interface/usergroup/user_admin.php

   1 <?php
   2 // This program is free software; you can redistribute it and/or
   3 // modify it under the terms of the GNU General Public License
   4 // as published by the Free Software Foundation; either version 2
   5 // of the License, or (at your option) any later version.
   6 require_once("../globals.php");
   7 require_once("../../library/acl.inc");
   8 require_once("$srcdir/calendar.inc");
   9 require_once("$srcdir/options.inc.php");
  10 require_once("$srcdir/erx_javascript.inc.php");
  11
  12 if (!$_GET["id"] || !acl_check('admin', 'users'))
  13   exit();
  14
  15 if ($_GET["mode"] == "update") {
  16   if ($_GET["username"]) {
  17     // $tqvar = addslashes(trim($_GET["username"]));
  18     $tqvar = trim(formData('username','G'));
  19     $user_data = sqlFetchArray(sqlStatement("select * from users where id={$_GET["id"]}"));
  20     sqlStatement("update users set username='$tqvar' where id={$_GET["id"]}");
  21     sqlStatement("update groups set user='$tqvar' where user='". $user_data["username"]  ."'");
  22     //echo "query was: " ."update groups set user='$tqvar' where user='". $user_data["username"]  ."'" ;
  23   }
  24   if ($_GET["taxid"]) {
  25     $tqvar = formData('taxid','G');
  26     sqlStatement("update users set federaltaxid='$tqvar' where id={$_GET["id"]}");
  27   }
  28   if ($_GET["drugid"]) {
  29     $tqvar = formData('drugid','G');
  30     sqlStatement("update users set federaldrugid='$tqvar' where id={$_GET["id"]}");
  31   }
  32   if ($_GET["upin"]) {
  33     $tqvar = formData('upin','G');
  34     sqlStatement("update users set upin='$tqvar' where id={$_GET["id"]}");
  35   }
  36   if ($_GET["npi"]) {
  37     $tqvar = formData('npi','G');
  38     sqlStatement("update users set npi='$tqvar' where id={$_GET["id"]}");
  39   }
  40   if ($_GET["taxonomy"]) {
  41     $tqvar = formData('taxonomy','G');
  42     sqlStatement("update users set taxonomy = '$tqvar' where id= {$_GET["id"]}");
  43   }
  44   if ($_GET["lname"]) {
  45     $tqvar = formData('lname','G');
  46     sqlStatement("update users set lname='$tqvar' where id={$_GET["id"]}");
  47   }
  48   if ($_GET["job"]) {
  49     $tqvar = formData('job','G');
  50     sqlStatement("update users set specialty='$tqvar' where id={$_GET["id"]}");
  51   }
  52   if ($_GET["mname"]) {
  53           $tqvar = formData('mname','G');
  54           sqlStatement("update users set mname='$tqvar' where id={$_GET["id"]}");
  55   }
  56   if ($_GET["facility_id"]) {
  57           $tqvar = formData('facility_id','G');
  58           sqlStatement("update users set facility_id = '$tqvar' where id = {$_GET["id"]}");
  59           //(CHEMED) Update facility name when changing the id
  60           sqlStatement("UPDATE users, facility SET users.facility = facility.name WHERE facility.id = '$tqvar' AND users.id = {$_GET["id"]}");
  61           //END (CHEMED)
  62   }
  63   if ($GLOBALS['restrict_user_facility'] && $_GET["schedule_facility"]) {
  64           sqlStatement("delete from users_facility
  65             where tablename='users'
  66             and table_id={$_GET["id"]}
  67             and facility_id not in (" . implode(",", $_GET['schedule_facility']) . ")");
  68           foreach($_GET["schedule_facility"] as $tqvar) {
  69       sqlStatement("replace into users_facility set
  70                     facility_id = '$tqvar',
  71                     tablename='users',
  72                     table_id = {$_GET["id"]}");
  73     }
  74   }
  75   if ($_GET["fname"]) {
  76           $tqvar = formData('fname','G');
  77           sqlStatement("update users set fname='$tqvar' where id={$_GET["id"]}");
  78   }
  79   //(CHEMED) Calendar UI preference
  80   if ($_GET["cal_ui"]) {
  81           $tqvar = formData('cal_ui','G');
  82           sqlStatement("update users set cal_ui = '$tqvar' where id = {$_GET["id"]}");
  83
  84           // added by bgm to set this session variable if the current user has edited
  85           //   their own settings
  86           if ($_SESSION['authId'] == $_GET["id"]) {
  87             $_SESSION['cal_ui'] = $tqvar;
  88           }
  89   }
  90   //END (CHEMED) Calendar UI preference
  91
  92   if (isset($_GET['default_warehouse'])) {
  93     sqlStatement("UPDATE users SET default_warehouse = '" .
