admin //$logged = substr("abcdef", 0, -1); // returns "abcde" //$rest = substr("abcdef", 2, -1); // returns "cde" $logged1=substr($logged , 0,7); $logged_test="You are"; if ($logged1==$logged_test){ $logged = substr($logged, 27, -7); // returns "abcde" } $tok=$_GET['token']; include("../cat.inc"); include("../forms/user_id.php"); $display_title="Administration"; //$tok= session_id(); //$dir="checkout"; //$loc="www.1stchoicesolution.com"; //$string ="Wow this works
"; //$display_blockFF .= "
GalliumGroup © 2009-2011 All Rights Reserved.
Version 1.5.1.3
//
"; // echo $string; //$host="localhost"; //$db_name="nwtrans_gotool2"; //$user="nwtrans_gotool22"; //$password="f*r25Get"; $super=10021; $team2 ="Oceanside Team"; //connect to the server and select the database $connection = @mysqli_connect($host,$user,$password) or die(mysqli_error($connection)); $db = @mysqli_select_db($connection,$db_name) or die(mysqli_error($connection)); //$login=$_POST['author']; //$pswd=$_POST['pswd']; $zip=$_POST['author']; $personID=$_POST['numID']; //$redID=$_POST['redID2']; //$redID3=$_POST['redID3']; $jedID2=$_POST['jedID2']; if ($jedID2==$blink) { $jedID2=$_GET['jedID2']; } $fun[0]="Closed"; $fun[1]="Open"; $BY =$_POST['year']; $BM =$_POST['month']; $BD =$_POST['day']; $birthday="$BY-$BM-$BD"; $optax="A"; $gbad= $_POST['gbad']; //$state =$_GET['state']; //$state=46; //$sub =$_GET['sub']; $today = date("Y-m-d"); $Rtoday=date("Y-m-d h:i:s"); $cust="cust"; $sq112ab="SELECT * FROM $table_name49a WHERE (user_group_id != 1 AND user_group_id != 30) "; $result112ab = @mysqli_query($connection,$sq112ab) or die(mysqli_error($connection)); while ($row112ab = mysqli_fetch_array($result112ab)) { $Gname= stripslashes( $row112ab['name']); $id=$row112ab['user_group_id']; $Gname1[$id]=$Gname; $display_listGList .= ""; } if ($jedID2 == 1) { $display_block .="Add a New User to Go Tool

\"\" User

* Username:
* First Name:
* Last Name:
Does This person Need Approval Power: Yes: No: Complete if checked yes.
Title:
Department:
E-Mail:
User Group:
Password:
Confirm:
Status:
Submit
"; if($gbad==2){ $user=addslashes($_POST['username']); $fnameC=addslashes($_POST['firstname']); $lnameC=addslashes($_POST['lastname']); $cust_emailC=addslashes($_POST['email']); $user_group_id=$_POST['user_group_id']; $status=$_POST['status']; $phone=$_POST['password']; $phone2=$_POST['confirm']; $title=addslashes($_POST['title']); $department=addslashes($_POST['department']); $Approv2=$_POST['Approv']; if($phone==$phone2 AND $phone !=$blink){ $sql2 = "INSERT INTO $table_name49 ( username, firstname, lastname, email, date_added, pass1, password, status, user_group_id) VALUES ('$user', '$fnameC' ,'$lnameC', '$cust_emailC','$Rtoday','$phone', md5('$phone'),1, $user_group_id)"; $result2 = @mysqli_query($connection,$sql2) or die(mysqli_error($connection)); if($Approv2==1){ $sq112ab="SELECT MAX(supervisor) FROM $table_name110 "; $result112ab = @mysqli_query($connection,$sq112ab) or die(mysqli_error($connection)); while ($row112ab = mysqli_fetch_array($result112ab)) { $maxx= $row112ab['MAX(supervisor)']; } $sup1=$maxx+1; $sql2 = "INSERT INTO $table_name110 ( supervisor, firstname, lastname, e1, title, department, status, user_group_id) VALUES ('$sup1', '$fnameC' ,'$lnameC', '$cust_emailC','$title', '$department',1, $user_group_id)"; $result2 = @mysqli_query($connection,$sql2) or die(mysqli_error($connection)); } $mess="
New User Added
"; }else { $mess="
Passwords do not match or are blank. Redo.
"; } } } if ($jedID2 == 2) { if($gbad==1){ $sq112ab="SELECT * FROM $table_name49 WHERE status >0 AND user_id > 10 ORDER BY lastname "; $result112ab = @mysqli_query($connection,$sq112ab) or die(mysqli_error($connection)); while ($row112ab = mysqli_fetch_array($result112ab)) { $id2= $row112ab['user_id']; $U_userfirstN2=$row112ab['firstname']; $U_userlastN2=$row112ab['lastname']; $user_row .= "$U_username[$id2]$U_userfirstN2$U_userlastN2$U_userDept[$id2]
"; } $display_block ="Active Users in the System

$user_row
$Username First Name Last Name User Group Action
"; } if ($gbad==2) { $id=$_POST['id']; $username=$userNN[$id]; $firstname=$U_userF[$id]; $lastname=$U_userL[$id]; $email=$U_userE1[$id]; $user_group_id=$U_usergroup[$id]; $user_group= $U_userDept[$id]; $display_block .="Update User in Go Tool

\"\" User

* Username:
* First Name:
* Last Name:
E-Mail:
User Group:
Password:
Confirm:
Status:
Submit
"; } if($gbad==3){ $id=$_POST['id']; $user=addslashes($_POST['username']); $fnameC=addslashes($_POST['firstname']); $lnameC=addslashes($_POST['lastname']); $cust_emailC=addslashes($_POST['email']); $user_group_id=$_POST['user_group_id']; $status=$_POST['status']; $phone=$_POST['password']; $phone2=$_POST['confirm']; if($phone==$blink AND $phone2==$blink){ // $sql2 = "Update $table_name109 SET status='$ACT2', van55='$sbadc' WHERE map_id ='$map_id'"; $sql2 = "Update $table_name49 SET username='$user', firstname='$fnameC', lastname='$lnameC', email='$cust_emailC', status='$status', user_group_id='$user_group_id' WHERE user_id='$id'" ; $result2 = @mysqli_query($connection,$sql2) or die(mysqli_error($connection)); $mess="
User Acount has been updated.
"; } if($phone!=$phone2 AND ($phone2==$blink OR $phone==$blink)){ $mess="
Passwords do not match or are blank. Redo.
"; } if($phone==$phone2 AND $phone2!=$blink){ $sql2 = "Update $table_name49 SET username='$user', firstname='$fnameC', lastname='$lnameC', email='$cust_emailC', status='$status', user_group_id='$user_group_id', password=md5('$phone'), pass1='$phone' WHERE user_id='$id'" ; $result2 = @mysqli_query($connection,$sql2) or die(mysqli_error($connection)); $mess="
User Acount has been updated.
"; } } } ?> Sales = Jed=<?PHP echo "$jedID2"; ?> cust=<?PHP echo "$cust_id"; ?> " />

/index.php?route=common/home&token=">Home ::
"; ?>