PageRenderTime 47ms CodeModel.GetById 15ms RepoModel.GetById 0ms app.codeStats 1ms

/manager/actions/mutate_user.dynamic.php

https://github.com/good-web-master/modx.evo.custom
PHP | 843 lines | 783 code | 43 blank | 17 comment | 110 complexity | 6fdcca7b1721604ba0c3fd1f3792be88 MD5 | raw file
Possible License(s): LGPL-2.1, AGPL-1.0, GPL-2.0, MIT, BSD-3-Clause 
    

  1. <?php

    2. 

  2. if (IN_MANAGER_MODE != "true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the MODx Content Manager instead of accessing this file directly.");

    3. 

  3. 

    4. 

  4. switch((int) $_REQUEST['a']) {

    5. 

  5.   case 12:

    6. 

  6.     if (!$modx->hasPermission('edit_user')) {

    7. 

  7.       $e->setError(3);

    8. 

  8.       $e->dumpError();

    9. 

  9.     }

    10. 

  10.     break;

    11. 

  11.   case 11:

    12. 

  12.     if (!$modx->hasPermission('new_user')) {

    13. 

  13.       $e->setError(3);

    14. 

  14.       $e->dumpError();

    15. 

  15.     }

    16. 

  16.     break;

    17. 

  17.   default:

    18. 

  18.     $e->setError(3);

    19. 

  19.     $e->dumpError();  

    20. 

  20. }

    21. 

  21. 

    22. 

  22. $user = isset($_REQUEST['id']) ? intval($_REQUEST['id']) : 0;

    23. 

  23. 

    24. 

  24. // check to see the snippet editor isn't locked

    25. 

  25. $sql = "SELECT internalKey, username FROM $dbase.`" . $table_prefix . "active_users` WHERE $dbase.`" . $table_prefix . "active_users`.action=12 AND $dbase.`" . $table_prefix . "active_users`.id=$user";

    26. 

  26. $rs = mysql_query($sql);

    27. 

  27. $limit = mysql_num_rows($rs);

    28. 

  28. if ($limit > 1) {

    29. 

  29. 	for ($i = 0; $i < $limit; $i++) {

    30. 

  30. 		$lock = mysql_fetch_assoc($rs);

    31. 

  31. 		if ($lock['internalKey'] != $modx->getLoginUserID()) {

    32. 

  32. 			$msg = sprintf($_lang["lock_msg"], $lock['username'], "user");

    33. 

  33. 			$e->setError(5, $msg);

    34. 

  34. 			$e->dumpError();

    35. 

  35. 		}

    36. 

  36. 	}

    37. 

  37. }

    38. 

  38. // end check for lock

    39. 

  39. 

    40. 

  40. if ($_REQUEST['a'] == '12') {

    41. 

  41. 	// get user attribute

    42. 

  42. 	$sql = "SELECT * FROM $dbase.`" . $table_prefix . "user_attributes` WHERE $dbase.`" . $table_prefix . "user_attributes`.internalKey = " . $user . ";";

    43. 

  43. 	$rs = mysql_query($sql);

    44. 

  44. 	$limit = mysql_num_rows($rs);

    45. 

  45. 	if ($limit > 1) {

    46. 

  46. 		echo "More than one user returned!<p>";

    47. 

  47. 		exit;

    48. 

  48. 	}

    49. 

  49. 	if ($limit < 1) {

    50. 

  50. 		echo "No user returned!<p>";

    51. 

  51. 		exit;

    52. 

  52. 	}

    53. 

  53. 	$userdata = mysql_fetch_assoc($rs);

    54. 

  54. 

    55. 

  55. 	// get user settings

    56. 

  56. 	$sql = "SELECT us.* FROM $dbase.`" . $table_prefix . "user_settings` us WHERE us.user = " . $user . ";";

    57. 

  57. 	$rs = mysql_query($sql);

    58. 

  58. 	$usersettings = array ();

    59. 

  59. 	while ($row = mysql_fetch_assoc($rs))

    60. 

  60. 		$usersettings[$row['setting_name']] = $row['setting_value'];

    61. 

  61. 	// manually extract so that user display settings are not overwritten

    62. 

  62. 	foreach ($usersettings as $k => $v) {

    63. 

  63. 		if ($k != 'manager_language' && $k!='manager_theme') {

    64. 

  64. 			${$k} = $v;

    65. 

  65. 		}	

    66. 

  66. 	}

    67. 

  67. 	

    68. 

  68. 	// get user name

    69. 

  69. 	$sql = "SELECT * FROM $dbase.`" . $table_prefix . "manager_users` WHERE $dbase.`" . $table_prefix . "manager_users`.id = " . $user . ";";

    70. 

  70. 	$rs = mysql_query($sql);

    71. 

  71. 	$limit = mysql_num_rows($rs);

    72. 

  72. 	if ($limit > 1) {

    73. 

  73. 		echo "More than one user returned while getting username!<p>";

    74. 

  74. 		exit;

    75. 

  75. 	}

    76. 

  76. 	if ($limit < 1) {

    77. 

  77. 		echo "No user returned while getting username!<p>";

    78. 

  78. 		exit;

    79. 

  79. 	}

    80. 

  80. 	$usernamedata = mysql_fetch_assoc($rs);

    81. 

  81. 	$_SESSION['itemname'] = $usernamedata['username'];

    82. 

  82. } else {

    83. 

  83. 	$userdata = array ();

    84. 

  84. 	$usersettings = array ();

    85. 

  85. 	$usernamedata = array ();

    86. 

  86. 	$_SESSION['itemname'] = "New user";

    87. 

  87. }

    88. 

  88. 

    89. 

  89. // restore saved form

    90. 

  90. $formRestored = false;

    91. 

  91. if ($modx->manager->hasFormValues()) {

    92. 

  92. 	$modx->manager->loadFormValues();

    93. 

  93. 	// restore post values

    94. 

  94. 	$userdata = array_merge($userdata, $_POST);

    95. 

  95. 	$userdata['dob'] = ConvertDate($userdata['dob']);

    96. 

  96. 	$usernamedata['username'] = $userdata['newusername'];

    97. 

  97. 	$usernamedata['oldusername'] = $_POST['oldusername'];

    98. 

  98. 	$usersettings = array_merge($usersettings, $userdata);

    99. 

  99. 	$usersettings['allowed_days'] = is_array($_POST['allowed_days']) ? implode(",", $_POST['allowed_days']) : "";

    100. 

  100. 	extract($usersettings, EXTR_OVERWRITE);

    101. 

  101. }

    102. 

  102. 

    103. 

  103. // converts date format dd-mm-yyyy to php date

    104. 

  104. function ConvertDate($date) {

    105. 

  105. 	global $modx;

    106. 

  106. 	if ($date == "") { return "0"; }

    107. 

  107. 	else             { return $modx->toTimeStamp($date); }

    108. 

  108. }

    109. 

  109. 

    110. 

  110. // include the country list language file

    111. 

  111. $_country_lang = array();

    112. 

  112. include_once "lang/country/english_country.inc.php";

    113. 

  113. if($manager_language!="english" && file_exists($modx->config['base_path']."manager/includes/lang/country/".$manager_language."_country.inc.php")){

    114. 

  114.     include_once "lang/country/".$manager_language."_country.inc.php";

    115. 

  115. }

    116. 

  116. 

    117. 

  117. $displayStyle = (($_SESSION['browser'] == 'mz') || ($_SESSION['browser'] == 'op') || ($_SESSION['browser'] == 'sf')) ? "table-row" : "block";

    118. 

  118. ?>

    119. 

  119. <script type="text/javascript" src="media/calendar/datepicker.js"></script>

    120. 

  120. <script type="text/javascript">

    121. 

  121. window.addEvent('domready', function() {

    122. 

  122. 	var dpOffset = <?php echo $modx->config['datepicker_offset']; ?>;

    123. 

  123. 	var dpformat = "<?php echo $modx->config['datetime_format']; ?>";

    124. 

  124. 	new DatePicker($('dob'), {'yearOffset': -90,'yearRange':1,'format':dpformat});

    125. 

