PageRenderTime 65ms CodeModel.GetById 29ms RepoModel.GetById 0ms app.codeStats 0ms

/manager/actions/mutate_web_user.dynamic.php

https://github.com/good-web-master/modx.evo.custom
PHP | 564 lines | 516 code | 34 blank | 14 comment | 68 complexity | 5b3ef8976ae182590dc4e227f226c009 MD5 | raw file
Possible License(s): LGPL-2.1, AGPL-1.0, GPL-2.0, MIT, BSD-3-Clause 
    

  1. <?php

    2. 

  2. if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the MODx Content Manager instead of accessing this file directly.");

    3. 

  3. 

    4. 

  4. switch((int) $_REQUEST['a']) {

    5. 

  5.   case 88:

    6. 

  6.     if(!$modx->hasPermission('edit_web_user')) {

    7. 

  7.       $e->setError(3);

    8. 

  8.       $e->dumpError();

    9. 

  9.     }

    10. 

  10.     break;

    11. 

  11.   case 87:

    12. 

  12.     if(!$modx->hasPermission('new_web_user')) {

    13. 

  13.       $e->setError(3);

    14. 

  14.       $e->dumpError();

    15. 

  15.     }

    16. 

  16.     break;

    17. 

  17.   default:

    18. 

  18.     $e->setError(3);

    19. 

  19.     $e->dumpError();

    20. 

  20. }

    21. 

  21. 

    22. 

  22. $user = isset($_REQUEST['id']) ? intval($_REQUEST['id']) : 0;

    23. 

  23. 

    24. 

  24. 

    25. 

  25. // check to see the snippet editor isn't locked

    26. 

  26. $sql = "SELECT internalKey, username FROM $dbase.`".$table_prefix."active_users` WHERE $dbase.`".$table_prefix."active_users`.action=88 AND $dbase.`".$table_prefix."active_users`.id=$user";

    27. 

  27. $rs = mysql_query($sql);

    28. 

  28. $limit = mysql_num_rows($rs);

    29. 

  29. if($limit>1) {

    30. 

  30. 	for ($i=0;$i<$limit;$i++) {

    31. 

  31. 		$lock = mysql_fetch_assoc($rs);

    32. 

  32. 		if($lock['internalKey']!=$modx->getLoginUserID()) {

    33. 

  33. 			$msg = sprintf($_lang["lock_msg"],$lock['username'],"web user");

    34. 

  34. 			$e->setError(5, $msg);

    35. 

  35. 			$e->dumpError();

    36. 

  36. 		}

    37. 

  37. 	}

    38. 

  38. }

    39. 

  39. // end check for lock

    40. 

  40. 

    41. 

  41. if($_REQUEST['a']=='88') {

    42. 

  42. 	// get user attributes

    43. 

  43. 	$sql = "SELECT * FROM $dbase.`".$table_prefix."web_user_attributes` WHERE $dbase.`".$table_prefix."web_user_attributes`.internalKey = ".$user.";";

    44. 

  44. 	$rs = mysql_query($sql);

    45. 

  45. 	$limit = mysql_num_rows($rs);

    46. 

  46. 	if($limit>1) {

    47. 

  47. 		echo "More than one user returned!<p>";

    48. 

  48. 		exit;

    49. 

  49. 	}

    50. 

  50. 	if($limit<1) {

    51. 

  51. 		echo "No user returned!<p>";

    52. 

  52. 		exit;

    53. 

  53. 	}

    54. 

  54. 	$userdata = mysql_fetch_assoc($rs);

    55. 

  55. 

    56. 

  56. 	// get user settings

    57. 

  57. 	$sql = "SELECT wus.* FROM $dbase.`".$table_prefix."web_user_settings` wus WHERE wus.webuser = ".$user.";";

    58. 

  58. 	$rs = mysql_query($sql);

    59. 

  59. 	$usersettings = array();

    60. 

  60. 	while($row=mysql_fetch_assoc($rs)) $usersettings[$row['setting_name']]=$row['setting_value'];

    61. 

  61. 	extract($usersettings, EXTR_OVERWRITE);

    62. 

  62. 

    63. 

  63. 	// get user name

    64. 

  64. 	$sql = "SELECT * FROM $dbase.`".$table_prefix."web_users` WHERE $dbase.`".$table_prefix."web_users`.id = ".$user.";";

    65. 

  65. 	$rs = mysql_query($sql);

    66. 

  66. 	$limit = mysql_num_rows($rs);

    67. 

  67. 	if($limit>1) {

    68. 

  68. 		echo "More than one user returned while getting username!<p>";

    69. 

  69. 		exit;

    70. 

  70. 	}

    71. 

  71. 	if($limit<1) {

    72. 

  72. 		echo "No user returned while getting username!<p>";

    73. 

  73. 		exit;

    74. 

  74. 	}

    75. 

  75. 	$usernamedata = mysql_fetch_assoc($rs);

    76. 

  76. 	$_SESSION['itemname']=$usernamedata['username'];

    77. 

  77. } else {

    78. 

  78. 	$userdata = array();

    79. 

  79. 	$usersettings = array();

    80. 

  80. 	$usernamedata = array();

    81. 

  81. 	$_SESSION['itemname']="New web user";

    82. 

  82. }

    83. 

  83. 

    84. 

  84. // restore saved form

    85. 

  85. $formRestored = false;

    86. 

  86. if($modx->manager->hasFormValues()) {

    87. 

  87. 	$modx->manager->loadFormValues();

    88. 

  88. 	// restore post values

    89. 

  89. 	$userdata = array_merge($userdata,$_POST);

    90. 

  90. 	$userdata['dob'] = ConvertDate($userdata['dob']);

    91. 

