| Server IP : 172.67.187.206 / Your IP : 172.71.28.156 Web Server : Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30 System : Windows NT WIN-ECQAAA40806 6.2 build 9200 (Windows Server 2012 Standard Edition) i586 User : SYSTEM ( 0) PHP Version : 5.6.30 Disable Function : NONE MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : E:/Inetpub/www/myschool/suanphung/modules/admin/ |
Upload File : |
<?
CheckAdmin($_SESSION['admin_user'], $_SESSION['admin_pwd']);
?>
<SCRIPT LANGUAGE='JAVASCRIPT' TYPE='TEXT/JAVASCRIPT'>
<!--
var win=null;
function NewWindow(mypage,myname,w,h,pos,infocus){
if(pos=="random"){myleft=(screen.width)?Math.floor(Math.random()*(screen.width-w)):100;mytop=(screen.height)?Math.floor(Math.random()*((screen.height-h)-75)):100;}
if(pos=="center"){myleft=(screen.width)?(screen.width-w)/2:100;mytop=(screen.height)?(screen.height-h)/2:100;}
else if((pos!='center' && pos!="random") || pos==null){myleft=0;mytop=20}
settings="width=" + w + ",height=" + h + ",top=" + mytop + ",left=" + myleft + ",scrollbars=yes,location=no,directories=no,status=no,menubar=no,toolbar=no,resizable=no";win=window.open(mypage,myname,settings);
win.focus();}
// -->
</script>
<div align="center">
<table cellspacing="0" cellpadding="0" width="1005" height=420 border="0">
<tbody>
<tr>
<td vAlign=top>
<?
class Paginator{
var $items_per_page;
var $items_total;
var $current_page;
var $num_pages;
var $mid_range;
var $low;
var $high;
var $limit;
var $return;
var $default_ipp;
var $querystring;
var $url_next;
function Paginator()
{
$this->current_page = 1;
$this->mid_range = 7;
$this->items_per_page = $this->default_ipp;
$this->url_next = $this->url_next;
}
function paginate()
{
if(!is_numeric($this->items_per_page) OR $this->items_per_page <= 0) $this->items_per_page = $this->default_ipp;
$this->num_pages = ceil($this->items_total/$this->items_per_page);
if($this->current_page < 1 Or !is_numeric($this->current_page)) $this->current_page = 1;
if($this->current_page > $this->num_pages) $this->current_page = $this->num_pages;
$prev_page = $this->current_page-1;
$next_page = $this->current_page+1;
if($this->num_pages > 10)
{
$this->return = ($this->current_page != 1 And $this->items_total >= 10) ? "<a class=\"paginate\" href=\"".$this->url_next.$this->$prev_page."\">« ย้อนกลับ</a> ":"<span class=\"inactive\" href=\"#\">« ย้อนกลับ</span> ";
$this->start_range = $this->current_page - floor($this->mid_range/2);
$this->end_range = $this->current_page + floor($this->mid_range/2);
if($this->start_range <= 0)
{
$this->end_range += abs($this->start_range)+1;
$this->start_range = 1;
}
if($this->end_range > $this->num_pages)
{
$this->start_range -= $this->end_range-$this->num_pages;
$this->end_range = $this->num_pages;
}
$this->range = range($this->start_range,$this->end_range);
for($i=1;$i<=$this->num_pages;$i++)
{
if($this->range[0] > 2 And $i == $this->range[0]) $this->return .= " ... ";
if($i==1 Or $i==$this->num_pages Or in_array($i,$this->range))
{
$this->return .= ($i == $this->current_page And $_GET['Page'] != 'All') ? "<a title=\"Go to page $i of $this->num_pages\" class=\"current\" href=\"#\">$i</a> ":"<a class=\"paginate\" title=\"Go to page $i of $this->num_pages\" href=\"".$this->url_next.$i."\">$i</a> ";
}
if($this->range[$this->mid_range-1] < $this->num_pages-1 And $i == $this->range[$this->mid_range-1]) $this->return .= " ... ";
}
$this->return .= (($this->current_page != $this->num_pages And $this->items_total >= 10) And ($_GET['Page'] != 'All')) ? "<a class=\"paginate\" href=\"".$this->url_next.$next_page."\">ถัดไป »</a>\n":"<span class=\"inactive\" href=\"#\">» ถัดไป</span>\n";
}
else
{
for($i=1;$i<=$this->num_pages;$i++)
{
$this->return .= ($i == $this->current_page) ? "<a class=\"current\" href=\"#\">$i</a> ":"<a class=\"paginate\" href=\"".$this->url_next.$i."\">$i</a> ";
