science-ation/user_personal.php

300 lines
11 KiB
PHP

<?
/*
This file is part of the 'Science Fair In A Box' project
SFIAB Website: http://www.sfiab.ca
Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
Copyright (C) 2005 James Grant <james@lightbox.org>
Copyright (C) 2007 David Grant <dave@lightbox.org>
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public
License as published by the Free Software Foundation, version 2.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; see the file COPYING. If not, write to
the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
Boston, MA 02111-1307, USA.
*/
?>
<?
require_once('common.inc.php');
require_once('user.inc.php');
require_once('user_edit.inc.php');
/* Ensure they're logged in as something, anything */
user_auth_required();
$edit_id = isset($_GET['users_id']) ? intval($_GET['users_id']) : $_SESSION['users_id'];
if($edit_id != $_SESSION['users_id'])
user_auth_required('admin');
else
user_auth_required();
$u = user_load($edit_id);
/* Load the fields the user can edit, and theones that are required */
$fields = array();
$required = array();
foreach(array_keys($u['roles']) as $r) {
$fields = array_merge($fields,
user_fields_enabled($r));
$required = array_merge($required,
user_fields_required($r));
}
/* Filter fields, only the ones we care about */
$our_fields = array('salutation', 'firstname','lastname','address',
'address2','city','province','postalcode',
'phonehome','phonecell','language','sex',
'firstaid','cpr','birthdate','grade');
$fields = array_intersect($our_fields, $fields);
$required = array_intersect($our_fields, $required);
switch($_GET['action']) {
case 'save':
$save = true;
/* Cleanup POST data */
foreach($fields as $f) {
$u[$f] = stripslashes($_POST[$f]);
/* Allow the user to clear a field */
if($u[$f] == '') continue;
}
if(0) {
if(array_key_exists('committee', $u['roles'])) {
/* Trying to save a committee member eh? Well, we established above
* that we're allowed to be here, so go ahead and save it */
$u['displayemail'] = ($_POST['displayemail'] == 'yes') ? 'yes' : 'no';
$u['emailprivate'] = mysql_real_escape_string(stripslashes($_POST['emailprivate']));
if($_SESSION['superuser'] == 'yes') {
/* Check for a change in the access flags */
$access_admin = $_POST['access_admin'];
$access_config = $_POST['access_config'];
$access_super = $_POST['access_super'];
if($access_admin == 'yes' && !array_key_exists('admin', $u['roles'])) {
/* Admin added */
user_add_role($u, 'admin');
}
if($access_admin == 'no' && array_key_exists('admin', $u['roles'])) {
/* Admin removed */
// FIXME - if this block of code is ever used (surrounded by the if(0) above), then
// the line below should be replaced with a call to account_remove_role
//user_remove_role($u, 'admin');
}
if($access_config == 'yes' && !array_key_exists('config', $u['roles'])) {
/* Config added */
user_add_role($u, 'config');
}
if($access_config == 'no' && array_key_exists('config', $u['roles'])) {
/* Config removed */
// FIXME - if this block of code is ever used (surrounded by the if(0) above), then
// the line below should be replaced with a call to account_remove_role
//user_remove_role($u, 'config');
}
/* Update superuser */
if($u['superuser'] != $access_super) {
mysql_query("UPDATE accounts SET superuser='$s' WHERE id='{$u['accounts_id']}");
}
}
}
}
if($save == true) {
user_save($u);
happy_("%1 %2 successfully updated",array($u['firstname'],$u['lastname']));
}
//reload the user record because we dont know if we saved or didnt save above, we just want
//to know what the user looks like _now_
$u = user_load($u['id']);
/* Update the status */
$newstatus=user_personal_info_status($u);
?>
<script type="text/javascript">
user_update_tab_status('personal','<?=$newstatus?>');
</script>
<?
exit;
}
if(count($u['roles']) > 1) {
$str='';
foreach(array_keys($u['roles']) as $r) {
$str.= (($str=='')?'':', ').i18n($roles[$r]['name']);
}
// echo notice(i18n('This user has multiple roles, the fields shown below are a combination of every role. Some may not apply to some roles. This user has the following roles:').' '.$str);
}
?>
<h4><?=i18n("Personal Information")?> - <span class="status_personal"></span></h4>
<br/>
<form class="editor" id="personalform">
<table width="90%">
<tr><td style="text-align: left" colspan="2"><b>Name</b'><hr /></td></tr>
<tr><?=user_edit_item($u, 'Salutation', 'salutation')?></tr>
<tr><?=user_edit_item($u, 'First Name', 'firstname')?></tr>
<tr><?=user_edit_item($u, 'Last Name', 'lastname')?></tr>
<tr><td style="text-align: left" colspan="2"><b>Address</b><hr /></td></tr>
<tr><?=user_edit_item($u, 'Address', 'address')?></tr>
<tr><?=user_edit_item($u, '', 'address2')?></tr>
<tr><?=user_edit_item($u, 'City', 'city')?></tr>
<tr><?=user_edit_item($u, i18n($config['provincestate']), 'province', 'province')?></tr>
<tr><?=user_edit_item($u, i18n($config['postalzip']), 'postalcode')?></tr>
<? /*<tr><td style="text-align: right" colspan="2"><input type="submit" value="<?=i18n("Save")?>" /></td></tr> */
?>
<tr><td style="text-align: left" colspan="2"><b>Phone</b'><hr /></td></tr>
<tr><?=user_edit_item($u, 'Home Phone', 'phonehome')?></tr>
<tr><?=user_edit_item($u, 'Cell', 'phonecell')?></tr>
<? /*<tr><td style="text-align: right" colspan="2"><input type="submit" value="<?=i18n("Save")?>" /></td></tr> */
?>
<tr><td style="text-align: left" colspan="2"><b>Other Information</b'><hr /></td></tr>
<tr><?=user_edit_item($u, 'Preferred Language', 'lang', 'language')?></tr>
<tr><?=user_edit_item($u, 'Gender', 'sex', 'sex')?></tr>
<tr><?=user_edit_item($u, 'First Aid Training', 'firstaid', 'yesno')?></tr>
<tr><?=user_edit_item($u, 'CPR Training', 'cpr', 'yesno')?></tr>
<tr><?=user_edit_item($u, 'Birth Date', 'birthdate')?></tr>
<tr><?=user_edit_item($u, 'Grade', 'grade')?></tr>
</table>
<?