  91. 	$usernamedata['username'] = $userdata['newusername'];

    92. 

  92. 	$usernamedata['oldusername'] = $_POST['oldusername'];

    93. 

  93. 	$usersettings = array_merge($usersettings,$userdata);

    94. 

  94. 	$usersettings['allowed_days'] = is_array($_POST['allowed_days']) ? implode(",",$_POST['allowed_days']):"";

    95. 

  95. 	extract($usersettings, EXTR_OVERWRITE);

    96. 

  96. }

    97. 

  97. 

    98. 

  98. // converts date format dd-mm-yyyy to php date

    99. 

  99. function ConvertDate($date) {

    100. 

  100. 	global $modx;

    101. 

  101. 	if ($date == "") {return "0";}

    102. 

  102. 	else {}          {return $modx->toTimeStamp($date);}

    103. 

  103. }

    104. 

  104. 

    105. 

  105. // include the country list language file

    106. 

  106. $_country_lang = array();

    107. 

  107. if($manager_language!="english" && file_exists($modx->config['base_path']."manager/includes/lang/country/".$manager_language."_country.inc.php")){

    108. 

  108.     include_once "lang/country/".$manager_language."_country.inc.php";

    109. 

  109. } else {

    110. 

  110.     include_once "lang/country/english_country.inc.php";

    111. 

  111. }

    112. 

  112. 

    113. 

  113. ?>

    114. 

  114. <script type="text/javascript" src="media/calendar/datepicker.js"></script>

    115. 

  115. <script type="text/javascript">

    116. 

  116. window.addEvent('domready', function() {

    117. 

  117. 	var dpOffset = <?php echo $modx->config['datepicker_offset']; ?>;

    118. 

  118. 	var dpformat = "<?php echo $modx->config['datetime_format']; ?>";

    119. 

  119. 	new DatePicker($('dob'), {'yearOffset': -90,'yearRange':1,'format':dpformat});

    120. 

  120. 	if ($('blockeduntil')) {

    121. 

  121. 		new DatePicker($('blockeduntil'), {'yearOffset': dpOffset,'format':dpformat + ' hh:mm:00'});

    122. 

  122. 		new DatePicker($('blockedafter'), {'yearOffset': dpOffset,'format':dpformat + ' hh:mm:00'});

    123. 

  123. 	}

    124. 

  124. });

    125. 

  125. 

    126. 

  126. function changestate(element) {

    127. 

  127. 	documentDirty=true;

    128. 

  128. 	currval = eval(element).value;

    129. 

  129. 	if(currval==1) {

    130. 

  130. 		eval(element).value=0;

    131. 

  131. 	} else {

    132. 

  132. 		eval(element).value=1;

    133. 

  133. 	}

    134. 

  134. }

    135. 

  135. 

    136. 

  136. function changePasswordState(element) {

    137. 

  137. 	currval = eval(element).value;

    138. 

  138. 	if(currval==1) {

    139. 

  139. 		document.getElementById("passwordBlock").style.display="block";

    140. 

  140. 	} else {

    141. 

  141. 		document.getElementById("passwordBlock").style.display="none";

    142. 

  142. 	}

    143. 

  143. }

    144. 

  144. 

    145. 

  145. function changeblockstate(element, checkelement) {

    146. 

  146. 	currval = eval(element).value;

    147. 

  147. 	if(currval==1) {

    148. 

  148. 		if(confirm("<?php echo $_lang['confirm_unblock']; ?>")==true){

    149. 

  149. 			document.userform.blocked.value=0;

    150. 

  150. 			document.userform.blockeduntil.value="";

    151. 

  151. 			document.userform.blockedafter.value="";

    152. 

  152. 			document.userform.failedlogincount.value=0;

    153. 

  153. 			blocked.innerHTML="<b><?php echo $_lang['unblock_message']; ?></b>";

    154. 

  154. 			blocked.className="TD";

    155. 

  155. 			eval(element).value=0;

    156. 

  156. 		} else {

    157. 

  157. 			eval(checkelement).checked=true;

    158. 

  158. 		}

    159. 

  159. 	} else {

    160. 

  160. 		if(confirm("<?php echo $_lang['confirm_block']; ?>")==true){

    161. 

  161. 			document.userform.blocked.value=1;

    162. 

  162. 			blocked.innerHTML="<b><?php echo $_lang['block_message']; ?></b>";

    163. 

  163. 			blocked.className="warning";

    164. 

  164. 			eval(element).value=1;

    165. 

  165. 		} else {

    166. 

  166. 			eval(checkelement).checked=false;

    167. 

  167. 		}

    168. 

  168. 	}

    169. 

  169. }

    170. 

  170. 

    171. 

  171. function resetFailed() {

    172. 

  172. 	document.userform.failedlogincount.value=0;

    173. 

  173. 	document.getElementById("failed").innerHTML="0";

    174. 

  174. }

    175. 

  175. 

    176. 

  176. function deleteuser() {

    177. 

  177. 	if(confirm("<?php echo $_lang['confirm_delete_user']; ?>")==true) {

    178. 

  178. 		document.location.href="index.php?id=" + document.userform.id.value + "&a=90";

    179. 

  179. 	}

    180. 

  180. }

    181. 

  181. 

    182. 

  182. // change name

    183. 

  183. function changeName(){

    184. 

  184. 	if(confirm("<?php echo $_lang['confirm_name_change']; ?>")==true) {

    185. 

  185. 		var e1 = document.getElementById("showname");

    186. 

  186. 		var e2 = document.getElementById("editname");

    187. 

  187. 		e1.style.display = "none";

    188. 

  188. 		e2.style.display = "<?php echo $displayStyle; ?>";

    189. 

