<?php $title = 'Team management'; /* <Team> */ $b2varstoreset = array('action','standalone','redirect','profile'); for ($i=0; $i<count($b2varstoreset); $i += 1) { $b2var = $b2varstoreset[$i]; if (!isset($$b2var)) { if (empty($HTTP_POST_VARS["$b2var"])) { if (empty($HTTP_GET_VARS["$b2var"])) { $$b2var = ''; } else { $$b2var = $HTTP_GET_VARS["$b2var"]; } } else { $$b2var = $HTTP_POST_VARS["$b2var"]; } } } switch ($action) { case 'promote': $standalone = 1; require_once('b2header.php'); if (empty($HTTP_GET_VARS["prom"])) { header('Location: b2team.php'); } $id = $HTTP_GET_VARS["id"]; $prom = $HTTP_GET_VARS["prom"]; $user_data = get_userdata($id); $usertopromote_level = $user_data[13]; if ($user_level <= $usertopromote_level) { die('Can’t change the level of an user whose level is higher than yours.'); } if ('up' == $prom) { $sql="UPDATE $tableusers SET user_level=user_level+1 WHERE ID = $id"; } elseif ('down' == $prom) { $sql="UPDATE $tableusers SET user_level=user_level-1 WHERE ID = $id"; } $result = mysql_query($sql) or die("Couldn't change $id's level."); header('Location: b2team.php'); break; case 'delete': $standalone = 1; require_once('b2header.php'); $id = $HTTP_GET_VARS["id"]; if (!$id) { header('Location: b2team.php'); } $user_data = get_userdata($id); $usertodelete_level = $user_data[13]; if ($user_level <= $usertodelete_level) die('Can’t delete an user whose level is higher than yours.'); $sql="DELETE FROM $tableusers WHERE ID = $id"; $result = mysql_query($sql) or die("Couldn’t delete user #$id."); $sql="DELETE FROM $tableposts WHERE post_author = $id"; $result = mysql_query($sql) or die("Couldn’t delete user #$id’s posts."); header('Location: b2team.php'); break; default: $standalone = 0; include ('b2header.php'); ?> <div class="wrap"><p>Click on an user’s login name to see his complete profile.<br /> To edit your profile, click on your login name.</p> </div> <div class="wrap"> <h3>Active users</h3> <table cellpadding="5" cellspacing="0"> <tr> <td class="tabletoprow">ID</td> <td class="tabletoprow">Nickname</td> <td class="tabletoprow">Name</td> <td class="tabletoprow">E-mail</td> <td class="tabletoprow">URL</td> <td class="tabletoprow">Level</td> <?php if ($user_level > 3) { ?> <td class="tabletoprow">Login</td> <?php } ?> </tr> <?php $request = "SELECT * FROM $tableusers WHERE user_level>0 ORDER BY ID"; $result = mysql_query($request); while($row = mysql_fetch_object($result)) { $user_data = get_userdata2($row->ID); echo "<tr>\n<!--".$user_data["user_login"]."-->\n"; $email = $user_data["user_email"]; $url = $user_data["user_url"]; $bg1 = ($user_data["user_login"] == $user_login) ? "style=\"background-image: url('b2-img/b2button.gif');\"" : "bgcolor=\"#dddddd\""; $bg2 = ($user_data["user_login"] == $user_login) ? "style=\"background-image: url('b2-img/b2button.gif');\"" : "bgcolor=\"#eeeeee\""; echo "<td $bg1>".$user_data["ID"]."</td>\n"; echo "<td $bg2><b><a href=\"javascript:profile(".$user_data["ID"].")\">".$user_data["user_nickname"]."</a></b></td>\n"; echo "<td $bg1>".$user_data["user_firstname"]." ".$user_data["user_lastname"]."