interface/usergroup/user_admin.php

   1 <?
   2 include_once("../globals.php");
   3 include_once("$srcdir/auth.inc");
   4 include_once("../../library/acl.inc");
   5
   6 include_once("$srcdir/md5.js");
   7 include_once("$srcdir/sql.inc");
   8 require_once(dirname(__FILE__) . "/../../library/classes/WSProvider.class.php");
   9 ?>
  10
  11 <html>
  12 <head>
  13
  14
  15 <link rel=stylesheet href="<?echo $css_header;?>" type="text/css">
  16
  17 </head>
  18 <body <?echo $top_bg_line;?> topmargin=0 rightmargin=0 leftmargin=2 bottommargin=0 marginwidth=2 marginheight=0>
  19
  20
  21 <a href="usergroup_admin.php"><span class="title"><? xl('User Administration','e'); ?></span></a>
  22 <br><br>
  23
  24 <?
  25 if (!$_GET["id"] || !acl_check('admin', 'users'))
  26   exit();
  27
  28 if ($_GET["mode"] == "update") {
  29   if ($_GET["username"]) {
  30     $tqvar = addslashes($_GET["username"]);
  31     $user_data = mysql_fetch_array(sqlStatement("select * from users where id={$_GET["id"]}"));
  32     sqlStatement("update users set username='$tqvar' where id={$_GET["id"]}");
  33     sqlStatement("update groups set user='$tqvar' where user='". $user_data["username"]  ."'");
  34     //echo "query was: " ."update groups set user='$tqvar' where user='". $user_data["username"]  ."'" ;
  35   }
  36   if ($_GET["taxid"]) {
  37     $tqvar = addslashes($_GET["taxid"]);
  38     sqlStatement("update users set federaltaxid='$tqvar' where id={$_GET["id"]}");
  39   }
  40   if ($_GET["drugid"]) {
  41     $tqvar = addslashes($_GET["drugid"]);
  42     sqlStatement("update users set federaldrugid='$tqvar' where id={$_GET["id"]}");
  43   }
  44   if ($_GET["upin"]) {
  45     $tqvar = addslashes($_GET["upin"]);
  46     sqlStatement("update users set upin='$tqvar' where id={$_GET["id"]}");
  47   }
  48     if ($_GET["npi"]) {
  49     $tqvar = addslashes($_GET["npi"]);
  50     sqlStatement("update users set npi='$tqvar' where id={$_GET["id"]}");
  51   }
  52   if ($_GET["lname"]) {
  53     $tqvar = addslashes($_GET["lname"]);
  54     sqlStatement("update users set lname='$tqvar' where id={$_GET["id"]}");
  55   }
  56   if ($_GET["job"]) {
  57     $tqvar = addslashes($_GET["job"]);
  58     sqlStatement("update users set specialty='$tqvar' where id={$_GET["id"]}");
  59   }
  60   if ($_GET["mname"]) {
  61           $tqvar = addslashes($_GET["mname"]);
  62           sqlStatement("update users set mname='$tqvar' where id={$_GET["id"]}");
  63   }
  64   if ($_GET["facility"]) {
  65           $tqvar = addslashes($_GET["facility"]);
  66           sqlStatement("update users set facility='$tqvar' where id={$_GET["id"]}");
  67   }
  68   if ($_GET["fname"]) {
  69           $tqvar = addslashes($_GET["fname"]);
  70           sqlStatement("update users set fname='$tqvar' where id={$_GET["id"]}");
  71   }
  72   if ($_GET["newauthPass"] && $_GET["newauthPass"] != "d41d8cd98f00b204e9800998ecf8427e") { // account for empty
  73     $tqvar = addslashes($_GET["newauthPass"]);
  74     sqlStatement("update users set password='$tqvar' where id={$_GET["id"]}");
  75   }
  76
  77   $tqvar  = $_GET["authorized"] ? 1 : 0;
  78   $actvar = $_GET["active"]     ? 1 : 0;
  79
  80   sqlStatement("UPDATE users SET authorized = $tqvar, active = $actvar, " .
  81     "see_auth = '" . $_GET['see_auth'] . "' WHERE " .