  189. 	}

    190. 

  190. };

    191. 

  191. 

    192. 

  192. // showHide - used by custom settings

    193. 

  193. function showHide(what, onoff){

    194. 

  194. 	var all = document.getElementsByTagName( "*" );

    195. 

  195. 	var l = all.length;

    196. 

  196. 	var buttonRe = what;

    197. 

  197. 	var id, el, stylevar;

    198. 

  198. 

    199. 

  199. 	if(onoff==1) {

    200. 

  200. 		stylevar = "<?php echo $displayStyle; ?>";

    201. 

  201. 	} else {

    202. 

  202. 		stylevar = "none";

    203. 

  203. 	}

    204. 

  204. 

    205. 

  205. 	for ( var i = 0; i < l; i++ ) {

    206. 

  206. 		el = all[i]

    207. 

  207. 		id = el.id;

    208. 

  208. 		if ( id == "" ) continue;

    209. 

  209. 		if (buttonRe.test(id)) {

    210. 

  210. 			el.style.display = stylevar;

    211. 

  211. 		}

    212. 

  212. 	}

    213. 

  213. };

    214. 

  214. 

    215. 

  215. </script>

    216. 

  216. 

    217. 

  217. 

    218. 

  218. <form action="index.php?a=89" method="post" name="userform">

    219. 

  219. <?php

    220. 

  220. 	// invoke OnWUsrFormPrerender event

    221. 

  221. 	$evtOut = $modx->invokeEvent("OnWUsrFormPrerender",array("id" => $user));

    222. 

  222. 	if(is_array($evtOut)) echo implode("",$evtOut);

    223. 

  223. ?>

    224. 

  224. <input type="hidden" name="mode" value="<?php echo $_GET['a'] ?>" />

    225. 

  225. <input type="hidden" name="id" value="<?php echo $_GET['id'] ?>" />

    226. 

  226. <input type="hidden" name="blockedmode" value="<?php echo ($userdata['blocked']==1 || ($userdata['blockeduntil']>time() && $userdata['blockeduntil']!=0)|| ($userdata['blockedafter']<time() && $userdata['blockedafter']!=0) || $userdata['failedlogins']>3) ? "1":"0" ?>" />

    227. 

  227. 

    228. 

  228. <h1><?php echo $_lang['web_user_title']; ?></h1>

    229. 

  229. 

    230. 

  230. <div id="actions">

    231. 

  231. 	<ul class="actionButtons">

    232. 

  232. 			<li><a href="#" onclick="documentDirty=false; document.userform.save.click();"><img src="<?php echo $_style["icons_save"] ?>" /> <?php echo $_lang['save']; ?></a><span class="and"> + </span>

    233. 

  233. 			<select id="stay" name="stay">

    234. 

  234. 			  <?php if ($modx->hasPermission('new_web_user')) { ?>		

    235. 

  235. 			  <option id="stay1" value="1" <?php echo $_REQUEST['stay']=='1' ? ' selected=""' : ''?> ><?php echo $_lang['stay_new']?></option>

    236. 

  236. 			  <?php } ?>

    237. 

  237. 			  <option id="stay2" value="2" <?php echo $_REQUEST['stay']=='2' ? ' selected="selected"' : ''?> ><?php echo $_lang['stay']?></option>

    238. 

  238. 			  <option id="stay3" value=""  <?php echo $_REQUEST['stay']=='' ? ' selected=""' : ''?>  ><?php echo $_lang['close']?></option>

    239. 

  239. 			</select>		

    240. 

  240. 			</li>

    241. 

  241. 			<li id="btn_del"><a href="#" onclick="deleteuser();"><img src="<?php echo $_style["icons_delete"] ?>" /> <?php echo $_lang['delete']; ?></a></li>

    242. 

  242. <?php if($_GET['a']!='88') { ?>

    243. 

  243. 			<script type="text/javascript">document.getElementById("btn_del").className='disabled';</script>

    244. 

  244. <?php } ?>

    245. 

  245. 			<li><a href="#" onclick="documentDirty=false;document.location.href='index.php?a=99';"><img src="<?php echo $_style["icons_cancel"] ?>" /> <?php echo $_lang['cancel']; ?></a></li>

    246. 

  246. 	</ul>

    247. 

  247. </div>

    248. 

  248. 

    249. 

  249. <!-- Tab Start -->

    250. 

  250. <div class="sectionBody">

    251. 

  251. <link type="text/css" rel="stylesheet" href="media/style/<?php echo $manager_theme ? "$manager_theme/":""; ?>style.css<?php echo "?$theme_refresher";?>" />

    252. 

  252. <script type="text/javascript" src="media/script/tabpane.js"></script>

    253. 

  253. <div class="tab-pane" id="webUserPane">

    254. 

  254. 	<script type="text/javascript">

    255. 

  255. 		tpUser = new WebFXTabPane(document.getElementById( "webUserPane" ), <?php echo $modx->config['remember_last_tab'] == 1 ? 'true' : 'false'; ?> );

    256. 

  256. 	</script>

    257. 

  257.     <div class="tab-page" id="tabGeneral">

    258. 

  258.     	<h2 class="tab"><?php echo $_lang["settings_general"] ?></h2>

    259. 

  259.     	<script type="text/javascript">tpUser.addTabPage( document.getElementById( "tabGeneral" ) );</script>

    260. 

  260. 		<table border="0" cellspacing="0" cellpadding="3">

    261. 

  261. 		  <tr>

    262. 

  262. 			<td colspan="3">

    263. 

