<?php
/*===================================================+
|| # Woodpecker Housekeeping
|+====================================================+
|| # Copyright © 2008 SuperFun. All rights reserved.
|| # http://www.superfunn.nl/
|+===================================================+
|| # Notice: This is free software.
|+===================================================+
|| # Versions.
|| # Housekeeping version: V3.5
|| # Version of this file: V1.6 (users.php)
|+===================================================+
||
|| # Usage of this page:
|| # User management.
||
|+===================================================*/

include('inc/header.php');
if(min_fuse('housekeeping_usermanagement', $my_id) OR min_fuse('housekeeping_hobbamanagement', $my_id) OR min_fuse('housekeeping_xmanagement', $my_id)){
	if($_GET['edit']){
	$a = mysql_query("SELECT * FROM users WHERE id = '".$_GET['edit']."' LIMIT 1");
		if(mysql_num_rows($a) < 1){
			echo 'Deze gebruiker bestaat niet';
		}else{
			$cc = mysql_fetch_array($a);
			if($_POST['submit']){
				if(in_array($_GET['edit'], $owner_id) AND !in_array($my_id, $owner_id)){
					echo 'The user has been saved';
				}elseif($_POST['role'] > usr($my_id, 'role') AND $my_id == $cc['id']){
					echo 'Je kan je zelf niet hoger zetten';
				}else{
					$pr = false;
					if($_GET['edit'] == $my_id){
						$pr = true;
					}elseif(min_fuse('housekeeping_usermanagement', $my_id)){
						$pr = true;
					}elseif(min_fuse('housekeeping_hobbamanagement', $my_id)){
						if($_POST['role'] == "1" OR $_POST['role'] == "3" OR $_POST['role'] == "4"){
							$pr = true;
						}
					}elseif(min_fuse('housekeeping_xmanagement', $my_id)){
						if($_POST['role'] == "1" OR $_POST['role'] == "2"){
							$pr = true;
						}
					}
				}
				if($pr == true){
					if($cc['role'] >= usr($my_id, 'role') AND $my_id != $cc['id']){
						echo 'You cannot edit someone if they are the same rank as you or higher.';
					}else{
						mysql_query("UPDATE users SET role = '".beveilig($_POST['role'])."' WHERE id = '".beveilig($_GET['edit'])."' LIMIT 1");
						mysql_query("UPDATE users SET figure = '".beveilig($_POST['figure'])."' WHERE id = '".beveilig($_GET['edit'])."' LIMIT 1");
						mysql_query("UPDATE users SET sex = '".beveilig($_POST['sex'])."' WHERE id = '".beveilig($_GET['edit'])."' LIMIT 1");
						mysql_query("UPDATE users SET motto = '".beveilig(fix($_POST['motto']))."' WHERE id = '".beveilig($_GET['edit'])."' LIMIT 1");
						mysql_query("UPDATE users SET motto_messenger = '".beveilig(fix($_POST['motto_messenger']))."' WHERE id = '".beveilig($_GET['edit'])."' LIMIT 1");
						mysql_query("UPDATE users SET tickets = '".beveilig($_POST['tickets'])."' WHERE id = '".beveilig($_GET['edit'])."' LIMIT 1");
						mysql_query("UPDATE users SET film = '".beveilig($_POST['film'])."' WHERE id = '".beveilig($_GET['edit'])."' LIMIT 1");
						mysql_query("UPDATE users SET club_daysleft = '".beveilig($_POST['club_daysleft'])."' WHERE id = '".beveilig($_GET['edit'])."' LIMIT 1");
						mysql_query("UPDATE users SET club_monthsleft = '".beveilig($_POST['club_monthsleft'])."' WHERE id = '".beveilig($_GET['edit'])."' LIMIT 1");
						mysql_query("UPDATE users SET club_monthsexpired = '".beveilig($_POST['club_monthsexpired'])."' WHERE id = '".beveilig($_GET['edit'])."' LIMIT 1");
						mysql_query("UPDATE users SET email = '".beveilig($_POST['email'])."' WHERE id = '".beveilig($_GET['edit'])."' LIMIT 1");
						mysql_query("UPDATE users SET dob = '".beveilig($_POST['dob'])."' WHERE id = '".beveilig($_GET['edit'])."' LIMIT 1");
						logboek("bewerkte gebruiker ".$cc['username'], "lol");
						echo 'The user has been saved.';
					}
				}else{
					echo 'Something went wrong.';
				}
			}else{
				if(in_array($cc['id'], $owner_id) AND !in_array($my_id, $owner_id)){
					echo 'This user cannot be edited.';
				}else{
					$pr = false;
					if($cc['id'] == $my_id){
						$pr = true;
					}elseif(min_fuse('housekeeping_usermanagement', $my_id)){
						$pr = true;
					}elseif(min_fuse('housekeeping_hobbamanagement', $my_id)){
						if($cc['role'] == "1" OR $cc['role'] == "3" OR $cc['role'] == "4"){
							$pr = true;
