PHPMailer
This commit is contained in:
aschwarz
@ -1,40 +1,40 @@
|
||||
<?php
|
||||
require_once("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'changepwd') {
|
||||
$password = md5($_POST['password']);
|
||||
$password_new1 = $_POST['password_new1'];
|
||||
$password_new2 = $_POST['password_new2'];
|
||||
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_admin WHERE uid=$uid AND passwort = '$password'");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
#Fehlercheck
|
||||
if ($row['Anz'] == "0") {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das alte Passwort ist nicht korrekt!</div>|***|error';
|
||||
exit;
|
||||
}elseif ($password_new1 != $password_new2) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das neue Passwort stimmt nicht mit der Wiederholung überein!</div>|***|error';
|
||||
exit;
|
||||
}elseif (strlen($password_new1) < 8) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das neue Passwort muss mindestens 8 Zeichen haben!</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
$password_md5 = md5($password_new1);
|
||||
$update = $db->query("UPDATE jumi_admin
|
||||
SET passwort ='$password_md5'
|
||||
WHERE uid=$uid
|
||||
");
|
||||
if (!$update) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es liegt ein Fehler in der Datenbank vor!</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Das Passwort wurde geändert!</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
<?php
|
||||
require_once("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'changepwd') {
|
||||
$password = md5($_POST['password']);
|
||||
$password_new1 = $_POST['password_new1'];
|
||||
$password_new2 = $_POST['password_new2'];
|
||||
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_admin WHERE uid=$uid AND passwort = '$password'");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
#Fehlercheck
|
||||
if ($row['Anz'] == "0") {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das alte Passwort ist nicht korrekt!</div>|***|error';
|
||||
exit;
|
||||
}elseif ($password_new1 != $password_new2) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das neue Passwort stimmt nicht mit der Wiederholung überein!</div>|***|error';
|
||||
exit;
|
||||
}elseif (strlen($password_new1) < 8) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das neue Passwort muss mindestens 8 Zeichen haben!</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
$password_md5 = md5($password_new1);
|
||||
$update = $db->query("UPDATE jumi_admin
|
||||
SET passwort ='$password_md5'
|
||||
WHERE uid=$uid
|
||||
");
|
||||
if (!$update) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es liegt ein Fehler in der Datenbank vor!</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Das Passwort wurde geändert!</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
?>
|
||||
@ -1,374 +1,374 @@
|
||||
<?php
|
||||
require_once("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'checkuser') {
|
||||
$mail = $_POST['mail'];
|
||||
|
||||
if (filter_var($mail, FILTER_VALIDATE_EMAIL)) {
|
||||
$mail = $_POST['mail'];
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_admin WHERE mail = '$mail'");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
if ($row['Anz'] == "0") {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> User ist im System nicht vorhanden!</div>';
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> User ist im System bereits vorhanden!</div>';
|
||||
}
|
||||
#}else{
|
||||
# echo ""
|
||||
}
|
||||
}
|
||||
|
||||
#echo "Funktion: $function";
|
||||
if ($function == 'usersave') {
|
||||
require_once("func_genPwd.php");
|
||||
$vorname = trim($_POST['vorname']);
|
||||
$nachname = trim($_POST['nachname']);
|
||||
$mail = trim($_POST['mail']);
|
||||
$rollen = $_POST['rollen'];
|
||||