  263. 				<span id="blocked" class="warning"><?php if($userdata['blocked']==1 || ($userdata['blockeduntil']>time() && $userdata['blockeduntil']!=0)|| ($userdata['blockedafter']<time() && $userdata['blockedafter']!=0) || $userdata['failedlogins']>3) { ?><b><?php echo $_lang['user_is_blocked']; ?></b><?php } ?></span><br />

    264. 

  264. 			</td>

    265. 

  265. 		  </tr>

    266. 

  266. 		  <?php if(!empty($userdata['id'])) { ?>

    267. 

  267. 		  <tr id="showname" style="display: <?php echo ($_GET['a']=='88' && (!isset($usernamedata['oldusername'])||$usernamedata['oldusername']==$usernamedata['username'])) ? $displayStyle : 'none';?> ">

    268. 

  268. 			<td colspan="3">

    269. 

  269. 				<img src="media/style/<?php echo $manager_theme ? "$manager_theme/":""; ?>images/icons/user.gif" alt="." />&nbsp;<b><?php echo !empty($usernamedata['oldusername']) ? $usernamedata['oldusername']:$usernamedata['username']; ?></b> - <span class="comment"><a href="#" onclick="changeName();return false;"><?php echo $_lang["change_name"]; ?></a></span>

    270. 

  270. 				<input type="hidden" name="oldusername" value="<?php echo htmlspecialchars(!empty($usernamedata['oldusername']) ? $usernamedata['oldusername']:$usernamedata['username']); ?>" />

    271. 

  271. 				<hr />

    272. 

  272. 			</td>

    273. 

  273. 		  </tr>

    274. 

  274. 		  <?php } ?>

    275. 

  275. 		  <tr id="editname" style="display:<?php echo $_GET['a']=='87'||(isset($usernamedata['oldusername']) && $usernamedata['oldusername']!=$usernamedata['username']) ? $displayStyle : 'none' ; ?>">

    276. 

  276. 			<td><?php echo $_lang['username']; ?>:</td>

    277. 

  277. 			<td>&nbsp;</td>

    278. 

  278. 			<td><input type="text" name="newusername" class="inputBox" value="<?php echo htmlspecialchars(isset($_POST['newusername']) ? $_POST['newusername'] : $usernamedata['username']); ?>" onchange='documentDirty=true;' maxlength="100" /></td>

    279. 

  279. 		  </tr>

    280. 

  280. 		  <tr>

    281. 

  281. 			<td valign="top"><?php echo $_GET['a']=='87' ? $_lang['password'].":" : $_lang['change_password_new'].":" ; ?></td>

    282. 

  282. 			<td>&nbsp;</td>

    283. 

  283. 			<td><input name="newpasswordcheck" type="checkbox" onclick="changestate(document.userform.newpassword);changePasswordState(document.userform.newpassword);"<?php echo $_REQUEST['a']=="87" ? " checked disabled": "" ; ?>><input type="hidden" name="newpassword" value="<?php echo $_REQUEST['a']=="87" ? 1 : 0 ; ?>" onchange="documentDirty=true;" /><br />

    284. 

  284. 				<span style="display:<?php echo $_REQUEST['a']=="87" ? "block": "none" ; ?>" id="passwordBlock">

    285. 

  285. 				<fieldset style="width:300px">

    286. 

  286. 				<legend><b><?php echo $_lang['password_gen_method']; ?></b></legend>

    287. 

  287. 				<input type=radio name="passwordgenmethod" value="g" <?php echo $_POST['passwordgenmethod']=="spec" ? "" : 'checked="checked"'; ?> /><?php echo $_lang['password_gen_gen']; ?><br />

    288. 

  288. 				<input type=radio name="passwordgenmethod" value="spec" <?php echo $_POST['passwordgenmethod']=="spec" ? 'checked="checked"' : ""; ?>><?php echo $_lang['password_gen_specify']; ?> <br />

    289. 

  289. 				<div style="padding-left:20px">

    290. 

  290. 				<label for="specifiedpassword" style="width:120px"><?php echo $_lang['change_password_new']; ?>:</label>

    291. 

  291. 				<input type="password" name="specifiedpassword" onchange="documentdirty=true;" onkeypress="document.userform.passwordgenmethod[1].checked=true;" size="20" /><br />

    292. 

  292. 				<label for="confirmpassword" style="width:120px"><?php echo $_lang['change_password_confirm']; ?>:</label>

    293. 

  293. 				<input type="password" name="confirmpassword" onchange="documentdirty=true;" onkeypress="document.userform.passwordgenmethod[1].checked=true;" size="20" /><br />

    294. 

  294. 				<small><span class="warning" style="font-weight:normal"><?php echo $_lang['password_gen_length']; ?></span></small>

    295. 

  295. 				</div>

    296. 

  296. 				</fieldset>

    297. 

  297. 				<br />

    298. 

  298. 				<fieldset style="width:300px">

    299. 

  299. 				<legend><b><?php echo $_lang['password_method']; ?></b></legend>

    300. 

  300. 				<input type=radio name="passwordnotifymethod" value="e" <?php echo $_POST['passwordnotifymethod']=="e" ? 'checked="checked"' : ""; ?> /><?php echo $_lang['password_method_email']; ?><br />

    301. 

  301. 				<input type=radio name="passwordnotifymethod" value="s" <?php echo $_POST['passwordnotifymethod']=="e" ? "" : 'checked="checked"'; ?> /><?php echo $_lang['password_method_screen']; ?>

    302. 

  302. 				</fieldset>

    303. 

  303. 				</span>

    304. 

  304. 			</td>

    305. 

  305. 		  </tr>

    306. 

  306. 		  <tr>

    307. 

  307. 			<td><?php echo $_lang['user_full_name']; ?>:</td>

    308. 

