Security line in all includes changed
[mailer.git] / inc / modules / admin / what-del_user.php
1 <?php
2 /************************************************************************
3  * MXChange v0.2.1                                    Start: 09/28/2003 *
4  * ===============                              Last change: 06/10/2004 *
5  *                                                                      *
6  * -------------------------------------------------------------------- *
7  * File              : what-del_user.php                                *
8  * -------------------------------------------------------------------- *
9  * Short description : Delete members                                   *
10  * -------------------------------------------------------------------- *
11  * Kurzbeschreibung  : Mitglieder loeschen                              *
12  * -------------------------------------------------------------------- *
13  *                                                                      *
14  * -------------------------------------------------------------------- *
15  * Copyright (c) 2003 - 2008 by Roland Haeder                           *
16  * For more information visit: http://www.mxchange.org                  *
17  *                                                                      *
18  * This program is free software; you can redistribute it and/or modify *
19  * it under the terms of the GNU General Public License as published by *
20  * the Free Software Foundation; either version 2 of the License, or    *
21  * (at your option) any later version.                                  *
22  *                                                                      *
23  * This program is distributed in the hope that it will be useful,      *
24  * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
25  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
26  * GNU General Public License for more details.                         *
27  *                                                                      *
28  * You should have received a copy of the GNU General Public License    *
29  * along with this program; if not, write to the Free Software          *
30  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
31  * MA  02110-1301  USA                                                  *
32  ************************************************************************/
33
34 // Some security stuff...
35 if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
36         $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
37         require($INC);
38 }
39
40 // Display only title when no form was submitted
41 ADD_DESCR("admin", basename(__FILE__));
42
43 // User exists..
44 if ((isset($_POST['ok'])) || ((isset($_POST['del'])) && (!empty($_POST['reason'])))) {
45         // Delete users account
46         $result_user = SQL_QUERY_ESC("SELECT userid FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1",
47          array(bigintval($_GET['u_id'])), __FILE__, __LINE__);
48         if (SQL_NUMROWS($result_user) == 1) {
49                 // Free memory
50                 SQL_FREERESULT($result);
51
52                 // Delete user account
53                 DELETE_USER_ACCOUNT(bigintval($_GET['u_id']), $_POST['reason']);
54                 OUTPUT_HTML("<STRONG class=\"admin_green\">".ADMIN_DEL_COMPLETED."</STRONG>");
55         } else {
56                 // Account does not exists!
57                 OUTPUT_HTML("<STRONG class=\"admin_failed\">".ADMIN_MEMBER_404_1.$_GET['u_id'].ADMIN_MEMBER_404_2."</STRONG>");
58         }
59 } elseif (!empty($_POST['no'])) {
60         // Do not delete him...
61         LOAD_URL("modules.php?module=admin&amp;what=list_user&amp;u_id=".$_GET['u_id']);
62 } elseif (empty($_GET['u_id'])) {
63         // Output selection form with all confirmed user accounts listed
64         ADD_MEMBER_SELECTION_BOX();
65 } else {
66         // Realy want to delete?
67         $result = SQL_QUERY_ESC("SELECT email, surname, family FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1",
68          array(bigintval($_GET['u_id'])), __FILE__, __LINE__);
69         if (SQL_NUMROWS($result) == 1) {
70                 // Load data
71                 list ($email, $sname, $fname) = SQL_FETCHROW($result);
72                 SQL_FREERESULT($result);
73
74                 // Transfer data to constants for the template
75                 define('__EMAIL', CREATE_EMAIL_LINK($email, "user_data"));
76                 define('__SNAME', $sname);
77                 define('__FNAME', $fname);
78                 define('__UID'  , $_GET['u_id']);
79
80                 // Display form
81                 LOAD_TEMPLATE("admin_del_user");
82         } else {
83                 // Account does not exists!
84                 OUTPUT_HTML("<STRONG class=\"admin_failed\">".ADMIN_MEMBER_404_1.$_GET['u_id'].ADMIN_MEMBER_404_2."</STRONG>");
85         }
86 }
87
88 //
89 ?>