rendered paste body<?php
require_once('inc_global.php');
if (!isset($_SESSION['loggedadmin']) && !isset($_SESSION['loggedin']))
{
die("not allowed in here!");
}
// strip any tags from userdata
$name = stripslashes(strip_tags($_POST['name']));
$day = stripslashes(strip_tags($_POST['day']));
$month = stripslashes(strip_tags($_POST['month']));
$year = stripslashes(strip_tags($_POST['year']));
$str = stripslashes(strip_tags($_POST['str']));
$city = stripslashes(strip_tags($_POST['city']));
$cod = stripslashes(strip_tags($_POST['cod']));
$cnp = stripslashes(strip_tags($_POST['cnp']));
$tel = stripslashes(strip_tags($_POST['tel']));
$mail = stripslashes(strip_tags($_POST['mail']));
$ipcalc = stripslashes(strip_tags($_POST['ipcalc']));
$ipaccp = stripslashes(strip_tags($_POST['ipaccp']));
$maccalc = stripslashes(strip_tags($_POST['maccalc']));
$macaccp = stripslashes(strip_tags($_POST['macaccp']));
$note = stripslashes(str_replace(array('<', '>'), array('<', '>'), $_POST['note']));
if ($_POST['op'])
{
if (!$name)
{
$error = 'You must fill out a nickname!';
}
elseif (!preg_match("/^[a-z0-9|`_\\\^\-\{\ \}\[\]]+$/i", $name))
{
$error = 'This name contains forbidden chars';
unset ($nick);
}
elseif ((!$day || !$month || !$year) && !checkdate($month, $day, $year))
{
$error = 'The date is invalid!';
unset ($day, $month, $year);
}
elseif (strlen($note) > $config_max_note_length)
{
$error = 'Your note is ' . (strlen($description) - $config_max_note_length) . ' characters too long! Please rephrase.';
}
elseif (!$str)
{
$error = "You must fill out an address!";
}
elseif (!$city)
{
$error = "You must fill out a city!";
}
elseif (!$cnp)
{
$error = "You must fill out a CNP!";
}
if ($_POST['op'] == 'Preview' && !$error)
{
require_once('inc_header.php');
echo '<CENTER>This is how new client will look. Press "Submit" to add.<BR>' . NL;
showuser($name, $day, $month, $year, $str, $city, $cod, $cnp, $tel, $mail, $ipcalc, $ipaccp, $maccalc, $macaccp, $note);
echo '<FORM action="adduser.php" method="POST">' . NL;
echo '<INPUT type="hidden" name="name" value="' . $name . '">' . NL;
echo '<INPUT type="hidden" name="day" value="' . $day . '">' . NL;
echo '<INPUT type="hidden" name="month" value="' . $month . '">' . NL;
echo '<INPUT type="hidden" name="year" value="' . $year . '">' . NL;
echo '<INPUT type="hidden" name="str" value="' . $str . '">' . NL;
echo '<INPUT type="hidden" name="city" value="' . $city . '">' . NL;
echo '<INPUT type="hidden" name="cod" value="' . $cod . '">' . NL;
echo '<INPUT type="hidden" name="cnp" value="' . $cnp . '">' . NL;
echo '<INPUT type="hidden" name="tel" value="' . $tel . '">' . NL;
echo '<INPUT type="hidden" name="mail" value="' . $mail . '">' . NL;
echo '<INPUT type="hidden" name="ipcalc" value="' . $ipcalc . '">' . NL;
echo '<INPUT type="hidden" name="ipaccp" value="' . $ipaccp . '">' . NL;
echo '<INPUT type="hidden" name="maccalc" value="' . $maccalc . '">' . NL;
echo '<INPUT type="hidden" name="macaccp" value="' . $macaccp . '">' . NL;
echo '<INPUT type="hidden" name="note" value="' . $note . '">' . NL;
echo '<INPUT type="submit" name="op" value="Submit">' . NL;
echo '<INPUT type="submit" name="op" value="Change">' . NL;
echo '</FORM>' . NL;
echo '</CENTER></BODY></HTML>' . NL;
die();
}
elseif ($_POST['op'] == 'Submit' && !$error)
{
$query = 'SET name="' . addslashes($name) .
'", day="' . addslashes($day) .
'", month="' . addslashes($month) .
'", year="' . addslashes($year) .
'", str="' . addslashes($str) .
'", city="' . addslashes($city) .
'", cod="' . addslashes($cod) .
'", cnp="' . addslashes($cnp) .
'", tel="' . addslashes($tel) .
'", mail="' . addslashes($mail) .
'", ipcalc="' . addslashes($ipcalc) .
'", ipaccp="' . addslashes($ipaccp) .
'", maccalc="' . addslashes($maccalc) .
'", macaccp="' . addslashes($macaccp) .