}
}
$this->low = ($this->current_page-1) * $this->items_per_page;
$this->high = ($_GET['ipp'] == 'All') ? $this->items_total:($this->current_page * $this->items_per_page)-1;
$this->limit = ($_GET['ipp'] == 'All') ? "":" LIMIT $this->low,$this->items_per_page";
}
function display_pages()
{
return $this->return;
}
}
?>
<html>
<head>
</head>
<style type="text/css">
<!--
.paginate {
font-family: Arial, Helvetica, sans-serif;
font-size: .7em;
}
a.paginate {
border: 1px solid #000080;
padding: 2px 6px 2px 6px;
text-decoration: none;
color: #000080;
}
h2 {
font-size: 12pt;
color: #003366;
}
h2 {
line-height: 1.2em;
letter-spacing:-1px;
margin: 0;
padding: 0;
text-align: left;
}
a.paginate:hover {
background-color: #000080;
color: #FFF;
text-decoration: underline;
}
a.current {
border: 1px solid #000080;
font: bold .7em Arial,Helvetica,sans-serif;
padding: 2px 6px 2px 6px;
cursor: default;
background:#000080;
color: #FFF;
text-decoration: none;
}
span.inactive {
border: 1px solid #999;
font-family: Arial, Helvetica, sans-serif;
font-size: .7em;
padding: 2px 6px 2px 6px;
color: #999;
cursor: default;
}
-->
</style>
<body>
<br>
<form name="form3" method="post" action="?name=admin&file=usersearch">
<table width=100% border="0" align="right" cellpadding="0" cellspacing="0">
<tr class="unnamed1">
<td align="right" width="750" class="unnamed2">
<img src="images/admin/search.jpg" alt="s" width="19" height="18">
</td>
<td width="160" class="unnamed2">
<div align="right">
<strong>ระบุเงื่อนไข</strong>
</div>
</td>
<td width="120">
<label>
</label>
<input name="search" type="text" id="search" value="<?=$_GET["search"];?>">
</td>
<td width="80">
<div align="left">
<input type="submit" name="Submit2" value="ค้นหา">
</div></td>
</tr>
</table>
<br>
</form>
<?
$strSQL = "SELECT * FROM ".TB_user." where id like '%$search%' or category_name like '%$search%' ";
$objQuery = mysql_query($strSQL) or die ("Error Query [".$strSQL."]");
$Num_Rows = mysql_num_rows($objQuery);
$Per_Page = 10; // Per Page
$Page = $_GET["Page"];
if(!$_GET["Page"])
{
$Page=1;
}
$Prev_Page = $Page-1;
$Next_Page = $Page+1;
$Page_Start = (($Per_Page*$Page)-$Per_Page);
if($Num_Rows<=$Per_Page)
{
$Num_Pages =1;
}
else if(($Num_Rows % $Per_Page)==0)
{
$Num_Pages =($Num_Rows/$Per_Page) ;
}
else
{
$Num_Pages =($Num_Rows/$Per_Page)+1;
$Num_Pages = (int)$Num_Pages;
}
$strSQL .=" ORDER BY id desc LIMIT $Page_Start , $Per_Page";
$objQuery = mysql_query($strSQL);
?>
<?
mysql_close();
?>
<!-- แสดงผลรายการ -->
<?
//////////////////////////////////////////// แสดงรายชื่อ
if($_GET[op] == ""){
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$limit = 10 ;
$SUMPAGE = $db->num_rows(TB_user,"id","status='2' and level between 5 and 13");
$page=$_GET[page];
if (empty($page)){
$page=1;
}
$rt = $SUMPAGE%$limit ;
$totalpage = ($rt!=0) ? floor($SUMPAGE/$limit)+1 : floor($SUMPAGE/$limit);
$goto = ($page-1)*$limit ;
?>
<table width="100%" align="center" cellspacing="2" cellpadding="1" >
<b><img src="images/icon/plus.gif" border="0" align="absmiddle" /> <a href="?name=admin&file=main">หน้าหลักผู้ดูแลระบบ</a>
<a href="?name=admin&file=user_school"><img src="images/admin/admins.gif" border="0" align="absmiddle" /> จัดการผู้ใช้</a>
<br />
<tr bgcolor="#990000" height="25">
<td><div align="center"><font color="#FFFFFF"><b>ชื่อผู้ใช้</b></font></div></td>
<td><div align="center"><font color="#FFFFFF"><b>ชื่อ - นามสกุล</b></font></div></td>
<td><div align="center"><font color="#FFFFFF"><b>ตำแหน่ง</b></font></div></td>
<td><div align="center"><font color="#FFFFFF"><b>กลุ่ม</b></font></div></td>
<td><div align="center"><font color="#FFFFFF"><b>ปฏิบัติหน้าที่</b></font></div></td>
<td><div align="center"><font color="#FFFFFF"><b>เปิดใช้</b></font></div></td>
<td><div align="center"><font color="#FFFFFF"><b>สถานะ</b></font></div></td>
</tr>
<?
