include_once "./classes/classListbox.php";
#include_once('./classes/main/security.class.php');
#db users
$usrSQL = "SELECT username FROM sionapros_users WHERE account_status = 'Active' AND username != 'SADMIN'";
$user = new classListBox($db, "users");
$user->set_query($usrSQL, "username", "username");
$user->set_postback(true);
$chUser = $user->display();
$smarty->assign('user', $chUser);
#their profiles
$profSQL = "SELECT user.profile_id,profiles.profile FROM sionapros_user_profiles AS user INNER JOIN sionapros_profiles AS profiles ON";
$profSQL .= " user.profile_id = profiles.profile_id WHERE user.username = '******'";
$profiles = new classListBox($db, "userprofiles");
$profiles->set_query($profSQL, "profile_id", "profile");
$profiles->set_postback(true);
$userProf = $profiles->display();
$smarty->assign('userProf', $userProf);
if ($profiles->get_selectedItemKey() != '') {
    $smarty->assign('button', 'visible');
    unset($_SESSION['userprofiles']);
}
if (!isset($_POST['submit'])) {
    // new form, we (re)set the session data
    SmartyValidate::connect($smarty, true);
    // register our validators
    SmartyValidate::register_validator('usr', 'users', 'notEmpty');
    SmartyValidate::register_validator('prof', 'userprofiles', 'notEmpty');
    // display form
} else {
    // validate after a POST
<?php

include_once "./classes/classListbox.php";
include_once './classes/security.class.php';
$usrSQL = "SELECT username FROM sionapros_users WHERE account_status = 'Active' AND username != 'SADMIN'";
$user = new classListBox($db, "dbusers");
$user->set_query($usrSQL, "username", "username");
$user->set_postback(true);
$chUser = $user->display();
$smarty->assign('user', $chUser);
$security = new Security($db);
$profAssigned = $security->userProfiles($user->get_selectedItemKey());
if (count($profAssigned) == 0) {
    $msg = 'none';
}
$smarty->assign('msg', $msg);
$smarty->assign('profiles', $profAssigned);
$content = $smarty->fetch('./security/tm0.security.user_profile.tpl.html');