bnmbnmbnhjkhjkhjkhjktyutyutyuytutyutyutyhgjgjghjgjghjguytutyry

halohalo bnmbnmbnhjkhjkhjkhjktyutyutyuytutyutyutyhgjgjghjgjghjguytutyry

<?php 
error_reporting (0);
include 'dbc.php';
page_protect();
$id1=$_SESSION['raga_id'];

$page_limit = 10; 
$host  = $_SERVER['HTTP_HOST'];
$host_upper = strtoupper($host);
$login_path = @ereg_replace('admin','',dirname($_SERVER['PHP_SELF']));
$path   = rtrim($login_path, '/\\');
foreach($_GET as $key => $value) {
	$get[$key] = filter($value);

}
foreach($_POST as $key => $value) {
	$post[$key] = filter($value);

}
if($post['doBan'] == 'Ban') {
if(!empty($_POST['u'])) {
	foreach ($_POST['u'] as $uid) {
		$id = filter($uid);
		mysqli_query($link,"update users set banned='1' where id='$id' and `user_name` <> 'admin'");
	}
 }
 $ret = $_SERVER['PHP_SELF'] . '?'.$_POST['query_str'];;
 header("Location: $ret");
 exit();
}
if($_POST['doUnban'] == 'Unban') {
if(!empty($_POST['u'])) {
	foreach ($_POST['u'] as $uid) {
		$id = filter($uid);
		mysqli_query($link,"update users set banned='0' where id='$id'");
	}
 }
 $ret = $_SERVER['PHP_SELF'] . '?'.$_POST['query_str'];;
 header("Location: $ret");
 exit();

}
if($_POST['doDelete'] == 'Delete') {
if(!empty($_POST['u'])) {
	foreach ($_POST['u'] as $uid) {
		$id = filter($uid);
		mysqli_query($link,"delete from users where id='$id' and `user_name` <> 'admin'");
	}
 }
 $ret = $_SERVER['PHP_SELF'] .'?'.$_POST['query_str'];;
 header("Location: $ret");
 exit();
}
if($_POST['doApprove'] == 'Approve') {

if(!empty($_POST['u'])) {
	foreach ($_POST['u'] as $uid) {
		$id = filter($uid);
		mysqli_query($link,"update users set approved='1' where id='$id'");
	list($to_email) = mysqli_fetch_row(mysqli_query($link,"select user_email from users where id='$uid'"));	
$message =

"Hello,\n

Thank you for registering with us. Your account has been activated...\n

*****LOGIN LINK*****\n

http://$host$path/login.php

Thank You

Administrator

$host_upper

______________________________________________________

THIS IS AN AUTOMATED RESPONSE.

***DO NOT RESPOND TO THIS EMAIL****

";
@mail($to_email, "User Activation", $message,

"From: \"Member Registration\" <auto-reply@$host>\r\n" .

"X-Mailer: PHP/" . phpversion()); 
	}

}
 $ret = $_SERVER['PHP_SELF'] . '?'.$_POST['query_str'];	 
 header("Location: $ret");
 exit();
}
$rs_all = mysqli_query($link,"select count(*) as total_all from users") or die(mysqli_error($link));
$rs_active = mysqli_query($link,"select count(*) as total_active from users where approved='1'") or die(mysqli_error($link));
$rs_total_pending = mysqli_query($link,"select count(*) as tot from users where approved='0'");						   
list($total_pending) = mysqli_fetch_row($rs_total_pending);
list($all) = mysqli_fetch_row($rs_all);
list($active) = mysqli_fetch_row($rs_active);
?>
<?php include "header.php";?>
      <div class="main-bar">
        <h3> <i class="fa fa-plus"></i>&nbsp; Create New Admin</h3>
      </div>
    </header>
   <?php include'admin_admin.php';?>
  <div id="content">
    <div class="outer">
      <div class="inner bg-light lter">
        <style>
              .form-control.col-lg-6 {
                width: 50% !important;
              }
            </style>
    <div class="row">
          <div class="col-lg-12">
            <div class="box">
              <header class="dark">
                <div class="icons"> <i class="fa fa-user"></i> </div>
                <h5>User Admin</h5>
              </header>
              <div id="collapse2" class="body">
  <table width="100%" height="25" border="0" cellpadding="5" cellspacing="0" bgcolor="#1F5F8B" class="table table-bordered table-condensed table-hover table-striped">

