WebSVN – lars-tiefland.content-management – /trunk/UserAdministration.php

<?
        $self=basename($PHP_SELF);
        $DB="Access";
        require_once "connect.php";
        if (!$rechte[$Rubrik[Rechte]] & $Buttons[admin])
        {
                exit;
        }
        unset($HTTP_POST_VARS[pwdcheck]);
        if ($action=="update")
        {
                if (!$ID)
                {       // insert Dummy-Entry
                        $query = "insert into $DB (ID) VALUES (0)";
                        $result = mysql_query ($query) or die (mysql_errno().": ".mysql_error()."<hr>".$query."<hr>");
                        $ID=mysql_insert_id();
                }

                unset($HTTP_POST_VARS[action]);
                unset($HTTP_POST_VARS[ID]);
                $HTTP_POST_VARS[user]=$HTTP_POST_VARS[user].'@'.$site;
                if ($HTTP_POST_VARS[passwd])
                {
                        $HTTP_POST_VARS[passwd]=crypt($HTTP_POST_VARS[passwd]);
                }
                else 
                {
                        unset($HTTP_POST_VARS[passwd]);
                }

                foreach(array_keys($HTTP_POST_VARS) as $elem)
                {
                        if ($elem[0] == "_")
                        {
                                unset($HTTP_POST_VARS[$elem]);
                                $button=$$elem;
                                $elem=substr($elem,1);
                                $Pfad=$HTTP_POST_VARS[$elem."_Pfad"];
                                unset($HTTP_POST_VARS[$elem."_Pfad"]);
                                $image=$$elem;
                                $image_name=$elem."_name";
                                $image_name=urlencode($$image_name);
                                switch ($button) 
                                {
                                        case 0:
                                                break;
                                        case 1:
                                                $HTTP_POST_VARS[$elem]='';
                                                break;
                                        case 2:
                                                //$image_name=$ID."_".$image_name;
                                                $image_name=$ID.strrchr($image_name,".");
                                                $HTTP_POST_VARS[$elem]=$image_name;
                                                copy($image,$Pfad.$image_name);
                                        break;
                                    default:
                                        break;
                            }
                        }
                }
                $names=array();
                foreach(array_keys($HTTP_POST_VARS) as $elem)
                {
                        array_push($names,"$elem='$HTTP_POST_VARS[$elem]'");
                }
                $query="update $DB set ".join($names,', ');
                $query=$query." where ID = '$ID'";
                $result = mysql_query ($query) or die (mysql_errno().": ".mysql_error());
                header("Location: ".$self);  
        }

        if ($action=="delete")
        {
                if ($ID)
                {
                        $condition=array();
                        foreach ($ID as $elem) 
                        {
                                array_push($condition," ID = '$elem'");
                        }
                        $cond=join(" or ",$condition);
                        $query = "DELETE FROM $DB WHERE $cond";
                        $result = mysql_query ("$query") or die (mysql_errno().": ".mysql_error());
                        header("Location: ".$self);  
                }
        }
        if (!$action) 
        {
                $action="select_edit";
        }
        if (!$sort) {$sort='Name';}
        $sort='user';
?>

<html>
<head>
<title>Content-Management-System - Webagentur Niewerth</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link rel=stylesheet type="text/css" href="redaktion.css">
<style type="text/css"><? require_once "redaktion.css"; ?></style>
<script language="JavaScript">
<!--
function MM_swapImgRestore() { //v3.0
  var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
}

function MM_preloadImages() { //v3.0
  var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
    var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
    if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
}

function MM_swapImage() { //v3.0
  var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
   if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
}

function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}
//-->
</script>
<meta name="description" content="Redaktionssystem">
<meta name="author" content="Webagentur Niewerth">
<meta name="robots" content="noindex">
</head>

