| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/hkosl.com/onegolf/webadmin/ |
Upload File : |
<?php
include 'config.php';
// Check if the user is logged in
if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1')) {
header("Location: login.php");
exit;
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="x-ua-compatible" content="ie=7"/>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
<title>Content Management System (CMS) - Powered by One Solution Limited</title>
<link rel="stylesheet" type="text/css" href="css/style.css"/>
<!-- Main Menu -->
<link rel="stylesheet" type="text/css" href="css/menu.css"/>
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js"></script>
<script type="text/javascript" src="js/ddaccordion.js"></script>
<script type="text/javascript" src="js/menuddaccordion.js"></script>
<!-- End Main Menu -->
<script type="text/javascript">
function DeleteRecord(cmsloginid) {
if (confirm("Are you sure to delete this record?")) {
window.location.href = 'sys_cms_user_deleted.php?cmsloginid=' + cmsloginid;
}
}
function MM_jumpMenu(targ, selObj, restore) { //v3.0
eval(targ + ".location='" + selObj.options[selObj.selectedIndex].value + "'");
if (restore) selObj.selectedIndex = 0;
}
//-->
$(function () {
<?php
if($_SESSION['cmsrole'] == "web_user"){
echo '$(".menuheader").hide();
$(".web_user").show();';
}
if($_SESSION['cmsrole'] == "system_user"){
echo '$(".menuheader").hide();
$(".system_user").show();';
}
?>
});
</script>
</head>
<body>
<table width="1000" height="600" border="0" cellpadding="0" cellspacing="0">
<tr>
<td width="200" align="left" valign="top">
<table width="200" border="0" cellpadding="0" cellspacing="0">
<tr>
<td height="70" align="left" valign="middle"> </td>
</tr>
<tr>
<td width="200" align="left" valign="top"><!-- Main Menu -->
<?php require("menu.php");?><!-- End Main Menu --></td>
</tr>
</table>
</td>
<td width="800" align="left" valign="top">
<table width="800" border="0" cellpadding="0" cellspacing="0">
<tr>
<td>
<table width="800" border="0" cellspacing="0" cellpadding="0">
<tr>
<td height="70" class="pagetitletxt"> </td>
<td width="50" align="center" class="icontxt"><?php if (($_SESSION['role'] == 'admin') || ($_SESSION['role'] == 'super_admin')) { ?>
<a href="sys_cms_user_addform.php"><img src="images/iconNew.png" alt="Add" width="32" height="32" border="0"/><br/>
Add </a><?php } ?></td>
</tr>
</table>
</td>
</tr>
<tr>
<td class="pagetitletxt">
<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle"/> CMS
用戶管理 </b></td>
</tr>
<tr>
<td height="25" align="left" valign="middle" class="msg"><?php if (isset($_GET["msg"])) echo $msg; ?></td>
</tr>
<tr>
<td align="left" valign="middle">
<table width="800" border="0" cellpadding="0" cellspacing="0">
<tr>
<td width="10" class="listtitletxt"></td>
<td width="150" class="listtitletxt">用戶名稱</td>
<td width="150" class="listtitletxt">登入名稱</td>
<td width="400" class="listtitletxt">角色</td>
<td width="50" class="listtitletxt">狀態</td>
<td width="20" class="listtitletxt"></td>
<td width="20" class="listtitletxt"></td>
<?php if ($_SESSION['role'] == 'super_admin'){ ?>
<td width="20" class="listtitletxt"></td>
<?php } ?>
</tr>
<?php
if ($_SESSION['role'] == 'user' || $_SESSION['role'] == 'web_user' || $_SESSION['role'] == 'system_user') {
$sth1 = $dbh->prepare("SELECT * FROM sys_cms_login WHERE cmsloginid = ? and deleted = ?");
$sth1->execute(array($_SESSION['loginid'], 0));
} else if ($_SESSION['role'] == 'admin') {
$sth1 = $dbh->prepare("SELECT * FROM sys_cms_login WHERE cmsrole <> 'super_admin' and deleted = ? ORDER BY cmsusername ASC, cmsloginid DESC ");
$sth1->execute(array(0));
} else if ($_SESSION['role'] == 'super_admin') {
$sth1 = $dbh->prepare("SELECT * FROM sys_cms_login where deleted = ? ORDER BY cmsusername ASC, cmsloginid DESC ");
$sth1->execute(array(0));
}
while ($row = $sth1->fetch(PDO::FETCH_ASSOC)) {
print "<tr>";
print "<td class='listtxt' style='padding-left:5'> </td>";
print "<td class='listtxt' style='padding-left:5'>" . $row{'cmsusername'} . "</td>";
print "<td class='listtxt' style='padding-left:5'>" . $row{'cmsloginname'} . "</td>";
print "<td class='listtxt' style='padding-left:5'>" . $row{'cmsrole'} . "</td>";
// Status
print "<td class='listtxt' align='center'>";
if($row{'cmsloginid'} != $_SESSION['loginid']){
if ($row{'cmsstatus'} == '1') // Enable
{
print "<a href='sys_cms_user_status.php?loginid=" . $row{'cmsloginid'} . "'>";
print "<img src='images/tick.png' title='Status' alt='Status' border='0' hspace='2'></a>";
} else // Disable
{
print "<a href='sys_cms_user_status.php?loginid=" . $row{'cmsloginid'} . "'>";
print "<img src='images/cross.png' title='Status' alt='Status' border='0' hspace='2'></a>";
}
}
print "</td>";
// Modify
print "<td class='listtxt' align='right'>";
print "<a href='#' onClick=\"window.location='sys_cms_user_modifyform.php?cmsloginid=" . $row{'cmsloginid'} . "'\"><img src='images/btnModify.png' title='Modify' alt='Modify' hspace='2' border='0'></a>";
print "</td>";
if ($_SESSION['role'] == 'super_admin') {
print "<td class='listtxt' align='center'><a href='#' onClick=\"DeleteRecord(" . $row{'cmsloginid'} . ")\"><img src='images/btnDelete.png' title='Delete' alt='Delete' hspace='2' border='0'></a></td>";
}
print "<td class='listtxt' style='padding-left:5'> </td>";
print "</tr>";
}
?>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</body>
</html>