  82     "id = {$_GET["id"]}");
  83
  84   if ($_GET["comments"]) {
  85     $tqvar = addslashes($_GET["comments"]);
  86     sqlStatement("update users set info='$tqvar' where id={$_GET["id"]}");
  87   }
  88   $ws = new WSProvider($_GET['id']);
  89 }
  90
  91 $res = sqlStatement("select * from users where id={$_GET["id"]}");
  92 for ($iter = 0;$row = sqlFetchArray($res);$iter++)
  93                 $result[$iter] = $row;
  94 $iter = $result[0];
  95
  96 ?>
  97 <FORM NAME="user_form" METHOD="GET" ACTION="user_admin.php">
  98 <TABLE border=0 cellpadding=0 cellspacing=0>
  99 <TR>
 100 <TD><span class=text><? xl('Username','e'); ?>: </span></TD><TD><input type=entry name=username size=20 value="<? echo $iter["username"]; ?>" disabled> &nbsp;</td>
 101 <TD><span class=text><? xl('Password','e'); ?>: </span></TD><TD class='text'><input type=password name=clearPass size=20 value=""> * <? xl('Leave blank to keep password unchanged.','e'); ?></td>
 102 </TR>
 103
 104 <TR>
 105 <td><span class="text">&nbsp;</span></td><td>&nbsp;</td>
 106 <TD><span class=text><? xl('Authorized','e'); ?>: </TD>
 107 <TD>
 108  <input type="checkbox" name="authorized"<?php if ($iter["authorized"]) echo " checked"; ?> />
 109  &nbsp;&nbsp;<span class='text'><? xl('Active','e'); ?>:
 110  <input type="checkbox" name="active"<?php if ($iter["active"]) echo " checked"; ?> />
 111 </TD>
 112 </TR>
 113
 114 <TR>
 115 <TD><span class=text><? xl('First Name','e'); ?>: </span></TD>
 116 <TD><input type=entry name=fname size=20 value="<? echo $iter["fname"]; ?>"></td>
 117 <td><span class=text><? xl('Middle Name','e'); ?>: </span></TD><td><input type=entry name=mname size=20 value="<? echo $iter["mname"]; ?>"></td>
 118 </TR>
 119
 120 <TR>
 121 <td><span class=text><? xl('Last Name','e'); ?>: </span></td><td><input type=entry name=lname size=20 value="<? echo $iter["lname"]; ?>"></td>
 122 <td><span class=text><? xl('Default Facility','e'); ?>: </span></td><td><select name=facility>
 123 <?
 124 $fres = sqlStatement("select * from facility order by name");
 125 if ($fres) {
 126 for ($iter2 = 0;$frow = sqlFetchArray($fres);$iter2++)
 127                 $result[$iter2] = $frow;
 128 foreach($result as $iter2) {
 129 ?>
 130 <option value="<?echo $iter2{name};?>" <?if ($iter{"facility"} == $iter2{name}) {echo "selected";};?>><?echo $iter2{name};?></option>
 131 <?
 132 }
 133 }
 134 ?>
 135 </select></td>
 136 </tr>
 137
 138 <TR>
 139 <TD><span class=text><? xl('Federal Tax ID','e'); ?>: </span></TD><TD><input type=text name=taxid size=20 value="<? echo $iter["federaltaxid"]?>"></td>
 140 <TD><span class=text><? xl('Federal Drug ID','e'); ?>: </span></TD><TD><input type=text name=drugid size=20 value="<? echo $iter["federaldrugid"]?>"></td>
 141 </TR>
 142
 143 <tr>
 144 <td><span class="text"><? xl('UPIN','e'); ?>: </span></td><td><input type="text" name="upin" size="20" value="<? echo $iter["upin"]?>"></td>
 145 <td class='text'><? xl('See Authorizations','e'); ?>: </td>
 146 <td><select name="see_auth">
 147 <?php
 148  foreach (array(1 => xl('None'), 2 => xl('Only Mine'), 3 => xl('All')) as $key => $value)
 149  {
 150   echo " <option value='$key'";
 151   if ($key == $iter['see_auth']) echo " selected";
 152   echo ">$value</option>\n";
 153  }
 154 ?>
 155 </select></td>
 156 </tr>
 157 <tr>
 158 <td><span class="text"><? xl('NPI','e'); ?>: </span></td><td><input type="text" name="npi" size="20" value="<? echo $iter["npi"]?>"></td>
 159 </tr>
 160
 161 <tr>
 162 <td><span class="text"><? xl('Job Description','e'); ?>: </span></td><td><input type="text" name="job" size="20" value="<? echo $iter["specialty"]?>"></td>
 163 </tr>
 164
 165 </tr>
 166 </table>
 167 <span class=text><? xl('Additional Info','e'); ?>:</span><br>
 168 <textarea name="comments" wrap=auto rows=4 cols=30><? echo $iter["info"];?></textarea>
 169
 170 <br>&nbsp;&nbsp;&nbsp;
 171 <INPUT TYPE="HIDDEN" NAME="id" VALUE="<? echo $_GET["id"]; ?>">
 172 <INPUT TYPE="HIDDEN" NAME="mode" VALUE="update">
 173 <INPUT TYPE="HIDDEN" NAME="newauthPass" VALUE="">
 174 <INPUT TYPE="Submit" VALUE=<? xl('Save Changes','e'); ?> onClick="javascript:this.form.newauthPass.value=MD5(this.form.clearPass.value);this.form.clearPass.value='';">
 175 &nbsp;&nbsp;&nbsp;
 176 <a href="usergroup_admin.php" class=link_submit>[<? xl('Back','e'); ?>]</font></a>
 177 </FORM>
 178
 179 <br><br>
 180 </BODY>
 181 </HTML>
 182
 183 <?
 184 //  d41d8cd98f00b204e9800998ecf8427e == blank
 185
 186 ?>