File: /home/panama/public_html_old/managesite/admin_user_addnew.php
<?
include("../include/config.php");
include("../include/opner_admin.php");
if(strlen(trim($_POST['btnAddNew'])) > 0)
{
$seldb = new database();
$seldb->where("username='".$functions->anti_injection(base64_encode($_POST['txtUsername']))."'" );
$seldb->selectstmt("admin_users");
if($seldb->row_count > 0)
{ $err = 1; $err_name = "The User Name already exists."; }
$selnew = new database();
$selnew->where("email ='".$functions->anti_injection($_POST['email'])."'" );
$selnew->selectstmt("admin_users");
if($selnew->row_count > 0)
{ $err = 1; $err_email = "The Email address already exists."; }
if($err <> 1)
{
$firstname = $functions->anti_injection($_POST['txtFirstname']);
$lastname = $functions->anti_injection($_POST['txtLastname']);
$email = $functions->anti_injection($_POST['email']);
$username = $functions->anti_injection($_POST['txtUsername']);
$password = $functions->anti_injection($_POST['txtPassword']);
$db = new database();
$db->data("firstname",trim($firstname));
$db->data("lastname",trim($lastname));
$db->data("email",trim($email));
$db->data("username",trim(base64_encode($username)));
$db->data("password",trim(base64_encode($password)));
$db->addnew("admin_users");
$subject = SITE_ADMIN_TITLE." details";
$file_path ="../mail/admin_pwd.html";
$message = file_get_contents($file_path);
$message = str_replace("[[firstname]]",$firstname, $message);
$message = str_replace("[[username]]",$username, $message);
$message = str_replace("[[password]]",$password, $message);
$message = str_replace("[[support]]",SUPPORT, $message);
$message = str_replace("[[sitename]]",SITE_NAME, $message);
$message = str_replace("[[siteurl]]",SITE_URL, $message);
$message = str_replace("[[text]]",Created, $message);
$headers = 'MIME-Version: 1.0' . "\r\n";
$headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
$headers .= 'From: '.SITE_ADMIN_TITLE. "\r\n";
@mail($email, $subject, $message, $headers);
$_SESSION['msg'] = "Admin User Added Successfully";
header("location:admin_user_list.php");
}
}
?>
<html>
<head>
<title><?=SITE_ADMIN_TITLE?></title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<meta name="description" content="<?=META_DESCRIPTION?>" />
<meta name="keywords" content="<?=META_KEYWORD?>" />
<link href="css.css" rel="stylesheet" type="text/css">
<link rel="stylesheet" type="text/css" href="js/style.css" />
<script type="text/javascript" src="js/lib/prototype.js"></script>
<script type="text/javascript" src="js/src/effects.js"></script>
<script type="text/javascript" src="js/validation.js"></script>
<script src="js/MyFunctions.js"></script>
</head>
</head>
<body onLoad="javascript:showhide('admin');">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td width="100%"><? include("header.php")?></td>
</tr>
<tr>
<td align="right" valign="top" width="100%">
<form name="frmuser" id="frmuser" action="#" method="post">
<table width="100%" border="0" cellpadding="0" cellspacing="0" class="inertable">
<tr>
<td class="inertr" style="padding-left:7px"><img src="images/bullet_new.png" align="absmiddle" /> Add new Admin user</td>
</tr>
<tr>
<td colspan="2">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td align="center"><table width="100%" border="0" cellpadding="1" cellspacing="5" class="normalText">
<tr><td class="textbold" colspan="3" style="padding-left:80px;">(<i> All fields are mandatory</i> )</td></tr>
<tr>
<td> </td>
<td height="20" colspan="2" align="left"><span class="success"> </span></td>
</tr>
<tr>
<td align="right" class="textbold" valign="top">First name </td>
<td><input name="txtFirstname" id="txtFirstname" type="text" class="required" size="30" /></td>
</tr>
<tr>
<td align="right" class="textbold" valign="top">Last name </td>
<td><input name="txtLastname" id="txtLastname" type="text" class="required" size="30" /></td>
</tr>
<tr>
<td align="right" class="textbold" valign="top">Email Address </td>
<td><input type="text" name="email" class="required validate-email" id="email" size="30" /><br><span class="error"><?=$err_email;?></span></td>
</tr>
<tr>
<td align="right" class="textbold" valign="top">User name </td>
<td><input name="txtUsername" id="txtUsername" type="text" class="required" size="30" /><br /><span class="error"><?=$err_name;?></span></td>
</tr>
<tr>
<td align="right" class="textbold" valign="top">Password </td>
<td><input name="txtPassword" id="txtPassword" type="password" class="required validate-password" value="" size="30" /></td>
</tr>
<tr>
<td align="right" class="textbold" valign="top">Confirm Password </td>
<td><input name="confirmPassword" id="confirmPassword" type="password" class="required validate-password-confirm" size="30" /></td>
</tr>
<tr>
<td align="right" colspan="2" height="5px"></td>
</tr>
<tr>
<td width="36%" align="right" class="textbold"> </td>
<td colspan="2"><input name="btnAddNew" type="submit" class="btn" value=" Submit " style="border:none;"/> <input type="button" name="btnback" value="Back to List" class="btn" onClick="javascript:location.href='admin_user_list.php'" style="border:none;"/></td>
</tr>
</table></td>
</tr>
</table></td>
</tr>
<tr>
<td colspan="2" height="10" id="page"></td>
</tr>
</table>
</form>
<script type="text/javascript">
function formCallback(result, form) {
window.status = "valiation callback for form '" + form.id + "': result = " + result;
}
var valid = new Validation('frmuser', {immediate : true, onFormValidate : formCallback});
Validation.addAllThese
([
['validate-password', 'Your password must be more than 6 characters and not be \'password\' or the same as your User name', {
minLength : 7,
notOneOf : ['password','PASSWORD','1234567','0123456'],
notEqualToField : 'txtUsername'
}],
['validate-password-confirm', 'Your confirmation password does not match your first password, please try again.', {
equalToField : 'txtPassword'
}]
]);
</script>
<script type="text/javascript" src="js/change_backcolor.js"></script>
</td>
</tr>
</table>
</body>
</html>