<?php
session_start();
$user_ID=$_SESSION[user_ID];
if (!$user_ID || $user_ID=='0')
{
header('location: index.php');
die('Login failed');
}
require("util.php");
$sql = new MySQL_class;
$sql->Create("generator");
$esql = new MySQL_class;
$esql->Create("generator");
if ($_GET[user]) { $_SESSION[var_user] = $_GET[user]; }
$user=$_SESSION[var_user];
?>
<?php
$sql->QueryItem("SELECT user_rights.right as F502 FROM `user_rights` WHERE user_rights.user='$user'");
$right = htmlspecialchars($sql->data['F502']);
if ($_POST['user_rights']!='') {
$right = htmlspecialchars($_POST['right']);
}
?>
<HTML>
<HEAD>
<META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=windows-1252">
<TITLE>Rights wijzigen</TITLE>
<script>
function confirmDelete(delUrl) {
if (confirm("Rights verwijderen?")) {
document.location = delUrl;
}
}
</script>
</HEAD>
<BODY LANG="en-US" DIR="LTR" ONLOAD="Edit.<?php
{echo 'right';}
?>.focus();">
<FORM NAME="Edit" ACTION="posteditrights.php" METHOD=POST>
<INPUT TYPE="HIDDEN" NAME="FOCUS" VALUE="">
<?php echo("<INPUT TYPE=HIDDEN NAME=\"user_rights\" SIZE=5 VALUE=\"$user_rights\">");?>
<TABLE WIDTH=100% BORDER=0 CELLPADDING=4 CELLSPACING=1>
<THEAD>
<TR>
<TD COLSPAN=2 WIDTH=100% VALIGN=TOP BGCOLOR="#000080">
<P><FONT COLOR="#ffffff"><FONT FACE="Verdana, sans-serif"><FONT SIZE=1 STYLE="font-size: 8pt"><B>Rights wijzigen
</B></FONT></FONT></FONT></P>
</TD>
</TR>
</THEAD>
<TBODY>
<TR VALIGN=TOP>
<TD WIDTH=20% BGCOLOR="#e6e6ff">
<FONT COLOR="#000080" FACE="Verdana, sans-serif" STYLE="font-size: 8pt">
Right
</FONT>
</TD>
<TD WIDTH=80%>
<P><FONT COLOR="#000080"><FONT FACE="Verdana, sans-serif"><FONT SIZE=1 STYLE="font-size: 8pt">
<?php
echo ("<SELECT NAME=\"right\" OnChange=\"Edit.action=''; Edit.FOCUS.value='502'; Edit.submit();\">");
$sql->Query("SELECT `username` as F0_1, `user`.user FROM `user` ORDER BY `username`");
for ($i = 0; $i < $sql->rows; $i++)
{
$sql->Fetch($i);
$searchID = $sql->data[user];
$username_0=htmlspecialchars($sql->data[F0_1]);
$searchShow = "$username_0";
echo ("<OPTION ");
if ($searchID == $right) {echo "SELECTED ";};
echo "VALUE=\"$searchID\">$searchShow";
}
echo ("</SELECT>");
?>
</FONT></FONT></FONT></P>
</TD>
</TR>
</TBODY>
</TABLE>
<P ALIGN=RIGHT>
<INPUT TYPE="submit" VALUE="Change">
<?php
$test=true;
if ($test) {
echo ("
<INPUT TYPE=BUTTON VALUE=\"Delete\" onClick=\"confirmDelete('postdeleterights.php?user_rights=$user_rights&user=$user')\">
");
}
?>
<INPUT TYPE=BUTTON VALUE="Cancel" onClick="window.close()">
</P>
</FORM>
</BODY>
</HTML>
