hasPriv("admin"))
{
errorpage("Insufficient privileges.");
exit;
}
// we want to delete a user
if($_REQUEST['action'] == "delete" && is_numeric($_REQUEST['userId']))
{
$oUser = new User($_REQUEST['userId']);
$oUser->delete();
}
// search form
echo html_frame_start("Users Management","400","",0)
?>
\n\n";
echo "\n";
echo " | Real name | \n";
echo " E-mail | \n";
echo " Creation date | \n";
echo " Last connected | \n";
echo " Roles | \n";
echo " Action | \n";
echo "
\n\n";
if(is_numeric($_REQUEST['iLimit']) && in_array($_REQUEST['sOrderBy'],array("email","realname","created")))
{
$sSearch = addslashes($_REQUEST['sSearch']);
$sQuery = "SELECT * FROM user_list
WHERE realname LIKE '%".$sSearch."%' OR email LIKE '%".$sSearch."%'
ORDER BY ".$_REQUEST['sOrderBy']."
LIMIT ".$_REQUEST['iLimit'];
$hResult = query_appdb($sQuery);
$i=0;
while($hResult && $oRow = mysql_fetch_object($hResult))
{
$oUser = new User($oRow->userid);
$sAreYouSure = "Are you sure that you want to delete user ".addslashes($oUser->sRealname)." ?";
echo "\n";
echo " | ".$oUser->sRealname." | \n";
echo " ".$oUser->sEmail." | \n";
echo " ".$oUser->sDateCreated." | \n";
echo " ".$oUser->sStamp." | \n";
echo " ";
if($oUser->hasPriv("admin")) echo "A";
if($oUser->isMaintainer()) echo "M";
echo " | \n";
echo " [userid."&sSearch=".$sSearch."&iLimit=".$_REQUEST['iLimit']."&sOrderBy=".$_REQUEST['sOrderBy']."\">edit] [userid."&sSearch=".$sSearch."&iLimit=".$_REQUEST['iLimit']."&sOrderBy=".$_REQUEST['sOrderBy']."&sSubmit=true\">delete] | \n";
echo "
\n\n";
}
}
echo "";
echo html_frame_end();
}
apidb_footer();
?>