<tr>

<td width="33%"><span class="style5">Total users: <?php echo $all;?></span></td>

<td width="33%"><span class="style5">Active users: <?php echo $active; ?></span></td>

<td width="34%"><span class="style5">Pending users: <?php echo $total_pending; ?></span></td>

</tr>

</table>
                <form class="form-horizontal" id="popup-validation" method="get" action="">
                   <div class="box">
                    <header>
                      <div class="icons"> <i class="fa fa-search"></i> </div>
                      <h5>Search Details:</h5>
                      <div class="toolbar">
                        <div class="btn-group"> 
                        </div>
                      </div>
                    </header>
                    <br>
       
                  <div class="row">
                    <div class="col-md-12">
                      <div class="form-group">
                      <div class="col-md-2"></div>
                        <div class="col-md-6">
                       		<input type="text" class="validate[required] form-control" name="q"  id="q"  placeholder="Type Email (OR) User Name">
                        </div>
                        <div class="col-md-4">
                          <input type="submit" value="Search" class="btn btn-primary" name="doSearch" id="doSearch" >
                        </div>
                      </div>
                    </div>
                  </div>
                  <br>
                  
                  <div class="row">
                  	<div class="col-md-12" style="margin-left:10px;">
                    	<div class="col-md-2">
                          <div class="form-group">
                           <input type="radio" name="qoption" value="users"  > <strong>Customer</strong>
                          </div>
                        </div>
                        <div class="col-md-2">
                          <div class="form-group">
                            <input type="radio" name="qoption"  value="admin"> <strong>Admin</strong>
                          </div>
                        </div>
                        <div class="col-md-2">
                          <div class="form-group">
                             <input type="radio" name="qoption" value="pending" > <strong>Pending</strong>
                          </div>
                        </div>  
                        <div class="col-md-2">
                          <div class="form-group">
                             <input type="radio" value="recent" name="qoption"> <strong>Recent</strong>
                          </div>
                        </div>
                        <div class="col-md-2">
                          <div class="form-group">
                             <input type="radio"  value="banned" name="qoption"> <strong>Banned</strong>
                          </div>
                        </div>
                     </div>
                  </div>
                </div>
              </form>
			</div>
          </div>
        </div>
      </div>        
            
   
				<?php if ($get['doSearch'] == 'Search') {
                $cond = '';
                if($get['qoption'] == 'pending') {
                $cond = "where `approved`='0' order by date desc";
                }
                if($get['qoption'] == 'recent') {
                $cond = "order by date desc";
                }
                if($get['qoption'] == 'banned') {
                $cond = "where `banned`='1' order by date desc";
                }
                if($get['qoption'] == 'users') {
                $cond = "where `user_level`='1' order by date desc";
                }
                if($get['qoption'] == 'seller') {
                $cond = "where `user_level`='2' order by date desc";
                }
				if($get['qoption'] == 'employee') {
                $cond = "where `user_level`='3' order by date desc";
                }
                if($get['qoption'] == 'admin') {
                $cond = "where `user_level`='5' order by date desc";
                }
                if($get['q'] == '') { 
                $sql = "select * from users $cond"; 
                } 
                else { 
                $sql = "select * from users where `user_email` = '$_REQUEST[q]' or `user_name`='$_REQUEST[q]' ";
                }
                $rs_total = mysqli_query($link,$sql) or die(mysqli_error($link));
                $total = mysqli_num_rows($rs_total);
 				$rs_results = mysqli_query($link,$sql) or die(mysqli_error($link));