  125. 	if ($('blockeduntil')) {

    126. 

  126. 		new DatePicker($('blockeduntil'), {'yearOffset': dpOffset,'format':dpformat + ' hh:mm:00'});

    127. 

  127. 		new DatePicker($('blockedafter'), {'yearOffset': dpOffset,'format':dpformat + ' hh:mm:00'});

    128. 

  128. 	}

    129. 

  129. });

    130. 

  130. 

    131. 

  131. function changestate(element) {

    132. 

  132. 	documentDirty=true;

    133. 

  133. 	currval = eval(element).value;

    134. 

  134. 	if(currval==1) {

    135. 

  135. 		eval(element).value=0;

    136. 

  136. 	} else {

    137. 

  137. 		eval(element).value=1;

    138. 

  138. 	}

    139. 

  139. }

    140. 

  140. 

    141. 

  141. function changePasswordState(element) {

    142. 

  142. 	currval = eval(element).value;

    143. 

  143. 	if(currval==1) {

    144. 

  144. 		document.getElementById("passwordBlock").style.display="block";

    145. 

  145. 	} else {

    146. 

  146. 		document.getElementById("passwordBlock").style.display="none";

    147. 

  147. 	}

    148. 

  148. }

    149. 

  149. 

    150. 

  150. function changeblockstate(element, checkelement) {

    151. 

  151. 	currval = eval(element).value;

    152. 

  152. 	if(currval==1) {

    153. 

  153. 		if(confirm("<?php echo $_lang['confirm_unblock']; ?>")==true){

    154. 

  154. 			document.userform.blocked.value=0;

    155. 

  155. 			document.userform.blockeduntil.value="";

    156. 

  156. 			document.userform.blockedafter.value="";

    157. 

  157. 			document.userform.failedlogincount.value=0;

    158. 

  158. 			blocked.innerHTML="<b><?php echo $_lang['unblock_message']; ?></b>";

    159. 

  159. 			blocked.className="TD";

    160. 

  160. 			eval(element).value=0;

    161. 

  161. 		} else {

    162. 

  162. 			eval(checkelement).checked=true;

    163. 

  163. 		}

    164. 

  164. 	} else {

    165. 

  165. 		if(confirm("<?php echo $_lang['confirm_block']; ?>")==true){

    166. 

  166. 			document.userform.blocked.value=1;

    167. 

  167. 			blocked.innerHTML="<b><?php echo $_lang['block_message']; ?></b>";

    168. 

  168. 			blocked.className="warning";

    169. 

  169. 			eval(element).value=1;

    170. 

  170. 		} else {

    171. 

  171. 			eval(checkelement).checked=false;

    172. 

  172. 		}

    173. 

  173. 	}

    174. 

  174. }

    175. 

  175. 

    176. 

  176. function resetFailed() {

    177. 

  177. 	document.userform.failedlogincount.value=0;

    178. 

  178. 	document.getElementById("failed").innerHTML="0";

    179. 

  179. }

    180. 

  180. 

    181. 

  181. function deleteuser() {

    182. 

  182. <?php if($_GET['id']==$modx->getLoginUserID()) { ?>

    183. 

  183. 	alert("<?php echo $_lang['alert_delete_self']; ?>");

    184. 

  184. <?php } else { ?>

    185. 

  185. 	if(confirm("<?php echo $_lang['confirm_delete_user']; ?>")==true) {

    186. 

  186. 		document.location.href="index.php?id=" + document.userform.id.value + "&a=33";

    187. 

  187. 	}

    188. 

  188. <?php } ?>

    189. 

  189. }

    190. 

  190. 

    191. 

  191. // change name

    192. 

  192. function changeName(){

    193. 

  193. 	if(confirm("<?php echo $_lang['confirm_name_change']; ?>")==true) {

    194. 

  194. 		var e1 = document.getElementById("showname");

    195. 

  195. 		var e2 = document.getElementById("editname");

    196. 

  196. 		e1.style.display = "none";

    197. 

  197. 		e2.style.display = "<?php echo $displayStyle; ?>";

    198. 

  198. 	}

    199. 

  199. };

    200. 

  200. 

    201. 

  201. // showHide - used by custom settings

    202. 

  202. function showHide(what, onoff){

    203. 

  203. 	var all = document.getElementsByTagName( "*" );

    204. 

  204. 	var l = all.length;

    205. 

  205. 	var buttonRe = what;

    206. 

  206. 	var id, el, stylevar;

    207. 

  207. 

    208. 

  208. 	if(onoff==1) {

    209. 

  209. 		stylevar = "<?php echo $displayStyle; ?>";

    210. 

  210. 	} else {

    211. 

  211. 		stylevar = "none";

    212. 

  212. 	}

    213. 

  213. 

    214. 

  214. 	for ( var i = 0; i < l; i++ ) {

    215. 

  215. 		el = all[i]

    216. 

  216. 		id = el.id;

    217. 

  217. 		if ( id == "" ) continue;

    218. 

  218. 		if (buttonRe.test(id)) {

    219. 

  219. 			el.style.display = stylevar;

    220. 

  220. 		}

    221. 

  221. 	}

    222. 

  222. };

    223. 

  223. 

    224. 

  224. </script>

    225. 

  225. 

    226. 

  226. 

    227. 

  227. <form action="index.php?a=32" method="post" name="userform">

    228. 

  228. <?php

    229. 

  229. 

    230. 

  230. // invoke OnUserFormPrerender event

    231. 

  231. $evtOut = $modx->invokeEvent("OnUserFormPrerender", array (

    232. 

  232. 	"id" => $user

    233. 

  233. ));

    234. 

  234. if (is_array($evtOut))

    235. 

  235. 	echo implode("", $evtOut);

    236. 

  236. ?>

    237. 

  237. <input type="hidden" name="mode" value="<?php echo $_GET['a'] ?>">

    238. 

  238. <input type="hidden" name="id" value="<?php echo $_GET['id'] ?>">

    239. 

  239. <input type="hidden" name="blockedmode" value="<?php echo ($userdata['blocked']==1 || ($userdata['blockeduntil']>time() && $userdata['blockeduntil']!=0)|| ($userdata['blockedafter']<time() && $userdata['blockedafter']!=0) || $userdata['failedlogins']>3) ? "1":"0" ?>" />

    240. 

  240. 

    241. 

  241. <h1><?php echo $_lang['user_title']; ?></h1>

    242. 

  242.     <div id="actions">

    243. 

  243.     	  <ul class="actionButtons">

    244. 

  244.     		  <li id="Button1">

    245. 

  245.     			<a href="#" onclick="documentDirty=false; document.userform.save.click();">

    246. 

  246.     			  <img src="<?php echo $_style["icons_save"]?>" /> <?php echo $_lang['save']?>

    247. 

  247.     			</a>

    248. 

  248.     			  <span class="and"> + </span>				

    249. 

  249.     			<select id="stay" name="stay">

    250. 

  250.     			  <option id="stay1" value="1" <?php echo $_REQUEST['stay']=='1' ? ' selected=""' : ''?> ><?php echo $_lang['stay_new']?></option>

    251. 

  251.     			  <option id="stay2" value="2" <?php echo $_REQUEST['stay']=='2' ? ' selected="selected"' : ''?> ><?php echo $_lang['stay']?></option>

    252. 

  252.     			  <option id="stay3" value=""  <?php echo $_REQUEST['stay']=='' ? ' selected=""' : ''?>  ><?php echo $_lang['close']?></option>

    253. 

  253.     			</select>		

    254. 

  254.     		  </li>

    255. 

  255.     		  <?php

    256. 

  256.     			if ($_REQUEST['a'] == '12') { ?>

    257. 

  257.     		  <li id="Button3" class="disabled"><a href="#" onclick="deleteuser();"><img src="<?php echo $_style["icons_delete_document"]?>" /> <?php echo $_lang['delete']?></a></li>

    258. 

  258.     		  <?php } else { ?>

    259. 

  259.     		  <li id="Button3"><a href="#" onclick="deleteuser();"><img src="<?php echo $_style["icons_delete_document"]?>" /> <?php echo $_lang['delete']?></a></li>

    260. 