  94       formData('default_warehouse','G') .
  95       "' WHERE id = '" . formData('id','G') . "'");
  96   }
  97
  98   if (isset($_GET['irnpool'])) {
  99     sqlStatement("UPDATE users SET irnpool = '" .
 100       formData('irnpool','G') .
 101       "' WHERE id = '" . formData('id','G') . "'");
 102   }
 103
 104   if ($_GET["newauthPass"] && $_GET["newauthPass"] != "d41d8cd98f00b204e9800998ecf8427e") { // account for empty
 105     $tqvar = formData('newauthPass','G');
 106     sqlStatement("update users set password='$tqvar' where id={$_GET["id"]}");
 107   }
 108
 109   $tqvar  = $_GET["authorized"] ? 1 : 0;
 110   $actvar = $_GET["active"]     ? 1 : 0;
 111   $calvar = $_GET["calendar"]   ? 1 : 0;
 112
 113   sqlStatement("UPDATE users SET authorized = $tqvar, active = $actvar, " .
 114     "calendar = $calvar, see_auth = '" . $_GET['see_auth'] . "' WHERE " .
 115     "id = {$_GET["id"]}");
 116
 117   if ($_GET["comments"]) {
 118     $tqvar = formData('comments','G');
 119     sqlStatement("update users set info = '$tqvar' where id = {$_GET["id"]}");
 120   }
 121
 122   if (isset($phpgacl_location) && acl_check('admin', 'acl')) {
 123     // Set the access control group of user
 124     $user_data = sqlFetchArray(sqlStatement("select username from users where id={$_GET["id"]}"));
 125     set_user_aro($_GET['access_group'], $user_data["username"],
 126       formData('fname','G'), formData('mname','G'), formData('lname','G'));
 127   }
 128
 129   /*Dont move usergroup_admin (1).php just close window
 130   // On a successful update, return to the users list.
 131   include("usergroup_admin.php");
 132   exit(0);
 133   */    echo '
 134 <script type="text/javascript">
 135 <!--
 136 parent.$.fn.fancybox.close();
 137 //-->
 138 </script>
 139
 140         ';
 141 }
 142
 143 $res = sqlStatement("select * from users where id=?",array($_GET["id"]));
 144 for ($iter = 0;$row = sqlFetchArray($res);$iter++)
 145                 $result[$iter] = $row;
 146 $iter = $result[0];
 147
 148 ///
 149 if (isset($_POST["mode"])) {
 150         echo '
 151 <script type="text/javascript">
 152 <!--
 153 parent.$.fn.fancybox.close();
 154 //-->
 155 </script>
 156
 157         ';
 158 }
 159 ///
 160
 161 ?>
 162
 163 <html>
 164 <head>
 165
 166 <link rel="stylesheet" href="<?php echo $css_header; ?>" type="text/css">
 167 <script type="text/javascript" src="../../library/dialog.js?v=<?php echo $v_js_includes; ?>"></script>
 168 <script type="text/javascript" src="<?php echo $GLOBALS['assets_static_relative'] ?>/jquery-min-1-9-1/index.js"></script>
 169 <script type="text/javascript" src="../../library/js/common.js"></script>
 170
 171 <script src="checkpwd_validation.js" type="text/javascript"></script>
 172
 173 <!-- validation library -->
 174 <!--//Not lbf forms use the new validation, please make sure you have the corresponding values in the list Page validation-->
 175 <?php    $use_validate_js = 1;?>
 176 <?php  require_once($GLOBALS['srcdir'] . "/validation/validation_script.js.php"); ?>
 177 <?php
 178 //Gets validation rules from Page Validation list.