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_admin WHERE mail = '$mail'");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
#Fehlercheck
|
||||
if ($row['Anz'] != "0") {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> User ist im System bereits vorhanden!</div>|***|error';
|
||||
}
|
||||
if ($rollen == '' or $vorname == '' or $nachname == '' or $mail == '') {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es müssen alle Felder ausgefüllt werden!</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
if (!filter_var($mail, FILTER_VALIDATE_EMAIL)) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Geben Sie eine gültige Mailadresse ein!</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
|
||||
$error = 0;
|
||||
$password = generateStrongPassword();
|
||||
$password_md5 = md5($password);
|
||||
|
||||
$sql1 = $db->query("INSERT INTO jumi_admin ( vorname
|
||||
, nachname
|
||||
, mail
|
||||
, passwort
|
||||
)
|
||||
VALUES
|
||||
( '$vorname'
|
||||
, '$nachname'
|
||||
, '$mail'
|
||||
, '$password_md5'
|
||||
)
|
||||
");
|
||||
$uid = $db->insert_id;
|
||||
if (!$sql1) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es gab ein Fehler in der Datenbank: Insert User</div>|***|error';
|
||||
$error++;
|
||||
exit;
|
||||
}
|
||||
for ($i = 0; $i < sizeof($rollen); $i++) {
|
||||
$sql2 = $db->query("INSERT INTO jumi_admin_rollen_user_zuord ( rid
|
||||
, uid
|
||||
)
|
||||
VALUES
|
||||
( '$rollen[$i]'
|
||||
, '$uid'
|
||||
)
|
||||
");
|
||||
}
|
||||
if (!$sql2) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es gab ein Fehler in der Datenbank: Insert Rollenzuordnung</div>|***|error';
|
||||
exit;
|
||||
$error++;
|
||||
}
|
||||
|
||||
if ($error == 0) {
|
||||
$empfaenger = "$mail";
|
||||
$betreff = "Anmeldung JU & MI Portal";
|
||||
$text = "
|
||||
<html>
|
||||
<head>
|
||||
<title>Anmeldung JU & MI Portal</title>
|
||||
</head>
|
||||
<body>
|
||||
<font face='Arial' size='2'>
|
||||
Guten Tag $vorname $nachname!<br><br>
|
||||
Sie wurden im JU & MI Portal registriert!<br>
|
||||
Nachfolgend finden Sie Ihre Zugangsdaten:
|
||||
<br>
|
||||
<br>
|
||||
<table>
|
||||
<tr>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<b>Benutzerkennung:</b>
|
||||
</font>
|
||||
</td>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
$mail
|
||||
</font>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<b>Passwort:</b>
|
||||
</font>
|
||||
</td>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
$password
|
||||
</font>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<b>Login:</b>
|
||||
</font>
|
||||
</td>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<a href='http://admin.ju-and-mi.de'>http://admin.ju-and-mi.de</a>
|
||||
</font>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
<br>
|
||||
Bitte beachten Sie, dass das Passwort zwischen Groß- und<br>
|
||||
Kleinschreibung unterscheidet.
|
||||
<p>
|
||||
Ändern Sie bitte zu Ihrer eigenen Sicherheit das<br>
|
||||
Passwort nach dem ersten Login unter dem Benutzericon in der Kopfleiste.
|
||||
<p>
|
||||
Vielen Dank
|
||||
</body>
|
||||
</html>";
|
||||
$result_absender = $db->query("SELECT wert FROM jumi_parameter WHERE pid = 1");
|
||||
$row_absender = $result_absender->fetch_array();
|
||||
if ($row_absender['wert'] == '') {
|
||||
$absender = 'info@ju-and-mi.de';
|
||||
} else {
|
||||
$absender = $row_absender['wert'];
|
||||
}
|
||||
$headers = "MIME-Version: 1.0\n";
|
||||
$headers .= "Content-type: text/html; charset=utf-8\n";
|
||||
$headers .= "From: Info JU & MI <$absender>\n";
|
||||
|
||||
$return = @mail($empfaenger, $betreff, $text, $headers);
|
||||
|
||||
if (!$return) { // Abfrage ob Mailversand funktioniert hat
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> BenutzerIn wurde angelegt. Es konnte allerdings <b>keine Mail</b> verschickt werden!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> BenutzerIn wurde angelegt. Eine Mail mit den Zugangsdaten wurde zugestellt.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'userupdate') {