  260.     		  <?php } ?>	

    261. 

  261.     		  <li id="Button5"><a href="#" onclick="documentDirty=false;document.location.href='index.php?a=75';"><img src="<?php echo $_style["icons_cancel"]?>" /> <?php echo $_lang['cancel']?></a></li>

    262. 

  262.     	  </ul>

    263. 

  263.     </div>

    264. 

  264. <!-- Tab Start -->

    265. 

  265. <div class="sectionBody">

    266. 

  266. <link type="text/css" rel="stylesheet" href="media/style/<?php echo $manager_theme ? "$manager_theme/":""; ?>style.css<?php echo "?$theme_refresher";?>" />

    267. 

  267. <script type="text/javascript" src="media/script/tabpane.js"></script>

    268. 

  268. <div class="tab-pane" id="userPane">

    269. 

  269. 	<script type="text/javascript">

    270. 

  270. 		tpUser = new WebFXTabPane(document.getElementById( "userPane" ), <?php echo $modx->config['remember_last_tab'] == 1 ? 'true' : 'false'; ?> );

    271. 

  271. 	</script>

    272. 

  272.     <div class="tab-page" id="tabGeneral">

    273. 

  273.     	<h2 class="tab"><?php echo $_lang["settings_general"] ?></h2>

    274. 

  274.     	<script type="text/javascript">tpUser.addTabPage( document.getElementById( "tabGeneral" ) );</script>

    275. 

  275. 		<table border="0" cellspacing="0" cellpadding="3">

    276. 

  276. 		  <tr>

    277. 

  277. 			<td colspan="3">

    278. 

  278. 				<span id="blocked" class="warning"><?php if($userdata['blocked']==1 || ($userdata['blockeduntil']>time() && $userdata['blockeduntil']!=0) || $userdata['failedlogins']>3) { ?><b><?php echo $_lang['user_is_blocked']; ?></b><?php } ?></span><br />

    279. 

  279. 			</td>

    280. 

  280. 		  </tr>

    281. 

  281. 		  <?php if(!empty($userdata['id'])) { ?>

    282. 

  282. 		  <tr id="showname" style="display: <?php echo ($_GET['a']=='12' && (!isset($usernamedata['oldusername'])||$usernamedata['oldusername']==$usernamedata['username'])) ? $displayStyle : 'none';?> ">

    283. 

  283. 			<td colspan="3">

    284. 

  284. 				<img src="media/style/<?php echo $manager_theme ? "$manager_theme/":""; ?>images/icons/user.gif" alt="." />&nbsp;<b><?php echo !empty($usernamedata['oldusername']) ? $usernamedata['oldusername']:$usernamedata['username']; ?></b> - <span class="comment"><a href="#" onclick="changeName();return false;"><?php echo $_lang["change_name"]; ?></a></span>

    285. 

  285. 				<input type="hidden" name="oldusername" value="<?php echo htmlspecialchars(!empty($usernamedata['oldusername']) ? $usernamedata['oldusername']:$usernamedata['username']); ?>" />

    286. 

  286. 				<hr />

    287. 

  287. 			</td>

    288. 

  288. 		  </tr>

    289. 

  289. 		  <?php } ?>

    290. 

  290. 		  <tr id="editname" style="display:<?php echo $_GET['a']=='11'||(isset($usernamedata['oldusername']) && $usernamedata['oldusername']!=$usernamedata['username']) ? $displayStyle : 'none' ; ?>">

    291. 

  291. 			<td><?php echo $_lang['username']; ?>:</td>

    292. 

  292. 			<td>&nbsp;</td>

    293. 

  293. 			<td><input type="text" name="newusername" class="inputBox" value="<?php echo htmlspecialchars($usernamedata['username']); ?>" onchange='documentDirty=true;' maxlength="100" /></td>

    294. 

  294. 		  </tr>

    295. 

  295. 		  <tr>

    296. 

  296. 			<td valign="top"><?php echo $_GET['a']=='11' ? $_lang['password'].":" : $_lang['change_password_new'].":" ; ?></td>

    297. 

  297. 			<td>&nbsp;</td>

    298. 

  298. 			<td><input name="newpasswordcheck" type="checkbox" onclick="changestate(document.userform.newpassword);changePasswordState(document.userform.newpassword);"<?php echo $_REQUEST['a']=="11" ? " checked disabled": "" ; ?>><input type="hidden" name="newpassword" value="<?php echo $_REQUEST['a']=="11" ? 1 : 0 ; ?>" onchange="documentDirty=true;" /><br />

    299. 

  299. 				<span style="display:<?php echo $_REQUEST['a']=="11" ? "block": "none" ; ?>" id="passwordBlock">

    300. 

  300. 				<fieldset style="width:300px">

    301. 

  301. 				<legend><b><?php echo $_lang['password_gen_method']; ?></b></legend>

    302. 

  302. 				<input type=radio name="passwordgenmethod" value="g" <?php echo $_POST['passwordgenmethod']=="spec" ? "" : 'checked="checked"'; ?> /><?php echo $_lang['password_gen_gen']; ?><br />

    303. 

  303. 				<input type=radio name="passwordgenmethod" value="spec" <?php echo $_POST['passwordgenmethod']=="spec" ? 'checked="checked"' : ""; ?>><?php echo $_lang['password_gen_specify']; ?> <br />

    304. 

  304. 				<div style="padding-left:20px">

    305. 

  305. 				<label for="specifiedpassword" style="width:120px"><?php echo $_lang['change_password_new']; ?>:</label>

    306. 

  306. 				<input type="password" name="specifiedpassword" onchange="documentdirty=true;" onkeypress="document.userform.passwordgenmethod[1].checked=true;" size="20" /><br />

    307. 

  307. 				<label for="confirmpassword" style="width:120px"><?php echo $_lang['change_password_confirm']; ?>:</label>

    308. 

  308. 				<input type="password" name="confirmpassword" onchange="documentdirty=true;" onkeypress="document.userform.passwordgenmethod[1].checked=true;" size="20" /><br />

    309. 

  309. 				<small><span class="warning" style="font-weight:normal"><?php echo $_lang['password_gen_length']; ?></span></small>

    310. 

  310. 				</div>

    311. 

  311. 				</fieldset>

    312. 

  312. 				<br />

    313. 

  313. 				<fieldset style="width:300px">

    314. 

  314. 				<legend><b><?php echo $_lang['password_method']; ?></b></legend>

    315. 

  315. 				<input type=radio name="passwordnotifymethod" value="e" <?php echo $_POST['passwordnotifymethod']=="e" ? 'checked="checked"' : ""; ?> /><?php echo $_lang['password_method_email']; ?><br />

    316. 

  316. 				<input type=radio name="passwordnotifymethod" value="s" <?php echo $_POST['passwordnotifymethod']=="e" ? "" : 'checked="checked"'; ?> /><?php echo $_lang['password_method_screen']; ?>

    317. 

  317. 				</fieldset>

    318. 

  318. 				</span>

    319. 

  319. 			</td>

    320. 

  320. 		  </tr>

    321. 

  321. 		  <tr>

    322. 

  322. 			<td><?php echo $_lang['user_full_name']; ?>:</td>

    323. 

  323. 			<td>&nbsp;</td>

    324. 

  324. 			<td><input type="text" name="fullname" class="inputBox" value="<?php echo htmlspecialchars($userdata['fullname']); ?>" onchange="documentDirty=true;" /></td>

    325. 

  325. 		  </tr>

    326. 

  326. 		  <tr>

    327. 

  327. 			<td><?php echo $_lang['user_email']; ?>:</td>

    328. 

  328. 			<td>&nbsp;</td>

    329. 

  329. 			<td>

    330. 

  330. 			<input type="text" name="email" class="inputBox" value="<?php echo htmlspecialchars($userdata['email']); ?>" onchange="documentDirty=true;" />

    331. 

  331. 			<input type="hidden" name="oldemail" value="<?php echo htmlspecialchars(!empty($userdata['oldemail']) ? $userdata['oldemail']:$userdata['email']); ?>" />

    332. 