$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE status='2' and level='3' ORDER BY id DESC LIMIT $goto, $limit ");
while($arr[user] = $db->fetch($res[user])){
$res[groups] = $db->select_query("SELECT * FROM ".TB_ADMIN_GROUP." WHERE id='".$arr[user][level]."' ");
$arr[groups] = $db->fetch($res[groups]);
$res[working] = $db->select_query("SELECT * FROM ".TB_WORKING_CAT." WHERE id='".$arr[user][working]."' ");
$arr[working] = $db->fetch($res[working]);
?>
<tr bgcolor="#FFFF99">
<td width="80"> <?echo $arr[user][username];?></td>
<td width="150" ><? echo $arr[user][category_name];?></td>
<td width="180" ><? echo $arr[user][posit];?></td>
<td width="180" ><? echo $arr[working][category_name];?></td>
<td width="140" ><? echo $arr[groups][name];?></td>
<td width="70" align="center" ><a href="?name=admin&file=user_school&op=minepass_edit&id=<? echo $arr[user][id];?>"><img src="images/edits.png" border="0" alt="แก้ไข" /></a></td>
<?
if ($arr[user][status]=='1'){ // ตรวจสิทธิ์ ผอ.เขต ============================================
?>
<td align="center" width="60" >
<form method="post" action="?name=admin&file=user_cpout&op=minepass_edit&action=edit&id=<? echo $arr[user][id];?>" enctype="multipart/form-data">
<INPUT TYPE="hidden" NAME="WORKING" VALUE="0" >
<INPUT TYPE="hidden" NAME="LEVEL" VALUE="<?=$arr[user][level];?>" >
<INPUT TYPE="hidden" NAME="STATUS" VALUE="2" >
<input type="hidden" name="PASSWORD" size="40" value="111111" id="PASSWORD" />
<input type='image' name='submit' src='images/<?=$arr[user][status];?>.png' border='0' title='ปิดการใช้งาน'/>
</form>
</td>
<?
} else if ($arr[user][status]=='2'){ // ตรวจสิทธิ์ รอง ผอ.เขต ============================================
?>
<td align="center" width="60" >
<font color="#FF0000"><img src="images/<? echo $arr[user][status];?>.png"></font>
</td>
<? } ?>
</tr>
<tr>
<td colspan="6" height="1" class="dotline"></td>
</tr>
<?
}
?>
</table>
</form>
<?
SplitPage($page,$totalpage,"?name=admin&file=user_cpstatus2");
echo $ShowSumPages ;
echo "<BR>";
echo $ShowPages ;
echo "<BR><BR>";
$res[groupstext] = $db->select_query("SELECT * FROM ".TB_ADMIN_GROUP." ORDER BY id ");
while ($arr[groupstext] = $db->fetch($res[groupstext]))
{
echo "<LI><B>".$arr[groupstext][name]." : </B>".$arr[groupstext][description]."</LI>";
}
$db->closedb ();
}
else if($_GET[op] == "user_add" AND $_GET[action] == "add"){
//////////////////////////////////////////// กรณีเพิ่ม User Admin Database
if(CheckLevel($_SESSION['admin_user'],$_GET[op])){
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
//ตรวจสอบมี user นี้หรือยัง
$res[user] = $db->select_query("SELECT id FROM ".TB_user." WHERE username='".$_POST[USERNAME]."' ");
$rows[user] = $db->rows($res[user]);
$db->closedb ();
if($rows[user]){
$ProcessOutput .= "<BR><BR>";
$ProcessOutput .= "<CENTER><IMG SRC=\"images/icon/notview.gif\" BORDER=\"0\"><BR><BR>";
$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ชื่อสมาชิกเวป : ".$_POST[USERNAME]." มีในระบบแล้วไม่สามารถเพิ่มได้</B></FONT><BR><BR>";
$ProcessOutput .= "<A HREF=\"javascript:history.go(-1);\"><B>กลับไปแก้ไข</B></A>";
$ProcessOutput .= "</CENTER>";
$ProcessOutput .= "<BR><BR>";
}else{
/*require("includes/class.resizepic.php");
$FILE = $_FILES['FILE'];
if (($FILE['type']!="image/jpg") AND ($FILE['type']!="image/jpeg") AND ($FILE['type']!="image/pjpeg")){
