Pannello gestione utenti/moduli

2015-10-15 13:40:45 +02:00
parent 6c42d75681
commit 1bacc3232e
12 changed files with 284 additions and 144 deletions
--- a/utenti/dettlogutenti.php
+++ b/utenti/dettlogutenti.php
@@ -1,7 +1,8 @@
 <?php
 include_once ("../core/config.php");
 $UTENTE = login();
-isadmin();
+$DIRITTI = diritti();
+//isadmin();
 ?>
 <body>
 <link rel="stylesheet" type="text/css" href="<?php print $CONF['base_url'] ?>/css/stile.css" />
--- a/utenti/index.php
+++ b/utenti/index.php
@@ -1,7 +1,8 @@
 <?php
 include_once ("../core/config.php");
 $UTENTE = login();
-isadmin();
+$DIRITTI = diritti();
+//isadmin();
 ?>

 <?php include_once ("../core/top.php");?> 
--- a/utenti/logutenti.php
+++ b/utenti/logutenti.php
@@ -1,7 +1,8 @@
 <?php
 include_once ("../core/config.php");
 $UTENTE = login();
-isadmin();
+$DIRITTI = diritti();
+//isadmin();
 ?>
 <body>
 <link rel="stylesheet" type="text/css" href="<?php print $CONF['base_url'] ?>/css/stile.css" />
--- a/utenti/modutenti.php
+++ b/utenti/modutenti.php
@@ -1,7 +1,7 @@
 <?php
 include_once ("../core/config.php");
 $UTENTE = login();
-//isadmin();
+$DIRITTI = diritti();
 ?>
 <?php include_once ("../core/top.php"); ?>

@@ -16,6 +16,7 @@ if (isset($_GET['id'])) {
 } else if (isset ($_POST['id'])) {
 	$modifica = 2;
 	$id 		= $_POST['id'];
+	$rm 		= $_POST['rm'];
 	$utente 	= $_POST['utente'];
 	$password1 	= $_POST['password1'];
 	$password2	= $_POST['password2'];
@@ -33,7 +34,11 @@ if (isset($_GET['id'])) {
 		$querypwd = "";
 	}

-	if ($id > 0) {
+	if ( $rm == 1) {
+		$testo = "L'utente e' stato correttamente rimosso";
+		$query = "DELETE FROM permessi WHERE id_utenti = $id";
+		$query2 = "DELETE FROM utenti WHERE id = $id";
+	} elseif ($id > 0) {
 		$testo = "L'utente e' stato correttamente modificato";
 		$query = "UPDATE utenti SET $querypwd admin = $admin, attivo=$attivo, modifica = NOW(), mail='$mail'  WHERE `id`=$id";
 	} else {
@@ -47,7 +52,7 @@ if (isset($_GET['id'])) {
 	</tr>
 	<tr>
 		<td>
-<?php	if (mysql_query( $query, $DB_ID )) { ?>
+<?php	if (mysql_query( $query, $DB_ID ) && ((!is_null ($query2) && mysql_query( $query2, $DB_ID )) || (is_null ($query2)))) { ?>
 <?php print $testo ?><br>
 <?php	} else { ?>
 Non e' stato possibile eseguire l'operazione richiesta a causa di un errore: <?php print mysql_error() ?><br>
@@ -59,7 +64,7 @@ Non e' stato possibile eseguire l'operazione richiesta a causa di un errore: <?p
 		<td><img src="<?php print $CONF['base_url'] ?>/img/spazio.gif" width="1" height="5" alt=""></td>
 	</tr>
 	<tr>
-		<td><input type="button" value="Ok" onclick="location.href = 'utenti.php';"></button></td>
+		<td><input type="button" value="Ok" onclick="location.href = '<?php print $CONF['base_url'] ?>/utenti/index.php';"></button></td>
 	</tr>
 	<tr>
 		<td><img src="<?php print $CONF['base_url'] ?>/img/spazio.gif" width="1" height="10" alt=""></td>
@@ -74,13 +79,17 @@ Non e' stato possibile eseguire l'operazione richiesta a causa di un errore: <?p

 <?php if (($modifica == 0 || $modifica == 1) && !isset($_GET['rm'])) { ?>

-
 <script type="text/javascript" src="<?php print $CONF['base_url'] ?>/jquery/jquery.js"></script>
 <script type="text/javascript" src="<?php print $CONF['base_url'] ?>/jquery/jquery.validate.js"></script>
 <script type="text/javascript" src="<?php print $CONF['base_url'] ?>/jquery/jquery.validate.password.js"></script>
 <link rel="stylesheet" type="text/css" href="<?php print $CONF['base_url'] ?>/jquery/jquery.validate.password.css" />