<body bgcolor="#FFFFFF" leftmargin="20" topmargin="10" marginwidth="20" marginheight="10" onLoad="MM_preloadImages('images/navigation/bt_neu_f2.gif','images/navigation/bt_bearbeiten_f2.gif','images/navigation/bt_delete_f2.gif')" text="#000096">
<form method="post" action="#" name="formname" enctype="multipart/form-data">
  <table width="662" border="0" cellspacing="0" cellpadding="0">
    <tr valign="top"> 
      <td width="585"> 
<!--  Auswahl Löschen START  -->
<?  
        if ($action=="delete") 
        {
                $query="SELECT * FROM $DB where ID > 0 and user like '%@$site' ";
                $query=$query."order by $sort";
                $result = mysql_query ($query) or die (mysql_errno().": ".mysql_error());
                if (mysql_num_rows($result) == 0)
                {
?>
<p class="error">Es sind keine Daten eingetragen !</p>
<p></p>
<?
                }
                else
                {
?>
        <table width="100%" border="1" cellspacing="0" cellpadding="3" bordercolorlight="#FFFFFF" bordercolordark="#999999">
          <tr bgcolor="#000099"> 
            <td colspan="2" class="headline">Benutzer: L&ouml;schen</td>
          </tr>
          <?
        while ($zeile=mysql_fetch_array($result))
        {
?>
          <tr> 
            <td><a href="<? echo $self?>?action=edit&ID=<? echo $zeile[ID]; ?>"><? echo $zeile[user]?></a>&nbsp;</td>
            <td width="5%" align="center"> 
              <input type="checkbox" name="ID[]" value="<?  echo $zeile[ID] ?>">
            </td>
          </tr>
          <?
        }
?>
          <tr bgcolor="#000099"> 
            <td colspan="2" align="right"> 
              <input type="hidden" name="action" value='delete'>
              <input type="submit" value="LÖSCHEN">
              <input type="reset" name="Button22" value="Zur&uuml;cksetzen">
            </td>
          </tr>
        </table>
        <?
                }
?>
        <?
        }
?>
        <!--  Auswahl Löschen ENDE  -->
        <!--  Auswahl SELECT_EDIT START  -->
        <?

  if ($action=="select_edit") 
        {
        $query="SELECT * FROM $DB where ID > 0 and user like '%@$site' ";
        $query=$query."order by $sort";

        $result = mysql_query ($query) or die (mysql_errno().": ".mysql_error());
        if (mysql_num_rows($result) == 0)
        {
        ?>
        <p class="error">Es sind keine 
            Daten eingetragen !</p>
          <p></p>
        <?
        }
        else
        {
        ?>
        <table width="100%" border="1" cellspacing="0" cellpadding="3" bordercolorlight="#FFFFFF" bordercolordark="#999999">
          <tr bgcolor="#000099"> 
            <td class="headline" colspan="2">Benutzer: Bearbeiten</td>
          </tr>
          <?
        while ($zeile=mysql_fetch_array($result))
        {
?>
          <tr> 
            <td><a href="<? echo $self?>?action=edit&ID=<? echo $zeile[ID]; ?>"> 
              <? echo $zeile[user]?>
              </a> &nbsp; </td>
          </tr>
          <?
        }
?>
          <tr bgcolor="#000099"> 
            <td colspan="2"> 
              <div align="right">&nbsp; 
                <input type="hidden" name="action" value='edit'>
              </div>
            </td>
          </tr>
        </table>
 <?
        }
?> 
        <?
        }
?> 
<!--  Auswahl SELECT_EDIT ENDE  -->