/* Committee specific fields */
if(array_key_exists('committee', $u['roles']) && false ) {
echo "<table>";
echo "<tr><td>".i18n("Email (Private)").":</td><td><input size=\"25\" type=\"text\" name=\"emailprivate\" value=\"{$u['emailprivate']}\" /></td></tr>\n";
echo "<tr><td>".i18n("Display Emails").":</td><td>";
if($u['displayemail']=="no") $checked="checked=\"checked\""; else $checked="";
echo "<input type=\"radio\" name=\"displayemail\" value=\"no\" $checked />".i18n("No");
echo "&nbsp; &nbsp; &nbsp;";
if($u['displayemail']=="yes") $checked="checked=\"checked\""; else $checked="";
echo "<input type=\"radio\" name=\"displayemail\" value=\"yes\" $checked />".i18n("Yes");
if($_SESSION['superuser'] == 'yes') {
/* If the user is a committee member, only print these fields
* if the editer has super access */
echo "<tr><td align=\"center\" colspan=\"2\"><hr /></td></tr>";
echo "<tr><td>".i18n("Access Controls").":</td><td>";
$ch = (array_key_exists('admin',$u['roles'])) ? 'checked="checked"' : '';
echo "<input type=\"checkbox\" name=\"access_admin\" value=\"yes\" $ch /> ".i18n("Administration")."<br />";
$ch = (array_key_exists('config',$u['roles'])) ? 'checked="checked"' : '';
echo "<input type=\"checkbox\" name=\"access_config\" value=\"yes\" $ch /> ".i18n("Configuration")."<br />";
$ch = ($u['superuser']=="yes") ? 'checked="checked"' : '';
echo "<input type=\"checkbox\" name=\"access_super\" value=\"yes\" $ch /> ".i18n("Superuser")."<br />";
echo "</td></tr>";
}
echo '</table>';
}
function vreq($field)
{
global $required;
/* Return 'true' or 'false' as text for the
* validator plugin to use for the 'required' param */
if(in_array($field, $required)) return 'true';
return 'false';
}
?>
<input type="submit" value="<?=i18n("Save Personal Information")?>" />
</form>
<br />
<script type="text/javascript">
function personal_save()
{
$("#debug").load("<?=$config['SFIABDIRECTORY']?>/user_personal.php?action=save&users_id=<?=$edit_id?>", $("#personalform").serializeArray());
return false;
}
/* This method from the form validator additional methods script, modified to not
* allow spaces or parentheses */
jQuery.validator.addMethod("phoneUS", function(phone_number, element) {
phone_number = phone_number.replace(/\s+/g, "");
return this.optional(element) || phone_number.length > 9 &&
phone_number.match(/^[2-9]\d{2}-[2-9]\d{2}-\d{4}$/);
}, "Please specify a valid phone number (NNN-NNN-NNNN)");
$(document).ready(function() {
$("#personalform").validate({
rules: {
firstname: { required: <?=vreq('firstname')?> },
lastname: { required: <?=vreq('lastname')?> },
address: { required: <?=vreq('address')?> },
city: { required: <?=vreq('city')?> },
province: { required: <?=vreq('province')?> },
postalcode: { required: <?=vreq('postalcode')?> },
phonehome: {
required: <?=vreq('phonehome')?>,
phoneUS: true
},
phonecell: {
required: <?=vreq('phonecell')?>,
phoneUS: true
},
lang: { required: <?=vreq('lang')?> },
sex: { required: <?=vreq('sex')?> },
firstaid: { required: <?=vreq('firstaid')?> },
cpr: { required: <?=vreq('cpr')?> }
},
messages: {
firstname: { required: "<?=i18n('Please enter your first (given) name')?>" },
lastname: { required: "<?=i18n('Please enter your last name')?>" },
address: { required: "<?=i18n('Please enter your street address')?>" },
city: { required: "<?=i18n('Please enter your city')?>" },
province: { required: "<?=i18n('Please enter your province')?>" },
postalcode: { required: "<?=i18n('Please enter your postal code')?>" },
phonehome: {
required: "<?=i18n('Please enter your home phone number')?>",
phoneUS: "<?=i18n('Please enter a valid phone number of the form (NNN-NNN-NNNN)')?>"
},
phonecell: {
required: "<?=i18n('Please enter your cell phone number')?>",
phoneUS: "<?=i18n('Please enter a valid phone number of the form (NNN-NNN-NNNN)')?>"
},
lang: { required: "<?=i18n('Please select your preferred language of communication')?>" },
sex: { required: "<?=i18n('Please select your gender')?>" },
firstaid: { required: "<?=i18n('Please select yes or no')?>" },
cpr: { required: "<?=i18n('Please select yes or no')?>" }
},
submitHandler: function() {
personal_save();
return false;
},
invalidHandler: function() {
personal_save();
return false;
}
});
user_update_tab_status('personal');
});
</script>