<?php
#########################################################################
#                            my_account.php                             #
#                                                                       #
#        Interface permetant à l'utilisateur de gérer son compte        #
#                Dernière modification : 08/03/2005                     #
#                                                                       #
#########################################################################
/*
 * Copyright 2003-2005 Laurent Delineau
 *
 * This file is part of GRR.
 *
 * GRR is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * GRR is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with GRR; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */
include "connect.inc.php";
include "config.inc.php";
include "misc.inc.php";
include "functions.inc.php";
include "$dbsys.inc.php";
    #Settings
require_once("./settings.inc.php");
    #Chargement des valeurs de la table settings
if (!loadSettings())
    die("Erreur chargement settings");

    #Fonction relative à la session
require_once("./session.inc.php");
    #Si il n'y a pas de session crée, on déconnecte l'utilisateur.
if (!resumeSession())
{
    header("Location: ./logout.php?auto=1");
    die();
};



   #Si nous ne savons pas la date, nous devons la créer
$day = isset($_POST["day"]) ? $_POST["day"] : (isset($_GET["day"]) ? $_GET["day"] : date("d"));
$month = isset($_POST["month"]) ? $_POST["month"] : (isset($_GET["month"]) ? $_GET["month"] : date("m"));
$year = isset($_POST["year"]) ? $_POST["year"] : (isset($_GET["year"]) ? $_GET["year"] : date("y"));

if (($authentification_obli==0) and (!isset($_SESSION['login'])))
{
    $session_login = '';
    $session_statut = '';
}
else
{
    $session_login = $_SESSION['login'];
    $session_statut = $_SESSION['statut'];
}
if (isset($_SERVER['HTTP_REFERER'])) $back = $_SERVER['HTTP_REFERER'];

if (authGetUserLevel(getUserName(),-1) <= 1)
{
    showAccessDenied($day, $month, $year, $area,$back);
    exit();
}

// Paramètres langage
include "language.inc.php";

$user_login = isset($_POST["user_login"]) ? $_POST["user_login"] : ($user_login = isset($_GET["user_login"]) ? $_GET["user_login"] : NULL);
$valid = isset($_POST["valid"]) ? $_POST["valid"] : NULL;
$msg='';
if ($valid == "yes")
{
    $reg_password_a = isset($_POST["reg_password_a"]) ? $_POST["reg_password_a"] : NULL;
    $reg_password1 = isset($_POST["reg_password1"]) ? $_POST["reg_password1"] : NULL;
    $reg_password2 = isset($_POST["reg_password2"]) ? $_POST["reg_password2"] : NULL;
    $reg_email = isset($_POST["reg_email"]) ? $_POST["reg_email"] : NULL;
    if ($reg_password_a != '')
    {
        $reg_password_a_c = md5($reg_password_a);
        if ($_SESSION['password'] == $reg_password_a_c)
        {
            if ($reg_password1 != $reg_password2)
                $msg = $vocab["wrong_pwd2"];
            else
            {
                $reg_password1 = md5($reg_password1);
                $sql = "UPDATE grr_utilisateurs SET password='" . slashes($reg_password1)."' WHERE login='". $_SESSION['login']."'";
                if (sql_command($sql) < 0)
                    fatal_error(0, $vocab["update_pwd_failed"] . sql_error());
                else
                {
                    $msg = $vocab["update_pwd_succeed"];
                    $_SESSION['password'] = $reg_password1;
                }
            }
        }
        else
            $msg = $vocab["wrong_old_pwd"];
    }
    $sql = "SELECT email, source FROM grr_utilisateurs WHERE login='".$_SESSION['login']."'";
    $res = sql_query($sql);
    if ($res)
    {
        for ($i = 0; ($row = sql_row($res, $i)); $i++)
            $user_email = $row[0];
            $user_source = $row[1];
    }
    if ($user_email != $reg_email)
    {
        $sql = "UPDATE grr_utilisateurs SET email = '" . slashes($reg_email)."' WHERE login='". $_SESSION['login']."'";
        if (sql_command($sql) < 0)
            fatal_error(0, $vocab["message_records_error"] . sql_error());
        else
            $msg = $msg." ".$vocab["update_email_succeed"];
    }
}
if (($valid == "yes") or ($valid=="reset"))
{
    $default_area = isset($_POST["id_area"]) ? $_POST["id_area"] : NULL;
    $default_room = isset($_POST["id_room"]) ? $_POST["id_room"] : NULL;
    $default_style = isset($_POST["default_css"]) ? $_POST["default_css"] : NULL;
    $default_list_type = isset($_POST["area_list_format"]) ? $_POST["area_list_format"] : NULL;
    $default_language = isset($_POST["default_language"]) ? $_POST["default_language"] : NULL;
    $sql = "UPDATE grr_utilisateurs SET
        default_area = '" . slashes($default_area)."',
        default_room = '" . slashes($default_room)."',
        default_style = '" . slashes($default_style)."',
        default_list_type = '" . slashes($default_list_type)."',
        default_language = '" . slashes($default_language)."'
        WHERE login='". $_SESSION['login']."'";
    if (sql_command($sql) < 0)
        fatal_error(0, $vocab["message_records_error"] . sql_error());
    else
    {
        if (($default_area !='') and ($default_area !='0')) $_SESSION['default_area'] = $default_area; else $_SESSION['default_area'] = getSettingValue("default_area");
        if (($default_room !='') and ($default_room !='0')) $_SESSION['default_room'] = $default_room; else $_SESSION['default_room'] = getSettingValue("default_room");
        if ($default_style !='') $_SESSION['default_style'] = $default_style; else $_SESSION['default_style'] = getSettingValue("default_css");
        if ($default_list_type !='') $_SESSION['default_list_type'] = $default_list_type; else $_SESSION['default_list_type'] = getSettingValue("area_list_format");
        if ($default_language !='') $_SESSION['default_language'] = $default_language; else $_SESSION['default_language'] = getSettingValue("default_language");
        $msg = $msg."\\n".$vocab["message_records"];


