Subversion Repositories personal-webbase

Rev

Rev 12 | Details | Compare with Previous | Last modification | View Log | RSS feed

Rev Author Line No. Line
12 daniel-mar 1 
<?php
2 
 
14 daniel-mar 3 
if (!defined('WBLEGAL')) die('Kann nicht ohne Personal WebBase ausgef&uuml;hrt werden.');
12 daniel-mar 4 
 
5 
  if ($aktion == 'lock')
6 
  {
7 
    $res = db_query("SELECT `gesperrt` FROM `".$mysql_zugangsdaten['praefix']."users` WHERE `id` = '".db_escape($id)."'");
8 
    $row = db_fetch($res);
9 
 
10 
    if ($row['gesperrt'] == '1')
11 
      db_query("UPDATE `".$mysql_zugangsdaten['praefix']."users` SET `gesperrt` = '0' WHERE `id` = '".db_escape($id)."'");
12 
    else
13 
      db_query("UPDATE `".$mysql_zugangsdaten['praefix']."users` SET `gesperrt` = '1' WHERE `id` = '".db_escape($id)."'");
14 
 
15 
    if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?modul='.urlencode($modul).'&seite=inhalt');
16 
  }
17 
 
18 
  if ($aktion == 'edit')
19 
  {
20 
    if ($f_gesperrt)
21 
      $f_gesp = '1';
22 
    else
23 
      $f_gesp = '0';
24 
    db_query("UPDATE `".$mysql_zugangsdaten['praefix']."users` SET `username` = '".db_escape($f_username)."', `personenname` = '".db_escape($f_personenname)."', `gesperrt` = '".db_escape($f_gesp)."', `email` = '".db_escape($f_email)."' WHERE `id` = '".db_escape($id)."'");
25 
    if ($f_neupwd) db_query("UPDATE `".$mysql_zugangsdaten['praefix']."users` SET `passwort` = '".md5($f_passwort)."' WHERE `id` = '".db_escape($id)."'"); // TODO: use sha3 hash, salted and peppered
26 
 
27 
    if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?modul='.urlencode($modul).'&seite=inhalt');
28 
  }
29 
 
30 
  if ($aktion == 'del')
31 
  {
32 
    db_query("DELETE FROM `".$mysql_zugangsdaten['praefix']."users` WHERE `id` = '".db_escape($id)."'");
33 
    if (db_affected_rows() > 0)
34 
      db_query("OPTIMIZE TABLE `".$mysql_zugangsdaten['praefix']."users`");
35 
 
36 
    if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?modul='.urlencode($modul).'&seite=inhalt');
37 
  }
38 
 
39 
?>