📄 new_user.php3
字号:
<?php$debug=0;/* * Session Management for PHP * * Copyright (c) 1998-2000 Jan Legenhausen, Kristian Koehntopp * * $Id: new_user.php3,v 1.2 2000/07/12 18:22:32 kk Exp $ * * NOTE: This script requires that you have set up your PHPLIB * with working Auth and Perm subclasses and that your * $perm->permissions array includes a permission named * "admin". If you are using the example, this will * be the case. * * This script is capable of editing the user database. It requires * an authenticated user. If the user has admin privilege, he can * edit all users. If the user has less privilege, he can view all * users, but not the passwords and can only change the own password. * * The script generates forms that submit values back to the script. * Consequently the script below has three parts: * * 1. A section where utility functions are defined. * 2. A section that is called only after the submit. * 3. And a final section that is called when the script runs first time and * every time after the submit. * * Scripts organized in this way will allow the user perpetual * editing and they will reflect submitted changes immediately * after a form submission. * * We consider this to be the standard organization of table editor * scripts. * */ // include this if you're not using the autoprepend feature## include("prepend.php3");## straight from the examples... page_open(array("sess" => "Example_Session", "auth" => "Example_Auth", "perm" => "Example_Perm"));## Set this to something, just something different... $hash_secret = "Jabberwocky...";###### Utility functions##### my_error($msg):#### Display error messages function my_error($msg) {?> <table border=0 bgcolor="#eeeeee" align="center" cellspacing=0 cellpadding=4 width=540> <tr> <td><font color=#FF2020>Error: <?php print $msg ?></font></td> </tr> </table> <BR><?php}## my_msg($msg):#### Display success messages function my_msg($msg) {?> <table border=0 bgcolor="#eeeeee" align="center" cellspacing=0 cellpadding=4 width=540> <tr> <td><font color=#008000>O.K.: <?php print $msg ?></font></td> </tr> </table> <br><?php}?><html> <head><!--// here i include my personal meta-tags; one of those might be useful:// <META HTTP-EQUIV="REFRESH" CONTENT="<?php print $auth->lifetime*60;?>; URL=logoff.html">// <?php include($_PHPLIB["libdir"] . "meta.inc");?>--> <title>User Admin</title> <style type="text/css"> <!-- body { font-family: Arial, Helvetica, sans-serif } td { font-family: Arial, Helvetica, sans-serif } th { font-family: Arial, Helvetica, sans-serif } --> </style> </head><body bgcolor="#ffffff"><h1>User Administration</h1><?php###### Submit Handler##### Get a database connection$db = new DB_Example;// Check if there was a submissionwhile (is_array($HTTP_POST_VARS) && list($key, $val) = each($HTTP_POST_VARS)) { if(debug == 1) { printf("key +$key+, val +$val+<br>"); } switch ($key) { case "create": // Create a new user if (!$perm->have_perm("admin")) { // Do we have permission to do so? my_error("You do not have permission to create users."); break; } if (empty($username) || empty($password)) { // Do we have all necessary data? my_error("Please fill out <B>Username</B> and <B>Password</B>!"); break; } /* Does the user already exist? NOTE: This should be a transaction, but it isn't... */ $db->query("select * from auth_user where username='$username'"); if ($db->nf()>0) { my_error("User <B>$username</B> already exists!"); break; } // Create a uid and insert the user... $u_id=md5(uniqid($hash_secret)); $permlist = addslashes(implode($perms,",")); $query = "insert into auth_user values('$u_id','$username','$password','$permlist')"; $db->query($query); if ($db->affected_rows() == 0) { my_error("<b>Failed:</b> $query"); break; } my_msg("User \"$username\" created.<BR>"); break; case "u_edit": // Change user parameters if($debug == 1) printf("u_edit, u_id +%s+<br>", $u_id); if (!$perm->have_perm("admin")) { // user is not admin if($auth->auth["uid"] == $u_id) { // user changes his own account $query = "update auth_user set password='$password' where user_id='$u_id'"; $db->query($query); if ($db->affected_rows() == 0) { my_error("<b>Failed:</b> $query"); break; } my_msg("Password of ". $auth->auth["uname"] ." changed.<BR>"); } else { my_error("You do not have permission to change users."); } } else { // user is admin if (empty($username) || empty($password)) { // Do we have all necessary data? my_error("Please fill out <B>Username</B> and <B>Password</B>!"); break; } // Update user information. $permlist = addslashes(implode($perms,",")); $query = "update auth_user set username='$username', password='$password', perms='$permlist' where user_id='$u_id'"; $db->query($query); if ($db->affected_rows() == 0) { my_error("<b>Failed:</b> $query"); break; } my_msg("User \"$username\" changed.<BR>"); } break; case "u_kill": // Do we have permission to do so? if (!$perm->have_perm("admin")) { my_error("You do not have permission to delete users."); break; } // Delete that user. $query = "delete from auth_user where user_id='$u_id' and username='$username'"; $db->query($query); if ($db->affected_rows() == 0) { my_error("<b>Failed:</b> $query"); break; } my_msg("User \"$username\" deleted.<BR>"); break; default: if(debug == 1) printf("default switch: u_id: .$u_id. <br>"); break; }}/* Output user administration forms, including all updated information, if we come here after a submission...*/?><table border=0 bgcolor="#eeeeee" align="center" cellspacing=2 cellpadding=4 width=540> <tr valign=top align=left> <th>Username</th> <th>Password</th> <th>Level</th> <th align=right>Action</th> </tr><?php if ($perm->have_perm("admin")): ?> <!-- create a new user --> <form method="post" action="<?php $sess->pself_url() ?>"> <tr valign=middle align=left> <td><input type="text" name="username" size=12 maxlength=32 value=""></td> <td><input type="test" name="password" size=12 maxlength=32 value=""></td> <td><?php print $perm->perm_sel("perms","user");?></td> <td align=right><input type="submit" name="create" value="Create User"></td> </tr> </form><?php endif; ## Traverse the result set $db->query("select * from auth_user order by username"); while ($db->next_record()):?> <!-- existing user --> <form method="post" action="<?php $sess->pself_url() ?>"> <tr valign=middle align=left><?php if ($perm->have_perm("admin")): ?> <td><input type="text" name="username" size=12 maxlength=32 value="<?php $db->p("username") ?>"></td> <td><input type="text" name="password" size=12 maxlength=32 value="<?php $db->p("password") ?>"></td> <td><?php print $perm->perm_sel("perms", $db->f("perms")) ?></td> <td align=right> <input type="hidden" name="u_id" value="<?php $db->p("user_id") ?>"> <input type="submit" name="u_kill" value="Kill"> <input type="submit" name="u_edit" value="Change"> </td><?php elseif ($auth->auth["uname"] == $db->f("username")): ?> <td><?php $db->p("username") ?></td> <td><input type="text" name="password" size=12 maxlength=32 value="<?php $db->p("password") ?>"></td> <td><?php $db->p("perms") ?></td> <td align=right> <input type="hidden" name="u_id" value="<?php $db->p("user_id") ?>"> <input type="submit" name="u_edit" value="Change"> </td> <?php else: ?> <td><?php $db->p("username") ?></td> <td>**********</td> <td><?php $db->p("perms") ?></td> <td align=right> </td><?php endif; ?> </tr> </form><?php endwhile;?></table><?php page_close();?></body></html>⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -