| <?php | |
|      | |
|     if($admin) | |
|     { | |
|         $errors = array(); | |
|          | |
|          | |
|         if(isset($_POST['newUser'])) | |
|         { | |
|            // echo '**********'; | |
|             $i_first = mysqli_real_escape_string($dbc, trim($_POST['first'])); | |
|             $i_last = mysqli_real_escape_string($dbc, trim($_POST['last'])); | |
|             $i_pass = mysqli_real_escape_string($dbc, trim($_POST['pass'])); | |
|             $i_user = mysqli_real_escape_string($dbc, trim($_POST['user_name'])); | |
|              | |
|             if($i_first && $i_last && $i_pass && $i_user) | |
|             { | |
|                 $q = "select user_id from users where user_name='$i_user'"; | |
|                 $r = mysqli_query($dbc, $q); | |
|                  | |
|                 if(@mysqli_num_rows($r) == 1) | |
|                 { | |
|                     $errors['name'] = "That user name is already in use."; | |
|                 } | |
|             } | |
|             else | |
|             { | |
|                 $errors['input'] = "Please fill in all fields!"; | |
|             } | |
|              | |
|              | |
|             if(empty($errors)) | |
|             { | |
|                 $passcom = $i_pass . $i_first; | |
|                 $passcom = SHA1($passcom); | |
|                  | |
|                 if(isset($_POST['admin'])) | |
|                 { | |
|                     $adminn = "true"; | |
|                 } | |
|                 else | |
|                 { | |
|                     $adminn = "false"; | |
|                 } | |
|                  | |
|                 $q = "insert into users(first_name, last_name, user_name, pass, registration_date, admin) values ('$i_first', '$i_last' , '$i_user', '$passcom', now(), $adminn)"; | |
|                 //echo $q; | |
|                 $r = mysqli_query($dbc, $q); | |
|                  | |
|                 header("Location: admin.php"); | |
|                  | |
|             } | |
|         } | |
|          | |
|         echo '<h1 class="w3-text-teal"><center>Add User</center></h1>'; | |
|          | |
|         echo '<form action="admin.php" method ="post" class="w3-container w3-card-4"> | |
|              | |
|             <div class="w3-group"> | |
|                 <input class="w3-input" type="text" name="user_name" required> | |
|                 <label class="w3-label w3-validate">User Name</label> | |
|             </div> | |
|             <div class="w3-group"> | |
|                 <input class="w3-input" type="text" name="first" required> | |
|                 <label class="w3-label w3-validate">First Name</label> | |
|             </div> | |
|             <div class="w3-group"> | |
|                 <input class="w3-input" type="text" name="last" required> | |
|                 <label class="w3-label w3-validate">Last Name</label> | |
|             </div> | |
|             <div class="w3-group"> | |
|                 <input class="w3-input" type="password" name="pass" maxlength="20" required> | |
|                 <label class="w3-label w3-validate">Password</label> | |
|             </div> | |
|              | |
|             <input class="w3-check" type="checkbox" name="admin"> | |
|             <label class="w3-validate">Admin<label> | |
|              | |
|  | |
|             <p><input type="submit" name="Submit" value="Add User" class="w3-padding-16 w3-hover-dark-grey w3-btn-block w3-center-align" /></p> | |
|             <input type="hidden" name="newUser" value="TRUE" /> | |
|              | |
|          | |
|         </form>'; | |
|          | |
|         foreach($errors as $msg) | |
|         { | |
|             echo " - $msg<br />"; | |
|         } | |
|     } | |
|      | |
|      | |
| ?>
 |