PageRenderTime 23ms CodeModel.GetById 0ms RepoModel.GetById 0ms app.codeStats 0ms

/include/inc_act/act_user.php

http://phpwcms.googlecode.com/
PHP | 63 lines | 45 code | 8 blank | 10 comment | 10 complexity | ddd86e39995d0626e708faeffadcd130 MD5 | raw file
Possible License(s): AGPL-1.0, LGPL-2.1, ISC, MIT, LGPL-3.0, GPL-2.0, MPL-2.0-no-copyleft-exception, LGPL-2.0, BSD-3-Clause 
    

  1. <?php
    2. 

  2. /**
    3. 

  3.  * phpwcms content management system
    4. 

  4.  *
    5. 

  5.  * @author Oliver Georgi <oliver@phpwcms.de>
    6. 

  6.  * @copyright Copyright (c) 2002-2013, Oliver Georgi
    7. 

  7.  * @license http://opensource.org/licenses/GPL-2.0 GNU GPL-2
    8. 

  8.  * @link http://www.phpwcms.de
    9. 

  9.  *
    10. 

  10.  **/
    11. 

  11. 

  12. session_start();
    13. 

  13. $phpwcms = array();
    14. 

  14. require_once ('../../config/phpwcms/conf.inc.php');
    15. 

  15. require_once ('../inc_lib/default.inc.php');
    16. 

  16. require_once (PHPWCMS_ROOT.'/include/inc_lib/dbcon.inc.php');
    17. 

  17. 

  18. require_once (PHPWCMS_ROOT.'/include/inc_lib/general.inc.php');
    19. 

  19. checkLogin();
    20. 

  20. require_once (PHPWCMS_ROOT.'/include/inc_lib/backend.functions.inc.php');
    21. 

  21. 

  22. if($_SESSION["wcs_user_admin"] == 1) { //Wenn Benutzer Admin-Rechte hat
    23. 

  23. 

  24. 	//Löschen eines Benutzers
    25. 

  25. 	if(isset($_GET["del"])) {
    26. 

  26. 		$ui = explode(":", clean_slweg($_GET["del"]));
    27. 

  27. 		$user_id = intval($ui[0]);
    28. 

  28. 		$user_email = '';
    29. 

  29. 		if(isset($ui[1])) {
    30. 

  30. 			$user_email = $ui[1];
    31. 

  31. 		}
    32. 

  32. 		if($user_id <> $_SESSION["wcs_user_id"]) {
    33. 

  33. 			$sql =	"UPDATE ".DB_PREPEND."phpwcms_user SET ".
    34. 

  34. 					"usr_login='".generic_string(10)."', ".
    35. 

  35. 					"usr_pass='".md5(generic_string(10))."', ".
    36. 

  36. 					"usr_email='', ".
    37. 

  37. 					"usr_admin=0, ".
    38. 

  38. 					"usr_aktiv=9 ".
    39. 

  39. 					"WHERE usr_id=".$user_id." AND ".
    40. 

  40. 					"usr_email='".aporeplace($user_email)."';";
    41. 

  41. 			if($result = mysql_query($sql, $db)) {
    42. 

  42. 				if(is_valid_email($user_email)) {
    43. 

  43. 					@mail($user_email, "your account", "YOUR PHPWCMS ACCOUNT WAS DELETED\n \ncontact the admin if you have any question.\n\nSee you at ".$phpwcms["site"], "From: ".$phpwcms["admin_email"]."\nReply-To: ".$phpwcms["admin_email"]."\n");
    44. 

  44. 				}
    45. 

  45. 			}
    46. 

  46. 		}
    47. 

  47. 	}
    48. 

  48. 	
    49. 

  49. 	if(isset($_GET["aktiv"])) {
    50. 

  50. 		$ui = explode(":", clean_slweg($_GET["aktiv"]));
    51. 

  51. 		$user_id = intval($ui[0]);
    52. 

  52. 		$user_aktiv = !empty($ui[1]) ? 1 : 0;
    53. 

  53. 		if($user_id <> $_SESSION["wcs_user_id"]) {
    54. 

  54. 			$sql =	"UPDATE ".DB_PREPEND."phpwcms_user SET usr_aktiv=".$user_aktiv." WHERE usr_id=".$user_id.";";
    55. 

  55. 			mysql_query($sql, $db) or die ("error");
    56. 

  56. 		}
    57. 

  57. 	}
    58. 

  58. 	
    59. 

  59. } //Ende Abarbeiten Aktion
    60. 

  60. 

  61. headerRedirect(PHPWCMS_URL.'phpwcms.php?do=admin');
    62. 

  62. 

  63. ?>
    64.