echo "<script language='javascript'>" ;
echo "alert('กรุณาใช้ไฟล์นามสกุล jpg เท่านั้น')" ;
echo "</script>" ;
echo "<script language='javascript'>javascript:history.back()</script>";
exit();
}else{
@copy ($FILE['tmp_name'] , "usericon/".TIMESTAMP.".jpg" );
$original_image = "usericon/".TIMESTAMP.".jpg" ;
$desired_width = _Iuser_W ;
$desired_height = _Iuser_H ;
$image = new hft_image($original_image);
$image->resize($desired_width, $desired_height, '0');
$image->output_resized("usericon/".TIMESTAMP.".jpg", "JPG");
}
*/
//ทำการเพิ่มข้อมูลลงดาต้าเบส
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$db->add_db(TB_user,array(
"username"=>"$_POST[USERNAME]",
"password"=>"".md5($_POST[PASSWORD])."",
"category_name"=>"$_POST[CATEGORY_NAME]",
"posit"=>"$_POST[POSIT]",
"working"=>"$_POST[WORKING]",
"email"=>"$_POST[EMAIL]",
"level"=>"$_POST[LEVEL]",
"post_date"=>"".TIMESTAMP."",
"update_date"=>"".TIMESTAMP."",
"status"=>"$_POST[STATUS]"
));
$db->closedb ();
$ProcessOutput .= "<BR><BR>";
$ProcessOutput .= "<CENTER><A HREF=\"?name=admin&file=main\"><IMG SRC=\"images/icon/login-welcome.gif\" BORDER=\"0\"></A><BR><BR>";
$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ได้ทำการเพิ่มชื่อสมาชิกเวป : ".$_POST[USERNAME]." เข้าสู่ระบบเรียบร้อยแล้ว</B></FONT><BR><BR>";
$ProcessOutput .= "<meta http-equiv=\"refresh\" content=\"1 ;url=?name=admin&file=user_cp\">";
$ProcessOutput .= "</CENTER>";
$ProcessOutput .= "<BR><BR>";
}
}else{
//กรณีไม่ผ่าน
$ProcessOutput = $PermissionFalse ;
}
echo $ProcessOutput ;
}
else if($_GET[op] == "user_add"){
//////////////////////////////////////////// กรณีเพิ่ม User Admin Form
if(CheckLevel($_SESSION['admin_user'],$_GET[op])){
?>
<form method="post" action="?name=admin&file=user_cp&op=user_add&action=add" enctype="multipart/form-data">
<table width="100%">
<tr>
<td width="150"><div align="right"><b>ชื่อผู้ใช้ :</b></div></td>
<td><input type="text" name="USERNAME" size="40" id="USERNAME" /> *** อักษรภาษาอังกฤษ/ตัวเลข</td>
</tr>
<tr>
<td><div align="right"><b>รหัสผ่าน :</b></div></td>
<td><input type="password" name="PASSWORD" size="40" id="PASSWORD" />*** อักษรภาษาอังกฤษ/ตัวเลข</td>
</tr>
<tr>
<td><div align="right"><b>ชื่อ - นามสกุล :</b></div></td>
<td><input type="text" name="CATEGORY_NAME" size="40" id="CATEGORY_NAME" /> ***ภาษาไทย</td>
</tr>
<tr>
<td><div align="right"><b>ตำแหน่ง :</b></div></td>
<td><SELECT NAME="POSIT"><option></option>
<?
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$res[category] = $db->select_query("SELECT * FROM ".TB_POSITION_CAT." ORDER BY id ");
while ($arr[category] = $db->fetch($res[category])){
echo "<option value=\"".$arr[category][category_name]."\"";
echo ">".$arr[category][category_name]."</option>";
}
$db->closedb ();
?>
</SELECT> </td>
</tr>
<tr>
<td><div align="right"><b>กลุ่ม :</b></div></td>
<td><SELECT NAME="WORKING"><option></option>
<?
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$res[category] = $db->select_query("SELECT * FROM ".TB_WORKING_CAT." ORDER BY id ");
while ($arr[category] = $db->fetch($res[category])){
echo "<option value=\"".$arr[category][level]."\"";
echo ">".$arr[category][category_name]."</option>";
}
$db->closedb ();
?>
</SELECT> </td>
</tr>
<tr>
<td><div align="right"><b>ปฏิบัติหน้าที่ :</b></div></td>
<td> <select name="LEVEL" id="LEVEL"><option></option>
<?