  332. 			</td>

    333. 

  333. 		  </tr>

    334. 

  334. 		  <tr>

    335. 

  335. 			<td><?php echo $_lang['user_role']; ?>:</td>

    336. 

  336. 			<td>&nbsp;</td>

    337. 

  337. 			<td>

    338. 

  338. 		<?php

    339. 

  339. 

    340. 

  340. $notAdmin = ($_SESSION['mgrRole'] == 1) ? "" : "WHERE id != 1";

    341. 

  341. $sql = "select name, id from $dbase.`" . $table_prefix . "user_roles` $notAdmin";

    342. 

  342. $rs = mysql_query($sql);

    343. 

  343. ?>

    344. 

  344. 		<select name="role" class="inputBox" onchange='documentDirty=true;' style="width:300px">

    345. 

  345. 		<?php

    346. 

  346. 

    347. 

  347. while ($row = mysql_fetch_assoc($rs)) {

    348. 

  348.     if ($_REQUEST['a']=='11') {

    349. 

  349.         $selectedtext = $row['id'] == '1' ? ' selected="selected"' : '';

    350. 

  350.     } else {

    351. 

  351.         $selectedtext = $row['id'] == $userdata['role'] ? "selected='selected'" : '';

    352. 

  352.     }

    353. 

  353. ?>

    354. 

  354. 			<option value="<?php echo $row['id']; ?>"<?php echo $selectedtext; ?>><?php echo $row['name']; ?></option>

    355. 

  355. 		<?php

    356. 

  356. 

    357. 

  357. }

    358. 

  358. ?>

    359. 

  359. 		</select>

    360. 

  360. 			</td>

    361. 

  361. 		  </tr>

    362. 

  362. 		  <tr>

    363. 

  363. 			<td><?php echo $_lang['user_phone']; ?>:</td>

    364. 

  364. 			<td>&nbsp;</td>

    365. 

  365. 			<td><input type="text" name="phone" class="inputBox" value="<?php echo htmlspecialchars($userdata['phone']); ?>" onchange="documentDirty=true;" /></td>

    366. 

  366. 		  </tr>

    367. 

  367. 		  <tr>

    368. 

  368. 			<td><?php echo $_lang['user_mobile']; ?>:</td>

    369. 

  369. 			<td>&nbsp;</td>

    370. 

  370. 			<td><input type="text" name="mobilephone" class="inputBox" value="<?php echo htmlspecialchars($userdata['mobilephone']); ?>" onchange="documentDirty=true;" /></td>

    371. 

  371. 		  </tr>		  

    372. 

  372. 		  <tr>	  

    373. 

  373. 			<td><?php echo $_lang['user_fax']; ?>:</td>

    374. 

  374. 			<td>&nbsp;</td>

    375. 

  375. 			<td><input type="text" name="fax" class="inputBox" value="<?php echo htmlspecialchars($userdata['fax']); ?>" onchange="documentDirty=true;" /></td>

    376. 

  376. 		  </tr>

    377. 

  377. 		  <tr>

    378. 

  378. 			<td><?php echo $_lang['user_state']; ?>:</td>

    379. 

  379. 			<td>&nbsp;</td>

    380. 

  380. 			<td><input type="text" name="state" class="inputBox" value="<?php echo htmlspecialchars($userdata['state']); ?>" onchange="documentDirty=true;" /></td>

    381. 

  381. 		  </tr>

    382. 

  382. 		  <tr>

    383. 

  383. 			<td><?php echo $_lang['user_zip']; ?>:</td>

    384. 

  384. 			<td>&nbsp;</td>

    385. 

  385. 			<td><input type="text" name="zip" class="inputBox" value="<?php echo htmlspecialchars($userdata['zip']); ?>" onchange="documentDirty=true;" /></td>

    386. 

  386. 		  </tr>

    387. 

  387. 		  <tr>

    388. 

  388. 			<td><?php echo $_lang['user_country']; ?>:</td>

    389. 

  389. 			<td>&nbsp;</td>

    390. 

  390. 			<td>

    391. 

  391. 			<select size="1" name="country" onchange="documentDirty=true;">

    392. 

  392.             <?php $chosenCountry = isset($_POST['country']) ? $_POST['country'] : $userdata['country']; ?>

    393. 

  393. 			<option value="" <?php (!isset($chosenCountry) ? ' selected' : '') ?> >&nbsp;</option>

    394. 

  394. 				<?php

    395. 

  395. 				foreach ($_country_lang as $key => $country) {

    396. 

  396. 				 echo "<option value=\"$key\"".(isset($chosenCountry) && $chosenCountry == $key ? ' selected' : '') .">$country</option>";

    397. 

  397. 				}

    398. 

  398. 				?>

    399. 

  399.             </select>

    400. 

  400.             </td>

    401. 

  401. 		  </tr>

    402. 

  402. 		  <tr>

    403. 

  403. 			<td><?php echo $_lang['user_dob']; ?>:</td>

    404. 

  404. 			<td>&nbsp;</td>

    405. 

  405. 			<td>

    406. 

  406. 				<input type="text" id="dob" name="dob" class="DatePicker" value="<?php echo ($userdata['dob'] ? $modx->toDateFormat($userdata['dob'],'dateOnly'):""); ?>" onblur='documentDirty=true;'>

    407. 

  407. 				<a onclick="document.userform.dob.value=''; return true;" onmouseover="window.status='<?php echo $_lang['remove_date']; ?>'; return true;" onmouseout="window.status=''; return true;" style="cursor:pointer; cursor:hand"><img align="absmiddle" src="media/style/<?php echo $manager_theme ? "$manager_theme/":""; ?>images/icons/cal_nodate.gif" width="16" height="16" border="0" alt="<?php echo $_lang['remove_date']; ?>"></a>

    408. 

  408. 			</td>

    409. 

  409. 		  </tr>

    410. 

  410. 		  <tr>

    411. 

  411. 			<td><?php echo $_lang['user_gender']; ?>:</td>

    412. 

  412. 			<td>&nbsp;</td>

    413. 

  413. 			<td><select name="gender" onchange="documentDirty=true;">

    414. 

  414. 				<option value=""></option>

    415. 

  415. 				<option value="1" <?php echo ($userdata['gender']=='1')? "selected='selected'":""; ?>><?php echo $_lang['user_male']; ?></option>

    416. 

  416. 				<option value="2" <?php echo ($userdata['gender']=='2')? "selected='selected'":""; ?>><?php echo $_lang['user_female']; ?></option>

    417. 

  417. 				</select>

    418. 

  418. 			</td>

    419. 

  419. 		  </tr>

    420. 

  420. 		  <tr>

    421. 

  421. 			<td valign="top"><?php echo $_lang['comment']; ?>:</td>

    422. 

  422. 			<td>&nbsp;</td>

    423. 

  423. 			<td>

    424. 

  424. 				<textarea type="text" name="comment" class="inputBox"  rows="5" onchange="documentDirty=true;"><?php echo htmlspecialchars($userdata['comment']); ?></textarea>

    425. 

  425. 			</td>

    426. 

  426. 		  </tr>

    427. 

  427. 		<?php if($_GET['a']=='12') { ?>

    428. 

  428. 		  <tr>

    429. 

  429. 			<td><?php echo $_lang['user_logincount']; ?>:</td>

    430. 

  430. 			<td>&nbsp;</td>

    431. 

  431. 			<td><?php echo $userdata['logincount'] ?></td>

    432. 

  432. 		  </tr>

    433. 

  433. 		  <tr>

    434. 

  434. 			<td><?php echo $_lang['user_prevlogin']; ?>:</td>

    435. 

  435. 			<td>&nbsp;</td>

    436. 

  436. 			<td><?php echo $modx->toDateFormat($userdata['lastlogin']+$server_offset_time) ?></td>

    437. 

  437. 		  </tr>

    438. 

  438. 		  <tr>

    439. 

  439. 			<td><?php echo $_lang['user_failedlogincount']; ?>:</td>

    440. 

