forked from science-ation/science-ation
383 lines
12 KiB
PHP
383 lines
12 KiB
PHP
<?
|
|
|
|
/*
|
|
* This file is part of the 'Science Fair In A Box' project
|
|
* SFIAB Website: http://www.sfiab.ca
|
|
*
|
|
* Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
|
|
* Copyright (C) 2005 James Grant <james@lightbox.org>
|
|
* Copyright (C) 2007 David Grant <dave@lightbox.org>
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public
|
|
* License as published by the Free Software Foundation, version 2.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; see the file COPYING. If not, write to
|
|
* the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
|
|
* Boston, MA 02111-1307, USA.
|
|
*/
|
|
?>
|
|
<?
|
|
require_once ('common.inc.php');
|
|
require_once ('user.inc.php');
|
|
require_once ('committee.inc.php');
|
|
|
|
if (!isset($_SESSION['users_type'])) {
|
|
/* No type set, invalid session */
|
|
echo 'ERROR: session is invalid';
|
|
exit;
|
|
}
|
|
|
|
$user_personal_fields = array(
|
|
'salutation' => array('name' => 'Salutation'),
|
|
'firstname' => array('name' => 'First Name'),
|
|
'lastname' => array('name' => 'Last Name'),
|
|
'email' => array('name' => 'Email Address'),
|
|
'username' => array('name' => 'Username'),
|
|
'address' => array('name' => 'Address 1'),
|
|
'address2' => array('name' => 'Address 2'),
|
|
'city' => array('name' => 'City'),
|
|
'lang' => array('name' => 'Preferred Language'),
|
|
'province' => array('name' => $config['provincestate']),
|
|
'organization' => array('name' => 'Organization'),
|
|
'firstaid' => array('name' => 'First Aid Training',
|
|
'type' => 'yesno'),
|
|
'cpr' => array('name' => 'CPR Training',
|
|
'type' => 'yesno'),
|
|
'phonehome' => array('name' => 'Phone (Home)',
|
|
'regexp' => '/^[1-9][0-9]{2}-?[1-9][0-9]{2}-?[0-9]{4}( x[0-9]{1,5})?$/',
|
|
'format' => "'NNN-NNN-NNNN' or 'NNNNNNNNNN' or 'NNN-NNN-NNNN xEXT'"),
|
|
'phonecell' => array('name' => 'Phone (Cell)',
|
|
'regexp' => '/^[1-9][0-9]{2}-?[1-9][0-9]{2}-?[0-9]{4}$/',
|
|
'format' => "'NNN-NNN-NNNN' or 'NNNNNNNNNN'"),
|
|
'phonework' => array('name' => 'Phone (Work)',
|
|
'regexp' => '/^[1-9][0-9]{2}-?[1-9][0-9]{2}-?[0-9]{4}( x[0-9]{1,5})?$/',
|
|
'format' => "'NNN-NNN-NNNN' or 'NNNNNNNNNN' or 'NNN-NNN-NNNN xEXT'"),
|
|
'fax' => array('name' => 'Fax',
|
|
'regexp' => '/^[1-9][0-9]{2}-?[1-9][0-9]{2}-?[0-9]{4}$/',
|
|
'format' => "'NNN-NNN-NNNN' OR 'NNNNNNNNNN'"),
|
|
'postalcode' => array('name' => $config['postalzip'],
|
|
'regexp' => '/^(([A-Z][0-9][A-Z]( )?[0-9][A-Z][0-9])|([0-9]{5}))$/i',
|
|
'format' => "'ANA NAN' or 'ANANAN' or 'NNNNN'"),
|
|
);
|
|
|
|
/* Sort out who we're editting */
|
|
if (get_value_from_array($_POST, 'users_id'))
|
|
$eid = intval($_POST['users_id']); /* From a save form */
|
|
else if (array_key_exists('embed_edit_id', $_SESSION))
|
|
$eid = $_SESSION['embed_edit_id']; /* From the embedded editor */
|
|
else
|
|
$eid = $_SESSION['users_id']; /* Regular entry */
|
|
|
|
if ($eid != $_SESSION['users_id']) {
|
|
/*
|
|
* Not editing ourself, we had better be
|
|
* a committee member
|
|
*/
|
|
user_auth_required('committee', 'admin');
|
|
}
|
|
$type = $_SESSION['users_type'];
|
|
|
|
$u = user_load($eid);
|
|
|
|
/* Load the fields the user can edit, and the ones that are required */
|
|
$fields = array();
|
|
$required = array();
|
|
$errorfields = array();
|
|
foreach ($u['types'] as $t) {
|
|
$fields = array_merge($fields,
|
|
user_personal_fields($t));
|
|
$required = array_merge($required,
|
|
user_personal_required_fields($t));
|
|
}
|
|
|
|
switch (get_value_from_array($_GET, 'action')) {