 179 //Note that for technical reasons, we are bypassing the standard validateUsingPageRules() call.
 180 $collectthis = collectValidationPageRules("/interface/usergroup/user_admin.php");
 181 if (empty($collectthis)) {
 182     $collectthis = "undefined";
 183 }
 184 else {
 185     $collectthis = $collectthis["user_form"]["rules"];
 186 }
 187 ?>
 188
 189 <script language="JavaScript">
 190
 191 /*
 192  * validation on the form with new client side validation (using validate.js).
 193  * this enable to add new rules for this form in the pageValidation list.
 194  * */
 195 var collectvalidation = <?php echo($collectthis); ?>;
 196
 197     function checkChange()
 198 {
 199   alert("<?php echo addslashes(xl('If you change e-RX Role for ePrescription, it may affect the ePrescription workflow. If you face any difficulty, contact your ePrescription vendor.'));?>");
 200 }
 201 function submitform() {
 202
 203     var valid = submitme(1, undefined, 'user_form', collectvalidation);
 204     if (!valid) return;
 205
 206         top.restoreSession();
 207         var flag=0;
 208     <?php if(!$GLOBALS['use_active_directory']){ ?>
 209         if(document.forms[0].clearPass.value!="")
 210         {
 211                 //Checking for the strong password if the 'secure password' feature is enabled
 212                 if(document.forms[0].secure_pwd.value == 1)
 213                 {
 214                     var pwdresult = passwordvalidate(document.forms[0].clearPass.value);
 215                     if(pwdresult == 0) {
 216                             flag=1;
 217                             alert("<?php echo xl('The password must be at least eight characters, and should'); echo '\n'; echo xl('contain at least three of the four following items:'); echo '\n'; echo xl('A number'); echo '\n'; echo xl('A lowercase letter'); echo '\n'; echo xl('An uppercase letter'); echo '\n'; echo xl('A special character');echo '('; echo xl('not a letter or number'); echo ').'; echo '\n'; echo xl('For example:'); echo ' healthCare@09'; ?>");
 218                             return false;
 219                     }
 220                 }
 221
 222         }//If pwd null ends here
 223     <?php } ?>
 224         //Request to reset the user password if the user was deactived once the password expired.
 225         if((document.forms[0].pwd_expires.value != 0) && (document.forms[0].clearPass.value == "")) {
 226                 if((document.forms[0].user_type.value != "Emergency Login") && (document.forms[0].pre_active.value == 0) && (document.forms[0].active.checked == 1) && (document.forms[0].grace_time.value != "") && (document.forms[0].current_date.value) > (document.forms[0].grace_time.value))
 227                 {
 228                         flag=1;
 229                         document.getElementById('error_message').innerHTML="<?php xl('Please reset the password.','e') ?>";
 230                 }
 231         }
 232
 233   if (document.forms[0].access_group_id) {
 234     var sel = getSelected(document.forms[0].access_group_id.options);
 235     for (var item in sel) {
 236       if (sel[item].value == "Emergency Login") {
 237         document.forms[0].check_acl.value = 1;
 238       }
 239     }
 240   }
 241
 242           <?php if($GLOBALS['erx_enable']){ ?>
 243         alertMsg='';
 244         f=document.forms[0];
 245         for(i=0;i<f.length;i++){
 246           if(f[i].type=='text' && f[i].value)
 247           {
 248             if(f[i].name == 'fname' || f[i].name == 'mname' || f[i].name == 'lname')
