208 lines
6.7 KiB
PHP
208 lines
6.7 KiB
PHP
<?php
|
|
$title = 'Team management';
|
|
/* <Team> */
|
|
|
|
$b2varstoreset = array('action','standalone','redirect','profile');
|
|
for ($i=0; $i<count($b2varstoreset); $i += 1) {
|
|
$b2var = $b2varstoreset[$i];
|
|
if (!isset($$b2var)) {
|
|
if (empty($HTTP_POST_VARS["$b2var"])) {
|
|
if (empty($HTTP_GET_VARS["$b2var"])) {
|
|
$$b2var = '';
|
|
} else {
|
|
$$b2var = $HTTP_GET_VARS["$b2var"];
|
|
}
|
|
} else {
|
|
$$b2var = $HTTP_POST_VARS["$b2var"];
|
|
}
|
|
}
|
|
}
|
|
|
|
switch ($action) {
|
|
|
|
case 'promote':
|
|
|
|
$standalone = 1;
|
|
require_once('b2header.php');
|
|
|
|
if (empty($HTTP_GET_VARS["prom"])) {
|
|
header('Location: b2team.php');
|
|
}
|
|
|
|
$id = $HTTP_GET_VARS["id"];
|
|
$prom = $HTTP_GET_VARS["prom"];
|
|
|
|
$user_data = get_userdata($id);
|
|
$usertopromote_level = $user_data[13];
|
|
|
|
if ($user_level <= $usertopromote_level) {
|
|
die('Can’t change the level of an user whose level is higher than yours.');
|
|
}
|
|
|
|
if ('up' == $prom) {
|
|
$sql="UPDATE $tableusers SET user_level=user_level+1 WHERE ID = $id";
|
|
} elseif ('down' == $prom) {
|
|
$sql="UPDATE $tableusers SET user_level=user_level-1 WHERE ID = $id";
|
|
}
|
|
$result = mysql_query($sql) or die("Couldn't change $id's level.");
|
|
|
|
header('Location: b2team.php');
|
|
|
|
break;
|
|
|
|
case 'delete':
|
|
|
|
$standalone = 1;
|
|
require_once('b2header.php');
|
|
|
|
$id = $HTTP_GET_VARS["id"];
|
|
|
|
if (!$id) {
|
|
header('Location: b2team.php');
|
|
}
|
|
|
|
$user_data = get_userdata($id);
|
|
$usertodelete_level = $user_data[13];
|
|
|
|
if ($user_level <= $usertodelete_level)
|
|
die('Can’t delete an user whose level is higher than yours.');
|
|
|
|
$sql="DELETE FROM $tableusers WHERE ID = $id";
|
|
$result = mysql_query($sql) or die("Couldn’t delete user #$id.");
|
|
|
|
$sql="DELETE FROM $tableposts WHERE post_author = $id";
|
|
$result = mysql_query($sql) or die("Couldn’t delete user #$id’s posts.");
|
|
|
|
header('Location: b2team.php');
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
$standalone = 0;
|
|
include ('b2header.php');
|
|
?>
|
|
|
|
<div class="wrap"><p>Click on an user’s login name to see his complete profile.<br />
|
|
To edit your profile, click on your login name.</p>
|
|
</div>
|
|
|
|
<div class="wrap">
|
|
<h3>Active users</h3>
|
|
<table cellpadding="5" cellspacing="0">
|
|
<tr>
|
|
<td class="tabletoprow">ID</td>
|
|
<td class="tabletoprow">Nickname</td>
|
|
<td class="tabletoprow">Name</td>
|
|
<td class="tabletoprow">E-mail</td>
|
|
<td class="tabletoprow">URL</td>
|
|
<td class="tabletoprow">Level</td>
|
|
<?php if ($user_level > 3) { ?>
|
|
<td class="tabletoprow">Login</td>
|
|
<?php } ?>
|
|
</tr>
|
|
<?php
|
|
$request = "SELECT * FROM $tableusers WHERE user_level>0 ORDER BY ID";
|
|
$result = mysql_query($request);
|
|
while($row = mysql_fetch_object($result)) {
|
|
$user_data = get_userdata2($row->ID);
|
|
echo "<tr>\n<!--".$user_data["user_login"]."-->\n";
|
|
$email = $user_data["user_email"];
|
|
$url = $user_data["user_url"];
|
|
$bg1 = ($user_data["user_login"] == $user_login) ? "style=\"background-image: url('b2-img/b2button.gif');\"" : "bgcolor=\"#dddddd\"";
|
|
$bg2 = ($user_data["user_login"] == $user_login) ? "style=\"background-image: url('b2-img/b2button.gif');\"" : "bgcolor=\"#eeeeee\"";
|
|
echo "<td $bg1>".$user_data["ID"]."</td>\n";
|
|
echo "<td $bg2><b><a href=\"javascript:profile(".$user_data["ID"].")\">".$user_data["user_nickname"]."</a></b></td>\n";
|
|
echo "<td $bg1>".$user_data["user_firstname"]." ".$user_data["user_lastname"]."</td>\n";
|
|
