<?php
/************************************************************************
 * MXChange v0.2.1                                    Start: 09/28/2003 *
 * ===============                              Last change: 06/10/2004 *
 *                                                                      *
 * -------------------------------------------------------------------- *
 * File              : what-edit_user.php                               *
 * -------------------------------------------------------------------- *
 * Short description : Edit member's profiles                           *
 * -------------------------------------------------------------------- *
 * Kurzbeschreibung  : Mitgliederprofile aendern                        *
 * -------------------------------------------------------------------- *
 * $Revision::                                                        $ *
 * $Date::                                                            $ *
 * $Tag:: 0.2.1-FINAL                                                 $ *
 * $Author::                                                          $ *
 * Needs to be in all Files and every File needs "svn propset           *
 * svn:keywords Date Revision" (autoprobset!) at least!!!!!!            *
 * -------------------------------------------------------------------- *
 * Copyright (c) 2003 - 2008 by Roland Haeder                           *
 * For more information visit: http://www.mxchange.org                  *
 *                                                                      *
 * This program is free software; you can redistribute it and/or modify *
 * it under the terms of the GNU General Public License as published by *
 * the Free Software Foundation; either version 2 of the License, or    *
 * (at your option) any later version.                                  *
 *                                                                      *
 * This program is distributed in the hope that it will be useful,      *
 * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
 * GNU General Public License for more details.                         *
 *                                                                      *
 * You should have received a copy of the GNU General Public License    *
 * along with this program; if not, write to the Free Software          *
 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
 * MA  02110-1301  USA                                                  *
 ************************************************************************/

// Some security stuff...
if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
	$INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), '/inc') + 4) . '/security.php';
	require($INC);
}

// Add description as navigation point
ADD_DESCR('admin', __FILE__);

// Fix a notice
$result_main = false;
if (REQUEST_ISSET_GET('uid')) {
	//                                    0      1        2         3      4     5      6       7         8          9           10         11
	$result_main = SQL_QUERY_ESC("SELECT gender, surname, family, street_nr, zip, city, country, email, birth_day, birth_month, birth_year, max_mails
FROM `{!_MYSQL_PREFIX!}_user_data`
WHERE userid=%s
LIMIT 1",
		array(bigintval(REQUEST_GET('uid'))), __FILE__, __LINE__);
}

if ((SQL_NUMROWS($result_main) == 1) || (!REQUEST_ISSET_GET('uid')))
{
	// User found
	if (!REQUEST_ISSET_GET('uid'))
	{
		// Output selection form with all confirmed user accounts listed
		ADD_MEMBER_SELECTION_BOX();
	}
	elseif (REQUEST_ISSET_POST('edit'))
	{
		// Ok, change the account...
		$PASS = false; $add = '';
		if ((!REQUEST_ISSET_POST('pass1')) && (!REQUEST_ISSET_POST('pass2'))) {
			// Don't change the password
			$PASS = true;
		} elseif ((REQUEST_POST('pass1') == REQUEST_POST('pass2'))) {
			// Change the password
			$PASS = true;
			$add = ", `password`='" . generateHash(REQUEST_POST('pass1')) . "'";
		}

		if ($PASS) {
			// We have to add the following things: birthday and max receive mails
			SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET
`gender`='%s',
`surname`='%s',
`family`='%s',
`street_nr`='%s',
`country`='%s',
`zip`=%s,
`city`='%s',
`email`='%s'
".$add."
WHERE userid=%s LIMIT 1",
			array(
				substr(REQUEST_POST('gender'), 0, 1),
				REQUEST_POST('surname'),
				REQUEST_POST('family'),
				REQUEST_POST('street_nr'),
				REQUEST_POST('country'),
				bigintval(REQUEST_POST('zip')),
				REQUEST_POST('city'),
				REQUEST_POST('email'),
				bigintval(REQUEST_GET('uid')),
			), __FILE__, __LINE__);
			$content = getMessage('USER_ACCOUNT_SAVED');
		} else {
			// Problem while saving data
			$content = getMessage('USER_ACCOUNT_NOT_SAVED');
		}

		// Load template
		LOAD_TEMPLATE('admin_settings_saved', false, $content);
	} else {
		// Display form to edit
		list($gender, $surname, $family, $street, $zip, $city, $country, $email, $bday, $bmonth, $byear, $max) = SQL_FETCHROW($result_main);

		// Transfer data to constants for the template
		switch ($gender) {
			case 'M':
				define('_GENDER_M', ' selected="selected"');
				define('_GENDER_F', '');
				define('_GENDER_C', '');
				break;

			case 'F':
				define('_GENDER_M', '');
				define('_GENDER_F', ' selected="selected"');
				define('_GENDER_C', '');
				break;

			case 'C':
				define('_GENDER_M', '');
				define('_GENDER_F', '');
				define('_GENDER_C', ' selected="selected"');
				break;
		}

		define('_SURNAME', $surname); define('_FAMILY', $family); define('_CITY'     , $city);
		define('_STREET' , $street);  define('_ZIP'   , $zip);    define('_MAX_MAILS', $max);
		define('_COUNTRY', $country); define('_EMAIL' , $email);

		// Load template
		LOAD_TEMPLATE('admin_edit_user', false, bigintval(REQUEST_GET('uid')));
	}
} else {
	// Account does not exists!
	LOAD_TEMPLATE('admin_settings_saved', false, "<div class=\"admin_failed\">".sprintf(getMessage('ADMIN_MEMBER_404'), REQUEST_GET('uid'))."</div>");
}

// Free the result
SQL_FREERESULT($result_main);

//
?>