Merci, c'est fini justement.
Ta version comporte à première vue, puisque tu sembles quand même mettre à jour le mot de passe (sans envoyer de notification)
J'ai réalisé de mon coté l'opération, en mettant un peu plus de lignes que toi, ça sera dispo dans la version 2.0.6. comme correctif, mais d'ici là tu peux tester.
if ($act == 'edit')
{
if (($uid != 1) || (($uid == 1) && ($_SESSION['ntux2_group'] == 'root')))
{
// retrieve user's data
$req_subscriber = sprintf("SELECT id, groupval, name, mail, footer FROM ".DB_PREFIX."users WHERE id='%d' ",$uid);
$subscriber = ExecuteQuery($req_subscriber, __FILE__, __LINE__);
$sub = mysql_fetch_array($subscriber);
// default values
$name = Disp($sub['name']);
$email = $sub['mail'];
$group = $sub['groupval'];
$footer = str_replace('<br />', '',$sub['footer']);
// retrieve profiles datas
$array_profiles = array();
$req_profiles = "SELECT id, title, descr, formats FROM ".DB_PREFIX."profiles;";
$profiles = ExecuteQuery($req_profiles, __FILE__, __LINE__);
while($p = mysql_fetch_array($profiles))
{
$array_profiles[$p['id']]['title'] = Disp($p['title']);
$array_profiles[$p['id']]['descr'] = Disp($p['descr']);
$array_profiles[$p['id']]['formats'] = Disp($p['formats']);
};
// retrieve this user's subscriptions
$req_subs = "SELECT id_profile AS pid, reg_format FROM ".DB_PREFIX."subscriptions WHERE id_user='".$uid."';";
$subs = ExecuteQuery($req_subs, __FILE__, __LINE__);
$array_selected_val = array();
while ($sub = mysql_fetch_array($subs))
{
$array_selected_val[$sub['pid']] = $sub['reg_format'];
};
// retrieve permissions
$req_perms = "SELECT id_profile AS pid FROM ".DB_PREFIX."writers WHERE id_user='".$uid."';";
$perms = ExecuteQuery($req_perms, __FILE__, __LINE__);
$array_selected_perms = array();
while ($perm = mysql_fetch_array($perms))
{
$array_selected_perms[$perm['pid']] = 1;
};
if (isset($_POST['submit']))
{
$errform = false;
// general data
$name = (isset($_POST['name'])) ? Rec($_POST['name']) : '';
$newgroup = (isset($_POST['newgroup'])) ? $_POST['newgroup'] : 'subscriber';
$oldgroup = (isset($_POST['oldgroup'])) ? $_POST['oldgroup'] : 'subscriber';
$email = (isset($_POST['email'])) ? $_POST['email'] : '';
$email = (IsEmail($email)) ? $email : '';
$footer = (isset($_POST['footer'])) ? Rec($_POST['footer']) : '';
// subscriptions
$array_new_regs = array();
foreach($array_profiles as $pid => $p)
{
if (isset($_POST['format_'.$pid]))
{
if ($_POST['format_'.$pid] != 'remove')
{
$array_new_regs[$pid] = $_POST['format_'.$pid];
};
};
};
// profiles permissions
$array_new_perms = array();
foreach($array_profiles as $pid => $p)
{
// if profile is checked, user may write in it
if (isset($_POST['perm_'.$pid]))
{
$array_new_perms[] = $pid;
}
};
// basic checks
if ($email != '')
{
// Now update user
if ($newgroup != $oldgroup) // group has changed
{
// reset pwd
$random_pwd = RandomPassword(10);
$req_update_user = sprintf("UPDATE ".DB_PREFIX."users SET
groupval='%s',
name='%s',
mail='%s',
firstletter='%s',
footer='%s',
pwd='%s'
WHERE
id='%d';",$newgroup, DBInsert($name), $email, $email[0], DBInsert($footer), md5($random_pwd), $uid);
}
else // same group, do not update password neither groupval
{
$req_update_user = sprintf("UPDATE ".DB_PREFIX."users SET
name='%s',
mail='%s',
firstletter='%s',
footer='%s'
WHERE
id='%d';",DBInsert($name), $email, $email[0], DBInsert($footer), $uid);
};
if (ExecuteQuery($req_update_user, __FILE__, __LINE__))
{
// notify by mail ?