 249             {
 250               alertMsg += checkLength(f[i].name,f[i].value,35);
 251               alertMsg += checkUsername(f[i].name,f[i].value);
 252             }
 253             else if(f[i].name == 'taxid')
 254             {
 255               alertMsg += checkLength(f[i].name,f[i].value,10);
 256               alertMsg += checkFederalEin(f[i].name,f[i].value);
 257             }
 258             else if(f[i].name == 'state_license_number')
 259             {
 260               alertMsg += checkLength(f[i].name,f[i].value,10);
 261               alertMsg += checkStateLicenseNumber(f[i].name,f[i].value);
 262             }
 263             else if(f[i].name == 'npi')
 264             {
 265               alertMsg += checkLength(f[i].name,f[i].value,10);
 266               alertMsg += checkTaxNpiDea(f[i].name,f[i].value);
 267             }
 268             else if(f[i].name == 'drugid')
 269             {
 270               alertMsg += checkLength(f[i].name,f[i].value,30);
 271               alertMsg += checkAlphaNumeric(f[i].name,f[i].value);
 272             }
 273           }
 274         }
 275         if(alertMsg)
 276         {
 277           alert(alertMsg);
 278           return false;
 279         }
 280         <?php } ?>
 281         if(flag == 0){
 282                     document.forms[0].submit();
 283                     parent.$.fn.fancybox.close();
 284         }
 285 }
 286 //Getting the list of selected item in ACL
 287 function getSelected(opt) {
 288          var selected = new Array();
 289             var index = 0;
 290             for (var intLoop = 0; intLoop < opt.length; intLoop++) {
 291                if ((opt[intLoop].selected) ||
 292                    (opt[intLoop].checked)) {
 293                   index = selected.length;
 294                   selected[index] = new Object;
 295                   selected[index].value = opt[intLoop].value;
 296                   selected[index].index = intLoop;
 297                }
 298             }
 299             return selected;
 300          }
 301
 302 function authorized_clicked() {
 303  var f = document.forms[0];
 304  f.calendar.disabled = !f.authorized.checked;
 305  f.calendar.checked  =  f.authorized.checked;
 306 }
 307
 308 </script>
 309 <style type="text/css">
 310   .physician_type_class{
 311     width: 150px !important;
 312   }
 313 </style>
 314 </head>
 315 <body class="body_top">
 316 <table><tr><td>
 317 <span class="title"><?php xl('Edit User','e'); ?></span>&nbsp;
 318 </td><td>
 319     <a class="css_button" name='form_save' id='form_save' href='#' onclick='return submitform()'> <span><?php xl('Save','e');?></span> </a>
 320         <a class="css_button" id='cancel' href='#'><span><?php xl('Cancel','e');?></span></a>
 321 </td></tr>
 322 </table>
 323 <br>
 324 <FORM NAME="user_form" id="user_form" METHOD="POST" ACTION="usergroup_admin.php" target="_parent" onsubmit='return top.restoreSession()'>
 325
 326 <input type=hidden name="pwd_expires" value="<?php echo $GLOBALS['password_expiration_days']; ?>" >
 327 <input type=hidden name="pre_active" value="<?php echo $iter["active"]; ?>" >
 328 <input type=hidden name="exp_date" value="<?php echo $iter["pwd_expiration_date"]; ?>" >
 329 <input type=hidden name="get_admin_id" value="<?php echo $GLOBALS['Emergency_Login_email']; ?>" >
 330 <input type=hidden name="admin_id" value="<?php echo $GLOBALS['Emergency_Login_email_id']; ?>" >
 331 <input type=hidden name="check_acl" value="">
 332 <?php
