newznab-tmux-NNTmux/public/admin/user-edit.php

<?php

require_once dirname(__DIR__).DIRECTORY_SEPARATOR.'smarty.php';

use nntmux\Users;
use App\Models\UserRole;
use App\Mail\AccountChange;
use Illuminate\Support\Facades\Mail;

$page = new AdminPage();
$users = new Users();

$user = [
    'id' => '',
    'username' => '',
    'email' => '',
    'password' => '',
    'role' => Users::ROLE_USER,
    'notes' => '',
];

// set the current action
$action = $_REQUEST['action'] ?? 'view';

//get the user roles
$userRoles = $users->getRoles();
$roles = [];
$defaultRole = Users::ROLE_USER;
$defaultInvites = Users::DEFAULT_INVITES;
foreach ($userRoles as $r) {
    $roles[$r['id']] = $r['name'];
    if ($r['isdefault'] === 1) {
        $defaultrole = $r['id'];
        $defaultinvites = $r['defaultinvites'];
    }
}

switch ($action) {
    case 'add':
        $user += [
            'role'        => $defaultRole,
            'notes'       => '',
            'invites'     => $defaultInvites,
            'movieview'   => 0,
            'xxxview'     => 0,
            'musicview'   => 0,
            'consoleview' => 0,
            'gameview'    => 0,
            'bookview'    => 0,
        ];
        $page->smarty->assign('user', $user);
        break;
    case 'submit':
        if (empty($_POST['id'])) {
            $invites = $defaultInvites;
            foreach ($userRoles as $role) {
                if ($role['id'] === $_POST['role']) {
                    $invites = $role['defaultinvites'];
                }
            }
            $ret = $users->signup($_POST['username'], $_POST['password'], $_POST['email'], '', $_POST['role'], $_POST['notes'], $invites, '', true);
            $page->smarty->assign('role', $_POST['role']);
        } else {
            $ret = $users->update($_POST['id'], $_POST['username'], $_POST['email'], $_POST['grabs'], $_POST['role'], $_POST['notes'], $_POST['invites'], (isset($_POST['movieview']) ? 1 : 0), (isset($_POST['musicview']) ? 1 : 0), (isset($_POST['gameview']) ? 1 : 0), (isset($_POST['xxxview']) ? 1 : 0), (isset($_POST['consoleview']) ? 1 : 0), (isset($_POST['bookview']) ? 1 : 0));
            if ($_POST['password'] !== '') {
                $users->updatePassword($_POST['id'], $_POST['password']);
            }
            if ($_POST['rolechangedate'] !== '') {
                $users->updateUserRoleChangeDate($_POST['id'], $_POST['rolechangedate']);
            }
            if ($_POST['role'] !== '') {
                $newRole = UserRole::query()->where('id', $_POST['role'])->value('name');
                $email = $_POST['email'] ?? $_GET['email'];
                Mail::to($email)->send(new AccountChange($_POST['id']));
            }
        }

        if ($ret >= 0) {
            header('Location:'.WWW_TOP.'/user-list.php');
        } else {
            switch ($ret) {
                case Users::ERR_SIGNUP_BADUNAME:
                    $page->smarty->assign('error', 'Bad username. Try a better one.');
                    break;
                case Users::ERR_SIGNUP_BADPASS:
                    $page->smarty->assign('error', 'Bad password. Try a longer one.');
                    break;
                case Users::ERR_SIGNUP_BADEMAIL:
                    $page->smarty->assign('error', 'Bad email.');
                    break;
                case Users::ERR_SIGNUP_UNAMEINUSE:
                    $page->smarty->assign('error', 'Username in use.');
                    break;
                case Users::ERR_SIGNUP_EMAILINUSE:
                    $page->smarty->assign('error', 'Email in use.');
                    break;
                default:
                    $page->smarty->assign('error', 'Unknown save error.');
                    break;
            }
            $user += [
                'id'        => $_POST['id'],
                'username'  => $_POST['username'],
                'email'     => $_POST['email'],
                'role'      => $_POST['role'],
                'notes'     => $_POST['notes'],
            ];
            $page->smarty->assign('user', $user);
        }
        break;
    case 'view':
    default:

    if (isset($_GET['id'])) {
        $page->title = 'User Edit';
        $id = $_GET['id'];
        $user = $users->getById($id);

        $page->smarty->assign('user', $user);
    }

        break;
}

$page->smarty->assign('yesno_ids', [1, 0]);
$page->smarty->assign('yesno_names', ['Yes', 'No']);

$page->smarty->assign('role_ids', array_keys($roles));
$page->smarty->assign('role_names', $roles);
$page->smarty->assign('user', $user);

$page->content = $page->smarty->fetch('user-edit.tpl');
$page->render();