</td>\n"; echo "<td $bg2> <a href=\"mailto:$email\" title=\"e-mail: $email\"><img src=\"b2-img/email.gif\" border=\"0\" alt=\"e-mail: $email\" /></a> </td>"; echo "<td $bg1> "; if (($user_data["user_url"] != "http://") and ($user_data["user_url"] != "")) echo "<a href=\"$url\" target=\"_blank\" title=\"website: $url\"><img src=\"b2-img/url.gif\" border=\"0\" alt=\"website: $url\" /></a> "; echo "</td>\n"; echo "<td $bg2>".$user_data["user_level"]; if (($user_level >= 2) and ($user_level > ($user_data["user_level"] + 1))) echo " <a href=\"b2team.php?action=promote&id=".$user_data["ID"]."&prom=up\">+</a> "; if (($user_level >= 2) and ($user_level > $user_data["user_level"]) and ($user_data["user_level"] > 0)) echo " <a href=\"b2team.php?action=promote&id=".$user_data["ID"]."&prom=down\">-</a> "; echo "</td>\n"; if ($user_level > 3) { echo "<td $bg1>".$user_data["user_login"]."</td>\n"; } echo "</tr>\n"; } ?> </table> </div> <?php $request = " SELECT * FROM $tableusers WHERE user_level=0 ORDER BY ID"; $result = mysql_query($request); if (mysql_num_rows($result)) { ?> <div class="wrap"> <h3>Inactive users (level 0)</h3> <table cellpadding="5" cellspacing="0"> <tr> <td class="tabletoprow">ID</td> <td class="tabletoprow">Nickname</td> <td class="tabletoprow">Name</td> <td class="tabletoprow">E-mail</td> <td class="tabletoprow">URL</td> <td class="tabletoprow">Level</td> <?php if ($user_level > 3) { ?> <td class="tabletoprow">Login</td> <?php } ?> </tr> <?php while($row = mysql_fetch_object($result)) { $user_data = get_userdata2($row->ID); echo "<tr>\n<!--".$user_data["user_login"]."-->\n"; $email = $user_data["user_email"]; $url = $user_data["user_url"]; $bg1 = ($user_data["user_login"] == $user_login) ? "style=\"background-image: url('b2-img/b2button.gif');\"" : "bgcolor=\"#dddddd\""; $bg2 = ($user_data["user_login"] == $user_login) ? "style=\"background-image: url('b2-img/b2button.gif');\"" : "bgcolor=\"#eeeeee\""; echo "<td $bg1>".$user_data["ID"]."</td>\n"; echo "<td $bg2><b><a href=\"javascript:profile(".$user_data["ID"].")\">".$user_data["user_nickname"]."</a></b></td>\n"; echo "<td $bg1>".$user_data["user_firstname"]." ".$user_data["user_lastname"]."</td>\n"; echo "<td $bg1> <a href=\"mailto:".antispambot($email)."\" title=\"e-mail: ".antispambot($email)."\"><img src=\"b2-img/email.gif\" border=\"0\" alt=\"e-mail: ".antispambot($email)."\" /></a> </td>"; echo "<td $bg2> "; if (($user_data["user_url"] != "http://") and ($user_data["user_url"] != "")) echo "<a href=\"$url\" target=\"_blank\" title=\"website: $url\"><img src=\"b2-img/url.gif\" border=\"0\" alt=\"website: $url\" /></a> "; echo "</td>\n"; echo "<td $bg1>".$user_data["user_level"]; if ($user_level >= 2) echo " <a href=\"b2team.php?action=promote&id=".$user_data["ID"]."&prom=up\">+</a> "; if ($user_level >= 3) echo " <a href=\"b2team.php?action=delete&id=".$user_data["ID"]."\" style=\"color:red;font-weight:bold;\">X</a> "; echo "</td>\n"; if ($user_level > 3) { echo "<td $bg2>".$user_data["user_login"]."</td>\n"; } echo "</tr>\n"; } ?> </table> </div> <?php } if ($user_level >= 3) { ?> <div class="wrap"> <p>To delete an user, bring his level to zero, then click on the red X.<br /> <strong>Warning:</strong> deleting an user also deletes all posts made by this user. </p> </div> <?php } break; } /* </Team> */ include('b2footer.php'); ?>