File: //proc/self/root/home/awaldron/www/archive/demo/admin/perm_admin.php
<?php
session_start();
include("../_functions.php");
dbconnect();
if (!is_logged()) auto_login();
echo "<html>\n";
echo "<head>\n";
echo "<title>".COMPANY_NAME." : Intranet Administration Permissions</title>\n";
echo "<script language=\"JavaScript\" type=\"text/javascript\">\n";
echo "<!--\n";
echo "function openWindow(theURL,winName,features) { //v2.0\n";
echo " window.open(theURL,winName,features);\n";
echo "}\n";
echo "function confirm_delete(id,pg) {\n";
echo " input_box=confirm(\"Are you sure you want to delete this user from this Permissions Group?\");\n";
echo " if (input_box==true) {\n";
echo " self.location=\"perm_admin.php?del=\"+id+\"&pg=\"+pg;\n";
echo " }\n";
echo "}\n";
echo "-->\n";
echo "</script>\n";
echo "</head>\n";
echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../default.css\">\n";
echo "<body style=\"margin:15px;\">\n";
if (!admin_panel($_SESSION["auth_user"])) {
echo "<br><br><br><br>".error("You must be logged in to access the administration panel!");
} else {
if (isset($_GET["del"])) {
quickUPDATE("DELETE FROM tbl_pgroup_user WHERE username='".$_GET["del"]."' AND pgroup_id=".$_GET["pg"]);
}
if (isset($_POST["act"])) {
quickUPDATE("INSERT INTO tbl_pgroup_user (pgroup_id,username) VALUES (".$_POST["pgroup_id"].",'".$_POST["adduser"]."')");
}
echo "<P><img src=\"/gui/icons/cog.gif\" align=\"left\">\n";
echo "<div class=\"headline\">Intranet Administration Permissions</div>\n";
echo "<P>From this control panel, you have the ability to set which users have Administration Permissions. To remove a user from a Permissions Group, click the <span style=\"color:DD0000;font-weight:bold;text-decoration:underline;\">(X)</span> to the right of their username.\n";
$sql = "SELECT * FROM tbl_pgroup WHERE pgroup_id < 5 ORDER BY pgroup_id ASC";
$res = mysql_query($sql);
$user_select = "<option></option>\n";
$sql2 = "SELECT username FROM tbl_employees WHERE is_employee=1 ORDER BY lname ASC";
$result2 = mysql_query($sql2);
for ($j=0; $j < mysql_num_rows($result2); $j++) {
$user = mysql_fetch_array($result2);
$user_select .= "<option value=\"".$user["username"]."\">".get_user($user["username"],"fullname2")."</option>\n";
}
for ($i=0; $i < mysql_num_rows($res); $i++) {
$pg = mysql_fetch_array($res);
echo "<br><br><br><b><u>".$pg["pgroup_name"]."</u></b>\n<br>".$pg["pgroup_desc"]."\n";
echo "<P><table class=\"textdn\" border=0 style=\"margin-left:25px\">\n";
echo "<tr><td><b>Moderator : </b></td><td><a href=\"/profile.php?u=".$pg["pgroup_mod"]."\" target=\"profile\">".$pg["pgroup_mod"]."</a></td></tr>\n";
//ECHO INDIVIDUALS
$sql1 = "SELECT username FROM tbl_pgroup_user WHERE pgroup_id=".$pg["pgroup_id"];
$res1 = mysql_query($sql1);
echo "<tr><td><b>Individuals : </b></td><td>";
for ($j=0; $j < mysql_num_rows($res1); $j++) {
$row = mysql_fetch_array($res1);
if ($j != 0) echo ", ";
echo "<B>".$row["username"]."</b><a href=\"javascript:confirm_delete('".$row["username"]."',".$pg["pgroup_id"].")\" style=\"color:DD0000\">(X)</a>";
} if (mysql_num_rows($res1) == 0) echo "None";
echo "</td></tr>\n";
echo "<form action=\"perm_admin.php\" method=\"post\">\n";
