Subversion-Projekte lars-tiefland.content-management

Revision

Details | Letzte Änderung | Log anzeigen | RSS feed

Revision Autor Zeilennr. Zeile
1 lars 1
<?php
2
 
3
    /**
4
     * @package   Content-management
5
     * @author    Lars Tiefland <tiefland@weban.de>
6
     * @copyright 2010 Webagentur Niewerth
7
     * @license   propietary http://www.weban.de
8
     * @version   $Rev: 3916 $
9
     * @filesource
10
     *
11
     */
12
 
13
    /**
14
     *
15
     * @package   Content-management
16
     * @author    Lars Tiefland <tiefland@weban.de>
17
     * @copyright 2010 Webagentur Niewerth
18
     */
19
 
20
    // SVN: $Id: admin_user.php 3916 2011-09-08 11:37:11Z tiefland $
21
 
22
    require_once "Weban_Smarty.class.php";
23
    $self = basename( $PHP_SELF );
24
    $DB = "Access";
25
    require_once "connect2.php";
26
    require_once "webs.php";
27
    $GLOBALS["ui"] = new Weban_Smarty();
28
    $GLOBALS["ui"]->compile_dir = $_SERVER["DOCUMENT_ROOT"] .
29
        "/templates_c/";
30
    $GLOBALS["ui"]->use_sub_dirs = true;
31
    unset( $_POST["pwdcheck"] );
32
    if ( $MySQL_Host_write )
33
    {
34
        //echo "schreibe in Haupt-DB";
35
        $w_conn = @mysql_connect( $MySQL_Host_write, $MySQL_User, $MySQL_Passwd );
36
        if ( !$w_conn )
37
        {
38
            $error = true;
39
            $meld =
40
                "Leider können keine Bentzer bearbeitet werden, da keine Verbindung zur Datenbank möglich ist.";
41
        }
42
        $r = @mysql_select_db( $database_name );
43
        if ( !$r )
44
        {
45
            $meld =
46
                "Leider können keine Bentzer bearbeitet werden, da keine Verbindung zur Datenbank möglich ist.";
47
            $error = true;
48
        }
49
    }
50
    else
51
    {
52
        $w_conn = $localhost_dbh;
53
    }
54
    if ( $w_conn )
55
    {
56
        if ( $action == "update" )
57
        {
58
            unset( $_POST["action"] );
59
            unset( $_POST["ID"] );
60
            $_POST["user"] = $_POST["user"] . '@' . $site;
61
            if ( $_POST["passwd"] )
62
            {
63
                $_POST["passwd"] = crypt( $_POST["passwd"] );
64
            }
65
            else
66
            {
67
                unset( $_POST["passwd"] );
68
            }
69
 
70
            foreach ( array_keys( $_POST ) as $elem )
71
            {
72
                if ( $elem[0] == "_" )
73
                {
74
                    unset( $_POST[$elem] );
75
                    $button = $$elem;
76
                    $elem = substr( $elem, 1 );
77
                    $Pfad = $_POST[$elem . "_Pfad"];
78
                    unset( $_POST[$elem . "_Pfad"] );
79
                    $image = $$elem;
80
                    $image_name = $elem . "_name";
81
                    $image_name = urlencode( $$image_name );
82
                    switch ( $button )
83
                    {
84
                        case 0:
85
                            break;
86
                        case 1:
87
                            $_POST[$elem] = '';
88
                            break;
89
                        case 2:
90
                            //$image_name=$ID."_".$image_name;
91
                            $image_name = $ID . strrchr( $image_name, "." );
92
                            $_POST[$elem] = $image_name;
93
                            copy( $image, $Pfad . $image_name );
94
                            break;
95
                        default:
96
                            break;
97
                    }
98
                }
99
            }
100
            $names = array();
101
            foreach ( array_keys( $_POST ) as $elem )
102
            {
103
                array_push( $names, "$elem='$_POST[$elem]'" );
104
            }
105
            if ( !$ID )
106
            {
107
                $query = "
108
                    INSERT INTO
109
                ";
110
            }
111
            else
112
            {
113
                $query = "
114
                UPDATE
115
            ";
116
            }
117
            $query .= "
118
                    $DB
119
                SET " . join( ', ', $names );
120
            if ( $ID )
121
            {
122
                $query .= ",
123
                        letzte_Aenderung_am=NOW(),
124
                        letzte_Aenderung_von='" . $_SERVER["PHP_AUTH_USER"] .
125
                    "'
126
                    WHERE
127
                        ID = $ID
128
                ";
129
            }
130
            else
131
            {
132
                $query .= ",
133
                        erstellt_am=NOW(),
134
                        erstellt_von='" . $_SERVER["PHP_AUTH_USER"] . "'
135
                ";
136
            }
137
            $result = mysql_query( $query, $w_conn ) or die( mysql_errno() .
138
                ": " . mysql_error() );
139
            //echo $query;
140
            //header( "Location: " . $self );
141
            $action = "select_edit";
142
            unset( $ID, $_GET["ID"] );
143
        }
144
 
145
        if ( $action == "delete" )
146
        {
147
            if ( $ID )
148
            {
149
                $condition = array();
150
                foreach ( $ID as $elem )
151
                {
152
                    array_push( $condition, " ID = '$elem'" );
153
                    $query = "
154
                        DELETE FROM
155
                            user_properties
156
                        WHERE
157
                            Access = $elem
158
                    ";
159
                    mysql_query( $query, $w_conn ) or die( mysql_errno() .
160
                        ": " . mysql_error() );
161
                }
162
                $cond = join( " OR ", $condition );
163
                $query = "
164
                    DELETE FROM
165
                        $DB
166
                    WHERE
167
                        $cond
168
                ";
169
                $result = mysql_query( "$query" ) or die( mysql_errno() .
170
                    ": " . mysql_error() );
171
                //header( "Location: " . $self );
172
            }
173
        }
174
        if ( !$action )
175
        {
176
            $action = "select_edit";
177
        }
178
        if ( !$sort )
179
        {
180
            $sort = 'Name';
181
        }
182
        $sort = 'user';
183
        $GLOBALS["ui"]->assign( "action", $action );
184
        if ( $action == "select_edit" || $action == "delete" || ( $action ==
185
            "edit" && $_GET["ID"] ) )
186
        {
187
            $query = "
188
                SELECT
189
                    *
190
                FROM
191
                    $DB
192
                WHERE
193
            ";
194
            if ( $_GET["ID"] )
195
            {
196
                $query .= "
197
                    ID=" . $_GET["ID"] . "
198
                ";
199
            }
200
            else
201
            {
202
                $query .= "
203
                    ID > 0
204
                ";
205
            }
206
            $query .= "
207
                AND
208
                    user LIKE '%@$site'
209
                ORDER BY
210
                    $sort
211
            ";
212
            $result = mysql_query( $query, $w_conn ) or die( mysql_errno() .
213
                ": " . mysql_error() );
214
            while ( $row = mysql_fetch_assoc( $result ) )
215
            {
216
                $row["user"] = preg_split( "/@/", $row["user"] );
217
                $users[] = $row;
218
            }
219
        }
220
    }
221
    $GLOBALS["ui"]->assign( "users", $users );
222
    $GLOBALS["ui"]->assign( "webs", $webs );
223
    $GLOBALS["ui"]->assign( "meld", $meld );
224
    $GLOBALS["ui"]->assign( "error", $error );
225
    $GLOBALS["ui"]->assign( "web_rechte", $web_rechte );
226
    $GLOBALS["ui"]->assign( "user_rechte", $user_rechte );
227
    $GLOBALS["ui"]->display( "admin_users.tpl" );
228
?>