 333 //Calculating the grace time
 334 $current_date = date("Y-m-d");
 335 $password_exp=$iter["pwd_expiration_date"];
 336 if($password_exp != "0000-00-00")
 337   {
 338     $grace_time1 = date("Y-m-d", strtotime($password_exp . "+".$GLOBALS['password_grace_time'] ."days"));
 339   }
 340 ?>
 341 <input type=hidden name="current_date" value="<?php echo strtotime($current_date); ?>" >
 342 <input type=hidden name="grace_time" value="<?php echo strtotime($grace_time1); ?>" >
 343 <!--  Get the list ACL for the user -->
 344 <?php
 345 $acl_name=acl_get_group_titles($iter["username"]);
 346 $bg_name='';
 347 $bg_count=count($acl_name);
 348    for($i=0;$i<$bg_count;$i++){
 349       if($acl_name[$i] == "Emergency Login")
 350        $bg_name=$acl_name[$i];
 351       }
 352 ?>
 353 <input type=hidden name="user_type" value="<?php echo $bg_name; ?>" >
 354
 355 <TABLE border=0 cellpadding=0 cellspacing=0>
 356 <TR>
 357     <TD style="width:180px;"><span class=text><?php xl('Username','e'); ?>: </span></TD>
 358     <TD style="width:270px;"><input type=entry name=username style="width:150px;" value="<?php echo $iter["username"]; ?>" disabled></td>
 359     <?php if(!$GLOBALS['use_active_directory']){ ?>
 360         <TD style="width:200px;"><span class=text><?php xl('Your Password','e'); ?>: </span></TD>
 361         <TD class='text' style="width:280px;"><input type='password' name=adminPass style="width:150px;"  value="" autocomplete='off'><font class="mandatory">*</font></TD>
 362     <?php } ?>
 363 </TR>
 364     <?php if(!$GLOBALS['use_active_directory']){ ?>
 365 <TR>
 366     <TD style="width:180px;"><span class=text></span></TD>
 367     <TD style="width:270px;"></td>
 368     <TD style="width:200px;"><span class=text><?php xl('User\'s New Password','e'); ?>: </span></TD>
 369     <TD class='text' style="width:280px;">    <input type=text name=clearPass style="width:150px;"  value=""><font class="mandatory">*</font></td>
 370 </TR>
 371     <?php } ?>
 372
 373 <TR height="30" style="valign:middle;">
 374 <td><span class="text">&nbsp;</span></td><td>&nbsp;</td>
 375 <td colspan="2"><span class=text><?php xl('Provider','e'); ?>:
 376  <input type="checkbox" name="authorized" onclick="authorized_clicked()"<?php
 377   if ($iter["authorized"]) echo " checked"; ?> />
 378  &nbsp;&nbsp;<span class='text'><?php xl('Calendar','e'); ?>:
 379  <input type="checkbox" name="calendar"<?php
 380   if ($iter["calendar"]) echo " checked";
 381   if (!$iter["authorized"]) echo " disabled"; ?> />
 382  &nbsp;&nbsp;<span class='text'><?php xl('Active','e'); ?>:
 383  <input type="checkbox" name="active"<?php if ($iter["active"]) echo " checked"; ?> />
 384 </TD>
 385 </TR>
 386
 387 <TR>
 388 <TD><span class=text><?php xl('First Name','e'); ?>: </span></TD>
 389 <TD><input type=entry name=fname id=fname style="width:150px;" value="<?php echo $iter["fname"]; ?>"><span class="mandatory">&nbsp;*</span></td>
 390 <td><span class=text><?php xl('Middle Name','e'); ?>: </span></TD><td><input type=entry name=mname style="width:150px;"  value="<?php echo $iter["mname"]; ?>"></td>
 391 </TR>
 392
 393 <TR>
 394 <td><span class=text><?php xl('Last Name','e'); ?>: </span></td><td><input type=entry name=lname id=lname style="width:150px;"  value="<?php echo $iter["lname"]; ?>"><span class="mandatory">&nbsp;*</span></td>
 395 <td><span class=text><?php xl('Default Facility','e'); ?>: </span></td><td><select name=facility_id style="width:150px;" >
 396 <?php
 397 $fres = sqlStatement("select * from facility where service_location != 0 order by name");