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$res[groups] = $db->select_query("SELECT * FROM ".TB_ADMIN_GROUP." WHERE id between 5 and 10 OR id>12 ORDER BY id ");
while ($arr[groups] = $db->fetch($res[groups]))
{
echo "<option value=\"".$arr[groups][id]."\">".$arr[groups][name]."</option>";
}
$db->closedb ();
?>
</select>
</td>
</tr>
<tr>
<td><div align="right"><b>อีเมล์ :</b></div></td>
<td><input type="text" name="EMAIL" size="40" id="EMAIL" /></td>
</tr>
<tr>
<td><div align="right"><input type="hidden" name="STATUS" id="status" value="1"></div></td>
<td><input type="submit" value=" เพิ่มสมาชิก" /></td>
</tr>
</table>
</form>
<?
}else{
//กรณีไม่ผ่าน
echo $PermissionFalse ;
}
}
else if($_GET[op] == "user_edit" AND $_GET[action] == "edit"){
//////////////////////////////////////////// กรณีแก้ไข User Admin Database Edit
if(CheckLevel($_SESSION['admin_user'],$_GET[op])){
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
//ตรวจสอบมี user นี้หรือยัง
$res[user] = $db->select_query("SELECT id FROM ".TB_user." WHERE id='".$_GET[id]."' ");
$rows[user] = $db->rows($res[user]);
$db->closedb ();
require("includes/class.resizepic.php");
$FILE = $_FILES['FILE'];
if ((($FILE['type']!="image/jpg") AND ($FILE['type']!="image/jpeg") AND ($FILE['type']!="image/pjpeg")) AND $FILE['size']){
echo "<script language='javascript'>" ;
echo "alert('กรุณาใช้ไฟล์นามสกุล jpg เท่านั้น')" ;
echo "</script>" ;
echo "<script language='javascript'>javascript:history.back()</script>";
exit();
/*}else{
@copy ($FILE['tmp_name'] , "usericon/".$arr[user][post_date].".jpg" );
$original_image = "usericon/".$arr[user][post_date].".jpg" ;
$desired_width = _Iuser_W ;
$desired_height = _Iuser_H ;
$image = new hft_image($original_image);
$image->resize($desired_width, $desired_height, '0');
$image->output_resized("usericon/".$arr[user][post_date].".jpg", "JPG");
*/
}
if($rows[user] AND ($_POST[USERNAME] != $_POST[USERNAME_OLD])){
$ProcessOutput .= "<BR><BR>";
$ProcessOutput .= "<CENTER><IMG SRC=\"images/icon/notview.gif\" BORDER=\"0\"><BR><BR>";
$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ชื่อสมาชิกเวป : ".$_POST[USERNAME]." มีในระบบแล้วไม่สามารถเพิ่มได้</B></FONT><BR><BR>";
$ProcessOutput .= "<A HREF=\"javascript:history.go(-1);\"><B>กลับไปแก้ไข</B></A>";
$ProcessOutput .= "</CENTER>";
$ProcessOutput .= "<BR><BR>";
}else{
if($_POST[PASSWORD]){
$NewPass = md5($_POST[PASSWORD]);
}else{
$NewPass = $_POST[oldpass];
}
//ทำการเพิ่มข้อมูลลงดาต้าเบส
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$db->update_db(TB_user,array(
"username"=>"$_POST[USERNAME]",
"password"=>"".md5($_POST[PASSWORD])."",
"category_name"=>"$_POST[CATEGORY]",
"posit"=>"$_POST[POSIT]",
"group"=>"$_POST[GROUP]",
"email"=>"$_POST[EMAIL]",
"level"=>"$_POST[LEVEL]",
"post_date"=>"".TIMESTAMP."",
"update_date"=>"".TIMESTAMP."",
"status"=>"$_POST[STATUS]"
)," id='$_GET[id]' ");
$db->closedb ();
$ProcessOutput .= "<BR><BR>";
$ProcessOutput .= "<CENTER><A HREF=\"?name=admin&file=main\"><IMG SRC=\"images/icon/login-welcome.gif\" BORDER=\"0\"></A><BR><BR>";
$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ได้ทำการแก้ไขผู้ระบบเรียบร้อยแล้ว</B></FONT><BR><BR>";
$ProcessOutput .= "</CENTER>";
$ProcessOutput .= "<BR><BR>";
}
}else{
//กรณีไม่ผ่าน
$ProcessOutput = $PermissionFalse ;
}
echo $ProcessOutput ;
}
else if($_GET[op] == "user_edit"){
//////////////////////////////////////////// กรณีแก้ไข User Admin Edit Form
if(CheckLevel($_SESSION['admin_user'],$_GET[op])){
//ดึงค่าของสมาชิกเวปออกมา
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE id='".$_GET[id]."' ");
$arr[user] = $db->fetch($res[user]);
$db->closedb ();
//ไม่ให้อัพเดทตัวเอง
if($_SESSION['admin_user'] == $_SESSION['admin_user']){ //$arr[user][username]){
$Readonly = " readonly ";
}
?>
<form method="post" action="?name=admin&file=user_cpstatus2&op=user_edit&action=edit&id=<?=$_GET[id];?>" enctype="multipart/form-data">
<table width="100%">
<tr>
<td width="150"><div align="right"><b>ชื่อผู้ใช้ :</b></div></td>
<td><input name="USERNAME" type="text" id="USERNAME" value="<?=$arr[user][username];?>" size="40" /></td>
</tr>
<tr>
<td><div align="right">
<input type="hidden" name="USERNAME_OLD" value="<?=$arr[user][username];?>" />
<b>รหัสผ่าน :</b></div></td>
<td><input name="PASSWORD" type="password" id="PASSWORD" value="" size="40" <?=$Readonly;?> /></td>
</tr>
<tr>
<td><div align="right"><b>ชื่อ - นามสกุล :</b></div></td>
<td><input name="NAME" type="text" id="NAME" value="<?=$arr[user][name];?>" size="40" /></td>
</tr>
<tr>
<td><div align="right"><b>ตำแหน่ง :</b></div></td>
<td><SELECT NAME="POSITION"><option></option>
<?