|
|
case 'save':
|
|
$users_id = intval($_POST['users_id']);
|
|
if ($users_id != $_SESSION['users_id']) {
|
|
user_auth_required('committee', 'admin');
|
|
}
|
|
|
|
$u = user_load($users_id);
|
|
|
|
$save = true;
|
|
/* Set values */
|
|
foreach ($fields as $f) {
|
|
$u[$f] = iconv('UTF-8', 'ISO-8859-1', stripslashes($_POST[$f]));
|
|
/* Allow the user to clear a field regardless of regex */
|
|
if ($u[$f] == '')
|
|
continue;
|
|
|
|
/* See if this field has a validate */
|
|
if (isset($user_personal_fields[$f]['regexp'])) {
|
|
/* Match the regex */
|
|
if (!preg_match($user_personal_fields[$f]['regexp'], $u[$f])) {
|
|
/* Bad */
|
|
error_("Invalid format for $f expecting ({$user_personal_fields[$f]['format']})");
|
|
$save = false;
|
|
$errorfields[] = $f;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!in_array('username', $fields) || !array_key_exists('username', $u) || $u['username'] == '') {
|
|
$u['username'] = $u['email'];
|
|
}
|
|
|
|
if (in_array('committee', $u['types'])) {
|
|
/*
|
|
* Trying to save a committee member eh? Well, we established above
|
|
* that we're allowed to be here, so go ahead and save it
|
|
*/
|
|
$u['displayemail'] = ($_POST['displayemail'] == 'yes') ? 'yes' : 'no';
|
|
$u['emailprivate'] = stripslashes($_POST['emailprivate']);
|
|
|
|
if (committee_auth_has_access('super')) {
|
|
/* But only superusers can save these ones */
|
|
$u['access_admin'] = ($_POST['access_admin'] == 'yes') ? 'yes' : 'no';
|
|
$u['access_config'] = ($_POST['access_config'] == 'yes') ? 'yes' : 'no';
|
|
$u['access_super'] = ($_POST['access_super'] == 'yes') ? 'yes' : 'no';
|
|
}
|
|
}
|
|
|
|
/* Check for an email collision */
|
|
$em = stripslashes($_POST['email']);
|
|
$q = $pdo->prepare("SELECT *,max(year) FROM users WHERE email=? HAVING uid!=? AND deleted='no' ");
|
|
$q->execute([$em,$u['uid']]);
|
|
if ($q->rowCount() > 0) {
|
|
error_('That email address is in use by another user');
|
|
echo 'email error';
|
|
$save = false;
|
|
}
|
|
|
|
if ($save == true) {
|
|
user_save($u);
|
|
happy_('%1 %2 successfully updated', array($u['firstname'], $u['lastname']));
|
|
}
|
|
|
|
// reload the user record because we dont know if we saved or didnt save above, we just want
|
|
// to know what the user looks like _now_
|
|
$u = user_load($users_id);
|
|
$newstatus = user_personal_info_status($u);
|
|
echo '<script type="text/javascript">';
|
|
echo "personal_update_status('$newstatus');\n";
|
|
echo "</script>\n";
|
|
exit;
|
|
}
|
|
|
|
// send the header
|
|
if (get_value_from_array($_SESSION, 'embed') == true) {
|
|
echo '<br/>';
|
|
display_messages();
|
|
echo '<h3>' . i18n('Personal Information') . '</h3>';
|
|
echo '<br/>';
|
|
} else {
|
|
send_header("Personal Information for {$u['firstname']} {$u['lastname']}",
|
|
array($user_what[$type] . ' Registration' => "{$type}_main.php"),
|
|
'edit_profile');
|
|
}
|
|
|
|
$newstatus = user_personal_info_status($u);
|
|
?>
|
|
<script type="text/javascript">
|
|
|
|
function personal_save()
|
|
{
|
|
$("#debug").load("<?= $config['SFIABDIRECTORY'] ?>/user_personal.php?action=save", $("#personal_form").serializeArray());
|
|
return false;
|
|
}
|
|
|
|
function personal_update_status(s) {
|
|
if(s!='complete') {
|
|
$("#personal_info_status").html('<?= error(i18n('Personal Information Incomplete')) ?>');
|
|
}
|
|
else
|
|
$("#personal_info_status").html('<?= happy(i18n('Personal Information Complete')) ?>');
|
|
}
|
|
|
|
//when we're ready, output the status
|
|
$(document).ready( function() { personal_update_status('<?= $newstatus ?>');});
|
|
|
|
</script>
|
|
<?
