1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / mfms22 / orchid.mfmsbd.com /
Filename : set_user.php
back
<?PHP
	require 'functions.php';
	checkLogin();
	checkPermissionAdmin();
	$db_link = connect();
	$user_id = 0;
	$employee = 0; 
	
	$demo_version = false;

	//Select all users from USER
	$users = array();
	$user_names = array();
	$sql_users = "SELECT user.user_id, user.user_name, user.branch_id, branch.branch_name, user.user_created, ugroup.ugroup_id, ugroup.ugroup_name, employee.empl_id, employee.empl_name FROM user LEFT JOIN branch ON user.branch_id = branch.branch_id LEFT JOIN ugroup ON ugroup.ugroup_id = user.ugroup_id LEFT JOIN employee ON user.empl_id = employee.empl_id WHERE user.user_id != 0 ORDER BY user_name";
	$query_users = mysqli_query($db_link, $sql_users);
	checkSQL($db_link, $query_users);
	while($row_users = mysqli_fetch_assoc($query_users)){
		$users[] = $row_users;
		$user_names[] = $row_users['user_name'];
	}

	//Select all usergroups from UGROUP
	$sql_ugroup = "SELECT ugroup_id, ugroup_name FROM ugroup";
	$query_ugroup = mysqli_query($db_link, $sql_ugroup);
	checkSQL($db_link, $query_ugroup);

	// Select all employees from EMPLOYEE
	$sql_employees = "SELECT empl_id, empl_name FROM employee WHERE empl_id != 0";
	$query_employees = mysqli_query($db_link, $sql_employees);
	checkSQL($db_link, $query_employees);

	// Select employees from EMPLOYEE who are already associated with a user
	$sql_empl_assoc = "SELECT empl_id FROM employee WHERE empl_id != 0 AND empl_id IN (SELECT empl_id FROM user)";
	$query_empl_assoc = mysqli_query($db_link, $sql_empl_assoc);
	checkSQL($db_link, $query_empl_assoc);
	$empl_assoc = array();
	while($row_empl_assoc = mysqli_fetch_assoc($query_empl_assoc)){
		$empl_assoc[] = $row_empl_assoc['empl_id'];
	}

	//Set heading and variables according to selection
	if(isset($_GET['user'])){
		$user_id = sanitize($db_link, $_GET['user']);
		foreach ($users as $row_user){
			if ($row_user['user_id'] == $user_id){
				$user_id = $row_user['user_id'];
				$user_name = $row_user['user_name'];
				$user_ugroup = $row_user['ugroup_id'];
				$employee = $row_user['empl_id'];
			}
		}
		$heading = "Edit User";
	}
	else $heading = "Create User";

	//SAVE Button
	if(isset($_POST["save_changes"])){

		// Include password pepper
		require 'config/pepper.php';

		//Sanitize user input
		$user_id = sanitize($db_link, $_POST['user_id']);
		$user_name = sanitize($db_link, $_POST['user_name']);
		// $user_pw = password_hash((sanitize($db_link, $_POST['user_pw'])).$pepper, PASSWORD_DEFAULT);
		$user_pw = md5((sanitize($db_link, $_POST['user_pw'])));
		$empl_id = sanitize($db_link, $_POST['empl_id']);
        $branch_id = sanitize($db_link, $_POST['branch_id']);
		$ugroup = sanitize($db_link, $_POST['ugroup']);
		if($user_id == 1) $ugroup = 1;
		$timestamp = time();

        

		if($user_id == 0 AND $branch_id==""){
			// Insert new user into USER
			$sql_user_ins = "INSERT INTO user (user_name, user_pw, ugroup_id, empl_id, user_created) VALUES ('$user_name', '$user_pw', '$ugroup', '$empl_id', '$timestamp')";
			$query_user_ins = mysqli_query($db_link, $sql_user_ins);
			checkSQL($db_link, $query_user_ins);
		}elseif($user_id == 0){

            // Insert new user into USER
			$sql_user_ins = "INSERT INTO user (user_name, user_pw, ugroup_id, empl_id, branch_id, user_created) VALUES ('$user_name', '$user_pw', '$ugroup', '$empl_id', $branch_id, '$timestamp')";
			$query_user_ins = mysqli_query($db_link, $sql_user_ins);
			checkSQL($db_link, $query_user_ins);

        }else {
			// Update existing user
			$sql_user_upd = "UPDATE user SET user_name = '$user_name', user_pw = '$user_pw', ugroup_id = $ugroup, empl_id = $empl_id, user_created = $timestamp WHERE user_id = $user_id";
			$query_user_upd = mysqli_query($db_link, $sql_user_upd);
			checkSQL($db_link, $query_user_upd);
		}
		header('Location:set_user.php');
	}


	// Select Branch for Drop-down-Menu
	$sql_branch = "SELECT * FROM branch";
	$query_branch = mysqli_query($db_link, $sql_branch);
	checkSQL($db_link, $query_branch);
?>


		<script>
			function validate(form){
				fail = validateUser(form.user_name.value, <?PHP echo json_encode($user_names); ?>, <?PHP echo $user_id; ?>)
				fail += validatePw(form.user_pw.value, form.user_pw_conf.value)
				fail += validateEmployee(form.empl_id.value, <?PHP echo json_encode($empl_assoc); ?>, <?PHP echo $employee; ?>)
				if (fail == "") return true
				else {
					alert(fail);
					return false
				}
			}
		</script>
		<script src="functions_validate.js"></script>
	

