Changeset 74

Timestamp:

28/05/05 16:54:44 (4 years ago)

Author:

stringfellow

Message:

Added preliminary addUser function to admin, this needs more work, but after food :)

Files:

• admin.lib.php (modified) (1 diff)

admin.lib.php

@@ -301 +301 @@
-                echo "</div>\n";
-        }
+
+/* Some functions to manage posts, users etc. */
+
+        function addUser() 
+        {
+                $username = '';
+                $password = '';
+                $type = 1;
+                $name = '';
+                $title = '';
+                $description = '';
+                $css = 'blog.css';
+                $enabled = False; // seems sensible..
+
+                //sanitise username
+                if (isset($_POST['username']) && trim($_POST['username']) != "" && (int)$_POST['username'] == 0) {
+                        $username = $_POST['username'];
+                } else {
+                        $this->inputError = _("Bad Input - Username");
+                        $err = 1;
+                }
+
+                //sanitise password, assume it will be hashed before sending :)
+                if (isset($_POST['password']) && trim($_POST['password']) != "" && (int)$_POST['password'] == 0) {
+                        $password = $_POST['password'];
+                } else {
+                        $this->inputError = _("Bad Input - Password");
+                        $err = 1;
+                }
+
+                //sanitise type
+                if (isset($_POST['type']) && trim($_POST['type']) != "" && (int)$_POST['type'] > 0) {
+                        $type = (int)$_POST['type'];
+                } else {
+                        $this->inputError = _("Bad Input - Type");
+                        $err = 1;
+                }
+
+                //sanitise name
+                if (isset($_POST['name']) && trim($_POST['name']) != "" && (int)$_POST['name'] == 0) {
+                        $name = addslashes(urldecode($_POST['name']));
+                } else {
+                        $this->inputError = _("Bad Input - Realname");
+                        $err = 1;
+                }
+
+                //sanitise title
+                if (isset($_POST['title']) && trim($_POST['title']) != "" && (int)$_POST['title'] == 0) {
+                        $title = addslashes(urldecode($_POST['title']));
+                } else {
+                        $this->inputError = _("Bad Input - Title");
+                        $err = 1;
+                }
+
+                //sanitise description
+                if (isset($_POST['description']) && trim($_POST['description']) != "" && (int)$_POST['description'] == 0) {
+                        $description = addslashes(urldecode($_POST['description']));
+                } else {
+                        $this->inputError = _("Bad Input - Description");
+                        $err = 1;
+                }
+
+                //sanitise css
+                if (isset($_POST['css'])) { // if its not set its defaulted...
+                        if (trim($_POST['css']) != "" && (int)$_POST['css'] == 0 && is_file($_POST['css'])) {
+                                $css = $_POST['css'];
+                        } else {
+                                $this->inputError = _("Bad Input - CSS location");
+                                $err = 1;
+                        }
+                }
+
+                //sanitise enabled -- not really sure about this. i think creation and enablig should be 
+                // done seperately... ???
+                /*if (isset($_POST['enabled'])) { // if its not set its defaulted...
+                        if (trim($_POST['enabled']) != "" && (int)$_POST['enabled'] == 0)) {
+                                $css = $_POST['enabled'];
+                        } else {
+                                $this->inputError = _("Bad Input - Enabled");
+                                $err = 1;
+                        }
+                }*/
+
+                if ($err == 0) { // and insert...
+                        
+                        $query = "INSERT into USERS (username,password,type,name,title,description,css,enabled) VALUES ('{$username}','{$password}',{$type},'{$name}','{$title}','{$description}','{$css}',{$enabled});";
+                        if (!db_query($query)) {
+                                error(2,_("Database Insertion failed.");
+                        } else {
+                                print(_("OK. New user '{$username}' added.\nPlease enable the account."); //pleh?
+                        }
+                } else {
+                        error(4,_("Bad Input."));
+                }
+        }
-}