  308. 			<td>&nbsp;</td>

    309. 

  309. 			<td><input type="text" name="fullname" class="inputBox" value="<?php echo htmlspecialchars(isset($_POST['fullname']) ? $_POST['fullname'] : $userdata['fullname']); ?>" onchange="documentDirty=true;" /></td>

    310. 

  310. 		  </tr>

    311. 

  311. 		  <tr>

    312. 

  312. 			<td><?php echo $_lang['user_email']; ?>:</td>

    313. 

  313. 			<td>&nbsp;</td>

    314. 

  314. 			<td>

    315. 

  315. 			<input type="text" name="email" class="inputBox" value="<?php echo  isset($_POST['email']) ? $_POST['email'] : $userdata['email']; ?>" onchange="documentDirty=true;" />

    316. 

  316. 			<input type="hidden" name="oldemail" value="<?php echo htmlspecialchars(!empty($userdata['oldemail']) ? $userdata['oldemail']:$userdata['email']); ?>" />

    317. 

  317. 			</td>

    318. 

  318. 		  </tr>

    319. 

  319. 		  <tr>

    320. 

  320. 			<td><?php echo $_lang['user_phone']; ?>:</td>

    321. 

  321. 			<td>&nbsp;</td>

    322. 

  322. 			<td><input type="text" name="phone" class="inputBox" value="<?php echo isset($_POST['phone']) ? $_POST['phone'] : $userdata['phone']; ?>" onchange="documentDirty=true;" /></td>

    323. 

  323. 		  </tr>

    324. 

  324. 		  <tr>

    325. 

  325. 			<td><?php echo $_lang['user_mobile']; ?>:</td>

    326. 

  326. 			<td>&nbsp;</td>

    327. 

  327. 			<td><input type="text" name="mobilephone" class="inputBox" value="<?php echo isset($_POST['mobilephone']) ? $_POST['mobilephone'] : $userdata['mobilephone']; ?>" onchange="documentDirty=true;" /></td>

    328. 

  328. 		  </tr>

    329. 

  329. 		  <tr>

    330. 

  330. 			<td><?php echo $_lang['user_fax']; ?>:</td>

    331. 

  331. 			<td>&nbsp;</td>

    332. 

  332. 			<td><input type="text" name="fax" class="inputBox" value="<?php echo isset($_POST['fax']) ? $_POST['fax'] : $userdata['fax']; ?>" onchange="documentDirty=true;" /></td>

    333. 

  333. 		  </tr>

    334. 

  334. 		  <tr>

    335. 

  335. 			<td><?php echo $_lang['user_state']; ?>:</td>

    336. 

  336. 			<td>&nbsp;</td>

    337. 

  337. 			<td><input type="text" name="state" class="inputBox" value="<?php echo isset($_POST['state']) ? $_POST['state'] : $userdata['state']; ?>" onchange="documentDirty=true;" /></td>

    338. 

  338. 		  </tr>

    339. 

  339. 		  <tr>

    340. 

  340. 			<td><?php echo $_lang['user_zip']; ?>:</td>

    341. 

  341. 			<td>&nbsp;</td>

    342. 

  342. 			<td><input type="text" name="zip" class="inputBox" value="<?php echo isset($_POST['zip']) ? $_POST['zip'] : $userdata['zip']; ?>" onchange="documentDirty=true;" /></td>

    343. 

  343. 		  </tr>

    344. 

  344. 		  <tr>

    345. 

  345. 			<td><?php echo $_lang['user_country']; ?>:</td>

    346. 

  346. 			<td>&nbsp;</td>

    347. 

  347. 			<td>

    348. 

  348. 			<select size="1" name="country" onchange="documentDirty=true;">

    349. 

  349.             <?php $chosenCountry = isset($_POST['country']) ? $_POST['country'] : $userdata['country']; ?>

    350. 

  350. 			<option value="" <?php (!isset($chosenCountry) ? ' selected' : '') ?> >&nbsp;</option>

    351. 

  351. 				<?php

    352. 

  352. 				foreach ($_country_lang as $key => $country) {

    353. 

  353. 				 echo "<option value=\"$key\"".(isset($chosenCountry) && $chosenCountry == $key ? ' selected' : '') .">$country</option>";

    354. 

  354. 				}

    355. 

  355. 				?>

    356. 

  356.             </select>

    357. 

  357.             </td>

    358. 

  358. 		  </tr>

    359. 

  359. 		  <tr>

    360. 

  360. 			<td><?php echo $_lang['user_dob']; ?>:</td>

    361. 

  361. 			<td>&nbsp;</td>

    362. 

  362. 			<td>

    363. 

  363. 				<input type="text" id="dob" name="dob" class="DatePicker" value="<?php echo isset($_POST['dob']) ? $_POST['dob'] : ($userdata['dob'] ? $modx->toDateFormat($userdata['dob'],'dateOnly'):""); ?>" onblur='documentDirty=true;'>

    364. 

  364. 				<a onclick="document.userform.dob.value=''; return true;" onmouseover="window.status='<?php echo $_lang['remove_date']; ?>'; return true;" onmouseout="window.status=''; return true;" style="cursor:pointer; cursor:hand"><img align="absmiddle" src="media/style/<?php echo $manager_theme ? "$manager_theme/":""; ?>images/icons/cal_nodate.gif" width="16" height="16" border="0" alt="<?php echo $_lang['remove_date']; ?>"></a>

    365. 

  365. 			</td>

    366. 

  366. 		  </tr>

    367. 

  367. 		  <tr>

    368. 

  368. 			<td><?php echo $_lang['user_gender']; ?>:</td>

    369. 

  369. 			<td>&nbsp;</td>

    370. 