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$res[category] = $db->select_query("SELECT * FROM ".TB_POSITION_CAT." ORDER BY id ");
while ($arr[category] = $db->fetch($res[category])){
echo "<option value=\"".$arr[category][category_name]."\"";
echo ">".$arr[category][category_name]."</option>";
}
$db->closedb ();
?>
</SELECT> </td>
</tr>
<tr>
<td><div align="right"><b>กลุ่ม :</b></div></td>
<td><select NAME="ADDRESS">
<option></option>
<option value="9">กลุ่ม/หน่วย</option>
<option value="8"> ผู้อำนวยการเขตพื้นที่การศึกษา</option>
<option value="8">รองผู้อำนวยการเขตพื้นที่การศึกษา</option>
<option value="2">กลุ่มอำนวยการ</option>
<option value="3">กลุ่มนโยบายและแผน</option>
<option value="4">กลุ่มบริหารงานบุคคล</option>
<option value="5">กลุ่มส่งเสริมการจัดการศึกษา</option>
<option value="6">กลุ่มนิเทศติดตามและประเมินผล</option>
<option value="10">กลุ่มบริหารการเงินและสินทรัพย์</option>
<option value="13">กลุ่มส่งเสริมการศึกษาเอกชน</option>
<option value="7">หน่วยตรวจสอบภายใน</option>
<option value="14">ศูนย์เทคโนโลยีสารสนเทศ</option>
<option value="0">ย้าย/เกษียณ</option>
</select></td>
</tr>
<tr>
<td><div align="right"><b>อีเมล์ :</b></div></td>
<td><input name="EMAIL" type="text" id="EMAIL" value="<?=$arr[user][email];?>" size="40" /></td>
</tr>
<tr>
<td><div align="right"><b>การใช้งาน</b></div></td>
<td><input type="radio" name="TEL" id="tel" value="ปฏิบัติงาน"checked /> ปฏิบัติงาน <input type="radio" name="TEL" id="tel" value="เลิกปฏิบัติงาน"/> เลิกปฏิบัติงาน</td>
</tr>
<tr>
<td><div align="right"><b>Level :</b></div></td>
<td><select name="LEVEL" id="LEVEL">
<?
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$res[groups] = $db->select_query("SELECT * FROM ".TB_ADMIN_GROUP." WHERE id > '4' ORDER BY id ");
while ($arr[groups] = $db->fetch($res[groups]))
{
echo "<option value=\"".$arr[groups][id]."\" ";
if($arr[groups][id] == $arr[user][level]){echo " Selected";};
echo ">".$arr[groups][name]."</option>";
}
$db->closedb ();
?>
</select></td>
</tr>
<tr>
<td><div align="right"></div></td>
<td><input type="submit" value=" แก้ไขสมาชิก " />
<input name="oldpass" type="hidden" id="oldpass" value="<?=$arr[user][password];?>" /></td>
</tr>
</table>
</form>
<?