    }
}


print_header($day, $month, $year, isset($area) ? $area : "");
?>
<script src="functions.js" type="text/javascript" language="javascript"></script>
<?php
    #On appelle les informations de l'utilisateur pour les afficher
$sql = "SELECT nom, prenom, statut, email, default_area, default_room, default_style, default_list_type, default_language, source  FROM grr_utilisateurs WHERE login='".$_SESSION['login']."'";
$res = sql_query($sql);
if ($res)
{
    for ($i = 0; ($row = sql_row($res, $i)); $i++)
    {
    $user_nom = $row[0];
    $user_prenom = $row[1];
    $user_statut = $row[2];
    $user_email = $row[3];
    if (($row[4] !='') and ($row[4] !='0')) $default_area = $row[4]; else $default_area = getSettingValue("default_area");
    if (($row[5] !='') and ($row[5] !='0')) $default_room = $row[5]; else $default_room = getSettingValue("default_room");
    if ($row[6] !='') $default_css = $row[6]; else $default_css = getSettingValue("default_css");
    if ($row[7] !='') $default_list_type = $row[7]; else $default_list_type = getSettingValue("area_list_format");
    if ($row[8] !='') $default_language = $row[8]; else $default_language = getSettingValue("default_language");
    $user_source = $row[9];
    }
}
echo "<noscript>";
echo "<font color='red'>$msg</font>";
echo "</noscript>";
if ($msg)
{
    echo "<script type=\"text/javascript\" language=\"javascript\">";
    echo "<!--\n";
    echo " alert(\"".$msg."\")";
    echo "//-->";
    echo "</script>";
    unset($msg);
}
echo "<form enctype=\"multipart/form-data\" name=\"nom_formulaire\" action=\"my_account.php\" method='POST'>";
echo("<b>".$vocab["login"]." : " . $_SESSION['login']);
echo "<br>".$vocab["last_name"]." : $user_nom&nbsp;&nbsp;&nbsp;".$vocab["first_name"]." : $user_prenom";
echo "<br>".$vocab["mail_user"]." : <input type=text name=reg_email size=30";
if ($user_email) { echo " value=\"".htmlentities($user_email)."\"";}
echo ">";
echo "<br>".$vocab["statut"]." : $user_statut</b>";
if ($user_source != 'ext') {
?>
<br><br>
<TABLE BORDER=0 width="100%">
<TR>
<TD onClick="clicMenu('1')" class="fontcolor4"   style="cursor: hand" align=center ><span class="bground"><B><a href='#'><?php echo $vocab["click_here_to_modify_pwd"] ?></a></B></span>
</TD>
</TR>
<TR style="display:none" id="menu1">
<TD><br>
<?php
echo "<p>".$vocab["pwd_msg_warning"]."</p>";
echo $vocab["old_pwd"]." : <input type=password name=reg_password_a size=20>";
echo "<br>".$vocab["new_pwd1"]." : <input type=password name=reg_password1 size=20>";
echo "<br>".$vocab["new_pwd1"]." : <input type=password name=reg_password2 size=20>";
?>
</TD></TR>
</TABLE>
<br><hr>
<?php
}
    #Configuration de l'affichage par defaut
echo "<h3>".$vocab["default_parameter_values_title"]."</h3>";
    #Choix du type d'affichage
echo "<h4>".$vocab["explain_area_list_format"]."</h4>";
echo "<table><tr><td>".$vocab["liste_area_list_format"]."</td><td>";
echo "<input type='radio' name='area_list_format' value='list' "; if ($default_list_type =='list') echo "checked"; echo ">";
echo "</td></tr>";
echo "<tr><td>".$vocab["select_area_list_format"]."</td><td>";
echo "<input type='radio' name='area_list_format' value='select' "; if ($default_list_type =='select') echo "checked"; echo ">";
echo "</td></tr></table>";
    #Choix du domaine et de la ressource
    #http://www.phpinfo.net/articles/article_listes.html
?>
<SCRIPT LANGUAGE="JavaScript">
function ModifierListe(code_item)
{
