if (url_action("undelete")) {
//undelete user
db_query("UPDATE users SET is_active = 1, deleted_user = NULL, deleted_date = NULL, endDate = NULL, updated_user = {$_SESSION['user_id']}, updated_date = GETDATE() WHERE id = " . $_GET['id']);
url_query_drop("action");
} elseif (url_action("passwd")) {
db_query("UPDATE users SET password = NULL WHERE id = " . $_GET['id']);
if ($_GET['id'] == $_SESSION['user_id']) {
//if is user, make em reset pw now
$_SESSION['password'] = true;
} else {
//otherwise send email
emailPassword($_GET['id']);
}
url_query_drop("action");
} elseif (url_action("invite")) {
emailInvite($_GET['id']);
url_query_drop("action");
}
url_query_require();
echo drawTop();
$r = db_grab('SELECT
u.firstname,
u.lastname,
u.nickname,
u.bio' . langExt() . ' bio,
u.email,
' . db_pwdcompare("", "u.password") . ' password,
u.phone,
u.lastlogin,
u.title' . langExt() . ' title,
f.name office,
<?php
include "include.php";
if (url_action("deletereq")) {
db_query("DELETE FROM users_requests WHERE id = " . $_GET["id"]);
url_query_drop("action,id");
} elseif (url_action("invite")) {
$result = db_query('SELECT id FROM users WHERE lastlogin IS NULL AND is_active = 1');
while ($r = db_fetch($result)) {
emailInvite($r['id']);
}
url_query_drop("action");
}
echo drawTop();
echo drawJumpToStaff();
echo drawTableStart();
echo drawHeaderRow("", 3);
$result = db_query("SELECT id, lastname, firstname, created_date FROM users_requests WHERE is_active = 1 ORDER BY created_date DESC");
if (db_found($result)) {
?>
<tr>
<th width="70%">Name</th>
<th width="30%" class="r">Invited On</th>
<th></th>
</tr>
<?php
while ($r = db_fetch($result)) {
?>
<tr>
<td><a href="add_edit.php?requestID=<?php
echo $r["id"];
} else {
db_query('INSERT INTO users_to_modules ( user_id, module_id, is_admin ) VALUES ( ' . $id . ', ' . $m . ', 1 )');
}
}
db_query('DELETE FROM users_to_modulettes WHERE user_id = ' . $id);
$modulettes = array_checkboxes('modulettes');
foreach ($modulettes as $m) {
//if (!db_grab('SELECT COUNT(*) FROM users_to_modulettes WHERE user_id = ' . $id . ' AND modulette_id = ' . $m)) {
db_query('INSERT INTO users_to_modulettes ( user_id, modulette_id ) VALUES ( ' . $id . ', ' . $m . ' )');
//}
}
}
}
//send invite
if (!$editing) {
emailInvite($id);
}
if (url_id() == user()) {
//todo, fix this and make it more user-update dependent
$_SESSION['update_days'] = 0;
$_SESSION['updated_date'] = 'foo';
}
//clean up users requests
if (url_id('requestID')) {
db_delete('users_requests', $_GET['requestID']);
error_debug('deleted user request', __FILE__, __LINE__);
}
url_change('view.php?id=' . $id);
} elseif (url_id('requestID')) {
$values = db_grab('SELECT * FROM users_requests WHERE id = ' . $_GET['requestID']);
} else {
