1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
<?
include("aur.inc"); # access AUR common functions
include("acctfuncs.inc"); # access Account specific functions
include("account_po.inc"); # use some form of this for i18n support
set_lang(); # this sets up the visitor's language
check_sid(); # see if they're still logged in
html_header(); # print out the HTML header
# Main page processing here
#
if (isset($_COOKIE["AURSID"])) {
# visitor is logged in
#
$dbh = db_connect();
$atype = account_from_sid($_COOKIE["AURSID"]);
if ($_REQUEST["Action"] == "SearchAccounts") {
# security check
#
if ($atype == "Trusted user" || $atype == "Developer") {
# the user has entered search criteria, find any matching accounts
#
search_results_page($_REQUEST["O"], $_REQUEST["SB"],
$_REQUEST["U"], $_REQUEST["T"], $_REQUEST["S"],
$_REQUEST["E"], $_REQUEST["R"], $_REQUEST["I"]);
} else {
# a non-privileged user is trying to access the search page
#
print __("You are not allowed to access this area.")."<br/>\n";
}
} elseif ($_REQUEST["Action"] == "DisplayAccount") {
# the user has clicked 'edit', display the account details in a form
#
} elseif ($_REQUEST["Action"] == "UpdateAccount") {
# user is submitting their modifications to an existing account
#
} else {
if ($atype == "Trusted user" || $atype == "Developer") {
# display the search page if they're a TU/dev
#
print __("Use this form to search existing accounts.")."<br/>\n";
search_accounts_form();
} else {
# TODO A normal user, give them the ability to edit
# their own account
#
print __("Regular users can edit their own account.");
}
}
} else {
# visitor is not logged in
#
if ($_REQUEST["Action"] == "NewAccount") {
# process the form input for creating a new account
#
process_account_form("","new", "NewAccount",
$_REQUEST["U"], 1, 0, $_REQUEST["E"],
$_REQUEST["P"], $_REQUEST["C"], $_REQUEST["R"],
$_REQUEST["L"], $_REQUEST["I"], $_REQUEST["N"]);
} else {
# display the account request form
#
display_account_form("", "NewAccount");
}
}
html_footer("\$Id$");
# vim: ts=2 sw=2 noet ft=php
?>
|