|
|
echo '<div id="personal_info_status"></div>';
|
|
|
|
if (count($u['types']) > 1) {
|
|
$roles = '';
|
|
foreach ($u['types'] as $t) {
|
|
$roles .= (($roles == '') ? '' : ', ') . i18n($user_what[$t]);
|
|
}
|
|
echo notice(i18n('This user has multiple roles, the fields shown below are a combination of every role. Some may not apply to some roles. This user has the following roles:') . ' ' . $roles);
|
|
}
|
|
|
|
function item($user, $fname, $subtext = '')
|
|
{
|
|
global $fields, $required;
|
|
global $errorfields;
|
|
global $user_personal_fields;
|
|
global $style;
|
|
|
|
if (in_array($fname, $fields)) {
|
|
$text = i18n($user_personal_fields[$fname]['name']);
|
|
if (in_array($fname, $errorfields))
|
|
$style = 'style="color:red;"';
|
|
echo "<td><span $style>$text</span>: ";
|
|
if ($subtext != '')
|
|
echo '<br /><span style="font-size: 0.5em;">' . i18n($subtext) . '</span>';
|
|
echo '</td><td>';
|
|
|
|
$req = in_array($fname, $required) ? REQUIREDFIELD : '';
|
|
|
|
switch ($user_personal_fields[$fname]['name']) {
|
|
case 'yesno':
|
|
echo "<select name=\"$fname\">";
|
|
$sel = ($user[$fname] == 'yes') ? 'selected="selected"' : '';
|
|
echo "<option value=\"yes\" $sel>" . i18n('Yes') . "</option>\n";
|
|
$sel = ($user[$fname] == 'no') ? 'selected="selected"' : '';
|
|
echo "<option value=\"no\" $sel>" . i18n('No') . "</option>\n";
|
|
echo "</select> $req";
|
|
break;
|
|
default:
|
|
echo "<input onchange=\"fieldChanged()\" type=\"text\" name=\"$fname\" value=\"{$user[$fname]}\" />$req";
|
|
break;
|
|
}
|
|
echo '</td>';
|
|
} else {
|
|
echo '<td></td><td></td>';
|
|
}
|
|
}
|
|
|
|
echo "<form name=\"personalform\" id=\"personal_form\">\n";
|
|
echo "<input type=\"hidden\" name=\"users_id\" value=\"{$u['id']}\" />";
|
|
echo "<table class='user-info-table'>\n";
|
|
|
|
echo "<tr>\n";
|
|
item($u, 'firstname');
|
|
item($u, 'lastname');
|
|
echo "</tr>\n";
|
|
echo "<tr>\n";
|
|
item($u, 'email');
|
|
item($u, 'salutation');
|
|
echo "</tr>\n";
|
|
echo "<tr>\n";
|
|
item($u, 'username', '(if different from Email)');
|
|
echo "</tr>\n";
|
|
echo "<tr>\n";
|
|
item($u, 'address');
|
|
item($u, 'city');
|
|
echo "</tr>\n";
|
|
echo "<tr>\n";
|
|
item($u, 'address2');
|
|
if (in_array('province', $fields)) {
|
|
echo '<td>' . i18n($config['provincestate']) . ': </td>';
|
|
echo '<td>';
|
|
emit_province_selector('province', $u['province'], 'onchange="fieldChanged()"');
|
|
if (in_array('province', $required))
|
|
echo REQUIREDFIELD;
|
|
echo '</td>';
|
|
} else {
|
|
echo '<td></td><td></td>';
|
|
}
|
|
echo "</tr>\n";
|
|
echo "<tr>\n";
|
|
item($u, 'postalcode');
|
|
echo '<td></td><td></td>';
|
|
echo "</tr>\n";
|
|
echo '<tr>';
|
|
item($u, 'phonehome');
|
|
item($u, 'phonecell');
|
|
echo "</tr>\n";
|
|
|
|
echo "<tr>\n";
|
|
item($u, 'organization');