|
||||
|
||||
$vorname = trim($_POST['vorname']);
|
||||
$nachname = trim($_POST['nachname']);
|
||||
$mail = trim($_POST['mail']);
|
||||
$rollen = $_POST['rollen'];
|
||||
$pwdback = $_POST['pwdback'];
|
||||
$uid = $_POST['uid'];
|
||||
|
||||
|
||||
if (isset($pwdback)) {
|
||||
if ($pwdback == '1') {
|
||||
$pwdback = '1';
|
||||
} else {
|
||||
$pwdback = '0';
|
||||
}
|
||||
} else {
|
||||
$pwdback = '0';
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
if ($uid == '') {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die BenutzerID wurde nicht übertragen</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
if ($rollen == '' or $vorname == '' or $nachname == '' or $mail == '') {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es müssen alle Felder ausgefüllt werden!</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
if (!filter_var($mail, FILTER_VALIDATE_EMAIL)) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Geben Sie eine gültige Mailadresse ein!</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
|
||||
$error = 0;
|
||||
|
||||
if($pwdback == 1){
|
||||
require_once("func_genPwd.php");
|
||||
$password = generateStrongPassword();
|
||||
$password_md5 = md5($password);
|
||||
}else{
|
||||
$result_pwd = $db->query("SELECT passwort FROM jumi_admin WHERE uid = $uid");
|
||||
$row_pwd = $result_pwd->fetch_array();
|
||||
$password_md5 = $row_pwd['passwort'];
|
||||
}
|
||||
$sql1 = $db->query("UPDATE jumi_admin
|
||||
SET vorname = '$vorname'
|
||||
,nachname = '$nachname'
|
||||
,mail = '$mail'
|
||||
,passwort = '$password_md5'
|
||||
WHERE uid = $uid");
|
||||
if (!$sql1) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es gab ein Fehler in der Datenbank: Update User</div>|***|error';
|
||||
exit;
|
||||
$error++;
|
||||
}
|
||||
|
||||
$sql2 = $db->query("DELETE FROM jumi_admin_rollen_user_zuord WHERE uid = $uid");
|
||||
for ($i = 0; $i < sizeof($rollen); $i++) {
|
||||
$sql2 = $db->query("INSERT INTO jumi_admin_rollen_user_zuord ( rid
|
||||
, uid
|
||||
)
|
||||
VALUES
|
||||
( '$rollen[$i]'
|
||||
, '$uid'
|
||||
)
|
||||
");
|
||||
}
|
||||
if (!$sql2) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es gab ein Fehler in der Datenbank: Insert Rollenzuordnung</div>|***|error';
|
||||
exit;
|
||||
$error++;
|
||||
}
|
||||
|
||||
|
||||
if($pwdback == 1){
|
||||
$empfaenger = "$mail";
|
||||
$betreff = "Update JU & MI Portal";
|
||||
$text = "
|
||||
<html>
|
||||
<head>
|
||||
<title>Update JU & MI Portal</title>
|
||||
</head>
|
||||
<body>
|
||||
<font face='Arial' size='2'>
|
||||
Guten Tag $vorname $nachname!<br><br>
|
||||
Sie wurden im JU & MI Portal geändert!<br>
|
||||
Nachfolgend finden Sie Ihre Zugangsdaten:
|
||||
<br>
|
||||
<br>
|
||||
<table>
|
||||
<tr>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<b>Benutzerkennung:</b>
|
||||
</font>
|
||||
</td>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
$mail
|
||||
</font>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<b>Passwort:</b>
|
||||
</font>
|
||||
</td>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
$password
|
||||
</font>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<b>Login:</b>
|
||||
</font>
|
||||
</td>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<a href='http://admin.ju-and-mi.de'>http://admin.ju-and-mi.de</a>
|
||||
</font>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
<br>
|
||||
Bitte beachten Sie, dass das Passwort zwischen Groß- und<br>
|
||||
Kleinschreibung unterscheidet.
|
||||
<p>
|
||||
Ändern Sie bitte zu Ihrer eigenen Sicherheit das<br>
|
||||
Passwort nach dem ersten Login unter dem Benutzericon in der Kopfleiste.