<?
        if ($action=="edit")
        {
                if ($ID)
                {
                        $result = mysql_query ("SELECT * FROM $DB where ID = '$ID' and user like '%@$site' ") or die (mysql_errno().": ".mysql_error());
                        $zeile=mysql_fetch_array($result);
                }
        $zeile[von]=join(".",array_reverse(preg_split("/-/",$zeile[von])));
        $zeile[bis]=join(".",array_reverse(preg_split("/-/",$zeile[bis])));
        $zeile[Abmeldedatum]=join(".",array_reverse(preg_split("/-/",$zeile[Abmeldedatum])));
        ?> 
            <table width="100%" border="1" cellspacing="0" cellpadding="3" bordercolorlight="#FFFFFF" bordercolordark="#999999">
          <tr bgcolor="#000099"> 
            <td colspan="3" class="headline">Benutzer: 
              <?
                                        if ($ID)
                                        {
                                         ?>
              Bearbeiten 
              <?
                                        }
                                        else
                                        {
                                         ?>
              Neueintrag 
              <?
                                        }
                                ?>
            </td>
          </tr>
          <tr> 
            <td bgcolor="#000099" class="headline" valign="middle" width="13%">Login:</td>
            <td colspan="2"> 
              <? $zeile[user] = preg_split ("/@/", $zeile[user]);?>
              <input type="text" name="user" value="<? echo $zeile[user][0] ?>">
              @
              <? echo $site ?>
            </td>
          </tr>
          <tr> 
            <td bgcolor="#000099" class="headline" valign="top" width="13%">Passwort:</td>
            <td colspan="2"> 
              <input type="password" name="passwd">
              (Passwort)<br>
              <input type="password" name="pwdcheck">
              (Passwortbest&auml;tigung) </td>
          </tr>
          <tr>
            <td bgcolor="#000099" class="headline" valign="top" width="13%">Verzeichnis:</td>
            <td colspan="2">
              <input type="text" name="dir" value="<? echo $zeile[dir] ?>">
            </td>
          </tr>
          <tr> 
            <td bgcolor="#000099" class="headline" valign="top" width="13%">Beschreibung:</td>
            <td colspan="2"> 
              <textarea name="Beschreibung" cols="40" rows="3"><? echo $zeile[Beschreibung] ?></textarea>
            </td>
          </tr>
          <tr> 
            <td bgcolor="#000099" class="headline" valign="top" width="13%">Rechte:</td>
            <td colspan="2"> 
              <input type="hidden" name="Useradministration" value="0">
              <input type="checkbox" name="Useradministration" value="1"<? if ($zeile[Useradministration] == 1) {echo " checked";} ?>>
              Useradministration<br>
              <input type="hidden" name="Frameset" value="0">
              <input type="checkbox" name="Frameset" value="1"<? if ($zeile[Frameset] == 1) {echo " checked";} ?>>
              Frameset<br>
              <input type="hidden" name="Navigation" value="0">
              <input type="checkbox" name="Navigation" value="1"<? if ($zeile[Navigation] == 1) {echo " checked";} ?>>
              Navigation<br>
              <input type="hidden" name="Seiten" value="0">
              <input type="checkbox" name="Seiten" value="1"<? if ($zeile[Seiten] == 1) {echo " checked";} ?>>
              Seiten </td>
          </tr>
          <tr bgcolor="#000099"> 
            <td align="right" colspan="3"> 
              <input type="hidden" name="ID" value="<? echo $ID ?>">
              <input type="hidden" name="action" value="update">
              <input type="submit" value="OK" onClick="if (this.form.passwd.value != this.form.pwdcheck.value) {alert('Passwort und Passwortbestätigung stimmen nicht überein !');return false;}">
              <input type="reset" name="Button" value="Zur&uuml;cksetzen">
            </td>
          </tr>
        </table>
        <?
        }
?> </td>
      <td width="77" align="right"> 
        <table width="67" border="1" cellspacing="0" cellpadding="0" bordercolorlight="#FFFFFF" bordercolordark="#999999">
                <tr> 
            <td class="frame"><a href="<? echo $self ?>?action=edit" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('Image5','','images/navigation/bt_neu_f2.gif',1)"><img name="Image5" border="0" src="images/navigation/bt_neu.gif" width="67" height="40"></a></td>
                </tr>
                <tr> 
            <td class="frame"><a href="<? echo $self ?>?action=select_edit" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('Image6','','images/navigation/bt_bearbeiten_f2.gif',1)"><img name="Image6" border="0" src="images/navigation/bt_bearbeiten.gif" width="67" height="40"></a></td>
                </tr>
                <tr> 
            <td class="frame"><a href="<? echo $self ?>?action=delete" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('Image7','','images/navigation/bt_delete_f2.gif',1)"><img name="Image7" border="0" src="images/navigation/bt_delete.gif" width="67" height="40"></a></td>
                </tr>
                </table>
      </td>
</tr>
</table>
</form>
</body>
Subversion-Projekte lars-tiefland.content-management

(root)/trunk/UserAdministration.php – Revision 1
