<?php
//Die Dateien werden includet
include("../includes/connect.php");
include("../includes/funkt_template.php");
include("../includes/login_check.php");
include("../includes/timestamp.php");

//Überprüfen ob Admin sonst kein zugriff
if ($_SESSION["kennung"] != $superuser) 
{
	die("Access denied.");
}

//select füllen im template
$res = mysql_query("SELECT gruppen FROM gruppen");
while($row1 = mysql_fetch_array($res))
$option_gruppe .= "<option>$row1[gruppen]</option>\n"; 

$res5 = mysql_query("SELECT kennung FROM user");
while($row = mysql_fetch_array($res5))
$option_user .= "<option>$row[kennung]</option>\n"; 

//wenn der add user button gedrückt wurde...
if ($_POST[adduser])
{
	if (empty($_POST['txt_kennung']))
		$error .= "Kennung field is empty.
";
	if (empty($_POST['txt_vorname']))
		$error .= "Vorname field is empty.
";
	if (empty($_POST['txt_nachname']))
		$error .= "Nachname field is empty.
";	
	if (empty($_POST['txt_email']))
		$error .= "Email field is empty.
";	
	if (empty($_POST['option_gruppe']))
		$error .= "group field is empty.
";
	if ($_POST['txt_kennung'] == $row['kennung'])
		$error .= "User already exists.
";
	
	if (!$error)
	{
	$passwort = md5("123abc");	
	$res2 = mysql_query("INSERT INTO user (id, kennung, vorname, nachname, email, gruppe, passwort, online, stempel, pwcount) VALUES ('', '$_POST[txt_kennung]', '$_POST[txt_vorname]', '$_POST[txt_nachname]', '$_POST[txt_email]', '$_POST[option_gruppe]', '$passwort', 'offline', '', '0' )");
	$ergebnis = "User has been added.";
	}
	else
	{
	$ergebnis = "Adding User failed.";
	}
}
//wenn der del user button gedückt wurde...
if ($_POST[deluser])
{
	if($res3 = mysql_query("DELETE FROM user WHERE kennung = '$_POST[option_user]'"))
	{
	 $ergebnis = "User has been deleted.";
	}
	else
	{
	 $ergebnis = "Deleting User failed."; 
	}
}
               
//Die Templates werden ersetzt
$template = new CreateTemplate("../templates/adddeluser.htm");
$template->assign("ergebnis", $ergebnis);
$template->assign("error", $error);
$template->assign("option_gruppe", $option_gruppe);
$template->assign("option_user", $option_user);
$template->assign("txt_gruppe", $txt_gruppe);
$template->template_print() or die($template->error);
?>