settings/user-edit.php

   1 <?php
   2
   3 require_once "../inc/common.php";
   4 require_once "../inc/header.php";
   5 do_log($_POST);
   6
   7 $us = unreal_get_current_user();
   8 $id = (isset($_GET['id'])) ? $_GET['id'] : $us->id;
   9 $edit_user = new PanelUser(NULL, $id);
  10 $can_edit_profile = (user_can($us, PERMISSION_MANAGE_USERS) || $edit_user->id == $us->id) ? true : false;
  11 $caneditprofile = ($can_edit_profile) ? "" : "disabled";
  12 $caneditpermissions = (user_can($us, PERMISSION_MANAGE_USERS)) ? true : false;
  13 $can_edit = ($caneditpermissions) ? "" : "disabled";
  14 $postbutton = (isset($_POST['update_user'])) ? true : false;
  15 $roles_list = get_panel_user_roles_list();
  16
  17 if ($postbutton && isset($_POST['user_role']) && $caneditpermissions)
  18 {
  19     if ($_POST['user_role'] != $edit_user->user_meta['role'])
  20     {
  21         $edit_user->add_meta("role", $_POST['user_role']);
  22         $edit_user->delete_meta("permissions");
  23         Message::Success("Updated the role of $edit_user->username");
  24     }
  25 }
  26
  27 if ($postbutton && $can_edit_profile)
  28 {
  29     // Goes via core:
  30     $array['update_fname'] = (isset($_POST['first_name']) && strlen($_POST['first_name'])) ? $_POST['first_name'] : false;
  31     $array['update_lname'] = (isset($_POST['last_name']) && strlen($_POST['last_name'])) ? $_POST['last_name'] : false;
  32     $array['update_bio'] = (isset($_POST['bio']) && strlen($_POST['bio'])) ? $_POST['bio'] : false;
  33     $array['update_email'] = (isset($_POST['email']) && strlen($_POST['email'])) ? $_POST['email'] : false;
  34     $array['update_pass'] = (isset($_POST['password']) && strlen($_POST['password'])) ? $_POST['password'] : false;
  35     $array['update_pass_conf'] = (isset($_POST['passwordconfirm']) && strlen($_POST['passwordconfirm'])) ? $_POST['passwordconfirm'] : false;
  36     // Goes via meta:
  37     $session_timeout = (isset($_POST['session_timeout']) && strlen($_POST['session_timeout'])) ? $_POST['session_timeout'] : 3600;
  38
  39     if (!$array['update_pass'])
  40     {
  41         unset($array['update_pass']);
  42         unset($array['update_pass_conf']);
  43     }
  44     elseif ($array['update_pass'] == $array['update_pass_conf'])
  45     {
  46         $array['update_pass_conf'] = PanelUser::password_hash($array['update_pass_conf']);
  47         unset($array['update_pass']);
  48     }
  49     else
  50     {
  51         Message::Fail("Could not update password: Passwords did not match");
  52         unset($array['update_pass']);
  53         unset($array['update_pass_conf']);
  54     }
  55     $edit_user->update_core_info($array);
  56     $edit_user->add_meta("session_timeout", $session_timeout);
  57     $edit_user = new PanelUser($edit_user->username);
  58 }
  59 ?>
  60 <h4>Edit User: "<?php echo $edit_user->username; ?>"</h4>
  61 <br>
  62 <form method="post" action="user-edit.php?id=<?php echo $edit_user->id; ?>" autocomplete="off" enctype="multipart/form-data">
  63
  64 <div class="input-group mb-3">
  65     <div class="input-group-prepend">
  66         <span class="input-group-text" style="width: 175px;">Username</span>
  67     </div><input disabled type="text" class="form-control" name="username" id="username" placeholder="<?php echo $edit_user->username; ?>">
  68 </div>
  69
  70 <div class="input-group mb-3">
  71     <div class="input-group-prepend">
  72         <span class="input-group-text" style="width: 175px;">Role</span>
  73     </div><select name="user_role" <?php echo $can_edit; ?> class="custom-select" id="user_role">
  74                 <?php
  75                     foreach($roles_list as $s => $l)
  76                     {
  77                         $selected = ($s == $edit_user->user_meta['role']) ? "selected=\"selected\"" : "";
  78                         echo "<option value=\"$s\" $selected>$s</option>";
  79                     }
  80                 ?>
  81             </select>
  82 </div>
  83
  84
  85
  86 <div class="input-group mb-3">
  87     <div class="input-group-prepend">
  88         <span class="input-group-text" style="width: 175px;">First Name</span>
  89     </div><input <?php echo $caneditprofile; ?> type="text" class="form-control" name="first_name" id="first_name" placeholder="<?php echo $edit_user->first_name; ?>">
  90 </div>
  91
  92
  93 <div class="input-group mb-3">
  94     <div class="input-group-prepend">
  95         <span class="input-group-text" style="width: 175px;">Last Name</span>
  96     </div><input <?php echo $caneditprofile; ?> type="text" class="form-control" name="last_name" id="last_name" placeholder="<?php echo $edit_user->last_name; ?>">
  97 </div>
  98
  99
 100 <div class="input-group mb-3">
 101     <div class="input-group-prepend">
 102         <span class="input-group-text" style="width: 175px;">Bio</span>
 103     </div><textarea <?php echo $caneditprofile; ?> class="form-control" name="bio" id="username"><?php echo $edit_user->bio; ?></textarea>
 104 </div>
 105
 106
 107 <div class="input-group mb-3">
 108     <div class="input-group-prepend">
 109         <span class="input-group-text" style="width: 175px;">Email</span>
 110     </div><input <?php echo $caneditprofile; ?> type="text" class="form-control" name="email" id="email" autocomplete="off" value="<?php echo $edit_user->email; ?>">
 111 </div>
 112
 113 <div class="input-group mb-3">
 114     <div class="input-group-prepend">
 115         <span class="input-group-text" style="width: 175px;">Session timeout</span>
 116     </div><input <?php echo $caneditprofile; ?> type="text" class="form-control" name="session_timeout" id="session_timeout" autocomplete="off" value="<?php echo $edit_user->user_meta['session_timeout'] ?? 3600; ?>">
 117 </div>
 118
 119 <div class="input-group mb-3">
 120     <div class="input-group-prepend">
 121         <span class="input-group-text" style="width: 175px;">New Password</span>
 122     </div><input <?php echo $caneditprofile; ?> type="password" class="form-control" name="password" id="password" autocomplete="off">
 123 </div><div class="input-group mb-3">
 124     <div class="input-group-prepend">
 125         <span class="input-group-text" style="width: 175px;">Confirm Password</span>
 126     </div><input <?php echo $caneditprofile; ?> type="password" class="form-control" name="passwordconfirm" id="passwordconfirm" autocomplete="off">
 127 </div>
 128
 129 <br>
 130 <button type="submit" name="update_user" class="btn btn-primary">Save Changes</button><br>
 131 </form>
 132 <?php
 133 require_once "../inc/footer.php";