  440. 			<td>&nbsp;<input type="hidden" name="failedlogincount"  onchange='documentDirty=true;' value="<?php echo $userdata['failedlogincount']; ?>"></td>

    441. 

  441. 			<td><span id='failed'><?php echo $userdata['failedlogincount'] ?></span>&nbsp;&nbsp;&nbsp;[<a href="javascript:resetFailed()"><?php echo $_lang['reset_failedlogins']; ?></a>]</td>

    442. 

  442. 		  </tr>

    443. 

  443. 		  <tr>

    444. 

  444. 			<td><?php echo $_lang['user_block']; ?>:</td>

    445. 

  445. 			<td>&nbsp;</td>

    446. 

  446. 			<td><input name="blockedcheck" type="checkbox" onclick="changeblockstate(document.userform.blocked, document.userform.blockedcheck);"<?php echo ($userdata['blocked']==1||($userdata['blockeduntil']>time() && $userdata['blockeduntil']!=0)) ? " checked": "" ; ?>><input type="hidden" name="blocked" value="<?php echo ($userdata['blocked']==1||($userdata['blockeduntil']>time() && $userdata['blockeduntil']!=0))?1:0; ?>"></td>

    447. 

  447. 		  </tr>

    448. 

  448. 		  <tr>

    449. 

  449. 			<td><?php echo $_lang['user_blockeduntil']; ?>:</td>

    450. 

  450. 			<td>&nbsp;</td>

    451. 

  451. 			<td>

    452. 

  452. 				<input type="text" id="blockeduntil" name="blockeduntil" class="DatePicker" value="<?php echo ($userdata['blockeduntil'] ? $modx->toDateFormat($userdata['blockeduntil']):""); ?>" onblur='documentDirty=true;' readonly="readonly">

    453. 

  453. 				<a onclick="document.userform.blockeduntil.value=''; return true;" onmouseover="window.status='<?php echo $_lang['remove_date']; ?>'; return true;" onmouseout="window.status=''; return true;" style="cursor:pointer; cursor:hand"><img align="absmiddle" src="media/style/<?php echo $manager_theme ? "$manager_theme/":""; ?>images/icons/cal_nodate.gif" width="16" height="16" border="0" alt="<?php echo $_lang['remove_date']; ?>" /></a>

    454. 

  454. 			</td>

    455. 

  455. 		  </tr>

    456. 

  456. 		  <tr>

    457. 

  457. 			<td><?php echo $_lang['user_blockedafter']; ?>:</td>

    458. 

  458. 			<td>&nbsp;</td>

    459. 

  459. 			<td>

    460. 

  460. 				<input type="text" id="blockedafter" name="blockedafter" class="DatePicker" value="<?php echo ($userdata['blockedafter'] ? $modx->toDateFormat($userdata['blockedafter']):""); ?>" onblur='documentDirty=true;' readonly="readonly">

    461. 

  461. 				<a onclick="document.userform.blockedafter.value=''; return true;" onmouseover="window.status='<?php echo $_lang['remove_date']; ?>'; return true;" onmouseout="window.status=''; return true;" style="cursor:pointer; cursor:hand"><img align="absmiddle" src="media/style/<?php echo $manager_theme ? "$manager_theme/":""; ?>images/icons/cal_nodate.gif" width="16" height="16" border="0" alt="<?php echo $_lang['remove_date']; ?>" /></a>

    462. 

  462. 			</td>

    463. 

  463. 		  </tr>

    464. 

  464. 		<?php

    465. 

  465. 

    466. 

  466. }

    467. 

  467. ?>

    468. 

  468. 		</table>

    469. 

  469. 		<?php if($_GET['id']==$modx->getLoginUserID()) { ?><p><?php echo $_lang['user_edit_self_msg']; ?></p><?php } ?>

    470. 

  470. 	</div>

    471. 

  471. 	<!-- Settings -->

    472. 

  472.     <div class="tab-page" id="tabSettings">

    473. 

  473.     	<h2 class="tab"><?php echo $_lang["settings_users"] ?></h2>

    474. 

  474.     	<script type="text/javascript">tpUser.addTabPage( document.getElementById( "tabSettings" ) );</script>

    475. 

  475.         <table border="0" cellspacing="0" cellpadding="3">

    476. 

  476. 	  <tr>

    477. 

  477. 	    <td class='warning'><?php echo $_lang["language_title"] ?></td>

    478. 

  478. 	    <td> <select name="manager_language" size="1" class="inputBox" onchange="documentDirty=true">

    479. 

  479. 	    <option value=""> </option>

    480. 

  480. 	    <?php

    481. 

  481. $activelang = !empty($usersettings['manager_language']) ? $usersettings['manager_language'] : $manager_language;

    482. 

  482. $dir = dir("includes/lang");

    483. 

  483. while ($file = $dir->read()) {

    484. 

  484. 	if (strpos($file, ".inc.php") > 0) {

    485. 

  485. 		$endpos = strpos($file, ".");

    486. 

  486. 		$languagename = substr($file, 0, $endpos);

    487. 

  487. 		$selectedtext = $languagename == $activelang ? "selected='selected'" : "";

    488. 

  488. ?> 

    489. 

  489.                 <option value="<?php echo $languagename; ?>" <?php echo $selectedtext; ?>><?php echo ucwords(str_replace("_", " ", $languagename)); ?></option> 

    490. 

  490.                 <?php

    491. 

  491. 

    492. 

  492. 	}

    493. 

  493. }

    494. 

  494. $dir->close();

    495. 

  495. ?> 

    496. 

  496.               </select>

    497. 

  497.          </td>

    498. 

  498. 	  </tr>

    499. 

  499. 	   <tr>

    500. 

  500.             <td width="200">&nbsp;</td>

    501. 

  501.             <td class='comment'><?php echo $_lang["language_message"] ?></td>

    502. 

  502.           </tr>

    503. 

  503. 	  	  <tr> 

    504. 

  504.             <td colspan="2"><div class='split'></div></td> 

    505. 

  505.           </tr>  

    506. 

  506.           <tr>

    507. 

  507.             <td class="warning"><b><?php echo $_lang["mgr_login_start"] ?></b></td>

    508. 

  508.             <td ><input onchange="documentDirty=true;" type='text' maxlength='50' style="width: 100px;" name="manager_login_startup" value="<?php echo isset($_POST['manager_login_startup']) ? $_POST['manager_login_startup'] : $usersettings['manager_login_startup']; ?>"></td>

    509. 

  509.           </tr>

    510. 

  510.           <tr>

    511. 

  511.             <td width="200">&nbsp;</td>

    512. 

  512.             <td class='comment'><?php echo $_lang["mgr_login_start_message"] ?></td>

    513. 

  513.           </tr>

    514. 

  514.           <tr>

    515. 

  515.             <td colspan="2"><div class='split'></div></td>

    516. 

  516.           </tr>

    517. 

  517. 

    518. 

  518.           <tr>

    519. 

  519.             <td class="warning"valign="top"><b><?php echo $_lang["allow_mgr_access"] ?></b></td>

    520. 

  520.             <td>

    521. 

  521.             	<input onchange="documentDirty=true;" type="radio" name="allow_manager_access" value="1" <?php echo !isset($usersettings['allow_manager_access'])||$usersettings['allow_manager_access']==1 ? 'checked="checked"':'' ; ?> /> <?php echo $_lang['yes']; ?> <br />

    522. 

  522.             	<input onchange="documentDirty=true;" type="radio" name="allow_manager_access" value="0" <?php echo isset($usersettings['allow_manager_access']) && $usersettings['allow_manager_access']==0 ? 'checked="checked"':'' ; ?> /> <?php echo $_lang['no']; ?>

    523. 

  523.             </td>

    524. 

  524.           </tr>

    525. 

  525.           <tr>

    526. 

  526.             <td width="200">&nbsp;</td>

    527. 

  527.             <td class='comment'><?php echo $_lang["allow_mgr_access_message"] ?></td>

    528. 

  528.           </tr>

    529. 

  529.           <tr>

    530. 

  530.             <td colspan="2"><div class='split'></div></td>

    531. 

  531.           </tr>

    532. 

  532. 

    533. 

