This repository was archived by the owner on Mar 2, 2021. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathbase_user.php
119 lines (106 loc) · 4.66 KB
/
base_user.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
<?php
/*******************************************************************************
** Basic Analysis and Security Engine (BASE)
** Copyright (C) 2004 BASE Project Team
** Copyright (C) 2000 Carnegie Mellon University
**
** (see the file 'base_main.php' for license details)
**
** Project Leads: Kevin Johnson <[email protected]>
** Sean Muller <[email protected]>
** Built upon work by Roman Danyliw <[email protected]>, <[email protected]>
**
** Purpose: User Preferences page
********************************************************************************
** Authors:
********************************************************************************
** Kevin Johnson <[email protected]
**
********************************************************************************
*/
include("base_conf.php");
include("$BASE_path/includes/base_constants.inc.php");
include("$BASE_path/includes/base_include.inc.php");
include_once("$BASE_path/base_db_common.php");
include_once("$BASE_path/base_common.php");
include_once("$BASE_path/base_stat_common.php");
// Check role out and redirect if needed -- Kevin
$roleneeded = 10000;
$BUser = new BaseUser();
if (($BUser->hasRole($roleneeded) == 0) && ($Use_Auth_System == 1))
base_header("Location: ". $BASE_urlpath . "/index.php");
$page_body="";
$et = new EventTiming($debug_time_mode);
$cs = new CriteriaState("base_user.php");
$cs->ReadState();
$userprefs = new BaseUserPrefs();
$userobj = new BaseUser();
$username = $userobj->returnUser();
$page_title = _BASEUSERTITLE;
PrintBASESubHeader($page_title, $page_title, $cs->GetBackLink(), $refresh_all_pages);
if (isset($_GET['action']))
{
//This is where the processing of this page happens.
switch ($_GET['action'])
{
case "change":
//call auth.inc
if (($_POST['newpasswd1'] == $_POST['newpasswd2']) && ($_POST['newpasswd1'] != ""))
{
$pwdresponse = $userobj->changePassword($username, filterSql($_POST['oldpasswd']), filterSql($_POST['newpasswd1']));
$page_body = $pwdresponse;
break;
} else
{
$page_body = _BASEUSERERRPWD;
}
case "changepassword":
$form = "<form action='base_user.php?action=change' Method='POST'>";
$form = $form . "<table border=1 class='query'>";
$form = $form . "<tr><td width='25%' align='right'>"._BASEUSEROLDPWD."</td>";
$form = $form . "<td align='left'><input type='password' name='oldpasswd'></td></tr>";
$form = $form . "<tr><td width='25%' align='right'>"._BASEUSERNEWPWD."</td>";
$form = $form . "<td align='left'><input type='password' name='newpasswd1'></td></tr>";
$form = $form . "<tr><td width='25%' align='right'>"._BASEUSERNEWPWDAGAIN."</td>";
$form = $form . "<td align='left'><input type='password' name='newpasswd2'></td></tr>";
$form = $form . "<tr><td colspan='2' align='center'><input type='submit' name='submit'></td>";
$form = $form . "</tr></table>";
$page_body = $page_body . $form;
break;
case "display":
$user = new BaseUser();
$userlogin = $user->returnUser();
$userid = $user->returnUserID($userlogin);
$userinfo = $user->returnEditUser($userid);
$form = "<table border=1 class='query'>";
$form = $form . "<tr><td width='25%' align='right'>"._FRMUID."</td>";
$form = $form . "<td align='left'>". $userinfo[0] ."</td></tr>";
$form = $form . "<tr><td width='25%' align='right'>"._FRMLOGIN."</td>";
$form = $form . "<td align='left'>". $userinfo[1] ."</td></tr>";
$form = $form . "<tr><td width='25%' align='right'>"._FRMFULLNAME."</td>";
$form = $form . "<td align='left'>". $userinfo[3] ."</td></tr>";
$form = $form . "<tr><td width='25%' align='right'>"._FRMROLE."</td>";
$form = $form . "<td align='left'>" . $user->roleName($userinfo[2]) ."</td></tr>";
$form = $form . "</tr></table>";
$page_body = $form;
break;
default:
$page_body = $page_body . " ";
}
}
?>
<!-- Footer menu -->
<table width="100%" border=0><tr><td width="15%" valign="top">
<div class="mainheadermenu" width="50%">
<table border="0" class="mainheadermenu">
<tr>
<td class="menuitem">
<a href="base_user.php?action=changepassword" class="menuitem"><?php echo _CHNGPWD; ?></a><br>
<a href="base_user.php?action=display" class="menuitem"><?php echo _DISPLAYU; ?></a><br>
</td>
</tr>
</table></div> </td><td><?php echo($page_body); ?></td></tr></table>
<?php
PrintBASESubFooter();
echo "</body>\r\n</html>";
?>