echo "<input type=\"hidden\" name=\"act\" value=\"add\">\n";
echo "<input type=\"hidden\" name=\"pgroup_id\" value=\"".$pg["pgroup_id"]."\">\n";
echo "<tr><td><b>Add Users : </b></td><td>";
echo "<SELECT name=\"adduser\">\n";
echo $user_select;
echo "</SELECT> <input type=\"submit\" value=\"Add User\">\n";
echo "</td></tr></form>\n";
/*
//ECHO AUTO GROUPS
$sql3 = "SELECT tbl_pgroup_auto.pgroup_auto_name,tbl_pgroup_auto.pgroup_auto_id FROM tbl_pgroup_autogroup,tbl_pgroup_auto WHERE tbl_pgroup_autogroup.pgroup_auto_id=".$pg["pgroup_id"]." AND tbl_pgroup_autogroup.pgroup_auto_id=tbl_pgroup_auto.pgroup_auto_id";
$res3 = mysql_query($sql3);
echo "<tr><td><b>Auto Groups : </b></td><td>";
for ($j=0; $j < mysql_num_rows($res3); $j++) {
$row = mysql_fetch_array($res3);
echo "<a href=\"#\" target=\"profile\">".$row["pgroup_auto_name"]."</a>\n";
} if (mysql_num_rows($res1) == 0) echo "None";
echo "</td></tr>\n";
//ECHO ORGANIZATION GROUPS
$sql2 = "SELECT tbl_groups.group_name,tbl_groups.group_id FROM tbl_groups,tbl_pgroup_orggroup WHERE tbl_pgroup_orggroup.pgroup_id=".$pg["pgroup_id"]." AND tbl_pgroup_orggroup.group_id=tbl_groups.group_id";
$res2 = mysql_query($sql2);
echo "<tr><td><b>Organization Groups : </b></td><td>";
for ($j=0; $j < mysql_num_rows($res2); $j++) {
$row = mysql_fetch_array($res2);
echo "<a href=\"#\" target=\"profile\">".$row["group_name"]."</a>\n";
} if (mysql_num_rows($res1) == 0) echo "None";
echo "</td></tr>\n";
//ECHO PERMISSION GROUPS
$sql2 = "SELECT tbl_pgroup.pgroup_name,tbl_pgroup.pgroup_id FROM tbl_pgroup,tbl_pgroup_pgroup WHERE tbl_pgroup_pgroup.pgroup_id=".$pg["pgroup_id"]." AND tbl_pgroup_pgroup.pgroup_include=tbl_pgroup.pgroup_id";
$res2 = mysql_query($sql2);
echo "<tr><td><b>Permission Groups : </b></td><td>";
for ($j=0; $j < mysql_num_rows($res2); $j++) {
$row = mysql_fetch_array($res2);
echo "<a href=\"#\" target=\"profile\">".$row["group_name"]."</a>\n";
} if (mysql_num_rows($res1) == 0) echo "None";
echo "</td></tr>\n";
echo "<tr><td colspan=2> </td></tr>\n";
echo "<tr><td><b>Group Composite : </b></td><td>".pgroup_display(build_pgroup($pg["pgroup_id"]))."</td></tr>\n";
*/
echo "</table>\n";
}
echo "<br><br><br><br>\n";
echo "<center>Powered by <a href=\"http://www.intrabreeze.com\">IntraBreeze</a> © 2005 IntraBreeze, LLC</center>\n";
}
echo "</body>\n</html>\n";
//$sql2 = "SELECT tbl_groups.group_name,tbl_groups.group_id FROM tbl_groups,tbl_pgroup_orggroup WHERE tbl_pgroup_orggroup.pgroup_id=".$pgid." AND tbl_pgroup_orggroup.group_id=tbl_groups.group_id";
//$sql3 = "SELECT tbl_pgroup_auto.pgroup_auto_select FROM tbl_pgroup_autogroup,tbl_pgroup_auto WHERE tbl_pgroup_autogroup.pgroup_id=".$pgid." AND tbl_pgroup_autogroup.pgroup_auto_id=tbl_pgroup_auto.pgroup_auto_id";
//$sql4 = "SELECT pgroup_include FROM tbl_pgroup_pgroup WHERE pgroup_id=".$pgid;
//$res2 = mysql_query($sql2);
//$res3 = mysql_query($sql3);
//$res4 = mysql_query($sql4);
//echo "<tr><td><b>Organization Groups</b></td><td><a href=\"/profile.php?u=".$pg["pgroup_mod"]."\" target=\"profile\">".$pg["pgroup_mod"]."</a>\n";
//echo "<tr><td><b>Permissions Groups</b></td><td><a href=\"/profile.php?u=".$pg["pgroup_mod"]."\" target=\"profile\">".$pg["pgroup_mod"]."</a>\n";
?>