| Server IP : 134.29.175.74 / Your IP : 216.73.216.160 Web Server : nginx/1.10.2 System : Windows NT CST-WEBSERVER 10.0 build 19045 (Windows 10) i586 User : Administrator ( 0) PHP Version : 7.1.0 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/nginx/html/Scheduler/admin/user/ |
Upload File : |
<?
// admin/user/userGroupForm.phpinc
t_Begin(); // Begin TRACKing included file.
// Get the userId for this user.
if ($f['userId']) {
// $f['userId'] set. This is an edit form. Load form_user data from database.
$query = "
SELECT userId
FROM user
WHERE userId = ".$f['userId']."
";
$userResult = query_do($query);
$userCount = $GLOBALS['_QUERY']['count'];
if ($userCount) {
$userInfo = query_row($userResult);
$f['userId'] = $userInfo['userId'];
} else {
// There was no record for $f['userId']. This is an error.
?>
<span class="bold error">ERROR!. No record for $f['userId']=<?=$f['userId']?> found.</span><br>
<span class="bold error">Please contact the site administrator<? if (isset($_SESSION['APP']['ADMIN']['email'])) { echo ' at '.$_SESSION['APP']['ADMIN']['email']; } else { echo '.'; } ?>.</span><br>
<?
}
}
// Get groups the user is in.
$query = "
SELECT userpermissionId,
userpermissionName,
groupDescription
FROM `userpermission`
WHERE userpermissionId IN (
SELECT userpermissionId
FROM user_userpermission
WHERE userId = ".$f['userId']."
)
ORDER BY userpermissionName
";
$userInGroupResult = query_do($query);
$userInGroupCount = $GLOBALS['_QUERY']['count'];
#if ($userInGroupCount) { #d_Var('$userInGroupResult',$userInGroupResult); } else { echo "No groups<br>\n"; }
// Get groups the user is not in.
$query = "
SELECT userpermissionId,
userpermissionName,
groupDescription
FROM `userpermission`
";
if ($userInGroupCount) {
$query .= "
WHERE userpermissionId NOT IN (
SELECT userpermissionId
FROM user_userpermission
WHERE userId = ".$f['userId']."
)
";
}
$query .= "
ORDER BY userpermissionName
";
$userNotInGroupResult = query_do($query);
$userNotInGroupCount = $GLOBALS['_QUERY']['count'];
#if ($userNotInGroupCount) { #d_Var('$userNotInGroupResult',$userNotInGroupResult); } else { echo "No groups<br>\n"; }
?>
<div id=usergroupdiv style="float:left">
<fieldset><legend><?=userName($f['userId'])?>'s groups</legend>
<form name="form_usergroup" id="form_usergroup" action="<?=php_self()?>" method="post">
<input type="hidden" name="uuid" value="<?=uuid()?>">
<input type="hidden" name="form" value="form_usergroup">
<input type="hidden" name="userId" id="userId" value="<?=htmlSafe($f['userId'])?>">
<table>
<tr>
<td style="text-align:center;"> <!-- Groups the user is in -->
<select name="inGroup[]" multiple="multiple" size="5">
<?
if ($userInGroupCount) {
query_seek($userInGroupResult, 0);
while ($user_userpermissionInfo = query_row($userInGroupResult)) {
?>
<option value="<?=$user_userpermissionInfo['userpermissionId']?>"<? if ( $f['userId'] == 1 && $user_userpermissionInfo['userpermissionId'] == 1 ) { ?> class="disabled"<? } ?> title="<?=$user_userpermissionInfo['groupDescription']?>"<? if ( $f['userId'] == 1 && $user_userpermissionInfo['userpermissionId'] == 1 ) { ?> onClick="alert('The Admin user cannot be removed from the Admin group'); this.selected=false;"<? } ?>><?=$user_userpermissionInfo['userpermissionName']?></option>
<?
}
}
?>
</select>
<br>
<input type="submit" name="task" id="task" value="Remove from group">
</td>
<td style="text-align:center;"> <!-- Groups the user is NOT in -->
<select name="notGroup[]" multiple="multiple" size="5">
<?
if ($userNotInGroupCount) {
query_seek($userNotInGroupResult, 0);
while ($user_userpermissionInfo = query_row($userNotInGroupResult)) {
?>
<option value="<?=$user_userpermissionInfo['userpermissionId']?>" title="<?=$user_userpermissionInfo['groupDescription']?>"><?=$user_userpermissionInfo['userpermissionName']?></option>
<?
}
}
?>
</select>
<br>
<input type="submit" name="task" id="task" value="Add to group">
</td>
</tr>
<tr>
<td colspan="2" style="text-align:center;">
<?
if ($f['form'] == 'form_usergroup') {
?>
<input type="submit" name="task" value="Done">
<?
} else {
?>
<input type="submit" name="task" value="Cancel">
<?
}
?>
</td>
</tr>
</table>
</form>
</fieldset>
</div><!-- id=usergroupdiv -->
<?
t_End(); // End TRACKing included file.
?>