echo "<td $bg2> <a href=\"mailto:$email\" title=\"e-mail: $email\"><img src=\"b2-img/email.gif\" border=\"0\" alt=\"e-mail: $email\" /></a> </td>";
|
|
echo "<td $bg1> ";
|
|
if (($user_data["user_url"] != "http://") and ($user_data["user_url"] != ""))
|
|
echo "<a href=\"$url\" target=\"_blank\" title=\"website: $url\"><img src=\"b2-img/url.gif\" border=\"0\" alt=\"website: $url\" /></a> ";
|
|
echo "</td>\n";
|
|
echo "<td $bg2>".$user_data["user_level"];
|
|
if (($user_level >= 2) and ($user_level > ($user_data["user_level"] + 1)))
|
|
echo " <a href=\"b2team.php?action=promote&id=".$user_data["ID"]."&prom=up\">+</a> ";
|
|
if (($user_level >= 2) and ($user_level > $user_data["user_level"]) and ($user_data["user_level"] > 0))
|
|
echo " <a href=\"b2team.php?action=promote&id=".$user_data["ID"]."&prom=down\">-</a> ";
|
|
echo "</td>\n";
|
|
if ($user_level > 3) {
|
|
echo "<td $bg1>".$user_data["user_login"]."</td>\n";
|
|
}
|
|
echo "</tr>\n";
|
|
}
|
|
|
|
?>
|
|
|
|
</table>
|
|
|
|
</div>
|
|
|
|
<?php
|
|
$request = " SELECT * FROM $tableusers WHERE user_level=0 ORDER BY ID";
|
|
$result = mysql_query($request);
|
|
if (mysql_num_rows($result)) {
|
|
?>
|
|
<div class="wrap">
|
|
<h3>Inactive users (level 0)</h3>
|
|
<table cellpadding="5" cellspacing="0">
|
|
<tr>
|
|
<td class="tabletoprow">ID</td>
|
|
<td class="tabletoprow">Nickname</td>
|
|
<td class="tabletoprow">Name</td>
|
|
<td class="tabletoprow">E-mail</td>
|
|
<td class="tabletoprow">URL</td>
|
|
<td class="tabletoprow">Level</td>
|
|
<?php if ($user_level > 3) { ?>
|
|
<td class="tabletoprow">Login</td>
|
|
<?php } ?>
|
|
</tr>
|
|
<?php
|
|
while($row = mysql_fetch_object($result)) {
|
|
$user_data = get_userdata2($row->ID);
|
|
echo "<tr>\n<!--".$user_data["user_login"]."-->\n";
|
|
$email = $user_data["user_email"];
|
|
$url = $user_data["user_url"];
|
|
$bg1 = ($user_data["user_login"] == $user_login) ? "style=\"background-image: url('b2-img/b2button.gif');\"" : "bgcolor=\"#dddddd\"";
|
|
$bg2 = ($user_data["user_login"] == $user_login) ? "style=\"background-image: url('b2-img/b2button.gif');\"" : "bgcolor=\"#eeeeee\"";
|
|
echo "<td $bg1>".$user_data["ID"]."</td>\n";
|
|
echo "<td $bg2><b><a href=\"javascript:profile(".$user_data["ID"].")\">".$user_data["user_nickname"]."</a></b></td>\n";
|
|
echo "<td $bg1>".$user_data["user_firstname"]." ".$user_data["user_lastname"]."</td>\n";
|
|
echo "<td $bg1> <a href=\"mailto:".antispambot($email)."\" title=\"e-mail: ".antispambot($email)."\"><img src=\"b2-img/email.gif\" border=\"0\" alt=\"e-mail: ".antispambot($email)."\" /></a> </td>";
|
|
echo "<td $bg2> ";
|
|
if (($user_data["user_url"] != "http://") and ($user_data["user_url"] != ""))
|
|
echo "<a href=\"$url\" target=\"_blank\" title=\"website: $url\"><img src=\"b2-img/url.gif\" border=\"0\" alt=\"website: $url\" /></a> ";
|
|
echo "</td>\n";
|
|
echo "<td $bg1>".$user_data["user_level"];
|
|
if ($user_level >= 2)
|
|
echo " <a href=\"b2team.php?action=promote&id=".$user_data["ID"]."&prom=up\">+</a> ";
|
|
if ($user_level >= 3)
|
|
echo " <a href=\"b2team.php?action=delete&id=".$user_data["ID"]."\" style=\"color:red;font-weight:bold;\">X</a> ";
|
|
echo "</td>\n";
|
|
if ($user_level > 3) {
|
|
echo "<td $bg2>".$user_data["user_login"]."</td>\n";
|
|
}
|
|
echo "</tr>\n";
|
|
}
|
|
|
|
?>
|
|
|
|
</table>
|
|
</div>
|
|
|
|
<?php
|
|
}
|
|
if ($user_level >= 3) { ?>
|
|
<div class="wrap">
|
|
<p>To delete an user, bring his level to zero, then click on the red X.<br />
|
|
<strong>Warning:</strong> deleting an user also deletes all posts made by this user.
|
|
</p>
|
|
</div>
|
|
<?php
|
|
}
|
|
|
|
break;
|
|
}
|
|
|
|
/* </Team> */
|
|
include('b2footer.php');
|
|
?>
|