   lg = document.nom_formulaire.id_room.length;
   // On vide la liste
   for (i = lg - 1; i >= 0; i--)
   {
     document.nom_formulaire.id_room.options[i] = null;
   }
   code_rub = document.nom_formulaire.id_area.selectedIndex;
   <?php
   // Génération des Items par Rubriques
   // Cas où aucun domaine n'a été précisé
   echo "  if (document.nom_formulaire.id_area.options[code_rub].value == -1) {\n";
   echo "    document.nom_formulaire.id_room.length = 1;\n";
   echo "    document.nom_formulaire.id_room.options[0].value = -1;\n";
   echo "    document.nom_formulaire.id_room.options[0].text  = \"------\";\n";
   echo "    if (code_item == -1) document.nom_formulaire.id_room.options[0].selected = true;\n";
   echo "  }\n";
   // Cas où un domaine a été précisé
   $sql = "SELECT id FROM grr_area ORDER BY  order_display, area_name";
   $resultat = sql_query($sql);
   $max_lignes = 0;
   $option_max = '';
    for ($enr = 0; ($row = sql_row($resultat, $enr)); $enr++)
    {
     $sql  = "SELECT id, room_name ";
     $sql .= "FROM grr_room ";
     $sql .= "WHERE area_id='".$row[0]."'";
     $sql .= "ORDER BY room_name";
     $resultat2 = sql_query($sql);
     echo "  if (document.nom_formulaire.id_area.options[code_rub].value == ".$row[0].") {\n";
     echo "    document.nom_formulaire.id_room.length = ".(sql_count($resultat2)+1).";\n";
     $cpt = 0;
     echo "    document.nom_formulaire.id_room.options[0].value = -1;\n";
     echo "    document.nom_formulaire.id_room.options[0].text  = \"".$vocab["default_room_all"]."\";\n";
     echo "    if (code_item == -1) document.nom_formulaire.id_room.options[0].selected = true;\n";
     $cpt++;
        for ($enr2 = 0; ($row2 = sql_row($resultat2, $enr2)); $enr2++)
        {
       echo "    document.nom_formulaire.id_room.options[".$cpt."].value = ".$row2[0].";\n";
       echo "    document.nom_formulaire.id_room.options[".$cpt."].text  = \"".$row2[1]." ".$vocab["display_week"]."\";\n";
       echo "    if (code_item == ".$row2[0].") document.nom_formulaire.id_room.options[".$cpt."].selected = true;\n";
       $cpt++;
       if ($cpt > $max_lignes) $max_lignes = $cpt;
       if (strlen($row2[1]) > strlen($option_max)) $option_max = $row2[1];
     }
     echo "  }\n";
   }
   ?>
}
</SCRIPT>
<?php
    #Liste des domaines
$sql = "SELECT id, area_name, access FROM grr_area ORDER BY  order_display, area_name";
$resultat = sql_query($sql);
echo "<h4>".$vocab["explain_default_area_and_room"]."</h4>";
echo "<table><tr><td>".$vocab["default_area"]."</td><td>";
echo "<SELECT NAME='id_area' onChange='ModifierListe(-1)'>\n";
echo "<OPTION VALUE='-1'>".$vocab["choose_an_area"]."</OPTION>\n";
for ($enr = 0; ($row = sql_row($resultat, $enr)); $enr++)
{
  echo "<OPTION VALUE='".$row[0]."'";
  if ($default_area == $row[0]) echo " SELECTED";
  echo ">".htmlspecialchars($row[1]);
  if ($row[2]=='r') echo " (".$vocab["restricted"].")";
  echo "</OPTION>\n";
}
echo "</SELECT></td></tr>\n";
    #Liste des ressources
echo "<tr><td>".$vocab["default_room"]."</td><td>";
echo "<SELECT NAME='id_room'>\n";
for ($cpt = 0; $cpt < $max_lignes; $cpt++)
  echo "<OPTION>".ereg_replace(".", "--", $option_max)."</OPTION>\n";
echo "</SELECT></td></tr></table>\n";
if ($default_room)
    $id_room=$default_room;
else
    $id_room = -1;
echo "<SCRIPT LANGUAGE='JavaScript'>\n;ModifierListe(".$id_room.");\n</SCRIPT>\n";
// ----------------------------------------------------------------------------