}else{
//กรณีไม่ผ่าน
$ProcessOutput = $PermissionFalse ;
}
echo $ProcessOutput ;
}
else if($_GET[op] == "user_del" AND $_GET[action] == "multidel"){
//////////////////////////////////////////// กรณีลบ User Admin Multi
if(CheckLevel($_SESSION['admin_user'],$_GET[op])){
while(list($key, $value) = each ($_POST['list'])){
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$db->del(TB_user," id='".$value."' ");
$db->closedb ();
}
$ProcessOutput .= "<BR><BR>";
$ProcessOutput .= "<CENTER><A HREF=\"?name=admin&file=main\"><IMG SRC=\"images/icon/login-welcome.gif\" BORDER=\"0\"></A><BR><BR>";
$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ได้ทำการลบรายการผู้ระบบเรียบร้อยแล้ว</B></FONT><BR><BR>";
$ProcessOutput .= "<A HREF=\"?name=admin&file=user\"><B>กลับหน้า จัดการสมาชิกเวป</B></A>";
$ProcessOutput .= "</CENTER>";
$ProcessOutput .= "<BR><BR>";
}else{
//กรณีไม่ผ่าน
$ProcessOutput = $PermissionFalse ;
}
echo $ProcessOutput ;
}
else if($_GET[op] == "user_del"){
//////////////////////////////////////////// กรณีลบ User Admin Form
if(CheckLevel($_SESSION['admin_user'],$_GET[op])){
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$db->del(TB_user," id='".$_GET[id]."' ");
$db->closedb ();
$ProcessOutput .= "<BR><BR>";
$ProcessOutput .= "<CENTER><A HREF=\"?name=admin&file=main\"><IMG SRC=\"images/icon/login-welcome.gif\" BORDER=\"0\"></A><BR><BR>";
$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ได้ทำการลบผู้ระบบเรียบร้อยแล้ว</B></FONT><BR><BR>";
$ProcessOutput .= "<A HREF=\"?name=admin&file=user\"><B>กลับหน้า จัดการสมาชิกเวป</B></A>";
$ProcessOutput .= "</CENTER>";
$ProcessOutput .= "<BR><BR>";
}else{
//กรณีไม่ผ่าน
$ProcessOutput = $PermissionFalse ;
}
echo $ProcessOutput ;
}
else if($_GET[op] == "minepass_edit" AND $_GET[action] == "edit"){
//////////////////////////////////////////// กรณีแก้ไขข้อมูลส่วนตัว
if(CheckLevel($_SESSION['admin_user'],$_GET[op])){
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
// $res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE username='".$_SESSION['user_user']."' ");
$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE id='".$_GET[id]."' ");
$arr[user] = $db->fetch($res[user]);
$db->closedb ();
if(!$_POST[USERNAME] OR !$_POST[CATEGORY_NAME] OR !$_POST[EMAIL]){
$ProcessOutput .= "<BR><BR>";
$ProcessOutput .= "<CENTER><IMG SRC=\"images/icon/notview.gif\" BORDER=\"0\"><BR><BR>";
$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>กรุณากรอกข้อมูลต่างๆให้ครบถ้วน</B></FONT><BR><BR>";
$ProcessOutput .= "<A HREF=\"javascript:history.go(-1);\"><B>กลับไปแก้ไข</B></A>";
$ProcessOutput .= "</CENTER>";
$ProcessOutput .= "<BR><BR>";
}else{
$User_User = $_GET[id]; //$_SESSION[admin_user];
if($_POST[PASSWORD]){
$NewPass = md5($_POST[PASSWORD]);
$URLre = "?name=admin&file=user_cpstatus2";
//session_unset();
//session_destroy();
}else{
$NewPass = $_POST[oldpass];
$URLre = "?name=admin&file=user_cpstatus2";
}
/*require("includes/class.resizepic.php");
$FILE = $_FILES['FILE'];
if ((($FILE['type']!="image/jpg") AND ($FILE['type']!="image/jpeg") AND ($FILE['type']!="image/pjpeg")) AND $FILE['size']){
echo "<script language='javascript'>" ;
echo "alert('กรุณาใช้ไฟล์นามสกุล jpg เท่านั้น')" ;
echo "</script>" ;
echo "<script language='javascript'>javascript:history.back()</script>";
exit();
}else{
@copy ($FILE['tmp_name'] , "usericon/".$arr[user][post_date].".jpg" );
$original_image = "usericon/".$arr[user][post_date].".jpg" ;
$desired_width = _Iuser_W ;
$desired_height = _Iuser_H ;
$image = new hft_image($original_image);
$image->resize($desired_width, $desired_height, '0');
$image->output_resized("usericon/".$arr[user][post_date].".jpg", "JPG");
}
*/
//ทำการแก้ไขข้อมูลลงดาต้าเบส
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$db->update_db(TB_user,array(
"username"=>"$_POST[USERNAME]",
"password"=>"$NewPass",
"category_name"=>"$_POST[CATEGORY_NAME]",
"posit"=>"$_POST[POSIT]",
"working"=>"$_POST[WORKING]",
"email"=>"$_POST[EMAIL]",
