Esempio n. 1
0
 echo thorderby('Username', 'Username', $orderby, $order);
 echo thorderby('Userfirstname', 'First Name', $orderby, $order);
 echo thorderby('Userlastname', 'Last Name', $orderby, $order);
 echo thorderby('Usercompanyname', 'Company', $orderby, $order);
 echo thorderby('Userphysicalcity', 'City', $orderby, $order);
 echo thorderby('Userphysicalstateprovince', 'State', $orderby, $order);
 echo thorderby('Userphone1', 'Phone', $orderby, $order);
 echo thorderby('Useremail', 'Email', $orderby, $order);
 echo "<td width='42px' align=\"right\" nowrap>\n";
 echo "\t<a href='signup.php' alt='add'><img src='" . $v_icon_add . "' width='17' height='17' border='0' alt='add'></a>\n";
 echo "</td>\n";
 echo "</tr>";
 //echo "<tr><td colspan='100%'><img src='/images/spacer.gif' width='100%' height='1' style='background-color: #BBBBBB;'></td></tr>\n";
 foreach ($result as $row) {
     //print_r( $row );
     if (!ifgroup("superadmin") && ifsuperadmin($superadminlist, $row[username])) {
         //allow superadmins to view all users
     } else {
         echo "<tr>\n";
         //echo "<td valign='top'>".$row[useroptional2]."</td>";
         //echo "<td valign='top'>".$row[useroptional1]."</td>";
         //if (ifgroup("admin")) {
         //    echo "<td valign='top'><a href='usersupdate.php?id=".$row[id]."'>".$row[id]."</a></td>";
         //}
         if (ifgroup("admin")) {
             echo "<td valign='top' class='" . $rowstyle[$c] . "'><a href=''>" . $row[username] . "</a></td>";
         }
         //echo "<td valign='top'>".$row[password]."</td>";
         echo "<td valign='top' class='" . $rowstyle[$c] . "'>" . $row[userfirstname] . "&nbsp;</td>";
         echo "<td valign='top' class='" . $rowstyle[$c] . "'>" . $row[userlastname] . "&nbsp;</td>";
         echo "<td valign='top' class='" . $rowstyle[$c] . "'>" . $row[usercompanyname] . "&nbsp;</td>";
Esempio n. 2
0
$sql = "";
$sql .= "select * from v_users ";
$sql .= "where v_id = '{$v_id}' ";
$sql .= "and id = '{$id}' ";
$prepstatement = $db->prepare(check_sql($sql));
$prepstatement->execute();
$result = $prepstatement->fetchAll();
foreach ($result as &$row) {
    $username = $row["username"];
    break;
    //limit to 1 row
}
unset($prepstatement);
//required to be a superadmin to delete a member of the superadmin group
$superadminlist = superadminlist($db);
if (ifsuperadmin($superadminlist, $username)) {
    if (!ifgroup("superadmin")) {
        echo "access denied";
        return;
    }
}
//if (ifpermission("delete")) {
$sqldelete = "delete from v_users ";
$sqldelete .= "where v_id = '{$v_id}' ";
$sqldelete .= "and id = '{$id}' ";
//echo $sqldelete;
if (!$db->exec($sqldelete)) {
    //echo $db->errorCode() . "<br>";
    $info = $db->errorInfo();
    print_r($info);
    // $info[0] == $db->errorCode() unified error code