  533.           <tr>

    534. 

  534.             <td nowrap class="warning"valign="top"><b><?php echo $_lang["login_allowed_ip"] ?></b></td>

    535. 

  535.             <td ><input onchange="documentDirty=true;"  type="text" maxlength='255' style="width: 300px;" name="allowed_ip" value="<?php echo $usersettings['allowed_ip']; ?>" /></td>

    536. 

  536.           </tr>

    537. 

  537.           <tr>

    538. 

  538.             <td width="200">&nbsp;</td>

    539. 

  539.             <td class='comment'><?php echo $_lang["login_allowed_ip_message"] ?></td>

    540. 

  540.           </tr>

    541. 

  541.           <tr>

    542. 

  542.             <td colspan="2"><div class='split'></div></td>

    543. 

  543.           </tr>

    544. 

  544.           <tr>

    545. 

  545.             <td nowrap class="warning"valign="top"><b><?php echo $_lang["login_allowed_days"] ?></b></td>

    546. 

  546.             <td>

    547. 

  547.             	<input onchange="documentDirty=true;" type="checkbox" name="allowed_days[]" value="1" <?php echo strpos($usersettings['allowed_days'],'1')!==false ? "checked='checked'":""; ?> /> <?php echo $_lang['sunday']; ?><br />

    548. 

  548.             	<input onchange="documentDirty=true;" type="checkbox" name="allowed_days[]" value="2" <?php echo strpos($usersettings['allowed_days'],'2')!==false ? "checked='checked'":""; ?> /> <?php echo $_lang['monday']; ?><br />

    549. 

  549.             	<input onchange="documentDirty=true;" type="checkbox" name="allowed_days[]" value="3" <?php echo strpos($usersettings['allowed_days'],'3')!==false ? "checked='checked'":""; ?> /> <?php echo $_lang['tuesday']; ?><br />

    550. 

  550.             	<input onchange="documentDirty=true;" type="checkbox" name="allowed_days[]" value="4" <?php echo strpos($usersettings['allowed_days'],'4')!==false ? "checked='checked'":""; ?> /> <?php echo $_lang['wednesday']; ?><br />

    551. 

  551.             	<input onchange="documentDirty=true;" type="checkbox" name="allowed_days[]" value="5" <?php echo strpos($usersettings['allowed_days'],'5')!==false ? "checked='checked'":""; ?> /> <?php echo $_lang['thursday']; ?><br />

    552. 

  552.             	<input onchange="documentDirty=true;" type="checkbox" name="allowed_days[]" value="6" <?php echo strpos($usersettings['allowed_days'],'6')!==false ? "checked='checked'":""; ?> /> <?php echo $_lang['friday']; ?><br />

    553. 

  553.             	<input onchange="documentDirty=true;" type="checkbox" name="allowed_days[]" value="7" <?php echo strpos($usersettings['allowed_days'],'7')!==false ? "checked='checked'":""; ?> /> <?php echo $_lang['saturday']; ?><br />

    554. 

  554.             </td>

    555. 

  555.           </tr>

    556. 

  556.           <tr>

    557. 

  557.             <td width="200">&nbsp;</td>

    558. 

  558.             <td class='comment'><?php echo $_lang["login_allowed_days_message"] ?></td>

    559. 

  559.           </tr>

    560. 

  560.           <tr>

    561. 

  561.             <td colspan="2"><div class='split'></div></td>

    562. 

  562.           </tr>

    563. 

  563.           <tr>

    564. 

  564.           <td nowrap class="warning"><b><?php echo $_lang["manager_theme"]?></b></td>

    565. 

  565.             <td> <select name="manager_theme" size="1" class="inputBox" onchange="documentDirty=true;document.userform.theme_refresher.value = Date.parse(new Date())">

    566. 

  566. 		<option value=""> </option>

    567. 

  567. <?php

    568. 

  568. 		$dir = dir("media/style/");

    569. 

  569. 		while ($file = $dir->read()) {

    570. 

  570. 			if ($file != "." && $file != ".." && is_dir("media/style/$file") && substr($file,0,1) != '.') {

    571. 

  571. 				$themename = $file;

    572. 

  572. 				$attr = 'value="'.$themename.'" ';

    573. 

  573. 				if (isset($usersettings['manager_theme']) && $themename == $usersettings['manager_theme'])

    574. 

  574. 					$attr .= 'selected="selected" ';

    575. 

  575. 				echo "\t\t<option ".rtrim($attr).'>'.ucwords(str_replace("_", " ", $themename))."</option>\n";

    576. 

  576. 			}

    577. 

  577. 		}

    578. 

  578. 		$dir->close();

    579. 

  579. ?>

    580. 

  580.              </select><input type="hidden" name="theme_refresher" value=""></td>

    581. 

  581.           </tr>

    582. 

  582.           <tr>

    583. 

  583.             <td width="200">&nbsp;</td>

    584. 

  584.             <td class='comment'><?php echo $_lang["manager_theme_message"]?></td>

    585. 

  585.           </tr>

    586. 

  586. 		  <tr>

    587. 

  587.             <td colspan="2"><div class='split'></div></td>

    588. 

  588.           </tr>

    589. 

  589.           <tr>

    590. 

  590.             <td nowrap class="warning"><b><?php echo $_lang["filemanager_path_title"]?></b></td>

    591. 

  591.             <td>

    592. 

  592.               <input onchange="documentDirty=true;" type='text' maxlength='255' style="width: 300px;" name="filemanager_path" value="<?php echo htmlspecialchars(isset($usersettings['filemanager_path']) ? $usersettings['filemanager_path']:""); ?>">

    593. 

  593.               </td>

    594. 

  594.           </tr>

    595. 

  595.           <tr>

    596. 

  596.             <td width="200">&nbsp;</td>

    597. 

  597.             <td class='comment'><?php echo $_lang["filemanager_path_message"]?></td>

    598. 

  598.           </tr>

    599. 

  599.           <tr>

    600. 

  600.           <td colspan="2"><div class='split'></div></td>

    601. 

  601.           </tr>

    602. 

  602.           <tr>

    603. 

  603.             <td nowrap class="warning"><b><?php echo $_lang["uploadable_images_title"]?></b></td>

    604. 

  604.             <td>

    605. 

  605.               <input onchange="documentDirty=true;" type='text' maxlength='255' style="width: 250px;" name="upload_images" value="<?php echo isset($usersettings['upload_images']) ? $usersettings['upload_images'] : "" ; ?>">

    606. 

  606.               &nbsp;&nbsp; <input onchange="documentDirty=true;" type="checkbox" name="default_upload_images" value="1" <?php echo isset($usersettings['upload_images']) ? '' : 'checked' ; ?>  /> <?php echo $_lang["user_use_config"]; ?><br />

    607. 

  607.             </td>

    608. 

  608.           </tr>

    609. 

  609.           <tr>

    610. 

  610.             <td width="200">&nbsp;</td>

    611. 

  611.             <td class='comment'><?php echo $_lang["uploadable_images_message"].$_lang["user_upload_message"]?></td>

    612. 

  612.           </tr>

    613. 

  613.           <tr>

    614. 

  614.           <td colspan="2"><div class='split'></div></td>

    615. 

  615.           </tr>

    616. 

  616.           <tr>

    617. 

  617.             <td nowrap class="warning"><b><?php echo $_lang["uploadable_media_title"]?></b></td>

    618. 

  618.             <td>

    619. 

  619.               <input onchange="documentDirty=true;" type='text' maxlength='255' style="width: 250px;" name="upload_media" value="<?php echo isset($usersettings['upload_media']) ? $usersettings['upload_media'] : "" ; ?>">

    620. 

  620. 				&nbsp;&nbsp; <input onchange="documentDirty=true;" type="checkbox" name="default_upload_media" value="1" <?php echo isset($usersettings['upload_media']) ? '' : 'checked' ; ?>  /> <?php echo $_lang["user_use_config"]; ?><br />            

    621. 

  621.             </td>

    622. 

  622.           </tr>

    623. 

  623.           <tr>

    624. 

  624.             <td width="200">&nbsp;</td>

    625. 