$send_alert_mail = false;
/*
* case 1 : a subscriber becomes writer or admin => notify
* case 2 : an admin/a writer is downgraded to subscriber
* case 3 : an admin => writer or a writer => admin
*/
if (($oldgroup == 'subscriber') && ($newgroup != 'subscriber')) // case 1
{
$sent_message = $ntux2['subscribers_sendemail_writer'];
$send_alert_mail = true;
};
if (($oldgroup != 'subscriber') && ($newgroup == 'subscriber')) // case 2
{
$sent_message = $ntux2['subscribers_sendemail_subscriber'];
$send_alert_mail = true;
};
if (($oldgroup == 'admin') && ($newgroup == 'writer') || ($oldgroup == 'writer') && ($newgroup == 'admin')) // case 3
{
$sent_message = $ntux2['subscribers_sendemail_writer'];
$send_alert_mail = true;
};
if ($send_alert_mail)
{
// now replace variables in the body
$sent_message = str_replace('{SITE_NAME}', SITE_NAME, $sent_message);
$sent_message = str_replace('{USER_GRP}', $ntux2['group_'.$newgroup], $sent_message);
$sent_message = str_replace('{ADMIN_URL}', SITE_URL.SITE_NTUXDIR.'admin/', $sent_message);
$sent_message = str_replace('{RANDOM_PWD}', $random_pwd, $sent_message);
$sent_message = str_replace('{USER_NAME}', Disp($_SESSION['ntux2_name']), $sent_message);
SendTextMail($email, $ntux2['subscriber_newstaff_subject'], $sent_message, SITE_NAME, Disp($_SESSION['ntux2_name']));
};
// if this is this user (writer editing footer f.ex.) update SESSION
if ($_SESSION['ntux2_iduser'] == $uid)
{
$_SESSION['ntux2_name'] = $name;
$_SESSION['ntux2_footer'] = $footer;
}
// update registrations
// if update : remove all registrations, and rewrite them
$req_subuser = "DELETE FROM ".DB_PREFIX."subscriptions WHERE id_user='".$uid."';";
if (ExecuteQuery($req_subuser, __FILE__, __LINE__))
{
foreach($array_new_regs as $pid => $format)
{
$req_reguser = "INSERT INTO ".DB_PREFIX."subscriptions VALUES('".$uid."','".$pid."','".$format."');";
if (!ExecuteQuery($req_reguser, __FILE__, __LINE__))
{
$err_profile = GetProfileData($pid);
echo '<p>'.$ntux2['err_reg_email_profile'].' '.Disp($err_profile['title']).'</p>'.CR;
};
};
};
};
// update perms ?
if (($_SESSION['ntux2_group'] == 'root') || ($_SESSION['ntux2_group'] == 'admin'))
{
$req_del_perms = "DELETE FROM ".DB_PREFIX."writers WHERE id_user='".$uid."';";
if (ExecuteQuery($req_del_perms, __FILE__, __LINE__))
{
//print_r($array_new_perms);
// now rewrite them
foreach($array_new_perms as $perm_pid)
{
$req_perm = "INSERT INTO ".DB_PREFIX."writers (id_user, id_profile) VALUES ('".$uid."','".$perm_pid."');";
ExecuteQuery($req_perm, __FILE__, __LINE__);
};
echo '<p class="ok">'.$ntux2['subscribers_edit_ok'].'</p>'.CR;
};
};
if (($_SESSION['ntux2_group'] == 'root') || ($_SESSION['ntux2_group'] == 'admin'))
{
$uri = 'subscribers.php?act=';
$uri .= ($origin == 'manage_staff') ? 'manage_staff' : 'list';
RedirectTo($uri, 3000, $ntux2);
}
else
{
RedirectTo('subscribers.php?act=edit&uid='.$uid, 3000, $ntux2);
}
}
else
{
$errform = true;
};
}; // end of if (isset($_POST['submit']))
PHP Astux
