>
|
|
|
177 |
</tr>
|
|
|
178 |
</table>
|
|
|
179 |
<?
|
|
|
180 |
}
|
|
|
181 |
?>
|
|
|
182 |
<?
|
|
|
183 |
}
|
|
|
184 |
?>
|
|
|
185 |
<!-- Auswahl Löschen ENDE -->
|
|
|
186 |
<!-- Auswahl SELECT_EDIT START -->
|
|
|
187 |
<?
|
|
|
188 |
|
|
|
189 |
if ($action=="select_edit")
|
|
|
190 |
{
|
|
|
191 |
$query="SELECT * FROM $DB where ID > 0 and user like '%@$site' ";
|
|
|
192 |
$query=$query."order by $sort";
|
|
|
193 |
|
|
|
194 |
$result = mysql_query ($query) or die (mysql_errno().": ".mysql_error());
|
|
|
195 |
if (mysql_num_rows($result) == 0)
|
|
|
196 |
{
|
|
|
197 |
?>
|
|
|
198 |
<p class="error">Es sind keine
|
|
|
199 |
Daten eingetragen !</p>
|
|
|
200 |
<p></p>
|
|
|
201 |
<?
|
|
|
202 |
}
|
|
|
203 |
else
|
|
|
204 |
{
|
|
|
205 |
?>
|
|
|
206 |
<table width="100%" border="1" cellspacing="0" cellpadding="3" bordercolorlight="#FFFFFF" bordercolordark="#999999">
|
|
|
207 |
<tr bgcolor="#000099">
|
|
|
208 |
<td class="headline" colspan="2">Benutzer: Bearbeiten</td>
|
|
|
209 |
</tr>
|
|
|
210 |
<?
|
|
|
211 |
while ($zeile=mysql_fetch_array($result))
|
|
|
212 |
{
|
|
|
213 |
?>
|
|
|
214 |
<tr>
|
|
|
215 |
<td><a href="<? echo $self?>?action=edit&ID=<? echo $zeile[ID]; ?>">
|
|
|
216 |
<? echo $zeile[user]?>
|
|
|
217 |
</a> </td>
|
|
|
218 |
</tr>
|
|
|
219 |
<?
|
|
|
220 |
}
|
|
|
221 |
?>
|
|
|
222 |
<tr bgcolor="#000099">
|
|
|
223 |
<td colspan="2">
|
|
|
224 |
<div align="right">
|
|
|
225 |
<input type="hidden" name="action" value='edit'>
|
|
|
226 |
</div>
|
|
|
227 |
</td>
|
|
|
228 |
</tr>
|
|
|
229 |
</table>
|
|
|
230 |
<?
|
|
|
231 |
}
|
|
|
232 |
?>
|
|
|
233 |
<?
|
|
|
234 |
}
|
|
|
235 |
?>
|
|
|
236 |
<!-- Auswahl SELECT_EDIT ENDE -->
|
|
|
237 |
|
|
|
238 |
<?
|
|
|
239 |
if ($action=="edit")
|
|
|
240 |
{
|
|
|
241 |
if ($ID)
|
|
|
242 |
{
|
|
|
243 |
$result = mysql_query ("SELECT * FROM $DB where ID = '$ID' and user like '%@$site' ") or die (mysql_errno().": ".mysql_error());
|
|
|
244 |
$zeile=mysql_fetch_array($result);
|
|
|
245 |
}
|
|
|
246 |
$zeile[von]=join(".",array_reverse(preg_split("/-/",$zeile[von])));
|
|
|
247 |
$zeile[bis]=join(".",array_reverse(preg_split("/-/",$zeile[bis])));
|
|
|
248 |
$zeile[Abmeldedatum]=join(".",array_reverse(preg_split("/-/",$zeile[Abmeldedatum])));
|
|
|
249 |
?>
|
|
|
250 |
<table width="100%" border="1" cellspacing="0" cellpadding="3" bordercolorlight="#FFFFFF" bordercolordark="#999999">
|
|
|
251 |
<tr bgcolor="#000099">
|
|
|
252 |
<td colspan="3" class="headline">Benutzer:
|
|
|
253 |
<?
|
|
|
254 |
if ($ID)
|
|
|
255 |
{
|
|
|
256 |
?>
|
|
|
257 |
Bearbeiten
|
|
|
258 |
<?
|
|
|
259 |
}
|
|
|
260 |
else
|
|
|
261 |
{
|
|
|
262 |
?>
|
|
|
263 |
Neueintrag
|
|
|
264 |
<?
