[Summary view] [Print] [Text view]

   1  <?php
   2  if ($script_name = basename($HTTP_SERVER_VARS["SCRIPT_NAME"]) != "index.php" ) {
   3   print "<meta http-equiv=\"refresh\" content=\"0; URL=../index.php\">";
   4   exit;
   5  }
   6  
   7  print "<center><h3>Modify users</h3></center>";
   8  
   9  if ($HTTP_POST_VARS["modify_users_change"] == "Y") {
  10      $muser = $HTTP_POST_VARS["muser"];
  11      $mpassword = $HTTP_POST_VARS["mpassword"];
  12      $muser_group = $HTTP_POST_VARS["muser_group"];
  13      $memail = $HTTP_POST_VARS["memail"];    
  14      $sql = mysql_query("update tbl_leader
  15                          set user_group=\"$muser_group\"
  16                          , email_addr=\"$memail\"
  17                          where user=\"$muser\";");
  18      print "<center><h3>Updated $muser</h3>";
  19  }
  20  
  21  if ($HTTP_POST_VARS["modify_users_insert"] == "Y") {
  22      $muser = $HTTP_POST_VARS["muser"];
  23      $mpassword= $HTTP_POST_VARS["mpassword"];
  24      $muser_group = $HTTP_POST_VARS["muser_group"];
  25      $sql = mysql_query("insert into tbl_leader
  26                          ( user
  27                          , password
  28                          , user_group
  29                          , email_addr
  30                          )
  31                          values ( \"$muser\"
  32                          , password(\"$mpassword\")
  33                          , \"$muser_group\"
  34                          , \"$memail\"
  35                          );");
  36  }
  37  
  38  if ($HTTP_POST_VARS["modify_users_delete"] == "Y") {
  39      $muser = $HTTP_POST_VARS["muser"];
  40      $sql = mysql_query("delete from tbl_leader where user=\"$muser\";");
  41      print "<center><h3>Deleted $muser</h3></center>";
  42  }
  43  
  44  print "<center><h3>Instructions:</h3>";
  45  print "<table width=50% border=1 cellspacing=0><tr><td><b>User:</td><td>User name is 3 to 16 characters.  Use letters and numbers only. Case Sensitive</td></tr>";
  46  print "<tr><td><b>User Group:</td><td><table border=1 cellspacing=0 width=100%><tr><td>0:</td><td>Administrator</td></tr>
  47                           <tr><td>1:</td><td>Moderator</td></tr>
  48                           <tr><td>2:</td><td>User</td></tr>
  49                           <tr><td>3:</td><td>Non-User or Privilages Revoked</td></tr>
  50                        </table></td></tr>
  51      <tr><td><b>Usage-cnt</td><td>Number of times a User has logged onto Scout Tracker.</td></tr>
  52      <tr><td><b>Password:</td><td>Use the User name as a Password and tell the user to change their password. Case Sensitive</td></tr>
  53      </table><br>";
  54  
  55  print "<center><table border=1 width=50% cellspacing=0>";
  56  print "<tr><td>User Name</td><td>User Group</td><td>Email Address</td><td>Usage-cnt</td></tr>";
  57  
  58  $sql = mysql_query("select user as muser,usage_cnt as musage_cnt,user_group as muser_group,email_addr as memail from tbl_leader order by user_group, user;");
  59  
  60  while ($row = mysql_fetch_assoc($sql)) {
  61      extract($row);
  62      if ($muser != "guest") {
  63      print "<tr><form method=POST action=./index.php><td><input type=text name=muser size=16 maxlength=16 value=$muser></td>
  64          <td><center><input type=text name=muser_group size=1 maxlength=1 value=$muser_group></td>
  65      <td><center><input type=text name=memail size=30 maxlength=60 value=$memail></td>
  66      <td><center>$musage_cnt</td>
  67          <td><input type=submit value=\"Update User Info\"><input type=hidden name=modify_users value=Y>
  68      <input type=hidden name=modify_users_change value=Y></form>
  69          <td><form method=POST action=./index.php><input type=hidden name=modify_users value=Y>    
  70      <input type=submit name=mdelete value=\"Delete User\"><input type=hidden name=modify_users value=Y>
  71          <input type=hidden name=modify_users_delete value=Y><input type=hidden name=muser value=$muser>
  72      </tr></form>";
  73      }
  74  }
  75  
  76  mysql_free_result($sql);
  77  
  78  print "<tr><form method=POST action=./index.php><td><input type=text name=muser size=16 maxlength=16 value=></td>
  79      <td><center><input type=text name=muser_group size=1 maxlength=1 value=></td>
  80      <td><center><input type=text name=memail size=30 maxlength=60 value=$memail></td>
  81      <td><center>Password:<br><input type=password name=mpassword size=16 maxlength=16 value=\"\"</td>
  82      <td><input type=submit value=\"Add User\"><input type=hidden name=modify_users value=Y>
  83      <input type=hidden name=modify_users_insert value=Y></tr></form>";
  84  print "</table>";
  85  ?>