  370. 			<td><select name="gender" onchange="documentDirty=true;">

    371. 

  371. 				<option value=""></option>

    372. 

  372. 				<option value="1" <?php echo ($_POST['gender']=='1'||$userdata['gender']=='1')? "selected='selected'":""; ?>><?php echo $_lang['user_male']; ?></option>

    373. 

  373. 				<option value="2" <?php echo ($_POST['gender']=='2'||$userdata['gender']=='2')? "selected='selected'":""; ?>><?php echo $_lang['user_female']; ?></option>

    374. 

  374. 				</select>

    375. 

  375. 			</td>

    376. 

  376. 		  </tr>

    377. 

  377. 		  <tr>

    378. 

  378. 			<td valign="top"><?php echo $_lang['comment']; ?>:</td>

    379. 

  379. 			<td>&nbsp;</td>

    380. 

  380. 			<td>

    381. 

  381. 				<textarea type="text" name="comment" class="inputBox"  rows="5" onchange="documentDirty=true;"><?php echo htmlspecialchars(isset($_POST['comment']) ? $_POST['comment'] : $userdata['comment']); ?></textarea>

    382. 

  382. 			</td>

    383. 

  383. 		  </tr>

    384. 

  384. 		<?php if($_GET['a']=='88') { ?>

    385. 

  385. 		  <tr>

    386. 

  386. 			<td><?php echo $_lang['user_logincount']; ?>:</td>

    387. 

  387. 			<td>&nbsp;</td>

    388. 

  388. 			<td><?php echo $userdata['logincount'] ?></td>

    389. 

  389. 		  </tr>

    390. 

  390. 		  <tr>

    391. 

  391. 			<td><?php echo $_lang['user_prevlogin']; ?>:</td>

    392. 

  392. 			<td>&nbsp;</td>

    393. 

  393. 			<td><?php echo $modx->toDateFormat($userdata['lastlogin']+$server_offset_time) ?></td>

    394. 

  394. 		  </tr>

    395. 

  395. 		  <tr>

    396. 

  396. 			<td><?php echo $_lang['user_failedlogincount']; ?>:</td>

    397. 

  397. 			<td>&nbsp;<input type="hidden" name="failedlogincount"  onchange='documentDirty=true;' value="<?php echo $userdata['failedlogincount']; ?>"></td>

    398. 

  398. 			<td><span id='failed'><?php echo $userdata['failedlogincount'] ?></span>&nbsp;&nbsp;&nbsp;[<a href="javascript:resetFailed()"><?php echo $_lang['reset_failedlogins']; ?></a>]</td>

    399. 

  399. 		  </tr>

    400. 

  400. 		  <tr>

    401. 

  401. 			<td><?php echo $_lang['user_block']; ?>:</td>

    402. 

  402. 			<td>&nbsp;</td>

    403. 

  403. 			<td><input name="blockedcheck" type="checkbox" onclick="changeblockstate(document.userform.blockedmode, document.userform.blockedcheck);"<?php echo ($userdata['blocked']==1||($userdata['blockeduntil']>time() && $userdata['blockeduntil']!=0)||($userdata['blockedafter']<time() && $userdata['blockedafter']!=0)) ? " checked='checked'": "" ; ?> /><input type="hidden" name="blocked" value="<?php echo ($userdata['blocked']==1||($userdata['blockeduntil']>time() && $userdata['blockeduntil']!=0))?1:0; ?>"></td>

    404. 

  404. 		  </tr>

    405. 

  405. 		  <tr>

    406. 

  406. 			<td><?php echo $_lang['user_blockeduntil']; ?>:</td>

    407. 

  407. 			<td>&nbsp;</td>

    408. 

  408. 			<td>

    409. 

  409. 				<input type="text" id="blockeduntil" name="blockeduntil" class="DatePicker" value="<?php echo isset($_POST['blockeduntil']) ? $_POST['blockeduntil'] : ($userdata['blockeduntil'] ? $modx->toDateFormat($userdata['blockeduntil']):""); ?>" onblur='documentDirty=true;' readonly="readonly">

    410. 

  410. 				<a onclick="document.userform.blockeduntil.value=''; return true;" onmouseover="window.status='<?php echo $_lang['remove_date']; ?>'; return true;" onmouseout="window.status=''; return true;" style="cursor:pointer; cursor:hand"><img align="absmiddle" src="media/style/<?php echo $manager_theme ? "$manager_theme/":""; ?>images/icons/cal_nodate.gif" width="16" height="16" border="0" alt="<?php echo $_lang['remove_date']; ?>" /></a>

    411. 

  411. 			</td>

    412. 

  412. 		  </tr>

    413. 

  413. 		  <tr>

    414. 

  414. 			<td><?php echo $_lang['user_blockedafter']; ?>:</td>

    415. 

  415. 			<td>&nbsp;</td>

    416. 

  416. 			<td>

    417. 

  417. 				<input type="text" id="blockedafter" name="blockedafter" class="DatePicker" value="<?php echo isset($_POST['blockedafter']) ? $_POST['blockedafter'] : ($userdata['blockedafter'] ? $modx->toDateFormat($userdata['blockedafter']):""); ?>" onblur='documentDirty=true;' readonly="readonly">

    418. 

  418. 				<a onclick="document.userform.blockedafter.value=''; return true;" onmouseover="window.status='<?php echo $_lang['remove_date']; ?>'; return true;" onmouseout="window.status=''; return true;" style="cursor:pointer; cursor:hand"><img align="absmiddle" src="media/style/<?php echo $manager_theme ? "$manager_theme/":""; ?>images/icons/cal_nodate.gif" width="16" height="16" border="0" alt="<?php echo $_lang['remove_date']; ?>" /></a>

    419. 

