X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Fwhat-edit_user.php;h=2d5128f9e3d3e31cd211e693668ba3edf30675c8;hb=refs%2Fheads%2F0.2.1-FINAL;hp=657f1273ba686de79e35152305034497e23a86f4;hpb=75ad748a68473ace540251427a74fb781b1145e9;p=mailer.git

diff --git a/inc/modules/admin/what-edit_user.php b/inc/modules/admin/what-edit_user.php
index 657f1273ba..2d5128f9e3 100644
--- a/inc/modules/admin/what-edit_user.php
+++ b/inc/modules/admin/what-edit_user.php
@@ -1,7 +1,7 @@
 <?php
 /************************************************************************
- * MXChange v0.2.1                                    Start: 09/28/2003 *
- * ===============                              Last change: 06/10/2004 *
+ * Mailer v0.2.1-FINAL                                Start: 09/28/2003 *
+ * ===================                          Last change: 06/10/2004 *
  *                                                                      *
  * -------------------------------------------------------------------- *
  * File              : what-edit_user.php                               *
@@ -10,10 +10,16 @@
  * -------------------------------------------------------------------- *
  * Kurzbeschreibung  : Mitgliederprofile aendern                        *
  * -------------------------------------------------------------------- *
- *                                                                      *
+ * $Revision::                                                        $ *
+ * $Date::                                                            $ *
+ * $Tag:: 0.2.1-FINAL                                                 $ *
+ * $Author::                                                          $ *
+ * -------------------------------------------------------------------- *
+ * @TODO Add support for ext-country                                    *
  * -------------------------------------------------------------------- *
- * Copyright (c) 2003 - 2008 by Roland Haeder                           *
- * For more information visit: http://www.mxchange.org                  *
+ * Copyright (c) 2003 - 2009 by Roland Haeder                           *
+ * Copyright (c) 2009 - 2016 by Mailer Developer Team                   *
+ * For more information visit: http://mxchange.org                      *
  *                                                                      *
  * This program is free software; you can redistribute it and/or modify *
  * it under the terms of the GNU General Public License as published by *
@@ -32,124 +38,99 @@
  ************************************************************************/
 
 // Some security stuff...
-if ((ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) || (!IS_ADMIN()))
-{
-	$INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
-	require($INC);
-}
-// Add description as navigation point
-ADD_DESCR("admin", basename(__FILE__));
+if ((!defined('__SECURITY')) || (!isAdmin())) {
+	die();
+} // END - if
 
-OPEN_TABLE("100%", "admin_content admin_content_align", "");
+// Add description as navigation point
+addYouAreHereLink('admin', __FILE__);
 
 // Fix a notice
-$result_main = false;
-if (isset($_GET['u_id'])) {
-	//                                    0      1        2         3      4     5      6       7         8          9           10         11
-	$result_main = SQL_QUERY_ESC("SELECT sex, surname, family, street_nr, zip, city, country, email, birth_day, birth_month, birth_year, max_mails FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
-	 array(bigintval($_GET['u_id'])), __FILE__, __LINE__);
-}
+$result_main = FALSE;
+if (isGetRequestElementSet('userid')) {
+	// Load user entry
+	$result_main = sqlQueryEscaped("SELECT
+	`userid`, `sex`, `surname`, `family`, `street_nr`, `zip`, `city`, `country`,
+	`email`,
+	`birth_day`, `birth_month`, `birth_year`,
+	`max_mails`
+FROM
+	`{?_MYSQL_PREFIX?}_user_data`
+WHERE
+	`userid`=%s
+LIMIT 1",
+		array(
+			bigintval(getRequestElement('userid'))
+		), __FILE__, __LINE__);
+} // END - if
 
