\n"; echo "

Welcome: $prefname

\n"; echo "

\n"; echo "\n"; echo "\n"; echo "\t\n"; if ($level == LVLADM){ echo "\t\n"; echo "\t\n"; echo "\t\n"; } echo "\n"; echo "

Edit account

List users

Add new user

Remove user

\n"; echo "

\n"; if (isset($action)){ if ($action == "viewAll" && $level == LVLADM){ echo "

\n"; echo "\n"; echo ''; echo ''; echo ''; echo ''; echo ''; echo ''; echo ''; $n = $genopar->queryBanco("SELECT * FROM users"); while($lin = $genopar->getArray()){ echo ''; echo ''; echo ''; echo ''; echo ''; echo ''; echo ''; } echo "

'; echo 'Editar'; echo '	'; echo 'Usuário'; echo '	'; echo 'Nome'; echo '	'; echo 'Nível'; echo '	'; echo 'Grupo'; echo '
'; echo "Edit"; echo '	'; echo $lin['username']; echo '	'; echo $lin['prefname']; echo '	'; echo $lin['level']; echo '	'; echo $lin['group']; echo '

\n"; echo "

\n"; } /** ** CADASTRO DE USUARIO ** ** Formulario para obter dados do novo usuario ** JS valida se foi digitado valores em todos os campos **/ elseif ($action == "cadastrar" && !isset($_POST['Cadastrar']) && $level == 1){ $genopar->abreForm("return valida(this);", "addUser"); echo "\n"; echo "\n"; echo "\t\n"; echo "\t\n"; echo "\n"; echo "\n"; echo "\t\n"; echo "\t\n"; echo "\n"; echo "\n"; echo "\t\n"; echo "\t\n"; echo "\n"; echo "\n"; echo "\t\n"; echo "\t\n"; echo "\n"; mysql_select_db($DB_NAME) or $genopar->error(); $r = $genopar->queryBanco("SELECT `idlab` FROM labs"); $groups = array('Admin'); if ($r > 0){ while($lin = $genopar->getArray()){ array_push($groups, $lin["idlab"]); } } //mysql_select_db('www') or $genopar->error(); echo "\n"; echo "\t\n"; echo "\t\n"; echo "\n"; echo "\n"; echo "\t\n"; echo "\t\n"; echo "\n"; echo "\n"; echo "\t\n"; echo "\t\n"; echo "\n"; echo "\n"; echo "\t\n"; echo "\t\n"; echo "\n"; echo "

User:	"; $genopar->input("new_user"); echo "
Password:	"; $genopar->input("new_senha", "password"); echo "
Retype the password:	"; $genopar->input("new_senha2", "password"); echo "
Name:	"; $genopar->input("new_prefname"); echo "
Group:	"; $genopar->select("new_group", $groups, "", "enableNewGroup(document.addUser);",TRUE); echo "
New Group:	"; $genopar->input("new_CreateGroup", "text"); echo "
Level:	"; $genopar->select("new_level", $levels, "", "", TRUE); // $genopar->input("new_level", "text", "", 3, 3); echo "
	"; $genopar->submit("Send", "Cadastrar"); echo "

\n"; $genopar->fechaForm(); /** ** Insercao no banco ** Valida se nao ha outro usuario com o mesmo nome **/ }elseif(isset($_POST['Cadastrar']) && $level == 1){ verGetPost(array("new_user", "new_senha", "new_senha2", "new_prefname", "new_group", "new_CreateGroup", "new_level")); $users = $genopar->queryBanco("SELECT * FROM users WHERE username='$new_user'"); $new_level = array_search($new_level, $levels); $new_level++; if ($users > 0){ $genopar->error("User already exists!"); } $password = md5($new_senha); if ($new_group == ""){ $new_group = $new_CreateGroup; } $genopar->queryBanco("INSERT INTO users SET username='$new_user', password='$password', prefname='$new_prefname', level='$new_level', `group`='$new_group'"); echo "User $new_user added"; /** ** REMOCAO DE USUARIO ** ** Formulario obtem nome do usuario a ser removido ** JS valida se foi digitado algum valor ** JS pede confirmacao do usuario caso queira remover si proprio **/ }elseif($action == "remover" && !isset($_POST['Remover']) && $level == 1){ $genopar->abreForm("return valida(this, '$user');", "delUser"); echo "\n"; echo "\n"; echo "\t\n"; echo "\t\n"; echo "\n"; echo "\n"; echo "\t\n"; echo "\t\n"; echo "\n"; echo "

User:	"; $genopar->input("del_user"); echo "
	"; $genopar->submit("Send", "Remover"); echo "

\n"; $genopar->fechaForm(); /** ** Remocao no banco ** Valida se o usuario existe **/ }elseif(isset($_POST['Remover']) && $level == 1){ verGetPost(array("del_user")); $users = $genopar->queryBanco("SELECT * FROM users WHERE username='$del_user'"); if ($users != 1){ $genopar->error("User does not exist!"); } $genopar->queryBanco("DELETE FROM users WHERE username = '$del_user'"); // echo "DELETE FROM users WHERE username = '$del_user'"; echo "User $del_user removed"; /** ** EDICAO DE CONTA ** ** Formulario obtem novos dados cadastrais ** JS valida se foi digitado valores em todos os campos (inclusive nas senhas) **/ }elseif($action == "editar" && !isset($_POST['processa'])){ verGetPost(array("processa", "edit_senha", "edit_prefname", "edit_senha2")); $genopar->abreForm("return valida(this);", "editAcc"); echo "\n"; echo ""; echo ""; echo ""; echo ""; echo ''; echo '

User:	$user
Name of your choice:
Password:
Retype password:

'; /** ** Atualiza dados no banco **/ }elseif ($processa == 'Update'){ verGetPost(array("edit_senha", "edit_prefname")); $passwd= md5($edit_senha); if ($n == 1){ $genopar->queryBanco("UPDATE users SET password='$passwd', prefname='$edit_prefname' WHERE username='$user'"); // echo "UPDATE users SET password='$passwd', prefname='$edit_prefname' WHERE username='$user'"; }else $genopar->queryBanco("INSERT INTO users SET username='$user', password='$edit_passwd', prefname='$edit_prefname'"); // echo ("INSERT INTO users SET username='$user', password='$edit_passwd', prefname='$edit_prefname'"); // $LOG->log($user, 'Atualização de Senha', "($n)$senha"); // $cmd= "cd /tmp && /usr/local/apache/bin/htpasswd -b /genome/www/mng/secure/.htpasswd $user $senha"; // system($cmd, $R); echo "
Information successfully updated!"; if ($n!=1) echo "

Attention! Some pages will only be available after validation of the password by the administrator."; // if ($R!=0) // echo "

Atenção: Ocorreram problemas ao atualizar a senha WEB, por favor, contate o Lab. BioInfo!"; } }elseif ($editarUser != '' && $level == 1){ verGetPost(array("processa", "edit_senha", "edit_prefname", "edit_senha2")); if ($processa != 'Atualizar'){ $n = $genopar->queryBanco("SELECT * FROM users WHERE username='$editarUser'"); $lin = $genopar->getArray(); $genopar->abreForm("return valida(this);", "editAcc"); echo "\n"; echo ""; echo ""; echo ""; echo ""; echo ''; echo '

User:	$editarUser
Name of your choice:
Password:
Retype the password:

'; }else{ $passwd= md5($edit_senha); $genopar->queryBanco("UPDATE users SET password='$passwd', prefname='$edit_prefname' WHERE username='$editarUser'"); echo "
Information successfully updated"; } } echo "