|
||||
<p>
|
||||
Vielen Dank
|
||||
</body>
|
||||
</html>";
|
||||
$result_absender = $db->query("SELECT wert FROM jumi_parameter WHERE pid = 1");
|
||||
$row_absender = $result_absender->fetch_array();
|
||||
if ($row_absender['wert'] == '') {
|
||||
$absender = 'info@ju-and-mi.de';
|
||||
} else {
|
||||
$absender = $row_absender['wert'];
|
||||
}
|
||||
$headers = "MIME-Version: 1.0\n";
|
||||
$headers .= "Content-type: text/html; charset=utf-8\n";
|
||||
$headers .= "From: Info JU & MI <$absender>\n";
|
||||
|
||||
$return = @mail($empfaenger, $betreff, $text, $headers);
|
||||
|
||||
if (!$return) { // Abfrage ob Mailversand funktioniert hat
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> BenutzerIn wurde aktualisiert. Es konnte allerdings <b>keine Mail</b> verschickt werden!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> BenutzerIn wurde aktualisiert. Eine Mail mit den Zugangsdaten wurde zugestellt.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
}else{
|
||||
if ($error == 0) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> BenutzerIn wurde aktualisiert.</div>|***|success';
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> BenutzerIn wurde nicht aktualisiert.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if ($function == 'disableuser') {
|
||||
$uid = $_POST['uid'];
|
||||
|
||||
$sql1 = $db->query("UPDATE jumi_admin
|
||||
SET aktiv = '0'
|
||||
WHERE uid = $uid");
|
||||
if (!$sql1) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es gab ein Fehler in der Datenbank: Disable User</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> BenutzerIn wurde gesperrt.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'enableuser') {
|
||||
$uid = $_POST['uid'];
|
||||
|
||||
$sql1 = $db->query("UPDATE jumi_admin
|
||||
SET aktiv = '1'
|
||||
WHERE uid = $uid");
|
||||
if (!$sql1) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es gab ein Fehler in der Datenbank: Enable User</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> BenutzerIn wurde aktiviert.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
<?php
|
||||
require_once("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'checkuser') {
|
||||
$mail = $_POST['mail'];
|
||||
|
||||
if (filter_var($mail, FILTER_VALIDATE_EMAIL)) {
|
||||
$mail = $_POST['mail'];
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_admin WHERE mail = '$mail'");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
if ($row['Anz'] == "0") {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> User ist im System nicht vorhanden!</div>';
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> User ist im System bereits vorhanden!</div>';
|
||||
}
|
||||
#}else{
|
||||
# echo ""
|
||||
}
|
||||
}
|
||||
|
||||
#echo "Funktion: $function";
|
||||
if ($function == 'usersave') {
|
||||
require_once("func_genPwd.php");
|
||||
$vorname = trim($_POST['vorname']);
|
||||
$nachname = trim($_POST['nachname']);
|
||||
$mail = trim($_POST['mail']);
|
||||
$rollen = $_POST['rollen'];
|
||||
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_admin WHERE mail = '$mail'");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
#Fehlercheck
|
||||
if ($row['Anz'] != "0") {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> User ist im System bereits vorhanden!</div>|***|error';
|
||||
}
|
||||
if ($rollen == '' or $vorname == '' or $nachname == '' or $mail == '') {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es müssen alle Felder ausgefüllt werden!</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
if (!filter_var($mail, FILTER_VALIDATE_EMAIL)) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Geben Sie eine gültige Mailadresse ein!</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