  419. 			</td>

    420. 

  420. 		  </tr>

    421. 

  421. 		<?php

    422. 

  422. 		}

    423. 

  423. 		?>

    424. 

  424. 		</table>

    425. 

  425. 	</div>

    426. 

  426. 	<!-- Settings -->

    427. 

  427.     <div class="tab-page" id="tabSettings">

    428. 

  428.     	<h2 class="tab"><?php echo $_lang["settings_users"] ?></h2>

    429. 

  429.     	<script type="text/javascript">tpUser.addTabPage( document.getElementById( "tabSettings" ) );</script>

    430. 

  430.         <table border="0" cellspacing="0" cellpadding="3">

    431. 

  431.           <tr>

    432. 

  432.             <td nowrap class="warning"><b><?php echo $_lang["login_homepage"] ?></b></td>

    433. 

  433.             <td ><input onchange="documentDirty=true;" type='text' maxlength='50' style="width: 100px;" name="login_home" value="<?php echo isset($_POST['login_home']) ? $_POST['login_home'] : $usersettings['login_home']; ?>"></td>

    434. 

  434.           </tr>

    435. 

  435.           <tr>

    436. 

  436.             <td width="200">&nbsp;</td>

    437. 

  437.             <td class='comment'><?php echo $_lang["login_homepage_message"] ?></td>

    438. 

  438.           </tr>

    439. 

  439.           <tr>

    440. 

  440.             <td colspan="2"><div class='split'></div></td>

    441. 

  441.           </tr>

    442. 

  442.           <tr>

    443. 

  443.             <td nowrap class="warning"valign="top"><b><?php echo $_lang["login_allowed_ip"] ?></b></td>

    444. 

  444.             <td ><input onchange="documentDirty=true;"  type="text" maxlength='255' style="width: 300px;" name="allowed_ip" value="<?php echo isset($_POST['allowed_ip']) ? $_POST['allowed_ip'] : $usersettings['allowed_ip']; ?>" /></td>

    445. 

  445.           </tr>

    446. 

  446.           <tr>

    447. 

  447.             <td width="200">&nbsp;</td>

    448. 

  448.             <td class='comment'><?php echo $_lang["login_allowed_ip_message"] ?></td>

    449. 

  449.           </tr>

    450. 

  450.           <tr>

    451. 

  451.             <td colspan="2"><div class='split'></div></td>

    452. 

  452.           </tr>

    453. 

  453.           <tr>

    454. 

  454.             <td nowrap class="warning"valign="top"><b><?php echo $_lang["login_allowed_days"] ?></b></td>

    455. 

  455.             <td>

    456. 

  456.             	<input onchange="documentDirty=true;" type="checkbox" name="allowed_days[]" value="1" <?php echo strpos($usersettings['allowed_days'],'1')!==false ? "checked='checked'":""; ?> /> <?php echo $_lang['sunday']; ?><br />

    457. 

  457.             	<input onchange="documentDirty=true;" type="checkbox" name="allowed_days[]" value="2" <?php echo strpos($usersettings['allowed_days'],'2')!==false ? "checked='checked'":""; ?> /> <?php echo $_lang['monday']; ?><br />

    458. 

  458.             	<input onchange="documentDirty=true;" type="checkbox" name="allowed_days[]" value="3" <?php echo strpos($usersettings['allowed_days'],'3')!==false ? "checked='checked'":""; ?> /> <?php echo $_lang['tuesday']; ?><br />

    459. 

  459.             	<input onchange="documentDirty=true;" type="checkbox" name="allowed_days[]" value="4" <?php echo strpos($usersettings['allowed_days'],'4')!==false ? "checked='checked'":""; ?> /> <?php echo $_lang['wednesday']; ?><br />

    460. 

  460.             	<input onchange="documentDirty=true;" type="checkbox" name="allowed_days[]" value="5" <?php echo strpos($usersettings['allowed_days'],'5')!==false ? "checked='checked'":""; ?> /> <?php echo $_lang['thursday']; ?><br />

    461. 

  461.             	<input onchange="documentDirty=true;" type="checkbox" name="allowed_days[]" value="6" <?php echo strpos($usersettings['allowed_days'],'6')!==false ? "checked='checked'":""; ?> /> <?php echo $_lang['friday']; ?><br />

    462. 

  462.             	<input onchange="documentDirty=true;" type="checkbox" name="allowed_days[]" value="7" <?php echo strpos($usersettings['allowed_days'],'7')!==false ? "checked='checked'":""; ?> /> <?php echo $_lang['saturday']; ?><br />

    463. 

  463.             </td>

    464. 

  464.           </tr>

    465. 

  465.           <tr>

    466. 

  466.             <td width="200">&nbsp;</td>

    467. 

  467.             <td class='comment'><?php echo $_lang["login_allowed_days_message"] ?></td>

    468. 

  468.           </tr>

    469. 

  469.           <tr>

    470. 

  470.             <td colspan="2"><div class='split'></div></td>

    471. 

  471.           </tr>

    472. 

  472. 		</table>

    473. 

  473. 	</div>

    474. 

  474. 	<!-- Photo -->

    475. 

  475.     <div class="tab-page" id="tabPhoto">

    476. 

  476.     	<h2 class="tab"><?php echo $_lang["settings_photo"] ?></h2>

    477. 

  477.     	<script type="text/javascript">tpUser.addTabPage( document.getElementById( "tabPhoto" ) );</script>

    478. 

  478.     	<script type="text/javascript">

    479. 

  479. 			function OpenServerBrowser(url, width, height ) {

    480. 

  480. 				var iLeft = (screen.width  - width) / 2 ;

    481. 

