/source/mgmt/mgmtUser.php

https://github.com/andyjdbest/Tennis-Masters---PBBG · PHP · 233 lines · 176 code · 34 blank · 23 comment · 43 complexity · 321024e74520b81302e4d4fe22819324 MD5 · raw file

  1. <?php
  2. #include the common file
  3. require_once 'common.php';
  4. require_once("../DBconfig.php");
  5. function updateuserid()
  6. {
  7. $query="SELECT userid FROM users WHERE 1";
  8. $result = mysql_query($query);
  9. //global $useriddata;
  10. while ($row = mysql_fetch_row($result))
  11. {
  12. $temp[] = $row[0];
  13. }
  14. return $temp;
  15. }
  16. function showDormantUsers() {
  17. $query = "SELECT DISTINCT userid,username FROM users WHERE isAdmin = 0 AND isAssigned = 1 AND isMember = 0 AND userid NOT IN (SELECT iduser FROM logins WHERE DATEDIFF(CURDATE(), time) < 30)";
  18. $result = mysql_query($query);
  19. global $dormantData;
  20. while ($row = mysql_fetch_object($result)) {
  21. $dormantData[] = $row;
  22. }
  23. }
  24. function showUnvalidUsers() {
  25. $query = "SELECT DISTINCT u.userid,u.username FROM users AS u JOIN validation AS v ON u.userid = v.id WHERE u.isAdmin = 0 AND u.isValidated = 0 AND DATEDIFF(CURDATE(), v.timestamp) > 30";
  26. $result = mysql_query($query);
  27. global $unvalidData;
  28. while ($row = mysql_fetch_object($result)) {
  29. $unvalidData[] = $row;
  30. }
  31. }
  32. session_start();
  33. if (@$_SESSION['authenticated'] == 'true' && @$_SESSION['admin'] == 'true')
  34. {
  35. $dormantData = array();
  36. $unvalidData = array();
  37. $useriddata = updateuserid();
  38. showDormantUsers();
  39. showUnvalidUsers();
  40. if ($_POST['search'])
  41. {
  42. if (ctype_alnum($_POST['userid']) === false)
  43. {
  44. $error = 'Check the input';
  45. }
  46. else {
  47. $id = $_POST['userid'];
  48. //$message = $id;
  49. $query = "SELECT * FROM users WHERE userid='$id' LIMIT 1";
  50. $result = mysql_query($query);
  51. $user = mysql_fetch_array($result);
  52. }
  53. }
  54. if ($_POST['update']) {
  55. //need to check email seperately...
  56. if (ctype_alnum($_POST['userid']) === false || ctype_alnum($_POST['username']) === false || ctype_alnum($_POST['isValidated']) === false || ctype_alnum($_POST['isAdmin']) === false || ctype_alnum($_POST['isAssigned']) === false
  57. || ctype_alnum($_POST['firstname']) === false || ctype_alnum($_POST['lastname']) === false)
  58. {
  59. $error = 'Check the input';
  60. }
  61. else if (validEmail($_POST['email']) === false) {
  62. $error = 'Check the email';
  63. }
  64. else {
  65. $id = $_POST['userid'];
  66. $username = $_POST['username'];
  67. $email = $_POST['email'];
  68. $isValidated = $_POST['isValidated'];
  69. $isAdmin = $_POST['isAdmin'];
  70. $isAssigned = $_POST['isAssigned'];
  71. $firstname = $_POST['firstname'];
  72. $lastname = $_POST['lastname'];
  73. $update = "UPDATE users SET username = '$username', email = '$email', firstname= '$firstname', lastname = '$lastname',
  74. isValidated = '$isValidated', isAdmin = '$isAdmin', isAssigned = '$isAssigned' WHERE userid = '$id'";
  75. if (!(mysqli_query($conn, $update))) {
  76. $error = 'Cannot update user id ' . mysqli_error($conn);
  77. }
  78. }
  79. if ($error == '')
  80. $message = 'Details Changed';
  81. }
  82. if ($_POST['deleteDormant']) {
  83. $query = "SELECT userid FROM users WHERE isAdmin =0 AND isAssigned =1 AND isMember = 0 AND userid NOT IN (SELECT iduser FROM logins WHERE DATEDIFF( CURDATE( ) , time ) <30)";
  84. $result = mysql_query($query);
  85. while ($row = mysql_fetch_row($result)) {
  86. $dormantIds[] = $row[0];
  87. }
  88. //check
  89. foreach ($dormantIds as $id ) {
  90. //obtain the correct academy id
  91. $select = "SELECT id_team FROM academy WHERE id_user = '$id'";
  92. $query = mysqli_query($conn,$select);
  93. $row = mysqli_fetch_row($conn,$query);
  94. $academy = $row[0];
  95. //UPDATE academy
  96. $query = "UPDATE academy SET id_user = NULL,rank_world = NULL,
  97. rank_country = NULL, fans = 2, fan_move = 0, negative = 0 WHERE id_user = '$id'";
  98. if (!(mysqli_query($conn, $query))) {
  99. $errorDormant .= ' Cannot update user id ' . $id . mysqli_error($conn);
  100. }
  101. //UPDATE Users isAssigned field
  102. $update = "UPDATE users SET isAssigned = 0 WHERE userid = '$id'";
  103. if (!(mysqli_query($conn, $update))) {