|
|
item($u, 'phonework');
|
|
echo '</tr>';
|
|
echo "<tr>\n";
|
|
item($u, 'fax');
|
|
echo '</tr>';
|
|
|
|
echo "<tr>\n";
|
|
item($u, 'firstaid');
|
|
item($u, 'cpr');
|
|
echo '</tr>';
|
|
echo "<tr>\n";
|
|
if (in_array('lang', $fields)) {
|
|
echo '<td>' . i18n('Preferred Lang') . ': </td>';
|
|
echo '<td>';
|
|
echo '<select name="lang">';
|
|
echo '<option value="">' . i18n('Choose') . "</option>\n";
|
|
foreach ($config['languages'] AS $l => $ln) {
|
|
if ($u['lang'] == $l)
|
|
$sel = 'selected="selected"';
|
|
else
|
|
$sel = '';
|
|
echo "<option value=\"$l\" $sel>" . i18n($ln) . "</option>\n";
|
|
}
|
|
echo '</select>';
|
|
if (in_array('lang', $required))
|
|
echo REQUIREDFIELD;
|
|
echo '</td>';
|
|
} else {
|
|
echo '<td></td><td></td>';
|
|
}
|
|
echo '<td></td><td></td>';
|
|
echo '</tr>';
|
|
|
|
echo '<tr><td colspan="4"><hr /></td></tr>';
|
|
|
|
echo '</table>';
|
|
|
|
/* Committee specific fields */
|
|
if (in_array('committee', $u['types'])) {
|
|
echo "<table class='user-info-table'>";
|
|
|
|
echo '<tr><td>' . i18n('Email (Private)') . ":</td><td><input type=\"text\" name=\"emailprivate\" value=\"{$u['emailprivate']}\" /></td></tr>\n";
|
|
echo '<tr><td>' . i18n('Display Emails') . ':</td><td>';
|
|
if ($u['displayemail'] == 'no')
|
|
$checked = 'checked="checked"';
|
|
else
|
|
$checked = '';
|
|
echo "<input type=\"radio\" name=\"displayemail\" value=\"no\" $checked />" . i18n('No');
|
|
echo ' ';
|
|
if ($u['displayemail'] == 'yes')
|
|
$checked = 'checked="checked"';
|
|
else
|
|
$checked = '';
|
|
echo "<input type=\"radio\" name=\"displayemail\" value=\"yes\" $checked />" . i18n('Yes');
|
|
|
|
if (committee_auth_has_access('super')) {
|
|
/*
|
|
* If the user is a committee member, only print these fields
|
|
* if the editer has super access
|
|
*/
|
|
echo '<tr><td align="center" colspan="2"><hr /></td></tr>';
|
|
echo '<tr><td>' . i18n('Access Controls') . ':</td><td>';
|
|
$ch = ($u['access_admin'] == 'yes') ? 'checked="checked"' : '';
|
|
echo "<input type=\"checkbox\" name=\"access_admin\" value=\"yes\" $ch /> " . i18n('Administration') . '<br />';
|
|
$ch = ($u['access_config'] == 'yes') ? 'checked="checked"' : '';
|
|
echo "<input type=\"checkbox\" name=\"access_config\" value=\"yes\" $ch /> " . i18n('Configuration') . '<br />';
|
|
$ch = ($u['access_super'] == 'yes') ? 'checked="checked"' : '';
|
|
echo "<input type=\"checkbox\" name=\"access_super\" value=\"yes\" $ch /> " . i18n('Superuser') . '<br />';
|
|
echo '</td></tr>';
|
|
}
|
|
echo '</table>';
|
|
}
|
|
|
|
echo '<input type="submit" onclick="personal_save()" value="' . i18n('Save Personal Information') . "\" />\n";
|
|
|
|
echo '</form>';
|
|
|
|
echo '<br />';
|
|
|
|
if (get_value_from_array($_SESSION, 'embed') != true) {
|
|
send_footer();
|
|
}
|
|
|
|
?>
|