From be4f83cd2a17a0ec05f5bce50c91befaafaa6e0c Mon Sep 17 00:00:00 2001
From: jhunkeler <jhunkeler@c5b2fb0a-d05d-0410-98c8-828840a80ff6>
Date: Sun, 20 Dec 2009 18:38:08 +0000
Subject: Test.

git-svn-id: http://svn.3rd-infantry-division.org/testing/branches/Bayonet CMS v2@376 c5b2fb0a-d05d-0410-98c8-828840a80ff6
---
 admin/admins/functions.php | 147 +++++++++++++++++++++++++++++++++++++++++++++
 admin/admins/index.php     |  53 ++++++++++++++++
 2 files changed, 200 insertions(+)
 create mode 100644 admin/admins/functions.php
 create mode 100644 admin/admins/index.php

(limited to 'admin/admins')

diff --git a/admin/admins/functions.php b/admin/admins/functions.php
new file mode 100644
index 0000000..031bd05
--- /dev/null
+++ b/admin/admins/functions.php
@@ -0,0 +1,147 @@
+<?php
+/**
+ * Bayonet Content Management System
+ * Copyright (C) 2008  Joseph Hunkeler
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */ 
+ 
+ function ListAdmins()
+ {
+ 	  global $db;
+	  $result = $db->Query("SELECT `user_id`, `username`, `level` FROM `bayonet_users` ORDER BY `level` DESC");
+	  while(($rows = $db->fetch($result))!=false)
+	  {
+	    $admins[] = $rows;
+	  } 
+	  
+	  $num = 1;
+	  OpenTable("300px");
+	  echo "<tr><th></th><th>Username</th><th>Level</th></tr>";
+	  foreach($admins as $admin)
+	  {
+	  	echo "<tr><td>{$num}.</td><td><a href=\"?op=admins&edit={$admin['user_id']}\">{$admin['username']}</a></td><td>{$admin['level']}</td></tr>";
+	  	$num++;
+	  }
+	  CloseTable();
+ }
+ 
+ function NewAdmin()
+ {
+ 	 $maxLevel = $_SESSION['level'];
+ }
+ 
+ function EditAdmin($user_id)
+ {
+		global $db;
+		$maxLevel = $_SESSION['level'];
+		
+		if(isset($_POST['processed']))
+		{
+			$username = addslashes($_POST['username']);
+			$level = addslashes($_POST['level']);
+			
+			if(empty($username))
+		    {
+		      echo "You must fill everything out before proceeding.";
+		      return;
+		    }
+				
+			$db->Query("UPDATE `bayonet_users` SET `username` = '$username', `level` = '$level' WHERE `user_id` = '$user_id' LIMIT 1");
+		    
+		    echo "Admin, '$username' level '$level' has been edited.\n <br /><br /> 
+					Please wait while you are redirected. <br /><br /> 
+					<a href=\"?op=admins\">Click here if you don't feel like waiting.</a>";
+					
+		    // 3 second redirect to go back to the edit page
+    		PageRedirect(3, "?op=admins");
+		    return;
+		}
+		
+		$result = $db->Query("SELECT * FROM `bayonet_users` WHERE `user_id` = '$user_id' LIMIT 1");
+		while(($rows = $db->fetch($result))!=false)
+		{
+			$admin = $rows;
+		} 	  
+		
+  		if($maxLevel < $admin['level']){
+  			ReportError("You do not have permission to access this user.");
+	    	return;	    	
+		}
+?>
+<center>
+		Edit the attributes of this administrator.<br />
+		<form method="POST" action="<?php $_SERVER['PHP_SELF']?>">
+		<table>
+			<tr><th>Username:</th><td><input type="text" value="<?php echo $admin['username']; ?>" name="username" /></td></tr>
+			<tr>
+				<th>Level:</th>
+				<td>
+					<select name="level">
+					<?php 
+						for($x=$maxLevel; $x>0;$x--){
+							if($admin['level'] == $x)
+								echo "<option value=\"{$x}\" selected>{$x}</option>";
+							else
+								echo "<option value=\"{$x}\">{$x}</option>";						
+						}
+					?>
+					</select>
+				</td>
+			</tr>
+			<tr>
+				<td colspan="2" style="text-align:center;">
+					<input type="submit" name="processed" value="Submit" />
+					<a href="?op=admins&delete=<?php echo $user_id; ?>"><input type="button" value="Delete Admin" /></a>
+				</td>
+			</tr>
+		</table>
+		</form>
+</center>
+<?php		
+ }
+ 
+ function DeleteAdmin($user_id)
+ {
+	global $db;
+	$maxLevel = $_SESSION['level'];
+		  
+	$result = $db->Query("SELECT `username` FROM `bayonet_users` WHERE `user_id` = '$user_id'");
+	$admin = $db->Fetch($result);
+		  
+	if(isset($_POST['proceed']))
+	{
+		echo "Admin '{$admin['username']}', was deleted.";
+		$db->Query("DELETE FROM `bayonet_users` WHERE `user_id` = '$user_id' LIMIT 1");
+		PageRedirect(3,"?op=admins");
+		return;
+	}
+	if(isset($_POST['cancel']))
+	{
+		echo "User cancelled deletion of admin: '{$admin['username']}'";
+		PageRedirect(3,"?op=admins");
+		return;
+	}  
+	?>
+	<center>
+	<form action="<?php $_SERVER['PHP_SELF'] ?>" method="post">
+	<table>
+	<th>Are you SURE you want to delete the administrative user: '<?php echo $admin['username']?>'?</th>
+	<tr><th><button name="proceed">Yes</button>&nbsp;&nbsp;&nbsp;<button name="cancel">No</button></th></tr>
+	</table>
+	</form>
+	</center>
+	<?php
+ }
+ ?>
\ No newline at end of file
diff --git a/admin/admins/index.php b/admin/admins/index.php
new file mode 100644
index 0000000..b000111
--- /dev/null
+++ b/admin/admins/index.php
@@ -0,0 +1,53 @@
+<?php
+/**
+ * Bayonet Content Management System
+ * Copyright (C) 2008  Joseph Hunkeler
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */ 
+?>
+ <div style="text-align:left;"><h2>- Edit Admins</h2></div>
+<?php
+if(!defined("ADMIN_FILE"))
+{
+  die("Access denied.");
+}
+
+include $basedir.'admins/functions.php';
+
+if(isset($_GET['edit']))
+{
+  $user_id = $_GET['edit'];
+  EditAdmin($user_id);
+  return;
+}
+
+if(isset($_GET['delete']))
+{
+  $user_id = $_GET['delete'];
+  DeleteAdmin($user_id);
+  return;
+}
+
+if(isset($_GET['create']))
+{
+  NewAdmin();
+  return;
+}
+
+echo "<table align=\"center\" width=\"200px\"><tr><th>".LinkInternal('<img src="images/add.png" />Add New Admin','?op=admins&create=true')."</th></tr></table>";
+
+ListAdmins();
+
+?>
\ No newline at end of file
-- 
cgit