if (!isset($_GET['page']) )
                { $start=0; } else
                { $start = ($_GET['page'] - 1) * $page_limit; }
                $rs_results = mysqli_query($link,$sql . " limit $start,$page_limit") or die(mysqli_error($link,));
                $total_pages = ceil($total/$page_limit);
                ?>
                <div class="row">
          		<div class="col-lg-12">
            	<div class="box">
              	<div id="collapse2" class="body"> 
                 <p class="arial1">Approve -&gt; A notification email will be sent to user notifying activation.<br>
                Ban -&gt; No notification email will be sent to the user. </p>
                <p class="arial1"><strong>*Note: </strong>Once the user is banned, he/she will never be 
                able to register new account with same email address.</p>
                <header class="dark">
                <div class="icons"> <i class="fa fa-user"></i> </div>
                <h5>User Name</h5>
              	</header>
              	<div class="row">
                	<div class="col-lg-12">
                  		<div class="box">
                    		<div id="collapse4" class="body">
                    			<p class="arial1"> 
				<?php 
                if ($total > $page_limit)
                {
                echo "<div><strong>Pages:</strong> ";
                $i = 0;
                while ($i < $page_limit)  {
                $page_no = $i+1;
                $qstr = ereg_replace("&page=[0-9]+","",$_SERVER['QUERY_STRING']);
                echo "<a class='btn btn-primary' href=\"admin.php?$qstr&page=$page_no\">$page_no</a> ";
                $i++;  }
                echo "</div>"; }  ?>
                 </p>
 <form class="form-horizontal" name="searchform" id="popup-validation" method="post" action="admin.php">
                     <table class="table table-bordered table-condensed table-hover table-striped">
                        <thead>
                          <tr>
                            <th>ID</th>
                            <th>User Name</th>
                            <th>Date</th>
                            <th>Mobile Number</th>
                            <th>Email</th>
                            <th>Approval</th>
                            <th>Banned</th>
                          </tr>
                        </thead>
                        <tbody>
           <?php while ($rrows = mysql_fetch_array($rs_results)) {?>
           <tr> 
             <td height="50"> 
                 <input name="u[]" type="checkbox" value="<?php echo $rrows['id']; ?>" id="u[]">
            </td>
             <td><a href="javascript:void(0);" onclick='$(&quot;#edit<?php echo $rrows['id'];?>&quot;).show(&quot;slow&quot;);'><?php echo $rrows['user_name'];?></a> </td>
            <td><?php echo $rrows['date']; ?></td>
            <td><?php echo $rrows['contact_no'];?></td>
            <td><?php echo $rrows['user_email']; ?></td>
            <td><span id="approve<?php echo $rrows['id']; ?>"> 
              <?php if(!$rrows['approved']) { echo '<i class="fa fa-remove" style="font-size:23px; color:#903;"></i>Pending'; } else {echo '<i class="fa fa-check" style="font-size:23px; color:#096;"></i>Active'; }?>
            </span></td>
            <td><span id="ban<?php echo $rrows['id']; ?>"> 
              <?php if(!$rrows['banned']) { echo '<i class="fa fa-remove" style="font-size:23px; color:#903;"></i>No'; } else {echo '<i class="fa fa-check" style="font-size:23px; color:#096;"></i>yes'; }?>
