X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Fwhat-edit_user.php;h=2d5128f9e3d3e31cd211e693668ba3edf30675c8;hb=refs%2Fheads%2F0.2.1-FINAL;hp=0834abb6a70d67edff089783e7fae5a7f02e2672;hpb=e01fcf1ca8ddeb72af76465df3ef72301a1cdae7;p=mailer.git

diff --git a/inc/modules/admin/what-edit_user.php b/inc/modules/admin/what-edit_user.php
index 0834abb6a7..2d5128f9e3 100644
--- a/inc/modules/admin/what-edit_user.php
+++ b/inc/modules/admin/what-edit_user.php
@@ -1,7 +1,7 @@
 <?php
 /************************************************************************
- * MXChange v0.2.1                                    Start: 09/28/2003 *
- * ===============                              Last change: 06/10/2004 *
+ * Mailer v0.2.1-FINAL                                Start: 09/28/2003 *
+ * ===================                          Last change: 06/10/2004 *
  *                                                                      *
  * -------------------------------------------------------------------- *
  * File              : what-edit_user.php                               *
@@ -10,15 +10,16 @@
  * -------------------------------------------------------------------- *
  * Kurzbeschreibung  : Mitgliederprofile aendern                        *
  * -------------------------------------------------------------------- *
- * $Revision:: 856                                                    $ *
- * $Date:: 2009-03-06 20:24:32 +0100 (Fr, 06. March 2009)             $ *
+ * $Revision::                                                        $ *
+ * $Date::                                                            $ *
  * $Tag:: 0.2.1-FINAL                                                 $ *
- * $Author:: stelzi                                                   $ *
- * Needs to be in all Files and every File needs "svn propset           *
- * svn:keywords Date Revision" (autoprobset!) at least!!!!!!            *
+ * $Author::                                                          $ *
  * -------------------------------------------------------------------- *
- * Copyright (c) 2003 - 2008 by Roland Haeder                           *
- * For more information visit: http://www.mxchange.org                  *
+ * @TODO Add support for ext-country                                    *
+ * -------------------------------------------------------------------- *
+ * Copyright (c) 2003 - 2009 by Roland Haeder                           *
+ * Copyright (c) 2009 - 2016 by Mailer Developer Team                   *
+ * For more information visit: http://mxchange.org                      *
  *                                                                      *
  * This program is free software; you can redistribute it and/or modify *
  * it under the terms of the GNU General Public License as published by *
@@ -37,123 +38,99 @@
  ************************************************************************/
 
 // Some security stuff...
-if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
-	$INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
-	require($INC);
-}
+if ((!defined('__SECURITY')) || (!isAdmin())) {
+	die();
+} // END - if
 
 // Add description as navigation point
-ADD_DESCR("admin", __FILE__);
+addYouAreHereLink('admin', __FILE__);
 
 // Fix a notice
-$result_main = false;
-if (REQUEST_ISSET_GET(('uid'))) {
-	//                                    0      1        2         3      4     5      6       7         8          9           10         11
-	$result_main = SQL_QUERY_ESC("SELECT gender, surname, family, street_nr, zip, city, country, email, birth_day, birth_month, birth_year, max_mails
-FROM `{!_MYSQL_PREFIX!}_user_data`
-WHERE userid=%s
+$result_main = FALSE;
+if (isGetRequestElementSet('userid')) {
+	// Load user entry
+	$result_main = sqlQueryEscaped("SELECT
+	`userid`, `sex`, `surname`, `family`, `street_nr`, `zip`, `city`, `country`,
+	`email`,
+	`birth_day`, `birth_month`, `birth_year`,
+	`max_mails`
+FROM
+	`{?_MYSQL_PREFIX?}_user_data`
+WHERE
+	`userid`=%s
 LIMIT 1",
-		array(bigintval(REQUEST_GET('uid'))), __FILE__, __LINE__);
-}
+		array(
+			bigintval(getRequestElement('userid'))
+		), __FILE__, __LINE__);
+} // END - if
 
