118 lines
2.8 KiB
PHP
118 lines
2.8 KiB
PHP
<?php defined('BLUDIT') or die('Bludit CMS.');
|
|
|
|
// ============================================================================
|
|
// Functions
|
|
// ============================================================================
|
|
|
|
function editUser($args)
|
|
{
|
|
global $dbUsers;
|
|
global $Language;
|
|
|
|
if( $dbUsers->set($args) ) {
|
|
Alert::set($Language->g('The changes have been saved'));
|
|
}
|
|
else {
|
|
Log::set(__METHOD__.LOG_SEP.'Error occurred when trying to edit the user.');
|
|
}
|
|
}
|
|
|
|
function setPassword($args)
|
|
{
|
|
global $dbUsers;
|
|
global $Language;
|
|
|
|
if( ($args['password']===$args['confirm-password']) && !Text::isEmpty($args['password']) )
|
|
{
|
|
if( $dbUsers->setPassword($args) ) {
|
|
Alert::set($Language->g('The changes have been saved'));
|
|
}
|
|
else {
|
|
Log::set(__METHOD__.LOG_SEP.'Error occurred when trying to change the user password.');
|
|
}
|
|
}
|
|
else {
|
|
Alert::set($Language->g('The password and confirmation password do not match'));
|
|
return false;
|
|
}
|
|
}
|
|
|
|
function deleteUser($args, $deleteContent=false)
|
|
{
|
|
global $dbUsers;
|
|
global $dbPosts;
|
|
global $Language;
|
|
|
|
// The user admin cannot be deleted.
|
|
if($args['username']=='admin') {
|
|
return false;
|
|
}
|
|
|
|
// The editors cannot delete users.
|
|
if($Login->role()!=='admin') {
|
|
return false;
|
|
}
|
|
|
|
if($deleteContent) {
|
|
$dbPosts->deletePostsByUser($args['username']);
|
|
}
|
|
else {
|
|
$dbPosts->linkPostsToUser($args['username'], 'admin');
|
|
}
|
|
|
|
if( $dbUsers->delete($args['username']) ) {
|
|
Alert::set($Language->g('User deleted'));
|
|
}
|
|
else {
|
|
Log::set(__METHOD__.LOG_SEP.'Error occurred when trying to delete the user.');
|
|
}
|
|
}
|
|
|
|
// ============================================================================
|
|
// Main before POST
|
|
// ============================================================================
|
|
|
|
// ============================================================================
|
|
// POST Method
|
|
// ============================================================================
|
|
|
|
if( $_SERVER['REQUEST_METHOD'] == 'POST' )
|
|
{
|
|
// Prevent editors users to administrate other users.
|
|
if($Login->role()!=='admin')
|
|
{
|
|
$_POST['username'] = $Login->username();
|
|
unset($_POST['role']);
|
|
}
|
|
|
|
if(isset($_POST['delete-user-all'])) {
|
|
deleteUser($_POST, true);
|
|
}
|
|
elseif(isset($_POST['delete-user-associate'])) {
|
|
deleteUser($_POST, false);
|
|
}
|
|
elseif(isset($_POST['change-password'])) {
|
|
setPassword($_POST);
|
|
}
|
|
elseif(isset($_POST['edit-user'])) {
|
|
editUser($_POST);
|
|
}
|
|
}
|
|
|
|
// ============================================================================
|
|
// Main after POST
|
|
// ============================================================================
|
|
|
|
if($Login->role()!=='admin') {
|
|
$layout['parameters'] = $Login->username();
|
|
}
|
|
|
|
$_user = $dbUsers->getDb($layout['parameters']);
|
|
|
|
// If the user doesn't exist, redirect to the users list.
|
|
if($_user===false) {
|
|
Redirect::page('admin', 'users');
|
|
}
|
|
|
|
$_user['username'] = $layout['parameters'];
|