	<?php headandmenu('Users', '5s'); ?>

<!--main content start-->
      <section id="main-content">
          <section class="wrapper" style="min-height: 850px;">


          <!--breadcrumbs start -->
          	<div class="row">
                  <div class="col-lg-12 pb-4">
                      <!--breadcrumbs start -->
                      <nav aria-label="breadcrumb">
                          <ol class="breadcrumb">
                              <li class="breadcrumb-item"><a href="start.php"><i class="fa fa-home"></i> Dashboard</a></li>
                              <li class="breadcrumb-item"><a href="#">Settings</a></li>
                              <li class="breadcrumb-item active" aria-current="page">Users</li>
                          </ol>
                      </nav>
                  </div>
              </div>
             <!--breadcrumbs end -->


		<!-- LEFT SIDE: Create New User Form -->
        <div class="row">
		<div class="col-md-4 mb-3">
			<div class="content_settings" style="text-align:left; width:80%;">

				<p class="heading"><?PHP echo $heading; ?></p>
                <?php if(!$demo_version){ ?>
                    <form action="set_user.php" method="post" onSubmit="return validate(this)">
                <?php } ?>
				

					<table id="tb_set" style="margin:auto;">
						<tr>
							<td>Username</td>
							<td><input type="text" name="user_name" placeholder="Username" value="<?PHP if(isset($user_name)) echo $user_name;?>" /></td>
						</tr>
						<tr>
							<td>Password</td>
							<td><input type="password" name="user_pw" placeholder="Password" /></td>
						</tr>
						<tr>
							<td>Repeat Password</td>
							<td><input type="password" name="user_pw_conf" placeholder="Repeat Password" /></td>
						</tr>
						<tr>
							<td>Usergroup</td>
							<td class="center">
								<select name="ugroup" size="1" <?PHP if ($user_id == 1) echo ' disabled="disabled"'; ?> >
									<?PHP
									while ($row_ugroup = mysqli_fetch_assoc($query_ugroup)){
											echo '<option value="'.$row_ugroup['ugroup_id'].'"';
											if (isset($user_ugroup) and $row_ugroup['ugroup_id'] == $user_ugroup) echo ' selected="selected	"';
											echo '>'.$row_ugroup['ugroup_name'].'</option>';
										}
									?>
								</select>
							</td>
						</tr>
						<tr>
							<td>Employee</td>
							<td>
								<select name="empl_id" size="1">';
									<option value="0">None</option>
									<?PHP
										while ($row_employees = mysqli_fetch_assoc($query_employees)){
											echo '<option value="'.$row_employees['empl_id'].'"';
											if (isset($employee) and $row_employees['empl_id'] == $employee) echo ' selected="selected	"';
											echo '>'.$row_employees['empl_name'].'</option>';
										}
									?>
								</select>
							</td>
						</tr>
						<tr>
							<td>Branch</td>
							<td>
								
                                <?php while ($row_branch = mysqli_fetch_assoc($query_branch)) { ?>
                                    <input type="checkbox" id="branch" name="branch_id" value="<?php echo $row_branch['branch_id']; ?>">
                                    <label for="vehicle1"><?php echo $row_branch['branch_name']; ?></label><br>
                                <?php } ?>    
                                    
							</td>
						</tr>
					</table>
					<input type="submit" name="save_changes" value="Save Changes" class="btn btn-primary"/>
					<input type="hidden" name="user_id" value="<?PHP echo $user_id; ?>" />
				</form>
			</div>
		</div>

		<!-- RIGHT SIDE: List of Users -->
		<div class="col-md-8">
			<form action="set_ugroup.php" method="post">
               <div class="table-responsive"> 
				<table id="tb_table">
					<colgroup>
						<col width="26%">
						<col width="20%">
						<col width="20%">
                        <col width="12%">
						<col width="16%">
						<col width="6%">
					</colgroup>
					<tr>
						<th class="title" colspan="6">Existing Users</th>
					</tr>
					<tr>
						<th>User Name</th>
						<th>User Group</th>
						<th>Employee</th>
                        <th>Branch</th>
						<th>Changed</th>
						<th>Edit</th>
					</tr>
				
					<?PHP if(!$demo_version){
					foreach ($users as $row_user){
						echo '<tr>
										<td>'.$row_user['user_name'].'</td>
										<td>'.$row_user['ugroup_name'].'</td>
										<td><a href="employee.php?empl='.$row_user['empl_id'].'">'.$row_user['empl_name'].'</a></td>
                                        <td>'.$row_user['branch_name'].'</td>
										<td>'.date('d.m.Y',$row_user['user_created']).'</td>
										<td>
											<a href="set_user.php?user='.$row_user['user_id'].'">
												<i class="fa fa-edit fa-lg"></i>
											</a>
										</td>
									</tr>';
					}
					}
					?>
					
				</table>
                </div>
			</form>
		</div>
        </div>


          </section>
      </section>
      <!--main content end-->
      
   <?php footer(); ?>