						}
					}elseif(min_fuse('housekeeping_xmanagement', $my_id)){
						if($cc['role'] == "1" OR $cc['role'] == "2"){
							$pr = true;
						}
					}
					if($pr == true){
						echo '<form method="post" action="users.php?edit='.$_GET['edit'].'">';
						echo 'ID: <input type="text" value="'.$cc['id'].'" READONLY><br>';
						echo 'Name <input type="text" value="'.$cc['username'].'" READONLY><br>';
						echo 'Rank: <SELECT	NAME="role"><OPTION value="7"'; if($cc['role'] == "7"){ echo ' SELECTED'; } echo '>'.role('7').'</OPTION><OPTION value="6"'; if($cc['role'] == "6"){ echo ' SELECTED'; } echo '>'.role('6').'</OPTION><OPTION value="5"'; if($cc['role'] == "5"){ echo ' SELECTED'; } echo '>'.role('5').'</OPTION><OPTION value="4"'; if($cc['role'] == "4"){ echo ' SELECTED'; } echo '>'.role('4').'</OPTION><OPTION value="3"'; if($cc['role'] == "3"){ echo ' SELECTED'; } echo '>'.role('3').'</OPTION><OPTION value="2"'; if($cc['role'] == "2"){ echo ' SELECTED'; } echo '>'.role('2').'</OPTION><OPTION value="1"'; if($cc['role'] == "1"){ echo ' SELECTED'; } echo '>'.role('1').'</OPTION><OPTION value="0"'; if($cc['role'] == "0"){ echo ' SELECTED'; } echo '>'.role('0').'</OPTION></SELECT><br>';
						echo 'Registered: <input type="text" value="'.$cc['signedup'].'" READONLY><br>';
						echo 'Figure: <input type="text" name="figure" value="'.$cc['figure'].'"><br>';
						echo 'Sex: <input type="text" name="sex" value="'.$cc['sex'].'"><br>';
						echo 'Motto: <input type="text" name="motto" value="'.$cc['motto'].'"><br>';
						echo 'Motto console: <input type="text" name="motto_messenger" value="'.$cc['motto_messenger'].'"><br>';
						echo 'Credits: <input type="text" name="credits" value="'.$cc['credits'].'" disabled="disabled"><br>';
						echo 'Tickets: <input type="text" name="tickets" value="'.$cc['tickets'].'"><br>';
						echo 'Film tickets <input type="text" name="film" value="'.$cc['film'].'"><br>';
						echo 'Current badge: <input type="text" value="'.$cc['currentbadge'].'" READONLY><br>';
						echo 'Last Online: <input type="text" name="lastactivity" value="'.$cc['lastactivity'].'" READONLY><br>';
						echo 'Club days left: <input type="text" name="club_daysleft" value="'.$cc['club_daysleft'].'"><br>';
						echo 'Club months left: <input type="text" name="club_monthsleft" value="'.$cc['club_monthsleft'].'"><br>';
						echo 'Club months expired: <input type="text" name="club_monthsexpired" value="'.$cc['club_monthsexpired'].'"><br>';
						echo 'Email: <input type="text" name="email" value="'.$cc['email'].'"><br>';
						echo 'DOB: <input type="text" name="dob" value="'.$cc['dob'].'"><br>';
						echo '<input type="submit" name="submit" value="Save User">';
						echo '</form>';
					}else{
						echo 'User Saved';
					}
				}
			}
		}
	}elseif($_GET['search']){
		if(!empty($_GET['search'])){
			if($_GET['type'] == "username"){
				$a = mysql_query("SELECT * FROM users WHERE username LIKE '%".beveilig($_GET['search'])."%' ORDER BY role, id");
			}else{
				$a = mysql_query("SELECT * FROM users WHERE id = '".beveilig($_GET['search'])."' ORDER BY role, id");
			}
			if(mysql_num_rows($a) < 1){
				echo 'Er is geen gebruiker gevonden met deze naam';
			}else{
				echo '<table border="1">';
				echo '<tr>';
				echo '<td><b>ID</b></td>';
				echo '<td><b>Name</b></td>';
				echo '<td><b>Rank</b></td>';
				echo '<td><b>Edit</b></td>';
				echo '</tr>';
				while($b = mysql_fetch_assoc($a)){
					echo '<tr>';
					echo '<td>'.$b['id'].'</td>';
					echo '<td>'.$b['username'].'</td>';
					echo '<td>'.role($b['role']).'</td>';
					echo '<td><a href="./users.php?edit='.$b['id'].'" target="_self"><img src="images/edit.gif" border="0"></a></td>';
					echo '</tr>';
				}
				echo '</table>';
			}
		}else{
			echo 'You need to search for something....';
		}
	}else{
		echo '<form method="get" action="./users.php">';
		echo 'Search user: <input type="text" name="search">';
		echo '<SELECT NAME="type"><OPTION value="username" SELECTED>Name</OPTION><OPTION value="userid">ID</OPTION></SELECT>';
		echo '<input type="submit" value="Search">';
		echo '</form>';
	}
}else{
	echo $acc_denied;
}
include('inc/footer.php');
?>