-if ((SQL_NUMROWS($result_main) == 1) || (!REQUEST_ISSET_GET(('uid'))))
-{
+if ((!isGetRequestElementSet('userid')) || (sqlNumRows($result_main) == 1)) {
 	// User found
-	if (!REQUEST_ISSET_GET(('uid')))
-	{
+	if (!isGetRequestElementSet('userid')) {
 		// Output selection form with all confirmed user accounts listed
-		ADD_MEMBER_SELECTION_BOX();
-	}
-	 elseif (REQUEST_ISSET_POST('edit'))
-	{
+		addMemberSelectionBox();
+	} elseif (isFormSent('edit')) {
 		// Ok, change the account...
-		$PASS = false; $ADD = "";
-		if ((!REQUEST_ISSET_POST(('pass1'))) && (!REQUEST_ISSET_POST(('pass2'))))
-		{
+		$updateUser = FALSE; $add = '';
+		if ((!isPostRequestElementSet('password1')) && (!isPostRequestElementSet('password2'))) {
 			// Don't change the password
-			$PASS = true;
-		}
-		 elseif ((REQUEST_POST('pass1') == REQUEST_POST('pass2')))
-		{
+			$updateUser = TRUE;
+		} elseif ((postRequestElement('password1') == postRequestElement('password2'))) {
 			// Change the password
-			$PASS = true;
-			$ADD = ", password='".generateHash(REQUEST_POST('pass1'))."'";
+			$updateUser = TRUE;
+			$add = ",`password`='" . generateHash(postRequestElement('password1')) . "'";
 		}
-		if ($PASS)
-		{
+
+		if ($updateUser === TRUE) {
 			// We have to add the following things: birthday and max receive mails
-			SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET
-gender='%s',
-surname='%s',
-family='%s',
-street_nr='%s',
-country='%s',
-zip=%s,
-city='%s',
-email='%s'
-".$ADD."
-WHERE userid=%s LIMIT 1",
- array(
-	substr(REQUEST_POST('gender'), 0, 1),
-	REQUEST_POST('surname'),
-	REQUEST_POST('family'),
-	REQUEST_POST('street_nr'),
-	REQUEST_POST('country'),
-	bigintval(REQUEST_POST('zip')),
-	REQUEST_POST('city'),
-	REQUEST_POST('email'),
-	bigintval(REQUEST_GET('uid')),
-), __FILE__, __LINE__);
-			$content = USER_ACCOUNT_SAVED;
-		}
-		 else
-		{
+			sqlQueryEscaped("UPDATE
+	`{?_MYSQL_PREFIX?}_user_data`
+SET
+	`sex`='%s',
+	`surname`='%s',
+	`family`='%s',
+	`street_nr`='%s',
+	`country`='%s',
+	`zip`=%s,
+	`city`='%s',
+	`email`='%s'
+	".$add."
+WHERE
+	`userid`=%s
+LIMIT 1",
+			array(
+				substr(postRequestElement('sex'), 0, 1),
+				postRequestElement('surname'),
+				postRequestElement('family'),
+				postRequestElement('street_nr'),
+				postRequestElement('country'),
+				bigintval(postRequestElement('zip')),
+				postRequestElement('city'),
+				postRequestElement('email'),
+				bigintval(getRequestElement('userid')),
+			), __FILE__, __LINE__);
+			$content = '{--ADMIN_USER_ACCOUNT_SAVED--}';
+		} else {
 			// Problem while saving data
-			$content = USER_ACCOUNT_NOT_SAVED;
+			$content = '{--ADMIN_USER_ACCOUNT_NOT_SAVED--}';
 		}
 
 		// Load template
-		LOAD_TEMPLATE("admin_settings_saved", false, $content);
-	}
-	 else
-	{
-		// Display form to edit
-		list($gender, $surname, $family, $street, $zip, $city, $country, $email, $bday, $bmonth, $byear, $max) = SQL_FETCHROW($result_main);
-		SQL_FREERESULT($result_main);
-
-		// Transfer data to constants for the template
-		switch ($gender)
-		{
-		case "M":
-			define('_GENDER_M', " selected=\"selected\"");
-			define('_GENDER_F', "");
-			define('_GENDER_C', "");
-			break;
-
-		case "F":
-			define('_GENDER_M', "");
-			define('_GENDER_F', " selected=\"selected\"");
-			define('_GENDER_C', "");
-			break;
-
-		case "C":
-			define('_GENDER_M', "");
-			define('_GENDER_F', "");
-			define('_GENDER_C', " selected=\"selected\"");
-			break;
-		}
-
-		define('_SURNAME', $surname); define('_FAMILY', $family); define('_CITY'     , $city);
-		define('_STREET' , $street);  define('_ZIP'   , $zip);    define('_MAX_MAILS', $max);
-		define('_COUNTRY', $country); define('_EMAIL' , $email);
+		displayMessage($content);
+	} else {
+		// Load entry
+		$content = sqlFetchArray($result_main);
 
 		// Load template
-		LOAD_TEMPLATE("admin_edit_user", false, bigintval(REQUEST_GET('uid')));
+		loadTemplate('admin_edit_user', FALSE, $content);
 	}
 } else {
 	// Account does not exists!
-	LOAD_TEMPLATE("admin_settings_saved", false, "<div class=\"admin_failed\">".sprintf(getMessage('ADMIN_MEMBER_404'), REQUEST_GET('uid'))."</div>");
+	displayErrorMessage('{%message,ADMIN_MEMBER_404=' . bigintval(getRequestElement('userid')) . '%}');
 }
 
-//
+// Free the result
+sqlFreeResult($result_main);
+
+// [EOF]
 ?>