 <script type="text/javascript">
+function DoSubmit(){
+	document.getElementById("rm").value = '1';
+	return true;
+}
+
 $(document).ready(function() 
 {
 	$("#modulo").validate( {
@@ -136,9 +145,10 @@ $(document).ready(function()
 <form action="modutenti.php" method="post" id="modulo">
 <table cellpadding="0" cellspacing="0" border="0" width="90%">
 <?php if ($modifica == 1) { ?>
-<input type="hidden" name="id" value="<?php print $dato['id'] ?>">
+<input type="hidden" name="id" id="id" value="<?php print $dato['id'] ?>">
+<input type="hidden" name="rm" id="rm" value="0">
 <?php } else { ?>
-<input type="hidden" name="id" value="-1">
+<input type="hidden" name="id" d="id" value="-1">
 <?php } ?>
 <tr>
 	<td><img src="<?php print $CONF['base_url'] ?>/img/spazio.gif" width="30" height="1" alt=""></td>
@@ -158,7 +168,11 @@ $(document).ready(function()
 	<td><img src="<?php print $CONF['base_url'] ?>/img/spazio.gif" width="80" height="1" alt=""></td>
 	<td>Attivo <input name="attivo" type="checkbox" value=1 <?php if ($dato['attivo']) { print "checked=\"checked\""; } ?>></td>
 	<td><img src="<?php print $CONF['base_url'] ?>/img/spazio.gif" width="20" height="1" alt=""></td>
+<?php	if ($UTENTE['admin']) { ?>
 	<td>Admin <input name="admin" type="checkbox" value=1 <?php if ($dato['admin']) { print "checked=\"checked\""; } ?>></td>
+<?php	} else { ?>
+	<td>&nbsp;</td>
+<?php	} ?>
 	<td colspan="4"><img src="<?php print $CONF['base_url'] ?>/img/spazio.gif" width="250" height="1" alt=""></td>
 </tr>
 <tr><td colspan="9"><img src="<?php print $CONF['base_url'] ?>/img/spazio.gif" width="1" height="5" alt=""></td></tr>
@@ -195,7 +209,11 @@ $(document).ready(function()
 <tr><td align="center" colspan="9">
 	<input type="submit" value="<?php print $bottone ?>">
 	&nbsp;&nbsp;&nbsp;
-	<input type="button" value="Annulla" onclick="location.href = 'utenti.php';"></button>
+	<input type="button" value="Annulla" onclick="location.href = '<?php print $CONF['base_url'] ?>/utenti/index.php';"></button>
+<?php	if ($modifica == 1) { ?>
+	&nbsp;&nbsp;&nbsp;
+	<input type="submit" value="Rimuovi" onclick="DoSubmit()">
+<?php 	} ?>
 </td></tr>

 <tr><td colspan="9"><img src="<?php print $CONF['base_url'] ?>/img/spazio.gif" width="1" height="10" alt=""></td></tr>
@@ -203,4 +221,4 @@ $(document).ready(function()
 </form>
 <?php } ?>

