1 files changed, 109 insertions, 0 deletions
diff --git a/modules/usermanagement/module.inc.php b/modules/usermanagement/module.inc.php
new file mode 100644
index 00000000..01b5f755
--- /dev/null
+++ b/modules/usermanagement/module.inc.php
@@ -0,0 +1,109 @@
+<?php
+
+class Page_Usermanagement extends Page
+{
+	private $page;
+	private $deb;
+	
+	protected function doPreprocess()
+	{
+		User::load();
+
+		$p = Request::get('page');
+		if($p != false)
+			$this->page = $p;
+		else
+			$this->page = 1;
+
+		switch(Request::post('action')){
+			case "editAdmin":
+				$this->edit(Request::post('userid'),Request::post('username'),Request::post('phone'),Request::post('email'), 1);
+				break;
+			case "edit":
+				$this->edit(Request::post('userid'),Request::post('username'),Request::post('phone'),Request::post('email'), 4);
+				break;
+			case "create":
+				$this->create(Request::post('login'),Request::post('username'),Request::post('pass'),Request::post('phone'),Request::post('email'), 4);
+				break;
+			case "delete":
+				$this->delete(Request::post('userid'));
+				break;
+		}
+
+		if(isset($_POST['userid']))		
+			$this->deb = $_POST['userid'];
+
+		if (!User::hasPermission('superadmin')) {
+			Message::addError('no-permission');
+			Util::redirect('?do=Main');
+		}
+
+	}
+
+	protected function doRender()
+	{
+		// load every user
+		$admin = array();
+		$users = array();
+		$res = Database::simpleQuery("SELECT userid, login, fullname, phone, email, permissions FROM user ORDER BY userid DESC");
+		while ($row = $res->fetch(PDO::FETCH_ASSOC)) {
+			if ($row['permissions'] == 1 )
+				$admin = array($row['userid'],$row['login'],$row['fullname'],$row['phone'],$row['email']);
+			else
+				$users[] = array(
+					'id' => $row['userid'],
+					'username' => $row['login'],
+					'name' => $row['fullname'],
+					'telephone' => $row['phone'],
+					'email' => $row['email']
+				);
+		}
+
+		//$pag = new Paginate($users,$this->page);
+
+		Render::addTemplate('user-management', array(
+			'admin_id' => $admin[0],
+			'admin_username' => $admin[1],
+			'admin_name' => $admin[2],
+			'admin_telephone' => $admin[3],
+			'admin_email' => $admin[4]
+			//'users' => $pag->getItems(),
+			//'pages' => $pag->getPagination()
+		));
+	}
+
+	private function edit($userid, $newname, $newphone, $newemail, $newpermissions){
+		$data = array (
+				'user' => $userid,
+				'name' => $newname,
+				'phone' => $newphone,
+				'email' => $newemail,
+				'permissions' => $newpermissions
+		);
+		Database::exec ( 'UPDATE user SET fullname = :name, phone = :phone, email = :email, permissions = :permissions WHERE userid = :user', $data );
+		Message::addSuccess('update-user');
+	}
+
+	private function create($login, $username, $password, $phone, $email){
+		$data = array (
+				'login' => $login,
+				'pass' => Crypto::hash6 ( $password ),
+				'name' => $username,
+				'phone' => $phone,
+				'email' => $email
+		);
+		User::addUser($data);
+	}
+
+	private function delete($userid){
+		$data = array (
+				'userid' => $userid
+		);
+		Database::exec ( 'DELETE FROM setting_partition WHERE user = :userid', $data );
+		Database::exec ( 'DELETE FROM setting_user WHERE user = :userid', $data );
+		Database::exec ( 'DELETE FROM setting_values WHERE user = :userid', $data );
+		Database::exec ( 'DELETE FROM user WHERE userid = :userid', $data );
+		Message::addSuccess('delete-user');
+	}
+
+}