root/branches/multiuser/admin/users.php

<?php
###############################################################################
# Gregarius - A PHP based RSS aggregator.
# Copyright (C) 2003 - 2006 Marco Bonetti
#
###############################################################################
# This program is free software and open source software; you can redistribute
# it and/or modify it under the terms of the GNU General Public License as
# published by the Free Software Foundation; either version 2 of the License,
# or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
# FITNESS FOR A PARTICULAR PURPOSE.      See the GNU General Public License for
# more details.
#
# You should have received a copy of the GNU General Public License along
# with this program; if not, write to the Free Software Foundation, Inc.,
# 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA  or visit
# http://www.gnu.org/licenses/gpl.html
#
###############################################################################
# E-mail:          mbonetti at gmail dot com
# Web page:        http://gregarius.net/
#
###############################################################################


function set_admin_pass($uname=null,$pass=null) {
        $sql = "select count(*) from " . getTable('users')
                ." where password != '' and ulevel >=99";
        list($adminexists) = rss_fetch_row(rss_query($sql));
        if ($adminexists) {
                die('Oops. Admin already exists!');
        }
        
        if ($uname && $pass) {
                rss_query( "update " . getTable('users') . " set uname='$uname', "
                 ."password='" . md5(md5($pass)) . "' where ulevel=99" );
                rss_invalidate_cache(); 
                rss_redirect('admin/');
                exit();
        }
        
        admin_header();
                ?>
        <script type="text/javascript">
        <!--
                function on_submit_password_match() {
                        pass=document.getElementById('password').value;
                        pass2=document.getElementById('password2').value;
                        if(pass !== pass2){
                                msg = '<?php echo __('Passwords do not match!') ?>';
                                document.getElementById('admin_match_result').innerHTML = msg;
                                document.getElementById('password').value = '';
                                document.getElementById('password2').value = '';
                                return false;
                        }else{
                                document.getElementById('password2').value = '';
                                return loginHandler();
                        }
                }       
        -->
        </script>
        
        <?php
  echo "\n<div id=\"channel_admin\" class=\"frame\">";
        echo "<h2></h2>\n"
                . __('<p>No Administrator has been specified yet!</p><p>Please provide an Administrator username and password now!</p>');
        
        echo "<form action=\"".$_SERVER['PHP_SELF'] . "\" onsubmit=\"return on_submit_password_match();\" method=\"post\">\n"
        ."<fieldset style=\"width:400px;\">"
        ."<p><label style=\"display:block\" for=\"username\">".__('Username').":</label>\n"
        ."<input type=\"text\" id=\"username\" name=\"username\" /></p>\n"
        ."<p><label style=\"display:block\" for=\"password\">".__('Password').":</label>\n"
        ."<input type=\"password\" id=\"password\" name=\"password\" /></p>\n"
        ."<p><label style=\"display:block\" for=\"password2\">".__('Password (again)').":</label>\n"
        ."<input type=\"password\" id=\"password2\" name=\"password2\" /></p>\n"
        ."<p><input type=\"submit\" value=\"".__('OK')."\" /></p>\n"
        ."<div style=\"display:inline;\" id=\"admin_match_result\"></div>\n"
        ."</fieldset>\n"
        ."</form>\n";
        
        echo "</div>\n";
        admin_footer(); 
        exit();
}

function rss_login_form($uname=null,$pass=null) {
        
        admin_header();
  echo "\n<div id=\"channel_admin\" class=\"frame\">";
                
        echo "<form id=\"admin_login\" onsubmit=\"return loginHandler();\" 
                style=\"text-align:center\" action=\"".$_SERVER['PHP_SELF'] ."\" method=\"post\">\n"
        ."<fieldset>"
        ."<legend>" . __('Please log in') . "</legend>\n"
        ."<p><label style=\"display:block\" for=\"username\">".__('Username').":</label>\n"
        ."<input type=\"text\" id=\"username\" name=\"username\" /></p>\n"
        ."<p><label style=\"display:block\" for=\"password\">".__('Password').":</label>\n"
        ."<input type=\"password\" id=\"password\" name=\"password\" /></p>\n"
        ."<p id=\"admin_login_submit\"><input type=\"submit\" value=\"".__('Login')."\" /></p>\n"
        ."<span style=\"display:inline;\" id=\"admin_login_result\"></span>\n"
        ."</fieldset>\n"
        ."</form>\n";
        
        echo "</div>\n";
        admin_footer(); 
        exit();
}


function users(){
        echo "<h2 class=\"trigger\">".LBL_ADMIN_USERS."</h2>\n";
        if(rss_user_check_user_level(RSS_USER_LEVEL_ADMIN)){
                // TODO: we need more labels here
                echo "<table>\n"
                ."<tr>\n"
                ."\t<th>" . __('Username') . "</th>\n"
                ."\t<th></th>\n"
                ."\t<th></th>\n"
                ."\t<th></th>\n"
                ."</tr>\n";
                $sql = "select uid, uname, realname, ulevel, lastlogin from " .getTable("users");
                $res = rss_query($sql);
            $cntr = 0;
            while (list($uid, $uname, $realname, $ulevel, $lastlogin) = rss_fetch_row($res)){
                $class_ = (($cntr++ % 2 == 0)?"even":"odd");
                echo "<tr class=\"$class_\" id=\"u$uid\">\n"
                ."\t<td>$uname</td>\n"
                ."\t<td>$realname</td>\n"
                ."\t<td>$ulevel</td>\n"
                ."\t<td>$lastlogin</td>\n"
                ."</tr>\n";
            }
                echo "</table>\n";
                // TODO: add new user dialog
        }else if($auth_level == RSS_USER_LEVEL_BASIC){
                // TODO: allow user to edit own profile
        }       
}

function users_admin(){
// perform actions
}
?>