            </span></td>
          </tr>
          <tr>
          <td colspan="7">
          <div style="display:none;font: normal 11px arial; padding:10px; background: #428bca;" id="edit<?php echo $rrows['id']; ?>">
            <div align="center">
            <span>
            <div align="right"><a  onclick='$("#edit<?php echo $rrows['id'];?>").hide();' href="javascript:void(0);">
            <i class="fa fa-remove" style="font-size:23px; color:#903;"></i>
            </a></div>
            <table id="dataTable" class="table">
            <tr>
            <td>&nbsp;</td>
            <td>User Name</td>
            <td><input type="hidden" name="id<?php echo $rrows['id']; ?>" id="id<?php echo $rrows['id']; ?>" value="<?php echo $rrows['id']; ?>" />
            <input name="user_name<?php echo $rrows['id']; ?>" class="validate[required] form-control" id="user_name<?php echo $rrows['id']; ?>" type="text" size="10" value="<?php echo $rrows['user_name']; ?>" /></td>
            <td>&nbsp;</td>
            </tr>
            <tr>
            <td>&nbsp;</td>
            <td>User Email</td>
            <td> 
            <input id="user_email<?php echo $rrows['id']; ?>" class="validate[required] form-control" name="user_email<?php echo $rrows['id']; ?>" type="text" size="20" value="<?php echo $rrows['user_email']; ?>" /></td>
            <td>&nbsp;</td>
            </tr>
            <tr>
            <td>&nbsp;</td>
            <td>Level</td>
            <td> 
            <input id="user_level<?php echo $rrows['id']; ?>" class="validate[required] form-control" name="user_level<?php echo $rrows['id']; ?>" type="text" size="5" value="<?php echo $rrows['user_level']; ?>" />    </td>
            <td>&nbsp;</td>
            </tr>
            <tr>
            <td>&nbsp;</td>
            <td>&nbsp;</td>
            <td> ( 1-&gt;Client, 2-&gt;Seller, 3-&gt;Employee, 5-&gt;Admin )    </td>
            <td>&nbsp;</td>
            </tr>
            <tr>
            <td>&nbsp;</td>
            <td>New Password</td>
            <td>
            <input id="pass<?php echo $rrows['id']; ?>" class="validate[required] form-control" name="pass<?php echo $rrows['id']; ?>" type="text" size="20" value="" /></td>
            <td>&nbsp;</td>
            </tr>
            <tr>
            <td>&nbsp;</td>
            <td colspan="2"><div align="center">
            <input name="doSave" type="button" class="btn btn-primary" id="doSave" value="Save" 
            onclick='$.get(&quot;do.php&quot;,{ cmd: &quot;edit&quot;, pass:$(&quot;input#pass<?php echo $rrows['id']; ?>&quot;).val(),user_level:$(&quot;input#user_level<?php echo $rrows['id']; ?>&quot;).val(),user_email:$(&quot;input#user_email<?php echo $rrows['id']; ?>&quot;).val(),user_name: $(&quot;input#user_name<?php echo $rrows['id']; ?>&quot;).val(),id: $(&quot;input#id<?php echo $rrows['id']; ?>&quot;).val() } ,function(data){ $(&quot;#msg<?php echo $rrows['id']; ?>&quot;).html(data); });' />
            </div><div style="color:#060; font-weight:bold; font-size:16px; float:right;" id="msg<?php echo $rrows['id']; ?>" name="msg<?php echo $rrows['id']; ?>"></div></td>
            <td>&nbsp;</td>
            </tr>
            </table>
            </span>       
            </div>
            </div>
            </td>
            </tr>
          <?php } ?>
		</tbody>
        </table>