  625.             <td class='comment'><?php echo $_lang["uploadable_media_message"].$_lang["user_upload_message"]?></td>

    626. 

  626.           </tr>

    627. 

  627.           <tr>

    628. 

  628.           <td colspan="2"><div class='split'></div></td>

    629. 

  629.           </tr>

    630. 

  630.           <tr>

    631. 

  631.             <td nowrap class="warning"><b><?php echo $_lang["uploadable_flash_title"]?></b></td>

    632. 

  632.             <td>

    633. 

  633.               <input onchange="documentDirty=true;" type='text' maxlength='255' style="width: 250px;" name="upload_flash" value="<?php echo isset($usersettings['upload_flash']) ? $usersettings['upload_flash'] : "" ; ?>">

    634. 

  634.             &nbsp;&nbsp; <input onchange="documentDirty=true;" type="checkbox" name="default_upload_flash" value="1" <?php echo isset($usersettings['upload_flash']) ? '' : 'checked' ; ?>  /> <?php echo $_lang["user_use_config"]; ?><br />

    635. 

  635.             </td>

    636. 

  636.           </tr>

    637. 

  637.           <tr>

    638. 

  638.             <td width="200">&nbsp;</td>

    639. 

  639.             <td class='comment'><?php echo $_lang["uploadable_flash_message"].$_lang["user_upload_message"]?></td>

    640. 

  640.           </tr>

    641. 

  641.           <tr>

    642. 

  642.             <td colspan="2"><div class='split'></div></td>

    643. 

  643.           </tr>

    644. 

  644.           <tr>

    645. 

  645.             <td nowrap class="warning"><b><?php echo $_lang["uploadable_files_title"]?></b></td>

    646. 

  646.             <td>

    647. 

  647.               <input onchange="documentDirty=true;" type='text' maxlength='255' style="width: 250px;" name="upload_files" value="<?php echo isset($usersettings['upload_files']) ? $usersettings['upload_files'] : "" ; ?>">

    648. 

  648.             &nbsp;&nbsp; <input onchange="documentDirty=true;" type="checkbox" name="default_upload_files" value="1" <?php echo isset($usersettings['upload_files']) ? '' : 'checked' ; ?>  /> <?php echo $_lang["user_use_config"]; ?><br />

    649. 

  649.             </td>

    650. 

  650.           </tr>

    651. 

  651.           <tr>

    652. 

  652.             <td width="200">&nbsp;</td>

    653. 

  653.             <td class='comment'><?php echo $_lang["uploadable_files_message"].$_lang["user_upload_message"]?></td>

    654. 

  654.           </tr>

    655. 

  655.           <tr>

    656. 

  656.             <td colspan="2"><div class='split'></div></td>

    657. 

  657.           </tr>

    658. 

  658.           <tr class='row2'>

    659. 

  659.             <td nowrap class="warning"><b><?php echo $_lang["upload_maxsize_title"]?></b></td>

    660. 

  660.             <td>

    661. 

  661.               <input onchange="documentDirty=true;" type='text' maxlength='255' style="width: 300px;" name="upload_maxsize" value="<?php echo isset($usersettings['upload_maxsize']) ? $usersettings['upload_maxsize'] : "" ; ?>">

    662. 

  662.             </td>

    663. 

  663.           </tr>

    664. 

  664.           <tr class='row2'>

    665. 

  665.             <td width="200">&nbsp;</td>

    666. 

  666.             <td class='comment'><?php echo $_lang["upload_maxsize_message"]?></td>

    667. 

  667.           </tr>

    668. 

  668.           <tr>

    669. 

  669.             <td colspan="2"><div class='split'></div></td>

    670. 

  670.           </tr>

    671. 

  671.           <tr id='editorRow0' style="display: <?php echo $use_editor==1 ? $displayStyle : 'none' ; ?>">

    672. 

  672.             <td nowrap class="warning"><b><?php echo $_lang["which_editor_title"]?></b></td>

    673. 

  673.             <td>

    674. 

  674. 				<select name="which_editor" onchange="documentDirty=true;">

    675. 

  675. 				<option value=""> </option>

    676. 

  676. 					<?php

    677. 

  677. 

    678. 

  678. $edt = isset ($usersettings["which_editor"]) ? $usersettings["which_editor"] : '';

    679. 

  679. // invoke OnRichTextEditorRegister event

    680. 

  680. $evtOut = $modx->invokeEvent("OnRichTextEditorRegister");

    681. 

  681. echo "<option value='none'" . ($edt == 'none' ? " selected='selected'" : "") . ">" . $_lang["none"] . "</option>\n";

    682. 

  682. if (is_array($evtOut))

    683. 

  683. 	for ($i = 0; $i < count($evtOut); $i++) {

    684. 

  684. 		$editor = $evtOut[$i];

    685. 

  685. 		echo "<option value='$editor'" . ($edt == $editor ? " selected='selected'" : "") . ">$editor</option>\n";

    686. 

  686. 	}

    687. 

  687. ?>

    688. 

  688. 				</select>

    689. 

  689. 			</td>

    690. 

  690.           </tr>

    691. 

  691.           <tr id='editorRow1' style="display: <?php echo $use_editor==1 ? $displayStyle : 'none' ; ?>">

    692. 

  692.             <td width="200">&nbsp;</td>

    693. 

  693.             <td class='comment'><?php echo $_lang["which_editor_message"]?></td>

    694. 

  694.           </tr>

    695. 

  695.           <tr id='editorRow2' style="display: <?php echo $use_editor==1 ? $displayStyle : 'none' ; ?>">

    696. 

  696.             <td colspan="2"><div class='split'></div></td>

    697. 

  697.           </tr>

    698. 

  698.           <tr id='editorRow14' class="row3" style="display: <?php echo $use_editor==1 ? $displayStyle : 'none' ; ?>">

    699. 

  699.             <td nowrap class="warning"><b><?php echo $_lang["editor_css_path_title"]?></b></td>

    700. 

  700.             <td><input onchange="documentDirty=true;" type='text' maxlength='255' style="width: 250px;" name="editor_css_path" value="<?php echo isset($usersettings["editor_css_path"]) ? $usersettings["editor_css_path"] : "" ; ?>" />

    701. 

  701. 			</td>

    702. 

  702.           </tr>

    703. 

  703.           <tr id='editorRow15' class='row3' style="display: <?php echo $use_editor==1 ? $displayStyle : 'none' ; ?>">

    704. 

  704.             <td width="200">&nbsp;</td>

    705. 

  705.             <td class='comment'><?php echo $_lang["editor_css_path_message"]?></td>

    706. 

  706.           </tr>

    707. 

  707. 		  <tr id='editorRow16' class="row3" style="display: <?php echo $use_editor==1 ? $displayStyle : 'none' ; ?>">

    708. 

  708.             <td colspan="2"><div class='split'></div></td>

    709. 

  709.           </tr>

    710. 

  710.           <tr id='rbRow1' class='row3' style="display: <?php echo $use_browser==1 ? $displayStyle : 'none' ; ?>">

    711. 

  711.             <td nowrap class="warning"><b><?php echo $_lang["rb_base_dir_title"]?></b></td>

    712. 

  712.             <td><input onchange="documentDirty=true;" type='text' maxlength='255' style="width: 300px;" name="rb_base_dir" value="<?php echo isset($usersettings["rb_base_dir"]) ? $usersettings["rb_base_dir"]:""; ?>" />

    713. 

  713.               </td>

    714. 

  714.           </tr>

    715. 

  715.           <tr id='rbRow2' class='row3' style="display: <?php echo $use_browser==1 ? $displayStyle : 'none' ; ?>">

    716. 

  716.             <td width="200">&nbsp;</td>

    717. 

  717.             <td class='comment'><?php echo $_lang["rb_base_dir_message"]?></td>

    718. 

  718.           </tr>

    719. 

  719.           <tr id='rbRow3' style="display: <?php echo $use_browser==1 ? $displayStyle : 'none' ; ?>">

    720. 

  720.             <td colspan="2"><div class='split'></div></td>

    721. 

  721.           </tr>

    722. 

