<?php
|
|
|
|
if($admin)
|
|
{
|
|
$errors = array();
|
|
|
|
if(isset($_POST['newUser']))
|
|
{
|
|
$i_first = mysqli_real_escape_string($dbc, trim($_POST['first']));
|
|
$i_last = mysqli_real_escape_string($dbc, trim($_POST['last']));
|
|
$i_pass = mysqli_real_escape_string($dbc, trim($_POST['pass']));
|
|
$i_user = mysqli_real_escape_string($dbc, trim($_POST['user_name']));
|
|
|
|
if($i_first && $i_last && $i_pass && $i_user)
|
|
{
|
|
$q = "select user_id from users where user_name='$i_user'";
|
|
$r = mysqli_query($dbc, $q);
|
|
|
|
if(@mysqli_num_rows($r) == 1)
|
|
{
|
|
$errors['name'] = "That user name is already in use.";
|
|
}
|
|
}
|
|
else
|
|
{
|
|
$errors['input'] = "Please fill in all fields!";
|
|
}
|
|
|
|
if(empty($errors))
|
|
{
|
|
$passcom = $i_pass . $i_first;
|
|
$passcom = SHA1($passcom);
|
|
|
|
if(isset($_POST['admin']))
|
|
{
|
|
$adminn = "true";
|
|
}
|
|
else
|
|
{
|
|
$adminn = "false";
|
|
}
|
|
|
|
$q = "insert into users(first_name, last_name, user_name,
|
|
pass, registration_date, admin) values ('$i_first', '$i_last' , '$i_user',
|
|
'$passcom', now(), $adminn)";
|
|
//echo $q;
|
|
$r = mysqli_query($dbc, $q);
|
|
|
|
header("Location: admin.php");
|
|
|
|
}
|
|
}
|
|
|
|
echo '<h1 class="w3-text-teal"><center>Add User</center></h1>';
|
|
|
|
echo '<form action="admin.php" method ="post" class="w3-container
|
|
w3-card-4">
|
|
|
|
<div class="w3-group">
|
|
<input class="w3-input" type="text" name="user_name" required>
|
|
<label class="w3-label w3-validate">User Name</label>
|
|
</div>
|
|
<div class="w3-group">
|
|
<input class="w3-input" type="text" name="first" required>
|
|
<label class="w3-label w3-validate">First Name</label>
|
|
</div>
|
|
<div class="w3-group">
|
|
<input class="w3-input" type="text" name="last" required>
|
|
<label class="w3-label w3-validate">Last Name</label>
|
|
</div>
|
|
<div class="w3-group">
|
|
<input class="w3-input" type="password" name="pass"
|
|
maxlength="20" required>
|
|
<label class="w3-label w3-validate">Password</label>
|
|
</div>
|
|
|
|
<input class="w3-check" type="checkbox" name="admin">
|
|
<label class="w3-validate">Admin<label>
|
|
|
|
|
|
<p><input type="submit" name="Submit" value="Add User"
|
|
class="w3-padding-16 w3-hover-dark-grey w3-btn-block w3-center-align" /></p>
|
|
<input type="hidden" name="newUser" value="TRUE" />
|
|
|
|
|
|
</form>';
|
|
|
|
foreach($errors as $msg)
|
|
echo " - $msg<br />";
|
|
}
|