</p>

<p class="arial1">Note: If you delete the user can register again, instead

ban the user.</p>

<p class="arial1">Edit Users: To change email, user name or password,

you have to delete user first and create new one with same email and

user name.</p>

<p class="arial1">&nbsp;</p>
                   
        
              </tbody>
              </table>
              </form>
               </div>
            </div>
          </div>
        </div> 
        <?php } ?>
           <div class="row">
          <div class="col-lg-12">
            <div class="box">
              <header class="dark">
                <div class="icons"> <i class="fa fa-user"></i> </div>
                <h5>Create New Admin</h5>
              </header>
                <?php
			if($_POST['doSubmit'] == 'Create')
			{
			$rs_dup = mysql_query("select count(*) as total from users where user_name='$post[user_name]' OR user_email='$post[user_email]'") or die(mysql_error());
			list($dups) = mysql_fetch_row($rs_dup);
			$err = array();
			$msg = array();
			if($dups > 0) {
			die("The user name or email already exists in the system");
			}
			if(!empty($_POST['pwd'])) {
			$pwd = $post['pwd'];	
			$hash = PwdHash($post['pwd']);
			}  
			else
			{
			$pwd = GenPwd();
			$hash = PwdHash($pwd);
			}
			mysql_query("INSERT INTO users (`raga_id`,`company_name`,`contact_no`,`address`,`country`,`city`,`state`,`user_name`,`user_email`,`alter_email`,`pwd`,`approved`,`date`,`user_level`,`country_code`)
			VALUES ('$post[autoid]','$post[full_name]','$post[mobile_number]','$post[address]','$post[country]','$post[city]','$post[state]','$post[user_name]','$post[user_email]','$post[alter_email]','$hash','1',now(),'$post[user_level]','$post[country_code]')
			
			") or die(mysql_error()); 
			$message = 
			"Thank you for registering with us. Here are your login details...\n
			
			User Email: $post[user_email] \n
			
			Passwd: $pwd \n
			
			
			
			*****LOGIN LINK*****\n
			
			http://$host$path/login.php
			
			
			
			Thank You
			
			
			
			Administrator
			
			$host_upper
			
			______________________________________________________
			
			THIS IS AN AUTOMATED RESPONSE. 
			
			***DO NOT RESPOND TO THIS EMAIL****
			
			";
			if($_POST['send'] == '1') {
			mail($post['user_email'], "Login Details", $message,
			"From: \"Member Registration\" <auto-reply@$host>\r\n" .
			"X-Mailer: PHP/" . phpversion()); 
			}
			$msg = "User created with password $pwd....done."; 
			}
			if($_POST['doUpdate'] == 'Update')  
			{
			$rs_pwd = mysql_query("select pwd from users where id='$user'");
			list($old) = mysql_fetch_row($rs_pwd);
			$old_salt = substr($old,0,9);
			if($old === PwdHash($_POST['pwd_old'],$old_salt))
			{
			$newsha1 = PwdHash($_POST['pwd_new']);
			mysql_query("update users set pwd='$newsha1' where id='$_SESSION[user_id]'");
			$msg[] = "Your new password is updated";
			} else
			
			{
			$err[] = "Your old password is invalid";
			}
			}
	  ?>              <div id="collapse2" class="body">

<form class="form-horizontal" id="popup-validation" method="post" action="">
				<?php
                $user_name = $_GET['user_name'];
                $full_name = $_GET['full_name'];
                $address = $_GET['address'];
                ?>
                  <div class="row">
                    <div class="col-md-4">
                      <div class="form-group">
                        <label class="control-label col-md-4">Admin ID</label>
                        <div class="col-md-8">
                          <?php
					  $max = $db->maxOfAll("id","users");
					  $max=$max+1;
					  $auto="AD".$max."";
					  ?>
                          <input type="text" class="validate[required] form-control" readonly name="autoid" value="<?php echo $auto; ?>" id="autoid">
                        </div>
                      </div>
                    </div>
                    <div class="col-md-4">
                      <div class="form-group">
                        <label class="control-label col-md-4">User Name</label>
                        <div class="col-md-8">
                          <input type="text" class="validate[required] form-control"  name="user_name" value="<?php echo $user_name; ?>" id="user_name" onkeyup="twitter.updateUrl(this.value)">
                          
                          <input name="user_level" type="hidden" id="user_level" value="1" placeholder="User Name"/>

