changestatus.php

<?php
require_once 'require/util.php'; //utility functions
require_once 'require/htmllib.php'; //HTML functions
require_once 'require/dblib.php'; //database functions
require_once 'require/config.php'; //server info
error_reporting(E_ALL); ///YES! YES! YES!

begin_session();

//begin page generation
print_htmlhead("Change User Status",0);


//the main event.
if ($_SESSION['authorized'] && (($_SESSION['username'] == DB_ADMIN_NAME) OR ($_SESSION['status'] == 'Admin'))) //check for login and make sure they are the admin
{
 //Connect to Server
 $server = bank_server_connect();
	
 if (isset($_POST['submitted'])) //was a form submitted
 {
	//make the change and confirm it
	if (!isset($_POST['username']))
	{
	 print ("You must select a user to change the status of. <br />");
	 print_form($server);
	}
	else if ($_POST['username'] == DB_ADMIN_NAME) //No screwing with the primary admin account.
	{
	 print ("You may not change the status on account '".DB_ADMIN_NAME."' because it is the main administrative account.<br />");
	}
	else
	{
	 set_status($_POST['username'], $_POST['status'], $server);
	 if ($_POST['username'] == $_SESSION['username'])
	  $_SESSION['status'] = get_status($_SESSION['username'], $server); //update session in case they changed their own.
	 print ("Status for ".$_POST['username']." set to ".$_POST['status']." successfully.<br />");	
	}
 }
 else //no form was submitted.
 {
 	print_form($server);
 } 
}
else
{
 print ('You must <a href="login.php">login</a> as an admin, in order to use this page.<br />');
}

print_htmlfoot();


function print_form($server)
//prints the second part of the form
{
 print ('<form action="changestatus.php" method="post">');
 print ('Select Account Name<br />');
 user_select('username', $server);
 print ('<br /><br />');
 print ('<br />');
 print ('Select New Status<br />');
 status_select($server);
 print ('<br /><br />');
 print ('<input type="hidden" name="submitted" value="true" />');
 print ('<input type="submit" value="Change Status" />');
 print ('</form>');
}
?>