//
// Choix de la feuille de style
//
echo "<h4>".$vocab["explain_css"]."</h4>";
echo "<table><tr><td>".$vocab["choose_css"]."</td><td>";
echo "<SELECT NAME='default_css'>\n";
$i=0;
while ($i < count($liste_css)) {
   echo "<OPTION VALUE='".$liste_css[$i]."'";
   if ($default_css == $liste_css[$i]) echo " SELECTED";
   echo " >".$liste_name_css[$i]."</OPTION>";
   $i++;
}
echo "</SELECT></td></tr></table>\n";

//
// Choix de la langue
//
echo "<h4>".$vocab["choose_language"]."</h4>";
echo "<table><tr><td>".$vocab["choose_css"]."</td><td>";
echo "<SELECT NAME='default_language'>\n";
$i=0;
while ($i < count($liste_language)) {
   echo "<OPTION VALUE='".$liste_language[$i]."'";
   if ($default_language == $liste_language[$i]) echo " SELECTED";
   echo " >".$liste_name_language[$i]."</OPTION>";
   $i++;
}
echo "</SELECT></td></tr></table>\n";

?>

<input type=hidden name=valid value="yes">
<input type=hidden name=day value="<?php echo $day;?>">
<input type=hidden name=month value="<?php echo $month;?>">
<input type=hidden name=year value="<?php echo $year;?>">
<br><input type=submit value=<?php echo $vocab["submit"] ; ?>>
</form>
<form enctype="multipart/form-data" name="reset" action="my_account.php" method='POST'>
<input type=hidden name=valid value="reset">
<input type=hidden name=day value="<?php echo $day;?>">
<input type=hidden name=month value="<?php echo $month;?>">
<input type=hidden name=year value="<?php echo $year;?>">
<input type=hidden name=id_area value="">
<input type=hidden name=id_room value="">
<input type=hidden name=default_css value="">
<input type=hidden name=area_list_format value="">
<input type=hidden name=default_language value="">
<input type=submit value="<?php echo $vocab["reset"] ; ?>">
</form></body></html>