-if ((SQL_NUMROWS($result_main) == 1) || (empty($_GET['u_id'])))
-{
+if ((!isGetRequestElementSet('userid')) || (sqlNumRows($result_main) == 1)) {
 	// User found
-	if (empty($_GET['u_id']))
-	{
+	if (!isGetRequestElementSet('userid')) {
 		// Output selection form with all confirmed user accounts listed
-		ADD_MEMBER_SELECTION_BOX();
-	}
-	 elseif (isset($_POST['edit']))
-	{
+		addMemberSelectionBox();
+	} elseif (isFormSent('edit')) {
 		// Ok, change the account...
-		$PASS = false; $ADD = "";
-		if ((empty($_POST['pass1'])) && (empty($_POST['pass2'])))
-		{
+		$updateUser = FALSE; $add = '';
+		if ((!isPostRequestElementSet('password1')) && (!isPostRequestElementSet('password2'))) {
 			// Don't change the password
-			$PASS = true;
-		}
-		 elseif (($_POST['pass1'] == $_POST['pass2']))
-		{
+			$updateUser = TRUE;
+		} elseif ((postRequestElement('password1') == postRequestElement('password2'))) {
 			// Change the password
-			$PASS = true;
-			$ADD = ", password='".generateHash($_POST['pass1'])."'";
+			$updateUser = TRUE;
+			$add = ",`password`='" . generateHash(postRequestElement('password1')) . "'";
 		}
-		if ($PASS)
-		{
+
+		if ($updateUser === TRUE) {
 			// We have to add the following things: birthday and max receive mails
-			$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET
-sex='%s',
-surname='%s',
-family='%s',
-street_nr='%s',
-country='%s',
-zip=%d,
-city='%s',
-email='%s'
-".$ADD."
-WHERE userid=%d LIMIT 1",
- array(
-	substr($_POST['salut'], 0, 1),
-	$_POST['surname'],
-	$_POST['family_name'],
-	$_POST['street_nr'],
-	$_POST['country'],
-	bigintval($_POST['zip']),
-	$_POST['city'],
-	$_POST['email'],
-	bigintval($_GET['u_id']),
-), __FILE__, __LINE__);
-			$content = USER_ACCOUNT_SAVED;
-		}
-		 else
-		{
+			sqlQueryEscaped("UPDATE
+	`{?_MYSQL_PREFIX?}_user_data`
+SET
+	`sex`='%s',
+	`surname`='%s',
+	`family`='%s',
+	`street_nr`='%s',
+	`country`='%s',
+	`zip`=%s,
+	`city`='%s',
+	`email`='%s'
+	".$add."
+WHERE
+	`userid`=%s
+LIMIT 1",
+			array(
+				substr(postRequestElement('sex'), 0, 1),
+				postRequestElement('surname'),
+				postRequestElement('family'),
+				postRequestElement('street_nr'),
+				postRequestElement('country'),
+				bigintval(postRequestElement('zip')),
+				postRequestElement('city'),
+				postRequestElement('email'),
+				bigintval(getRequestElement('userid')),
+			), __FILE__, __LINE__);
+			$content = '{--ADMIN_USER_ACCOUNT_SAVED--}';
+		} else {
 			// Problem while saving data
-			$content = USER_ACCOUNT_NOT_SAVED;
+			$content = '{--ADMIN_USER_ACCOUNT_NOT_SAVED--}';
 		}
 
 		// Load template
-		LOAD_TEMPLATE("admin_settings_saved", false, $content);
-	}
-	 else
-	{
-		// Display form to edit
-		list($sex, $surname, $family, $street, $zip, $city, $country, $email, $bday, $bmonth, $byear, $max) = SQL_FETCHROW($result_main);
-		SQL_FREERESULT($result_main);
-
-		// Transfer data to constants for the template
-		switch ($sex)
-		{
-		case "M":
-			define('_SEX_M', " selected=\"selected\"");
-			define('_SEX_F', "");
-			define('_SEX_C', "");
-			break;
-
-		case "F":
-			define('_SEX_M', "");
-			define('_SEX_F', " selected=\"selected\"");
-			define('_SEX_C', "");
-			break;
-
-		case "C":
-			define('_SEX_M', "");
-			define('_SEX_F', "");
-			define('_SEX_C', " selected=\"selected\"");
-			break;
-		}
-
-		define('_SURNAME', $surname); define('_FAMILY', $family); define('_CITY'     , $city);
-		define('_STREET' , $street);  define('_ZIP'   , $zip);    define('_MAX_MAILS', $max);
-		define('_COUNTRY', $country); define('_EMAIL' , $email);
+		displayMessage($content);
+	} else {
+		// Load entry
+		$content = sqlFetchArray($result_main);
 
 		// Load template
-		LOAD_TEMPLATE("admin_edit_user", false, bigintval($_GET['u_id']));
+		loadTemplate('admin_edit_user', FALSE, $content);
 	}
-}
- else
-{
+} else {
 	// Account does not exists!
-	OUTPUT_HTML ("<STRONG class=\"admin_failed\">".ADMIN_MEMBER_404_1.$_GET['u_id'].ADMIN_MEMBER_404_2."</STRONG>");
+	displayErrorMessage('{%message,ADMIN_MEMBER_404=' . bigintval(getRequestElement('userid')) . '%}');
 }
-CLOSE_TABLE();
-//
+
+// Free the result
+sqlFreeResult($result_main);
+
+// [EOF]
 ?>