get('listofadministrators'),"start=$start"); require dirname(__FILE__) . "/structure.php"; $struct = $DBstruct["admin"]; $id = !empty($_REQUEST["id"]) ? sprintf('%d',$_REQUEST["id"]) : 0; $find = isset($_REQUEST['find']) ? $_REQUEST['find'] : ''; $start = isset($_GET['start']) ? sprintf('%d',$_GET['start']):0; echo "

"; $noaccess = 0; $accesslevel = accessLevel("admin"); switch ($accesslevel) { case "owner": $id = $_SESSION["logindetails"]["id"];break; case "all": $subselect = "";break; case "none": default: $noaccess = 1; } if ($noaccess) { print Error($GLOBALS['I18N']->get('No Access')); return; } if (!empty($_POST["change"])) { if (empty($_POST["id"])) { # new one $result = Sql_query(sprintf('SELECT count(*) FROM %s WHERE namelc="%s"', $tables["admin"],strtolower(normalize($_POST["loginname"])))); $totalres = Sql_fetch_Row($result); $total = $totalres[0]; if (!$total) { Sql_Query(sprintf('insert into %s (namelc,created) values("%s",now())', $tables["admin"],strtolower(normalize($_POST["loginname"])))); $id = Sql_Insert_Id(); } else { $id = 0; } } else { $id = sprintf('%d',$_POST["id"]); } if ($id) { reset($struct); while (list ($key,$val) = each ($struct)) { $a = $b = ''; if (strstr($val[1],':')) list($a,$b) = explode(":",$val[1]); if ($a != "sys" && isset($_POST[$key])) Sql_Query("update {$tables["admin"]} set $key = \"".addslashes($_POST[$key])."\" where id = $id"); } if (is_array($_POST["attribute"])) while (list($key,$val) = each ($_POST["attribute"])) { Sql_Query(sprintf('replace into %s (adminid,adminattributeid,value) values(%d,%d,"%s")',$tables["admin_attribute"],$id,$key,addslashes($val))); } Sql_Query(sprintf('update %s set modifiedby = "%s" where id = %d',$tables["admin"],adminName($_SESSION["logindetails"]["id"]),$id)); if ($accesslevel == "all" && isset($_POST['access']) && is_array($_POST["access"])) { Sql_Query("delete from {$tables["admin_task"]} where adminid = $id"); if ( is_array($_POST["access"])) while (list($key,$val) = each ($_POST["access"])) Sql_Query(sprintf('replace into %s (adminid,taskid,level) values(%d,%d,%d)',$GLOBALS['tables']["admin_task"],$id,$key,$val)); } Info($GLOBALS['I18N']->get('Changes saved')); } else { Info($GLOBALS['I18N']->get('Error adding new admin')); } } if (!empty($_POST["setdefault"])) { Sql_Query("delete from {$tables["admin_task"]} where adminid = 0"); if (is_array($_POST["access"])) while (list($key,$val) = each ($_POST["access"])) Sql_Query("insert into {$tables["admin_task"]} (adminid,taskid,level) values(0,$key,$val)"); Info($GLOBALS['I18N']->get('Current set of permissions made default')); } if (!empty($_POST["resetaccess"])) { $reverse_accesscodes = array_flip($access_levels); $req = Sql_Query("select * from {$tables["task"]} order by type"); while ($row = Sql_Fetch_Array($req)) { $level = $system_pages[$row["type"]][$row["page"]]; Sql_Query(sprintf('replace into %s (adminid,taskid,level) values(%d,%d,%d)', $tables["admin_task"],$id,$row["id"],$reverse_accesscodes[$level])); } } if (!empty($_GET["delete"])) { $delete = sprintf('%d',$_GET['delete']); # delete the index in delete print $GLOBALS['I18N']->get('Deleting')." $delete ..\n"; Sql_query(sprintf('delete from %s where id = %d',$GLOBALS["tables"]["admin"],$delete)); Sql_query(sprintf('delete from %s where adminid = %d',$GLOBALS["tables"]["admin_attribute"],$delete)); Sql_query(sprintf('delete from %s where adminid = %d',$GLOBALS["tables"]["admin_task"],$delete)); print '..'.$GLOBALS['I18N']->get('Done')."

