<?php
session_start();
$user_ID=$_SESSION[user_ID];
if (!$user_ID || $user_ID=='0')
{
header('location: index.php');
die('Login failed');
}
require("util.php");
$sql = new MySQL_class;
$sql->Create("generator");
$esql = new MySQL_class;
$esql->Create("generator");
if ($_GET[user]) { $_SESSION[var_user] = $_GET[user]; }
$user=$_SESSION[var_user];
?>
<html>
<head>
<link href="list.css" type="text/css" rel=stylesheet>
<meta content="text/css" http-equiv="Content-Style-Type">
<title>Screen generator Scherm: User</title>
</head>
<script type="text/javascript" src="handlers.js" language="JavaScript">
alert ("no code");
</script>
<body>
<?php
include 'menu.php';
include 'makemenu.php';
makeMenu(1, 0, '');
?>
<div id="content">
<table class=ruler><tr><td>User</td></tr></table>
<?php
$sql->QueryItem("SELECT user.username as F497, user.password as F498, user.special as F499, user.type as F500 FROM `user`
WHERE `user`.`user` = '$user'
LIMIT 1");
$username = htmlspecialchars($sql->data['F497']);
$password = htmlspecialchars($sql->data['F498']);
$special = htmlspecialchars($sql->data['F499']);
$type = htmlspecialchars($sql->data['F500']);
echo ('<table class=record>');
echo ("<tr><th>Username</th>
<td>$username</td>");
echo ("</tr>");
echo ("<tr><th>Password</th>
<td>$password</td>");
echo ("</tr>");
echo ("<tr><th>Special</th>
<td>$special</td>");
echo ("</tr>");
echo ("<tr><th>Type</th>
<td>$type</td>");
echo ("</tr>");
echo ('</table>');
?>
<p><input type=button value="Edit User" onClick="javascript: window.open('edituser.php?user=<?php echo $user; ?>','','width=500,height=300,location=no,menubar=no,scrollbars=yes,status=no,resizable=yes'); return false;">
<br><br><br><table class=ruler><tr><td>Rights</td></tr></table>
<?php
if ($_GET[order69]<>'') {
$sql->QueryItem("DELETE FROM user_selection WHERE user=$user_ID and field='sort_69'");
$sql->QueryItem("INSERT INTO user_selection VALUES ('$user_ID', 'sort_69','$_GET[order69]'");
}
$lastid=$_SESSION[last_69];
$lastfilter69=$_SESSION[filter69];
$_SESSION[last_69]='';
if ($_GET[filter69]) { $filter69 =$_GET[filter69]; } else { $filter69=$_POST[filter69];}
if ($_GET[page69]) { $page=$_GET[page69]; } else { $page=$_POST[page69]; }
if ($filter69!=$lastfilter69) {
$_SESSION[filter69]=$filter69;
$page=0;
}
if ($_GET[full_69]=='Fullpage') {
$_SESSION[fullpage_69]='f';
}
if ($_GET[full_69]=='Pages') {
$_SESSION[fullpage_69]='';
}
if ($filter69!='')
{
$qfilter69 = quote('%'.$filter69.'%');
$query = ("
FROM `user_rights`
LEFT JOIN `user` AS T502 ON user_rights.right=T502.user
WHERE (T502.username LIKE $qfilter69
) AND `user_rights`.`user`='$user'
");
}
else
{
$query = ("
FROM `user_rights`
LEFT JOIN `user` AS T502 ON user_rights.right=T502.user
WHERE 1 AND `user_rights`.`user`='$user'
");
}
$lastrec=-1;
$sql->QueryItem("SELECT COUNT(*) AS records$query");
$records=$sql->data[records];
$sortorder=$sql->QueryItem("SELECT value FROM user_selection WHERE user=$user_ID and field='sort_69'");
if ($lastid=='') {$fromrec=20*$page;} else {
$fromrec=0;
$sql->Query("SELECT `user_rights`.`user_rights` AS id $query");
for ($r=0; $r<$sql->rows; $r++) {
$sql->Fetch($r);
if ($sql->data[id]==$lastid) {
$fromrec=$r-10;
if($fromrec<0) $fromrec=0;
$lastrec=$r-$fromrec;
break;
}
}
}
$sql->Query("SELECT user_rights.user as F501, `T502`.`username` as F502_1$query".
($_SESSION[fullpage_69]==''?"LIMIT $fromrec, 20":''));
if (($part_rights['30/nofilter']==0)) {
echo "<form action=\"\" method=get name=Filter69>";
echo "<p class=filter>";
echo "Records: $records ";
$maxpage=(int) (($records+19)/20);
if ($maxpage>1) {
if ($_SESSION[fullpage_69]=='') {
echo "Page: ";
echo "<select name=\"page69\" OnChange=\"Filter69.submit();\">\n";
for ($i = 0; $i < $maxpage; $i++)
{
$nr=$i+1;
if ($i==$page) {$sel=" selected";} else {$sel="";}
echo "<option value=$i$sel>$nr van $maxpage</option>\n";
}
echo "</select>\n";
echo "<input type=submit name=full_69 value=\"Fullpage\">";
} else {
echo "<input type=submit name=full_69 value=\"Pages\">";
}
}
echo "<input type=text name=\"filter69\" size=25 value=\"$filter69\">";
echo "<input type=submit value=\"Search\">";
echo "<input type=button value=\"Add Rights\" onClick=\"javascript: window.open('addrights.php?user=$user','','width=400,height=400,location=no,menubar=no,scrollbars=yes,status=no,resizable=yes'); return false;\">";
echo "</p>";
echo "</form>";
}
?>
<table class=list>
<tr>
<th width=175px>Right</th>
</tr>
<?php
for ($i = 0; $i < $sql->rows; $i++)
{
$sql->Fetch($i);
$username_502=htmlspecialchars($sql->data[F502_1]);
$right_lup = "$username_502";
if ($lastrec==$i) {$color="style=\"background-color: #aaaaff;\"";} else {$color="";}
echo ("
<tr $color onMouseOver=\"ChangeColor(this)\" onMouseOut=\"ChangeColorBack(this)\" onClick=\"window.open('editrights.php?user=$user','wijzigen','width=400,height=400,location=no,menubar=no,scrollbars=yes,status=no,resizable=yes')\">
<td>$right_lup</td>
</tr>");
}
?>
</table>
</div></body>
</html>