|
|
|
265 |
}
|
|
|
266 |
?>
|
|
|
267 |
</td>
|
|
|
268 |
</tr>
|
|
|
269 |
<tr>
|
|
|
270 |
<td bgcolor="#000099" class="headline" valign="middle" width="13%">Login:</td>
|
|
|
271 |
<td colspan="2">
|
|
|
272 |
<? $zeile[user] = preg_split ("/@/", $zeile[user]);?>
|
|
|
273 |
<input type="text" name="user" value="<? echo $zeile[user][0] ?>">
|
|
|
274 |
@
|
|
|
275 |
<? echo $site ?>
|
|
|
276 |
</td>
|
|
|
277 |
</tr>
|
|
|
278 |
<tr>
|
|
|
279 |
<td bgcolor="#000099" class="headline" valign="top" width="13%">Passwort:</td>
|
|
|
280 |
<td colspan="2">
|
|
|
281 |
<input type="password" name="passwd">
|
|
|
282 |
(Passwort)<br>
|
|
|
283 |
<input type="password" name="pwdcheck">
|
|
|
284 |
(Passwortbestätigung) </td>
|
|
|
285 |
</tr>
|
|
|
286 |
<tr>
|
|
|
287 |
<td bgcolor="#000099" class="headline" valign="top" width="13%">Verzeichnis:</td>
|
|
|
288 |
<td colspan="2">
|
|
|
289 |
<input type="text" name="dir" value="<? echo $zeile[dir] ?>">
|
|
|
290 |
</td>
|
|
|
291 |
</tr>
|
|
|
292 |
<tr>
|
|
|
293 |
<td bgcolor="#000099" class="headline" valign="top" width="13%">Beschreibung:</td>
|
|
|
294 |
<td colspan="2">
|
|
|
295 |
<textarea name="Beschreibung" cols="40" rows="3"><? echo $zeile[Beschreibung] ?></textarea>
|
|
|
296 |
</td>
|
|
|
297 |
</tr>
|
|
|
298 |
<tr>
|
|
|
299 |
<td bgcolor="#000099" class="headline" valign="top" width="13%">Rechte:</td>
|
|
|
300 |
<td colspan="2">
|
|
|
301 |
<input type="hidden" name="Useradministration" value="0">
|
|
|
302 |
<input type="checkbox" name="Useradministration" value="1"<? if ($zeile[Useradministration] == 1) {echo " checked";} ?>>
|
|
|
303 |
Useradministration<br>
|
|
|
304 |
<input type="hidden" name="Frameset" value="0">
|
|
|
305 |
<input type="checkbox" name="Frameset" value="1"<? if ($zeile[Frameset] == 1) {echo " checked";} ?>>
|
|
|
306 |
Frameset<br>
|
|
|
307 |
<input type="hidden" name="Navigation" value="0">
|
|
|
308 |
<input type="checkbox" name="Navigation" value="1"<? if ($zeile[Navigation] == 1) {echo " checked";} ?>>
|
|
|
309 |
Navigation<br>
|
|
|
310 |
<input type="hidden" name="Seiten" value="0">
|
|
|
311 |
<input type="checkbox" name="Seiten" value="1"<? if ($zeile[Seiten] == 1) {echo " checked";} ?>>
|
|
|
312 |
Seiten </td>
|
|
|
313 |
</tr>
|
|
|
314 |
<tr bgcolor="#000099">
|
|
|
315 |
<td align="right" colspan="3">
|
|
|
316 |
<input type="hidden" name="ID" value="<? echo $ID ?>">
|
|
|
317 |
<input type="hidden" name="action" value="update">
|
|
|
318 |
<input type="submit" value="OK" onClick="if (this.form.passwd.value != this.form.pwdcheck.value) {alert('Passwort und Passwortbestätigung stimmen nicht überein !');return false;}">
|
|
|
319 |
<input type="reset" name="Button" value="Zurücksetzen">
|
|
|
320 |
</td>
|
|
|
321 |
</tr>
|
|
|
322 |
</table>
|
|
|
323 |
<?
|
|
|
324 |
}
|
|
|
325 |
?> </td>
|
|
|
326 |
<td width="77" align="right">
|
|
|
327 |
<table width="67" border="1" cellspacing="0" cellpadding="0" bordercolorlight="#FFFFFF" bordercolordark="#999999">
|
|
|
328 |
<tr>
|
|
|
329 |
<td class="frame"><a href="<? echo $self ?>?action=edit" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('Image5','','images/navigation/bt_neu_f2.gif',1)"><img name="Image5" border="0" src="images/navigation/bt_neu.gif" width="67" height="40"></a></td>
|
|
|
330 |
</tr>
|
|
|
331 |
<tr>
|
|
|
332 |
<td class="frame"><a href="<? echo $self ?>?action=select_edit" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('Image6','','images/navigation/bt_bearbeiten_f2.gif',1)"><img name="Image6" border="0" src="images/navigation/bt_bearbeiten.gif" width="67" height="40"></a></td>
|
|
|
333 |
</tr>
|
|
|
334 |
<tr>
|
|
|
335 |
<td class="frame"><a href="<? echo $self ?>?action=delete" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('Image7','','images/navigation/bt_delete_f2.gif',1)"><img name="Image7" border="0" src="images/navigation/bt_delete.gif" width="67" height="40"></a></td>
|
|
|
336 |
</tr>
|
|
|
337 |
</table>
|
|
|
338 |
</td>
|
|
|
339 |
</tr>
|
|
|
340 |
</table>
|
|
|
341 |
</form>
|
|
|
342 |
</body>
|