84 lines
1.9 KiB
PHP
84 lines
1.9 KiB
PHP
<?php
|
|
/*
|
|
* Component of the subusers module
|
|
*/
|
|
|
|
//Open Game Panel Subusers Addon By
|
|
// OwN-3m-All
|
|
|
|
require_once("includes/functions.php");
|
|
function exec_ogp_module()
|
|
{
|
|
global $db,$view;
|
|
|
|
$errmsg_arr = array();
|
|
|
|
//Array to store input values
|
|
$input = array();
|
|
|
|
//Validation error flag
|
|
$errflag = false;
|
|
|
|
//Function to sanitize values received from the form. Prevents SQL injection
|
|
function clean($str) {
|
|
$str = @trim($str);
|
|
if(get_magic_quotes_gpc()) {
|
|
$str = stripslashes($str);
|
|
}
|
|
return $str;
|
|
}
|
|
|
|
//Sanitize the POST values
|
|
$users_login = sanitizeInputStr($_POST['users_login']);
|
|
$users_passwd = clean($_POST['users_passwd']);
|
|
$users_cpasswd = clean($_POST['users_cpasswd']);
|
|
$parent_user = clean($_SESSION['user_id']);
|
|
|
|
|
|
if( !empty($users_login) ) {
|
|
$input['users_login'] = $users_login;
|
|
}
|
|
|
|
|
|
//Input Validations
|
|
if($users_login == '') {
|
|
$errmsg_arr[] = get_lang('err_login_name');
|
|
$errflag = true;
|
|
}
|
|
if($users_passwd == '') {
|
|
$errmsg_arr[] = get_lang('err_password');
|
|
$errflag = true;
|
|
}
|
|
if($users_cpasswd == '') {
|
|
$errmsg_arr[] = get_lang('err_confirm_password');
|
|
$errflag = true;
|
|
}
|
|
if( strcmp($users_passwd, $users_cpasswd) != 0 ) {
|
|
$errmsg_arr[] = get_lang('err_password_mismatch');
|
|
$errflag = true;
|
|
}
|
|
if(empty($parent_user)){
|
|
$errmsg_arr[] = get_lang('err_parent_user');
|
|
$errflag = true;
|
|
}
|
|
|
|
//Create INSERT query
|
|
if( !$errflag )
|
|
{
|
|
if(!$db->addUser($users_login,$users_passwd,"subuser",NULL,$parent_user))
|
|
{
|
|
$errmsg_arr[] = get_lang('err_login_name');
|
|
$errflag = true;
|
|
}
|
|
|
|
echo "<p>" . get_lang_f('subuser_added',$users_login) . "</p>";
|
|
$view->refresh("?m=subusers&p=submanage", 5);
|
|
}
|
|
//If there are input validations, redirect back to the registration form
|
|
if($errflag) {
|
|
$_SESSION['ERRMSG_ARR'] = $errmsg_arr;
|
|
$_SESSION['INPUT'] = $input;
|
|
$view->refresh("home.php?m=subusers&p=add",0);
|
|
}
|
|
}
|
|
?>
|