|
||||
$error = 0;
|
||||
$password = generateStrongPassword();
|
||||
$password_md5 = md5($password);
|
||||
|
||||
$sql1 = $db->query("INSERT INTO jumi_admin ( vorname
|
||||
, nachname
|
||||
, mail
|
||||
, passwort
|
||||
)
|
||||
VALUES
|
||||
( '$vorname'
|
||||
, '$nachname'
|
||||
, '$mail'
|
||||
, '$password_md5'
|
||||
)
|
||||
");
|
||||
$uid = $db->insert_id;
|
||||
if (!$sql1) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es gab ein Fehler in der Datenbank: Insert User</div>|***|error';
|
||||
$error++;
|
||||
exit;
|
||||
}
|
||||
for ($i = 0; $i < sizeof($rollen); $i++) {
|
||||
$sql2 = $db->query("INSERT INTO jumi_admin_rollen_user_zuord ( rid
|
||||
, uid
|
||||
)
|
||||
VALUES
|
||||
( '$rollen[$i]'
|
||||
, '$uid'
|
||||
)
|
||||
");
|
||||
}
|
||||
if (!$sql2) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es gab ein Fehler in der Datenbank: Insert Rollenzuordnung</div>|***|error';
|
||||
exit;
|
||||
$error++;
|
||||
}
|
||||
|
||||
if ($error == 0) {
|
||||
$empfaenger = "$mail";
|
||||
$betreff = "Anmeldung JU & MI Portal";
|
||||
$text = "
|
||||
<html>
|
||||
<head>
|
||||
<title>Anmeldung JU & MI Portal</title>
|
||||
</head>
|
||||
<body>
|
||||
<font face='Arial' size='2'>
|
||||
Guten Tag $vorname $nachname!<br><br>
|
||||
Sie wurden im JU & MI Portal registriert!<br>
|
||||
Nachfolgend finden Sie Ihre Zugangsdaten:
|
||||
<br>
|
||||
<br>
|
||||
<table>
|
||||
<tr>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<b>Benutzerkennung:</b>
|
||||
</font>
|
||||
</td>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
$mail
|
||||
</font>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<b>Passwort:</b>
|
||||
</font>
|
||||
</td>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
$password
|
||||
</font>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<b>Login:</b>
|
||||
</font>
|
||||
</td>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<a href='http://admin.ju-and-mi.de'>http://admin.ju-and-mi.de</a>
|
||||
</font>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
<br>
|
||||
Bitte beachten Sie, dass das Passwort zwischen Groß- und<br>
|
||||
Kleinschreibung unterscheidet.
|
||||
<p>
|
||||
Ändern Sie bitte zu Ihrer eigenen Sicherheit das<br>
|
||||
Passwort nach dem ersten Login unter dem Benutzericon in der Kopfleiste.
|
||||
<p>
|
||||
Vielen Dank
|
||||
</body>
|
||||
</html>";
|
||||
$result_absender = $db->query("SELECT wert FROM jumi_parameter WHERE pid = 1");
|
||||
$row_absender = $result_absender->fetch_array();
|
||||
if ($row_absender['wert'] == '') {
|
||||
$absender = 'info@ju-and-mi.de';
|
||||
} else {
|
||||
$absender = $row_absender['wert'];
|
||||
}
|
||||
$headers = "MIME-Version: 1.0\n";
|
||||
$headers .= "Content-type: text/html; charset=utf-8\n";
|
||||
$headers .= "From: Info JU & MI <$absender>\n";
|
||||
|
||||
$return = @mail($empfaenger, $betreff, $text, $headers);
|
||||
|
||||
if (!$return) { // Abfrage ob Mailversand funktioniert hat
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> BenutzerIn wurde angelegt. Es konnte allerdings <b>keine Mail</b> verschickt werden!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> BenutzerIn wurde angelegt. Eine Mail mit den Zugangsdaten wurde zugestellt.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'userupdate') {
|
||||
|
||||
$vorname = trim($_POST['vorname']);
|
||||
$nachname = trim($_POST['nachname']);
|
||||
$mail = trim($_POST['mail']);
|
||||
$rollen = $_POST['rollen'];
|
||||
$pwdback = $_POST['pwdback'];
|
||||
$uid = $_POST['uid'];
|
||||
|
||||
|
||||
if (isset($pwdback)) {
|
||||
if ($pwdback == '1') {
|
||||
$pwdback = '1';
|
||||
} else {
|
||||
$pwdback = '0';
|
||||
}
|