  722.           <tr id='rbRow4' class='row3' style="display: <?php echo $use_browser==1 ? $displayStyle : 'none' ; ?>">

    723. 

  723.             <td nowrap class="warning"><b><?php echo $_lang["rb_base_url_title"]?></b></td>

    724. 

  724.             <td><input onchange="documentDirty=true;" type='text' maxlength='255' style="width: 300px;" name="rb_base_url" value="<?php echo isset($usersettings["rb_base_url"]) ? $usersettings["rb_base_url"]:""; ?>" />

    725. 

  725.               </td>

    726. 

  726.           </tr>

    727. 

  727.           <tr id='rbRow5' class='row3' style="display: <?php echo $use_browser==1 ? $displayStyle : 'none' ; ?>">

    728. 

  728.             <td width="200">&nbsp;</td>

    729. 

  729.             <td class='comment'><?php echo $_lang["rb_base_url_message"]?></td>

    730. 

  730.           </tr>

    731. 

  731.           <tr id='rbRow6' style="display: <?php echo $use_browser==1 ? $displayStyle : 'none' ; ?>">

    732. 

  732.             <td colspan="2"><div class='split'></div></td>

    733. 

  733.           </tr>

    734. 

  734. 		  <tr class='row1'>

    735. 

  735.             <td colspan="2">

    736. 

  736. 		        <?php

    737. 

  737. 

    738. 

  738. // invoke OnInterfaceSettingsRender event

    739. 

  739. $evtOut = $modx->invokeEvent("OnInterfaceSettingsRender");

    740. 

  740. if (is_array($evtOut))

    741. 

  741. 	echo implode("", $evtOut);

    742. 

  742. ?>

    743. 

  743.             </td>

    744. 

  744.           </tr>

    745. 

  745. 		</table>

    746. 

  746. 	</div>

    747. 

  747. 	<!-- Photo -->

    748. 

  748.     <div class="tab-page" id="tabPhoto">

    749. 

  749.     	<h2 class="tab"><?php echo $_lang["settings_photo"] ?></h2>

    750. 

  750.     	<script type="text/javascript">tpUser.addTabPage( document.getElementById( "tabPhoto" ) );</script>

    751. 

  751.     	<script type="text/javascript">

    752. 

  752. 			function OpenServerBrowser(url, width, height ) {

    753. 

  753. 				var iLeft = (screen.width  - width) / 2 ;

    754. 

  754. 				var iTop  = (screen.height - height) / 2 ;

    755. 

  755. 

    756. 

  756. 				var sOptions = "toolbar=no,status=no,resizable=yes,dependent=yes" ;

    757. 

  757. 				sOptions += ",width=" + width ;

    758. 

  758. 				sOptions += ",height=" + height ;

    759. 

  759. 				sOptions += ",left=" + iLeft ;

    760. 

  760. 				sOptions += ",top=" + iTop ;

    761. 

  761. 

    762. 

  762. 				var oWindow = window.open( url, "FCKBrowseWindow", sOptions ) ;

    763. 

  763. 			}

    764. 

  764. 			function BrowseServer() {

    765. 

  765. 				var w = screen.width * 0.7;

    766. 

  766. 				var h = screen.height * 0.7;

    767. 

  767. 				OpenServerBrowser("<?php echo $base_url; ?>manager/media/browser/mcpuk/browser.html?Type=images&Connector=<?php echo $base_url; ?>manager/media/browser/mcpuk/connectors/php/connector.php&ServerPath=<?php echo $base_url; ?>", w, h);

    768. 

  768. 			}

    769. 

  769. 			function SetUrl(url, width, height, alt){

    770. 

  770. 				document.userform.photo.value = url;

    771. 

  771. 				document.images['iphoto'].src = "<?php echo $base_url; ?>" + url;

    772. 

  772. 			}

    773. 

  773. 		</script>

    774. 

  774.         <table border="0" cellspacing="0" cellpadding="3">

    775. 

  775.           <tr>

    776. 

  776.             <td nowrap class="warning"><b><?php echo $_lang["user_photo"] ?></b></td>

    777. 

  777.             <td><input onchange="documentDirty=true;" type='text' maxlength='255' style="width: 150px;" name="photo" value="<?php echo htmlspecialchars($userdata['photo']); ?>" /> <input type="button" value="<?php echo $_lang['insert']; ?>" onclick="BrowseServer();" /></td>

    778. 

  778.           </tr>

    779. 

  779.           <tr>

    780. 

  780.             <td width="200">&nbsp;</td>

    781. 

  781.             <td class='comment'><?php echo $_lang["user_photo_message"] ?></td>

    782. 

  782.           </tr>

    783. 

  783.           <tr>

    784. 

  784.             <td colspan="2"><div class='split'></div></td>

    785. 

  785.           </tr>

    786. 

  786.           <tr>

    787. 

  787.               <td colspan="2" align="center"><img name="iphoto" src="<?php echo !empty($userdata['photo']) ? MODX_SITE_URL.$userdata['photo'] : $_style['tx']; ?>" /></td>

    788. 

  788.           </tr>

    789. 

  789. 		</table>

    790. 

  790. 	</div>

    791. 

  791. </div>

    792. 

  792. </div>

    793. 

  793. 

    794. 

  794. <?php

    795. 

  795. 

    796. 

  796. if ($use_udperms == 1) {

    797. 

  797. 	$groupsarray = array ();

    798. 

  798. 

    799. 

  799. 	if ($_GET['a'] == '12') { // only do this bit if the user is being edited

    800. 

  800. 		$sql = "SELECT * FROM $dbase.`" . $table_prefix . "member_groups` where member=" . $_GET['id'] . "";

    801. 

  801. 		$rs = mysql_query($sql);

    802. 

  802. 		$limit = mysql_num_rows($rs);

    803. 

  803. 		for ($i = 0; $i < $limit; $i++) {

    804. 

  804. 			$currentgroup = mysql_fetch_assoc($rs);

    805. 

  805. 			$groupsarray[$i] = $currentgroup['user_group'];

    806. 

  806. 		}

    807. 

  807. 	}

    808. 

  808. 

    809. 

  809. 	// retain selected doc groups between post

    810. 

  810. 	if (is_array($_POST['user_groups'])) {

    811. 

  811. 		foreach ($_POST['user_groups'] as $n => $v)

    812. 

  812. 			$groupsarray[] = $v;

    813. 

  813. 	}

    814. 

  814. ?>

    815. 

  815. 

    816. 

  816. <div class="sectionHeader"><?php echo $_lang['access_permissions']; ?></div><div class="sectionBody">

    817. 

  817. <?php

    818. 

  818. 

    819. 

  819. 	echo "<p>" . $_lang['access_permissions_user_message'] . "</p>";

    820. 

  820. 	$sql = "SELECT name, id FROM $dbase.`" . $table_prefix . "membergroup_names` ORDER BY name";

    821. 

  821. 	$rs = mysql_query($sql);

    822. 

  822. 	$limit = mysql_num_rows($rs);

    823. 

  823. 	for ($i = 0; $i < $limit; $i++) {

    824. 

  824. 		$row = mysql_fetch_assoc($rs);

    825. 

  825. 		echo "<input type='checkbox' name='user_groups[]' value='" . $row['id'] . "'" . (in_array($row['id'], $groupsarray) ? " checked='checked'" : "") . " />" . $row['name'] . "<br />";

    826. 

  826. 	}

    827. 

  827. ?>

    828. 

  828. </div>

    829. 

  829. <?php

    830. 

  830. 

    831. 

  831. }

    832. 

  832. ?>

    833. 

  833. <input type="submit" name="save" style="display:none">

    834. 

  834. <?php

    835. 

  835. 

    836. 

  836. // invoke OnUserFormRender event

    837. 

  837. $evtOut = $modx->invokeEvent("OnUserFormRender", array (

    838. 

  838. 	"id" => $user

    839. 

  839. ));

    840. 

  840. if (is_array($evtOut))

    841. 

  841. 	echo implode("", $evtOut);

    842. 

  842. ?>

    843. 

  843. </form>
    844.