"level"=>"$_POST[LEVEL]",
"update_date"=>"".TIMESTAMP."",
"status"=>"$_POST[STATUS]"
// )," username='$Admin_User' ");
)," id='$_GET[id]' ");
$db->closedb ();
$ProcessOutput .= "<BR><BR>";
$ProcessOutput .= "<CENTER><A HREF=\"".$URLre."\"><IMG SRC=\"images/icon/login-welcome.gif\" BORDER=\"0\"></A><BR><BR>";
$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ได้ทำการแก้ไขข้อมูลเรียบร้อยแล้ว</B></FONT><BR><BR>";
$ProcessOutput .= "<meta http-equiv=\"refresh\" content=\"1 ;url=?name=admin&file=user_cpstatus2\">";
$ProcessOutput .= "</CENTER>";
$ProcessOutput .= "<BR><BR>";
}
}else{
//กรณีไม่ผ่าน
$ProcessOutput = $PermissionFalse ;
}
echo $ProcessOutput ;
}
else if($_GET[op] == "minepass_edit"){
//////////////////////////////////////////// กรณีแก้ไขข้อมูลส่วนตัว
if(CheckLevel($_SESSION['admin_user'],$_GET[op])){
//ดึงค่าของสมาชิกเวปออกมา
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
// $res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE username='".$_SESSION['user_user']."' ");
$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE id='".$_GET[id]."' ");
$arr[user] = $db->fetch($res[user]);
$db->closedb ();
?>
<form method="post" action="?name=admin&file=user_cpstatus2&op=minepass_edit&action=edit&id=<? echo $arr[user][id];?>" enctype="multipart/form-data">
<table width="100%">
<tr>
<td width="150"><div align="right"><b>ชื่อผู้ใช้ :</b></div></td>
<td><input name="USERNAME" type="text" id="USERNAME" style="color=#FF0000;" value="<?=$arr[user][username];?>" size="40" /></td>
</tr>
<tr>
<td><div align="right"><b>รหัสผ่าน :</b></div></td>
<td><input type="password" name="PASSWORD" size="40" value="" id="PASSWORD" /></td>
</tr>
<tr>
<td><div align="right"><b>ชื่อ - นามสกุล :</b></div></td>
<td><input name="CATEGORY_NAME" type="text" id="CATEGORY_NAME" value="<?=$arr[user][category_name];?>" size="40" /></td>
</tr>
<tr>
<td><div align="right"><b>ตำแหน่ง :</b></div></td>
<td><SELECT NAME="POSIT"><option></option>
<?
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$res[category] = $db->select_query("SELECT * FROM ".TB_POSITION_CAT." ORDER BY id ");
while ($arr[category] = $db->fetch($res[category])){
echo "<option value=\"".$arr[category][category_name]."\" ";
if($arr[category][category_name] == $arr[user][posit]){echo " Selected";};
echo ">".$arr[category][category_name]."</option>";
}
$db->closedb ();
?>
</SELECT> </td>
</tr>
<tr>
<td><div align="right"><b>กลุ่ม</b></div></td>
<td><SELECT NAME="WORKING"><option></option>
<?
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$res[category] = $db->select_query("SELECT * FROM ".TB_WORKING_CAT." ORDER BY id ");
while ($arr[category] = $db->fetch($res[category])){
echo "<option value=\"".$arr[category][level]."\" ";
if($arr[category][level] == $arr[user][working]){echo " Selected";};
echo ">".$arr[category][category_name]."</option>";
}
$db->closedb ();
?>
</SELECT> </td>
</tr>
<tr>
<td><div align="right"><b>ปฏิบัติหน้าที่ :</b></div></td>
<td><select name="LEVEL" id="LEVEL">
<?
$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
$res[groups] = $db->select_query("SELECT * FROM ".TB_ADMIN_GROUP." WHERE id between 5 and 10 OR id>12 ORDER BY id ");
while ($arr[groups] = $db->fetch($res[groups]))
{
echo "<option value=\"".$arr[groups][id]."\" ";
if($arr[groups][id] == $arr[user][level]){echo " Selected";};
echo ">".$arr[groups][name]."</option>";
}
$db->closedb ();
?>
</select></td> </tr>
<td><div align="right"><b>อีเมล์:</b></div></td>
<td><input name="EMAIL" type="text" id="EMAIL" value="<?=$arr[user][email];?>" size="40" /></td>
</tr>
<tr>
<td><div align="right"><input type="hidden" name="STATUS" id="status" value="1"></div></td>
<td><input type="submit" value=" แก้ไขข้อมูลส่วนตัว " />
<input type="hidden" name="oldpass" value="<?=$arr[user][password];?>" /></td>
</tr>
</table>
</form>
<?
}else{
//กรณีไม่ผ่าน
echo $PermissionFalse ;
}
}
?>
</td>
</tr>
</table>
</div></td>
</tr>
</tbody>
</table>
</div>