 398 if ($fres) {
 399 for ($iter2 = 0; $frow = sqlFetchArray($fres); $iter2++)
 400                 $result[$iter2] = $frow;
 401 foreach($result as $iter2) {
 402 ?>
 403   <option value="<?php echo $iter2['id']; ?>" <?php if ($iter['facility_id'] == $iter2['id']) echo "selected"; ?>><?php echo htmlspecialchars($iter2['name']); ?></option>
 404 <?php
 405 }
 406 }
 407 ?>
 408 </select></td>
 409 </tr>
 410
 411 <?php if ($GLOBALS['restrict_user_facility']) { ?>
 412 <tr>
 413  <td colspan=2>&nbsp;</td>
 414  <td><span class=text><?php xl('Schedule Facilities:', 'e');?></td>
 415  <td>
 416   <select name="schedule_facility[]" multiple style="width:150px;" >
 417 <?php
 418   $userFacilities = getUserFacilities($_GET['id']);
 419   $ufid = array();
 420   foreach($userFacilities as $uf)
 421     $ufid[] = $uf['id'];
 422   $fres = sqlStatement("select * from facility where service_location != 0 order by name");
 423   if ($fres) {
 424     while($frow = sqlFetchArray($fres)):
 425 ?>
 426    <option <?php echo in_array($frow['id'], $ufid) || $frow['id'] == $iter['facility_id'] ? "selected" : null ?>
 427       value="<?php echo $frow['id'] ?>"><?php echo htmlspecialchars($frow['name']) ?></option>
 428 <?php
 429   endwhile;
 430 }
 431 ?>
 432   </select>
 433  </td>
 434 </tr>
 435 <?php } ?>
 436
 437 <TR>
 438 <TD><span class=text><?php xl('Federal Tax ID','e'); ?>: </span></TD><TD><input type=text name=taxid style="width:150px;"  value="<?php echo $iter["federaltaxid"]?>"></td>
 439 <TD><span class=text><?php xl('Federal Drug ID','e'); ?>: </span></TD><TD><input type=text name=drugid style="width:150px;"  value="<?php echo $iter["federaldrugid"]?>"></td>
 440 </TR>
 441
 442 <tr>
 443 <td><span class="text"><?php xl('UPIN','e'); ?>: </span></td><td><input type="text" name="upin" style="width:150px;" value="<?php echo $iter["upin"]?>"></td>
 444 <td class='text'><?php xl('See Authorizations','e'); ?>: </td>
 445 <td><select name="see_auth" style="width:150px;" >
 446 <?php
 447  foreach (array(1 => xl('None'), 2 => xl('Only Mine'), 3 => xl('All')) as $key => $value)
 448  {
 449   echo " <option value='$key'";
 450   if ($key == $iter['see_auth']) echo " selected";
 451   echo ">$value</option>\n";
 452  }
 453 ?>
 454 </select></td>
 455 </tr>
 456
 457 <tr>
 458 <td><span class="text"><?php xl('NPI','e'); ?>: </span></td><td><input type="text" name="npi" style="width:150px;"  value="<?php echo $iter["npi"]?>"></td>
 459 <td><span class="text"><?php xl('Job Description','e'); ?>: </span></td><td><input type="text" name="job" style="width:150px;"  value="<?php echo $iter["specialty"]?>"></td>
 460 </tr>
 461
 462 <!-- (CHEMED) Calendar UI preference -->
 463 <tr>
 464 <td><span class="text"><?php xl('Taxonomy','e'); ?>: </span></td>
 465 <td><input type="text" name="taxonomy" style="width:150px;"  value="<?php echo $iter["taxonomy"]?>"></td>
 466 <td><span class="text"><?php xl('Calendar UI','e'); ?>: </span></td><td><select name="cal_ui" style="width:150px;" >
 467 <?php
 468  foreach (array(3 => xl('Outlook'), 1 => xl('Original'), 2 => xl('Fancy')) as $key => $value)
 469  {
 470   echo " <option value='$key'";
 471   if ($key == $iter['cal_ui']) echo " selected";
 472   echo ">$value</option>\n";
 473  }
 474 ?>
 475 </select></td>
 476 </tr>
 477 <!-- END (CHEMED) Calendar UI preference -->
 478
 479 <tr>
 480 <td><span class="text"><?php xl('State License Number','e'); ?>: </span></td>