'", note="' . addslashes($note) . '"';
querydb('INSERT INTO data ' . $query);
require_once('inc_header.php');
echo '<center>' . NL;
echo 'Client has been created/modified!<br><br>' . NL;
echo '</center></BODY></HTML>' . NL;
die();
}
else
{
$message = 'Va rugam sa introduceti informatiile mai jos.<BR>Toate spatiile marcate cu un <B>*</B> trebuie completate.';
$op = 'Preview';
}
}
elseif ($_GET['op'] == 'edit' && isset($_SESSION['loggedin']))
{
$dblink = querydb('SELECT * FROM data WHERE id="' . $_GET['id'] . '"');
if ($qry_array = mysql_fetch_array($dblink))
{
$name = $qry_array['name'];
$day = $qry_array['day'];
$month = $qry_array['month'];
$year = $qry_array['year'];
$str = $qry_array['str'];
$city = $qry_array['city'];
$cod = $qry_array['cod'];
$cnp = $qry_array['cnp'];
$tel = $qry_array['tel'];
$mail = $qry_array['mail'];
$ipcalc = $qry_array['ipcalc'];
$ipaccp = $qry_array['ipaccp'];
$maccalc = $qry_array['maccalc'];
$macaccp = $qry_array['macaccp'];
$note = $qry_array['note'];
$message = 'Please edit the user info below.';
$op = 'Submit';
}
}
else
{
$message = 'Va rugam sa introduceti informatiile mai jos.<BR>Toate spatiile marcate cu un <B>*</B> trebuie completate.';
$op = 'Preview';
}
require_once('inc_header.php');
echo $message . '<BR>' . NL;
if ($error)
{
echo '<FONT color="#FF0000">' . $error . '</FONT><BR>' . NL;
}
echo '<FORM enctype="multipart/form-data" action="adduser.php" method="POST">' . NL;
echo '<TABLE border="0" valign="top">' . NL;
echo '<TR><TD>name: *</TD>' . NL;
echo '<TD><INPUT type="text" name="name" value="' . $name . '" maxlength="32" size="40"></TD></TR>' . NL;
echo '<TR><TD>date: *</TD>' . NL;
echo '<TD><SELECT name="day">' . NL;
echo '<OPTION value="0">--</OPTION>' . NL;
for ($i = 1; $i <= 31; $i++)
echo '<OPTION value="' . $i . '"' . ($i == $day ? ' selected>' : '>') . $i . '</OPTION>' . NL;
echo '</SELECT>' . NL;
echo '<SELECT name="month">' . NL;
echo '<OPTION value="0">--</OPTION>' . NL;
for ($i = 1; $i <= 12; $i++)
echo '<OPTION value="' . $i . '"' . ($i == $month ? ' selected>' : '>') . $GLOBALS['month_names'][$i] . '</OPTION>' . NL;
echo '</SELECT>' . NL;
echo '<SELECT name="year">'. NL;
echo '<OPTION value="0">--</OPTION>' . NL;
for ($i = 2010; $i >= 1990; $i--)
echo '<OPTION value="' . $i . '"' . ($i == $year ? ' selected>' : '>') . $i . '</OPTION>' . NL;
echo '</SELECT></TD></TR>' . NL;
echo '<TR><TD>address: *</TD>' . NL;
echo '<TD><INPUT type="text" name="str" value="' . $str . '" maxlength="128" size="40"></TD></TR>' . NL;
echo '<TR><TD>city: *</TD>' . NL;
echo '<TD><INPUT type="text" name="city" value="' . $city . '" maxlength="128" size="40"></TD></TR>' . NL;
echo '<TR><TD>code:</TD>' . NL;
echo '<TD><INPUT type="text" name="cod" value="' . $cod . '" maxlength="128" size="40"></TD></TR>' . NL;
echo '<TR><TD>CNP: *</TD>' . NL;
echo '<TD><INPUT type="text" name="cnp" value="' . $cnp . '" maxlength="128" size="40"></TD></TR>' . NL;
echo '<TR><TD>phone:</TD>' . NL;
echo '<TD><INPUT type="text" name="tel" value="' . $tel . '" maxlength="128" size="40"></TD></TR>' . NL;
echo '<TR><TD>email:</TD>' . NL;
echo '<TD><INPUT type="text" name="mail" value="' . $mail . '" maxlength="128" size="40"></TD></TR>' . NL;
echo '<TR><TD>IP computer: *</TD>' . NL;
echo '<TD><INPUT type="text" name="ipcalc" value="' . $ipcalc . '" maxlength="128" size="40"></TD></TR>' . NL;
echo '<TR><TD>IP access point: *</TD>' . NL;
echo '<TD><INPUT type="text" name="ipaccp" value="' . $ipaccp . '" maxlength="128" size="40"></TD></TR>' . NL;
echo '<TR><TD>MAC computer: *</TD>' . NL;
echo '<TD><INPUT type="text" name="maccalc" value="' . $maccalc . '" maxlength="128" size="40"></TD></TR>' . NL;
echo '<TR><TD>MAC access point: *</TD>' . NL;
echo '<TD><INPUT type="text" name="macaccp" value="' . $macaccp . '" maxlength="128" size="40"></TD></TR>' . NL;
echo '<TR><TD>note:</TD>' . NL;
echo '<TD><TEXTAREA name="noe" rows="8" cols="40">' . $note . '</TEXTAREA></TD</TR>' . NL;
echo '<TR><TD colspan="2" align="center">' . NL;
echo '<INPUT type="submit" name="op" value="' . $op . '"></TD></TR>' . NL;
echo '</TABLE>' . NL;
echo '</FORM>' . NL;
echo '</BODY></HTML>';
?>