  481. 				var iTop  = (screen.height - height) / 2 ;

    482. 

  482. 

    483. 

  483. 				var sOptions = "toolbar=no,status=no,resizable=yes,dependent=yes" ;

    484. 

  484. 				sOptions += ",width=" + width ;

    485. 

  485. 				sOptions += ",height=" + height ;

    486. 

  486. 				sOptions += ",left=" + iLeft ;

    487. 

  487. 				sOptions += ",top=" + iTop ;

    488. 

  488. 

    489. 

  489. 				var oWindow = window.open( url, "FCKBrowseWindow", sOptions ) ;

    490. 

  490. 			}

    491. 

  491. 			function BrowseServer() {

    492. 

  492. 				var w = screen.width * 0.7;

    493. 

  493. 				var h = screen.height * 0.7;

    494. 

  494. 				OpenServerBrowser("<?php echo $base_url; ?>manager/media/browser/mcpuk/browser.html?Type=images&Connector=<?php echo $base_url; ?>manager/media/browser/mcpuk/connectors/php/connector.php&ServerPath=<?php echo $base_url; ?>", w, h);

    495. 

  495. 			}

    496. 

  496. 			function SetUrl(url, width, height, alt){

    497. 

  497. 				document.userform.photo.value = url;

    498. 

  498. 				document.images['iphoto'].src = "<?php echo $base_url; ?>" + url;

    499. 

  499. 			}

    500. 

  500. 		</script>

    501. 

  501.         <table border="0" cellspacing="0" cellpadding="3">

    502. 

  502.           <tr>

    503. 

  503.             <td nowrap class="warning"><b><?php echo $_lang["user_photo"] ?></b></td>

    504. 

  504.             <td><input onchange="documentDirty=true;" type='text' maxlength='255' style="width: 150px;" name="photo" value="<?php echo htmlspecialchars(isset($_POST['photo']) ? $_POST['photo'] : $userdata['photo']); ?>" /> <input type="button" value="<?php echo $_lang['insert']; ?>" onclick="BrowseServer();" /></td>

    505. 

  505.           </tr>

    506. 

  506.           <tr>

    507. 

  507.             <td width="200">&nbsp;</td>

    508. 

  508.             <td class='comment'><?php echo $_lang["user_photo_message"] ?></td>

    509. 

  509.           </tr>

    510. 

  510.           <tr>

    511. 

  511.             <td colspan="2"><div class='split'></div></td>

    512. 

  512.           </tr>

    513. 

  513.           <tr>

    514. 

  514.             <td colspan="2" align="center"><img name="iphoto" src="<?php echo isset($_POST['photo']) ? MODX_SITE_URL.$_POST['photo'] : !empty($userdata['photo']) ? MODX_SITE_URL.$userdata['photo']: $_style['tx']; ?>" /></td>

    515. 

  515.           </tr>

    516. 

  516. 		</table>

    517. 

  517. 	</div>

    518. 

  518. </div>

    519. 

  519. 

    520. 

  520. </div>

    521. 

  521. 

    522. 

  522. <?php

    523. 

  523. if($use_udperms==1) {

    524. 

  524. $groupsarray = array();

    525. 

  525. 

    526. 

  526. if($_GET['a']=='88') { // only do this bit if the user is being edited

    527. 

  527. 	$sql = "SELECT * FROM $dbase.`".$table_prefix."web_groups` where webuser=".$_GET['id']."";

    528. 

  528. 	$rs = mysql_query($sql);

    529. 

  529. 	$limit = mysql_num_rows($rs);

    530. 

  530. 	for ($i = 0; $i < $limit; $i++) {

    531. 

  531. 		$currentgroup=mysql_fetch_assoc($rs);

    532. 

  532. 		$groupsarray[$i] = $currentgroup['webgroup'];

    533. 

  533. 	}

    534. 

  534. }

    535. 

  535. 

    536. 

  536. // retain selected user groups between post

    537. 

  537. if(is_array($_POST['user_groups'])) {

    538. 

  538. 	foreach($_POST['user_groups'] as $n => $v) $groupsarray[] = $v;

    539. 

  539. }

    540. 

  540. 

    541. 

  541. ?>

    542. 

  542. 

    543. 

  543. <div class="sectionHeader"><?php echo $_lang['web_access_permissions']; ?></div><div class="sectionBody">

    544. 

  544. <?php

    545. 

  545. 	echo "<p>" . $_lang['access_permissions_user_message'] . "</p>";

    546. 

  546. 	$sql = "SELECT name, id FROM $dbase.`".$table_prefix."webgroup_names` ORDER BY name";

    547. 

  547. 	$rs = mysql_query($sql);

    548. 

  548. 	$limit = mysql_num_rows($rs);

    549. 

  549. 	for($i=0; $i<$limit; $i++) {

    550. 

  550. 		$row=mysql_fetch_assoc($rs);

    551. 

  551. 		echo "<input type='checkbox' name='user_groups[]' value='".$row['id']."'".(in_array($row['id'], $groupsarray) ? " checked='checked'" : "")." />".$row['name']."<br />";

    552. 

  552. 	}

    553. 

  553. ?>

    554. 

  554. </div>

    555. 

  555. <?php

    556. 

  556. }

    557. 

  557. ?>

    558. 

  558. <input type="submit" name="save" style="display:none">

    559. 

  559. <?php

    560. 

  560. 	// invoke OnWUsrFormRender event

    561. 

  561. 	$evtOut = $modx->invokeEvent("OnWUsrFormRender",array("id" => $user));

    562. 

  562. 	if(is_array($evtOut)) echo implode("",$evtOut);

    563. 

  563. ?>

    564. 

  564. </form>
    565.