1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
|
<?php
include 'config.php';
// Check if the user is logged in
if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1')) {
header("Location: login.php");
exit;
}
require("configure.php");
$sth1 = $dbh->prepare("SELECT * FROM sys_cms_login WHERE cmsloginid=?");
$sth1->execute(array((int)$_GET["cmsloginid"]));
if (!$sth1->execute())
throw new Exception('[' . $sth1->errorCode() . ']: ' . $sth1->errorInfo());
$row = $sth1->fetch(PDO::FETCH_ASSOC);
if( ($_SESSION['role'] == 'user' && $row{"cmsrole"} == 'admin') || ($_SESSION['role'] == 'admin' && $row{"cmsrole"} == 'super_admin')){
header("Location: sys_cms_user_index.php?msg=You cannot change the password of this user!");
exit;
}
?>
<html>
<head>
<link rel="stylesheet" type="text/css" href="css/style.css"/>
<meta http-equiv="x-ua-compatible" content="ie=8"/>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
<title>Content Management System (CMS) - Powered by One Solution Limited</title>
<script src="http://ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js"></script>
<script src="http://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.11.1/jquery.validate.min.js"></script>
<script type="text/javascript">
function MM_jumpMenu(targ, selObj, restore) { //v3.0
eval(targ + ".location='" + selObj.options[selObj.selectedIndex].value + "'");
if (restore) selObj.selectedIndex = 0;
}
$(document).ready(function (e) {
$("#myform").validate();
});
</script>
</head>
<body>
<form action="sys_cms_user_modify.php" method="post" name="modifyform" id="myform" enctype="multipart/form-data">
<input type="hidden" name="cmsloginid" value="<?= $row{'cmsloginid'}; ?>">
<table width="1000" border="0" cellpadding="0" cellspacing="0">
<tr>
<td height="70" align="right" valign="middle" class="icontxt">
<table border="0" cellpadding="0" cellspacing="0">
<tr>
<td width="50" align="center">
<a href="#" onClick="$('#myform').submit()"><img src="images/iconSave.png" alt="Save" width="32" height="32" border="0"><br>
Save </a></td>
<td width="50" align="center">
<a href="sys_cms_user_index.php"><img src="images/iconCancel.png" alt="Cancel" width="32" height="32" border="0"><br>
Cancel </a></td>
<td> </td>
</tr>
</table>
</td>
</tr>
<tr>
<td class="pagetitletxt">
<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle"/> CMS 用戶管理 </b></td>
</tr>
<tr>
<td align="left" valign="middle"><!-- Content -->
<table border="0" cellpadding="0" cellspacing="0">
<tr>
<td width="120" align="right" valign="top" class='content'>用戶名稱</td>
<td class='content' valign="top">: </td>
<td class='content'>
<input type="text" class="content required" name="username" value="<?= $row{'cmsusername'} ?>" size="80" maxlength="80"/>
字數上限:80
<br><br>
</td>
</tr>
<tr>
<td width="120" align="right" valign="top" class='content'>角色</td>
<td class='content' valign="top">: </td>
<td class='content'>
<?php
if ($row{'cmsrole'} == 'super_admin')
echo 'Super-Admin';
else if ($row{'cmsrole'} == 'admin')
echo 'User-Admin';
/*else if ($row{'cmsrole'} == 'web_user')
echo 'Web-User';
else if ($row{'cmsrole'} == 'system_user')
echo 'System-User';*/
else
echo 'User';
?>
<br><br>
</td>
</tr
<tr>
<td width="120" align="right" valign="top" class='content'>登入名稱</td>
<td class='content' valign="top">: </td>
<td class='content'>
<input type="text" class="content required" name="loginname" value="<?= $row{'cmsloginname'} ?>" size="50" maxlength="20" id="loginname"/>
字數上限:20
<br><br>
</td>
</tr>
<tr>
<td width="120" align="right" valign="top" class='content'>密碼</td>
<td class='content' valign="top">: </td>
<td class='content'>
<input type="password" class="content" id="loginpw" name="loginpw" size="50" maxlength="15"/><?= Password::ajax_validate('loginpw', 'ajax_passwordChecker.php', 'loginname') ?>
字數上限:8-15
<br><br>
</td>
</tr>
</table>
<!-- End Content --></td>
</tr>
<tr>
<td align="left" valign="middle"> </td>
</tr>
</table>
</form>
</body>
</html>
|