<div id="status"></div> 
                        </div>
                      </div>
                    </div>
                    <div class="col-md-4">
                      <div class="form-group">
                        <label class="control-label col-md-4">Full Name</label>
                        <div class="col-md-8">
                          <input type="text" class="validate[required] form-control" name="full_name" value="<?php echo $full_name; ?>" id="full_name" placeholder="Name">
                        </div>
                      </div>
                    </div>
                  </div>
                  <div class="row">
                    <div class="col-md-4">
                      <div class="form-group">
                        <label class="control-label col-md-4">Country</label>
                        <div class="col-md-8">
                        <input type="text" name="country" id="country" class="form-control" placeholder="Country">
                        </div>
                      </div>
                    </div>
                    <div class="col-md-4">
                      <div class="form-group">
                        <label class="control-label col-md-4">State</label>
 						<div class="col-md-8">
                        <input type="text" name="state" id="state" class="form-control" placeholder="State">
                        </div>
                      </div>
                    </div>
                    <div class="col-md-4">
                      <div class="form-group">
                        <label class="control-label col-md-4">City</label>
                         <div class="col-md-8">
                          <input type="text" name="city" id="city" class="form-control" placeholder="City">
                          
                        </div>
                      </div>
                    </div>
                  </div>
                  <div class="row">
                    <div class="col-md-4">
                      <div class="form-group">
                        <label class="control-label col-md-4">Mobile No</label>
                        <div class="col-md-8">
                          <input type="text" class="validate[required] form-control" name="country_code" id="country_code" placeholder="Country Code">
                          <input type="text" class="validate[required] form-control" name="mobile" id="mobile" placeholder="Mobile Number">
                        </div>
                      </div>
                    </div>
                    <div class="col-md-4">
                      <div class="form-group">
                        <label class="control-label col-md-4">Email</label>
                        <div class="col-md-8">
                          <input type="mail" class="validate[required] form-control" name="user_email" id="user_email" placeholder="Email Id">
                        </div>
                      </div>
                    </div>
                    <div class="col-md-4">
                      <div class="form-group">
                        <label class="control-label col-md-4">Alternate Email</label>
                        <div class="col-md-8">
                          <input type="email" class="validate[required] form-control" name="alter_email" id="alter_email" placeholder="Alternate Email Id">
                        </div>
                      </div>
                    </div>
                  </div>
                  <div class="row">
                    <div class="col-md-4">
                      <div class="form-group">
                        <label class="control-label col-md-4">Address</label>
                        <div class="col-md-8">
                          <textarea class="form-control" name="address" id="address" placeholder="Contact Address"></textarea>
                        </div>
                      </div>
                    </div>
                    <div class="col-md-4">
                      <div class="form-group">
                        <label class="control-label col-md-4">User Level</label>
                        <div class="col-md-8">
                          <select data-placeholder="Select Your Category" name="user_level" id="user_level" class="form-control chzn-select chzn-rtl">
                            <option value=""></option>
                            <option>Admin</option>
                          </select>
                        </div>
                      </div>
                    </div>
                    <div class="col-md-4">
                      <div class="form-group">
                        <label class="control-label col-md-4">Password</label>
                        <div class="col-md-8">
                          <input type="password" class="validate[required] form-control" name="pwd" id="pwd" placeholder="Password">
                        </div>
                      </div>
                    </div>
                    <div class="col-md-4">
                      <div class="form-group">
                        <label class="control-label col-md-4">Send Mail</label>
                        <div class="col-md-8">
                          <input name="send" type="checkbox" id="send" value="1" checked="checked" />
                        </div>
                      </div>
                    </div>
                  </div>
                  <br>
                  <br>
                  <center>
                    <div class="form-actions no-margin-bottom">
                      <input type="submit" value="Create" name="doSubmit" id="doSubmit" class="btn btn-primary">
                    </div>
                  </center>
                </form>
              </div>
            </div>
          </div>
        </div> 
        
      </div>
    </div>
  </div>
  
  <?php include "right-side.php";?>
</div>

</div>
    </div>
  </div>
</div>