-<?php include_once ("footer.php"); ?>
+<?php include_once ("../core/footer.php"); ?>
--- a/utenti/out.txt
+++ b/utenti/out.txt
@@ -0,0 +1,18 @@
+
+	INSERT INTO
+			permessi
+		SET
+			id_utenti = 2,
+			id_moduli = (	SELECT
+						id
+					FROM
+						moduli
+					WHERE
+						nome = 'Utenti' AND attivo = 1
+					),
+			accesso = 1,
+			modifica = NOW()
+		ON DUPLICATE KEY UPDATE
+			accesso = 1,
+			modifica = NOW()
+
--- a/utenti/permessiutenti.php
+++ b/utenti/permessiutenti.php
@@ -0,0 +1,112 @@
+<?php
+include_once ("../core/config.php");
+$UTENTE = login();
+$DIRITTI = diritti();
+
+include_once ("../core/top.php");
+$query = "	SELECT
+			id,
+			nome,
+			max(accesso) AS accesso
+		FROM
+			(SELECT
+				moduli.id AS id,
+				moduli.nome AS nome,
+				permessi.accesso AS accesso
+			FROM
+				permessi
+			JOIN
+				moduli ON permessi.id_moduli = moduli.id AND moduli.attivo = 1
+			WHERE
+				permessi.id_utenti = ".$_GET['id']."
+			UNION DISTINCT
+			SELECT 
+				moduli.id AS id,
+				moduli.nome AS nome,
+				0 AS accesso
+			FROM
+				moduli
+			WHERE
+				moduli.attivo = 1) s
+			GROUP BY
+				nome
+			ORDER BY
+				nome
+";
+
+$permessi = mysql_query( $query, $DB_ID );
+
+$query = "	SELECT 
+			utente, 
+			admin
+		FROM 
+			utenti
+		WHERE
+			id = ".$_GET['id']."
+		AND
+			attivo = 1
+";
+$res = mysql_query( $query, $DB_ID );
+$dato = mysql_fetch_array ($res);
+
+$livelli = get_levels();
+//$livelli = array(0=>"Negato", 5=>"Utente", 10=>"Admin");
+?>
+<script type="text/javascript" src="<?php print $CONF['base_url']?>/jquery/jquery-1.8.0.min.js"></script>
+
+<table cellpadding="0" cellspacing="0" border="0" width="40%">
+<tr>
+<?php	if ($dato['admin']) { ?>
+		<td rowspan=2 class="col3btn"><img border=0 src="<?php print $CONF['base_url'] ?>/img/admin.png" ALT="Admin" TITLE="Admin"></td>
+<?php	} else { ?>
+		<td rowspan=2 class="col3btn"><img border=0 src="<?php print $CONF['base_url'] ?>/img/utente.png" ALT="Utente" TITLE="Utente"></td>
+<?php	} ?>
+		<td class="col3campo2"><?php print $dato['utente'] ?></td>
+	
+</tr>
+</table>
+<img src="img/spazio.gif" width="1" height="20" alt="">
+
+<table cellpadding="0" cellspacing="0" border="0" width="60%">
+<?php while ($dato = mysql_fetch_array ( $permessi )) { ?>
+<tr>
+<td class="col3campo2"><?php print $dato['nome']?></td>
+<td>
+	<select name='<?php print $dato['nome']?>' class="cambio" >
+<?php 	foreach ($livelli as $i => $v) { ?>
+		<option name='<?php print $dato['nome']?>' value='<?php print $i ?>' <?php if ($i == $dato['accesso']) { print "selected"; } ?>><?php print $livelli[$i] ?></option>
+<?php } ?>
+	</select>
+</td>
+</tr>
+<tr><td colspan=2><img src="img/spazio.gif" width="1" height="5" alt=""></td></tr>
+
+<?php } ?>
+</table>
+
+<img src="img/spazio.gif" width="1" height="20" alt="">
+
+<script type="text/javascript">
+$(function(){
+	$('.cambio').on('change', function(){
+		var usr = <?php print $_GET['id'] ?>;
+		var acc = $(this).val();
+		var mod = $(this).attr('name');
+
+	$.ajax({
+		url: "updatepermessi.php",
+		dataType: "json",
+		data: {
+			user_id: usr,
+			accesso: acc,
+			modulo: mod
+		},
+		success: function(data) {
+//        data contiene i ritorni dalla pagina chiamata ma devono essere in json
+		}
+	}	);
+	});
+})
+</script>
+
+<?php include_once ("../core/footer.php"); ?>
--- a/utenti/updatepermessi.php
+++ b/utenti/updatepermessi.php
@@ -0,0 +1,38 @@
+<?php
+include_once ("../core/config.php");
+$UTENTE = login();
+$DIRITTI = diritti();
+
+$user_id = $_GET['user_id'];
+$accesso = $_GET['accesso'];
+$modulo = $_GET['modulo'];
+
+$query = "	INSERT INTO
+			permessi
+		SET
+			id_utenti = $user_id,
+			id_moduli = (	SELECT
+						id
+					FROM
+						moduli
+					WHERE
+						nome = '$modulo' AND attivo = 1
+					),
+			accesso = $accesso,
+			modifica = NOW()
+		ON DUPLICATE KEY UPDATE
+			accesso = $accesso,
+			modifica = NOW()
+";
+
+$res = mysql_query( $query, $DB_ID );
+
+/* Attivare solo per debug
+$fp = fopen('out.txt', 'w');
+fwrite($fp, $stato);
+fwrite($fp, "\n");
+fwrite($fp, $query);
+fwrite($fp, "\n");
+fclose($fp);
+*/
+?>