\n"; } if ($id) { print $GLOBALS['I18N']->get('Edit Administrator').': '; $result = Sql_query("SELECT * FROM {$tables["admin"]} where id = $id"); $data = sql_fetch_array($result); print $data["loginname"]; if ($data["id"] != $_SESSION["logindetails"]["id"] && $accesslevel == "all") printf( "
  • Delete %s\n",PageURL2("admin","","delete=$id"),$data["loginname"]); } else { $data = array(); print $GLOBALS['I18N']->get('Add a new Administrator'); } print "
    "; print '

    '.$GLOBALS['I18N']->get('Admin Details').':'.formStart().''; printf('',$id); reset($struct); while (list ($key,$val) = each ($struct)) { $a = $b = ''; if (empty($data[$key])) $data[$key] = ''; if (strstr($val[1],':')) list($a,$b) = explode(":",$val[1]); if ($a == "sys") printf('',$GLOBALS['I18N']->get($b),$data[$key]); elseif ($key == "loginname" && $data[$key] == "admin") { printf(''); print(''); } elseif ($key == "superuser" || $key == "disabled") { if ($accesslevel == "all") { printf(''."\n",$GLOBALS['I18N']->get($val[1]),$key,stripslashes($data[$key])); } } elseif (!empty($val[1]) && !strpos($key,'_')) { printf(''."\n",$GLOBALS['I18N']->get($val[1]),$key,stripslashes($data[$key])); } } $res = Sql_Query("select {$tables["adminattribute"]}.id, {$tables["adminattribute"]}.name, {$tables["adminattribute"]}.type, {$tables["adminattribute"]}.tablename from {$tables["adminattribute"]} order by {$tables["adminattribute"]}.listorder"); while ($row = Sql_fetch_array($res)) { if ($id) { $val_req = Sql_Fetch_Row_Query("select value from {$tables["admin_attribute"]} where adminid = $id and adminattributeid = $row[id]"); $row["value"] = $val_req[0]; } else { $row['value'] = ''; } if ($row["type"] == "checkbox") { $checked_index_req = Sql_Fetch_Row_Query("select id from $table_prefix"."adminattr_".$row["tablename"]." where name = \"Checked\""); $checked_index = $checked_index_req[0]; $checked = $checked_index == $row["value"]?"checked":""; printf(''."\n",$row["name"],$row["id"],$row["id"],$checked); } else if ($row["type"] != "textline" && $row["type"] != "hidden") printf ("\n",$row["name"],AttributeValueSelect($row["id"],$row["tablename"],$row["value"],"adminattr")); else printf(''."\n",$row["name"],$row["id"],htmlspecialchars(stripslashes($row["value"]))); } print '
    %s%s
    '.$GLOBALS['I18N']->get('Login Name').'admin
    %s
    %s
    %s
    %s%s
    %s
    '; # what pages can this administrator see: if (!$data["superuser"] && $accesslevel == "all") { print $I18N->get('strAccessExplain'); print '

    '.$GLOBALS['I18N']->get('Access Details').':

    '; reset($access_levels); printf ('',sizeof($access_levels)+2); print '\n"; foreach ($access_levels as $level) printf('',$GLOBALS['I18N']->get($level)); print "\n"; $req = Sql_Query("select * from {$tables["task"]} order by type"); while ($row = Sql_Fetch_Array($req)) { printf('',$row["type"],$row["page"]); reset($access_levels); while (list($key,$level) = each ($access_levels)) { $current_level_req = Sql_Query(sprintf(' select level from %s where adminid = %d and taskid = %d',$tables["admin_task"],$id,$row["id"])); if (!Sql_Affected_Rows()) { # take a default $default = $system_pages[$row["type"]][$row["page"]]; # if ($row["type"] == "system") { # $curval = 0; # } else { # $curval = 4; # } # by default disable everything $curval = 0; if ($level == $default) $curval = $key; } else { $current_level = Sql_Fetch_Row($current_level_req); $curval = $current_level[0]; } printf('',$row["id"],$key,$key == $curval ? "checked":""); } print "\n"; } printf('
    '.$GLOBALS['I18N']->get('Access Privileges').'
    '.$GLOBALS['I18N']->get('Type').''.$GLOBALS['I18N']->get('Page')."%s
    %s%s
    ',sizeof($access_levels)+2); print ''; } print ""; ?>