  104. $errorDormant .= ' Cannot update user id ' . $id . mysqli_error($conn);
  105. }
  106. //DELETE coaches
  107. $delete = "DELETE FROM coaches WHERE id_team = '$academy'";
  108. if (!(mysqli_query($conn, $delete))) {
  109. $errorDormant .= ' Cannot delete coaches user id ' . $id . mysqli_error($conn);
  110. }
  111. //DELETE training
  112. $delete = "DELETE FROM training_data WHERE id_team = '$academy'";
  113. if (!(mysqli_query($conn, $delete))) {
  114. $errorDormant .= ' Cannot delete training user id ' . $id . mysqli_error($conn);
  115. }
  116. /*//DELETE training_report
  117. $delete = "DELETE FROM training_report WHERE id_team = '$academy'";
  118. if (!(mysqli_query($conn, $delete))) {
  119. $errorDormant .= ' Cannot delete training report user id ' . $id . mysqli_error($conn);
  120. }
  121. */
  122. //DELETE finance
  123. $delete = "DELETE FROM finance WHERE id_team = '$academy'";
  124. if (!(mysqli_query($conn, $delete))) {
  125. $errorDormant .= ' Cannot delete finance user id ' . $id . mysqli_error($conn);
  126. }
  127. //DELETE finance_summary
  128. $delete = "DELETE FROM finance_summary WHERE id_team = '$academy'";
  129. if (!(mysqli_query($conn, $delete))) {
  130. $errorDormant .= ' Cannot delete finance summary user id ' . $id . mysqli_error($conn);
  131. }
  132. //DELETE match_order
  133. $delete = "DELETE FROM match_order WHERE id_team = '$academy'";
  134. if (!(mysqli_query($conn, $delete))) {
  135. $errorDormant .= ' Cannot delete match_order user id ' . $id . mysqli_error($conn);
  136. }
  137. //DELete messages
  138. $delete = "DELETE FROM messages WHERE id_receiver = '$id'";
  139. if (!(mysqli_query($conn, $delete))) {
  140. $errorDormant .= ' Cannot delete messages user id ' . $id . mysqli_error($conn);
  141. }
  142. //DELete bids if any
  143. $delete = "DELETE FROM fa_bids WHERE id_team = '$academy'";
  144. if (!(mysqli_query($conn, $delete))) {
  145. $errorDormant .= ' Cannot delete bids user id ' . $id . mysqli_error($conn);
  146. }
  147. //SET Player fitness to 50
  148. $update = "UPDATE players SET fitness = 50 WHERE id_team = '$academy'";
  149. if (!(mysqli_query($conn, $update))) {
  150. $errorDormant .= ' Cannot update fitness user id ' . $id . mysqli_error($conn);
  151. }
  152. //Update alliance
  153. $select = mysql_query("SELECT id_alliance FROM alliance_members WHERE id_user = '$id' AND status = '2'");
  154. $row = mysql_fetch_row($select);
  155. if (isset($row[0])){
  156. $update = "UPDATE alliance_members SET status = 3, left_date = NOW()
  157. WHERE id_user = '$id' AND status = '1' OR status = '2'";
  158. if (!(mysqli_query($conn, $update))) {
  159. $errorDormant .= ' Cannot update alliance user id ' . $id . mysqli_error($conn);
  160. }
  161. $all = $row[0];
  162. $update = "UPDATE alliance SET members = members - 1 WHERE id_alliance = '$all'";
  163. if (!(mysqli_query($conn, $update))) {
  164. $errorDormant .= ' Cannot update alliance user id ' . $id . mysqli_error($conn);
  165. }
  166. }
  167. }
  168. showDormantUsers();
  169. }
  170. if ($_POST['deleteUnvalid']) {
  171. $query = "SELECT DISTINCT u.userid FROM users AS u JOIN validation AS v ON u.userid = v.id WHERE u.isAdmin = 0 AND u.isValidated = 0 AND DATEDIFF(CURDATE(), v.timestamp) > 30";
  172. $result = mysql_query($query);
  173. while ($row = mysql_fetch_object($result)) {
  174. $unvalidIds[] = $row[0];
  175. }
  176. foreach ($unvalidIds as $id ) {
  177. $delete = "DELETE FROM users WHERE userid = '$id'";
  178. if (!(mysqli_query($conn, $delete))) {
  179. $errorUnvalid = 'Cannot delete user id ' . $id . mysqli_error($conn);
  180. }
  181. $delete = "DELETE FROM validation WHERE userid = '$id'";
  182. if (!(mysqli_query($conn, $delete))) {
  183. $errorUnvalid .= ' Cannot delete user id from validation ' . $id . mysqli_error($conn);
  184. }
  185. }
  186. showUnvalidUsers();
  187. }
  188. $smarty->assign('error',$error);
  189. $smarty->assign('message',$message);
  190. $smarty->assign('id',$id);
  191. $smarty->assign('sUserId',$useriddata);
  192. $smarty->assign('user',$user);
  193. $smarty->assign('dormantData',$dormantData);
  194. $smarty->assign('errorDormant',$errorDormant);
  195. $smarty->assign('unvalidData',$unvalidData);
  196. $smarty->assign('errorUnvalid',$errorUnvalid);
  197. $smarty->display('mgmtUser.tpl');
  198. }
  199. ?>