 481 <td><input type="text" name="state_license_number" style="width:150px;"  value="<?php echo $iter["state_license_number"]?>"></td>
 482 <td class='text'><?php xl('NewCrop eRX Role','e'); ?>:</td>
 483 <td>
 484   <?php echo generate_select_list("erxrole", "newcrop_erx_role", $iter['newcrop_user_role'],'',xl('Select Role'),'','','',array('style'=>'width:150px')); ?>
 485 </td>
 486 </tr>
 487
 488 <tr>
 489   <td><span class="text"><?php xl('Provider Type','e'); ?>: </span></td>
 490   <td><?php echo generate_select_list("physician_type", "physician_type", $iter['physician_type'],'',xl('Select Type'),'physician_type_class','','',''); ?></td>
 491 </tr>
 492 <?php if ($GLOBALS['inhouse_pharmacy']) { ?>
 493 <tr>
 494  <td class="text"><?php xl('Default Warehouse','e'); ?>: </td>
 495  <td class='text'>
 496 <?php
 497 echo generate_select_list('default_warehouse', 'warehouse',
 498   $iter['default_warehouse'], '');
 499 ?>
 500  </td>
 501  <td class="text"><?php xl('Invoice Refno Pool','e'); ?>: </td>
 502  <td class='text'>
 503 <?php
 504 echo generate_select_list('irnpool', 'irnpool', $iter['irnpool'],
 505   xl('Invoice reference number pool, if used'));
 506 ?>
 507  </td>
 508 </tr>
 509 <?php } ?>
 510
 511 <?php
 512  // Collect the access control group of user
 513  if (isset($phpgacl_location) && acl_check('admin', 'acl')) {
 514 ?>
 515   <tr>
 516   <td class='text'><?php xl('Access Control','e'); ?>:</td>
 517   <td><select id="access_group_id" name="access_group[]" multiple style="width:150px;" >
 518   <?php
 519    $list_acl_groups = acl_get_group_title_list();
 520    $username_acl_groups = acl_get_group_titles($iter["username"]);
 521    foreach ($list_acl_groups as $value) {
 522     if (($username_acl_groups) && in_array($value,$username_acl_groups)) {
 523      // Modified 6-2009 by BM - Translate group name if applicable
 524      echo " <option value='$value' selected>" . xl_gacl_group($value) . "</option>\n";
 525     }
 526     else {
 527      // Modified 6-2009 by BM - Translate group name if applicable
 528      echo " <option value='$value'>" . xl_gacl_group($value) . "</option>\n";
 529     }
 530    }
 531   ?>
 532   </select></td>
 533   <td><span class=text><?php xl('Additional Info','e'); ?>:</span></td>
 534   <td><textarea style="width:150px;" name="comments" wrap=auto rows=4 cols=25><?php echo $iter["info"];?></textarea></td>
 535
 536   </tr>
 537   <tr height="20" valign="bottom">
 538   <td colspan="4" class="text">
 539   <font class="mandatory">*</font> <?php xl('You must enter your own password to change user passwords. Leave blank to keep password unchanged.','e'); ?>
 540 <!--
 541 Display red alert if entered password matched one of last three passwords/Display red alert if user password was expired and the user was inactivated previously
 542 -->
 543   <div class="redtext" id="error_message">&nbsp;</div>
 544   </td>
 545   </tr>
 546 <?php
 547  }
 548 ?>
 549 </table>
 550
 551 <INPUT TYPE="HIDDEN" NAME="id" VALUE="<?php echo attr($_GET["id"]); ?>">
 552 <INPUT TYPE="HIDDEN" NAME="mode" VALUE="update">
 553 <INPUT TYPE="HIDDEN" NAME="privatemode" VALUE="user_admin">
 554
 555 <INPUT TYPE="HIDDEN" NAME="secure_pwd" VALUE="<?php echo $GLOBALS['secure_password']; ?>">
 556 </FORM>
 557 <script language="JavaScript">
 558 $(document).ready(function(){
 559     $("#cancel").click(function() {
 560                   parent.$.fn.fancybox.close();
 561          });
 562
 563 });
 564 </script>
 565 </BODY>
 566
 567 </HTML>
 568
 569 <?php
 570 //  d41d8cd98f00b204e9800998ecf8427e == blank
 571 ?>