||||
} else {
|
||||
$pwdback = '0';
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
if ($uid == '') {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die BenutzerID wurde nicht übertragen</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
if ($rollen == '' or $vorname == '' or $nachname == '' or $mail == '') {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es müssen alle Felder ausgefüllt werden!</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
if (!filter_var($mail, FILTER_VALIDATE_EMAIL)) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Geben Sie eine gültige Mailadresse ein!</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
|
||||
$error = 0;
|
||||
|
||||
if($pwdback == 1){
|
||||
require_once("func_genPwd.php");
|
||||
$password = generateStrongPassword();
|
||||
$password_md5 = md5($password);
|
||||
}else{
|
||||
$result_pwd = $db->query("SELECT passwort FROM jumi_admin WHERE uid = $uid");
|
||||
$row_pwd = $result_pwd->fetch_array();
|
||||
$password_md5 = $row_pwd['passwort'];
|
||||
}
|
||||
$sql1 = $db->query("UPDATE jumi_admin
|
||||
SET vorname = '$vorname'
|
||||
,nachname = '$nachname'
|
||||
,mail = '$mail'
|
||||
,passwort = '$password_md5'
|
||||
WHERE uid = $uid");
|
||||
if (!$sql1) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es gab ein Fehler in der Datenbank: Update User</div>|***|error';
|
||||
exit;
|
||||
$error++;
|
||||
}
|
||||
|
||||
$sql2 = $db->query("DELETE FROM jumi_admin_rollen_user_zuord WHERE uid = $uid");
|
||||
for ($i = 0; $i < sizeof($rollen); $i++) {
|
||||
$sql2 = $db->query("INSERT INTO jumi_admin_rollen_user_zuord ( rid
|
||||
, uid
|
||||
)
|
||||
VALUES
|
||||
( '$rollen[$i]'
|
||||
, '$uid'
|
||||
)
|
||||
");
|
||||
}
|
||||
if (!$sql2) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es gab ein Fehler in der Datenbank: Insert Rollenzuordnung</div>|***|error';
|
||||
exit;
|
||||
$error++;
|
||||
}
|
||||
|
||||
|
||||
if($pwdback == 1){
|
||||
$empfaenger = "$mail";
|
||||
$betreff = "Update JU & MI Portal";
|
||||
$text = "
|
||||
<html>
|
||||
<head>
|
||||
<title>Update JU & MI Portal</title>
|
||||
</head>
|
||||
<body>
|
||||
<font face='Arial' size='2'>
|
||||
Guten Tag $vorname $nachname!<br><br>
|
||||
Sie wurden im JU & MI Portal geändert!<br>
|
||||
Nachfolgend finden Sie Ihre Zugangsdaten:
|
||||
<br>
|
||||
<br>
|
||||
<table>
|
||||
<tr>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<b>Benutzerkennung:</b>
|
||||
</font>
|
||||
</td>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
$mail
|
||||
</font>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<b>Passwort:</b>
|
||||
</font>
|
||||
</td>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
$password
|
||||
</font>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<b>Login:</b>
|
||||
</font>
|
||||
</td>
|
||||
<td valign='top'>
|
||||
<font face='Arial' size='2'>
|
||||
<a href='http://admin.ju-and-mi.de'>http://admin.ju-and-mi.de</a>
|
||||
</font>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
<br>
|
||||
Bitte beachten Sie, dass das Passwort zwischen Groß- und<br>
|
||||
Kleinschreibung unterscheidet.
|
||||
<p>
|
||||
Ändern Sie bitte zu Ihrer eigenen Sicherheit das<br>
|
||||
Passwort nach dem ersten Login unter dem Benutzericon in der Kopfleiste.
|
||||
<p>
|
||||
Vielen Dank
|
||||
</body>
|
||||
</html>";
|
||||
$result_absender = $db->query("SELECT wert FROM jumi_parameter WHERE pid = 1");
|
||||
$row_absender = $result_absender->fetch_array();
|
||||
if ($row_absender['wert'] == '') {
|
||||
$absender = 'info@ju-and-mi.de';
|
||||
} else {
|
||||
$absender = $row_absender['wert'];
|
||||
}
|
||||
$headers = "MIME-Version: 1.0\n";
|
||||
$headers .= "Content-type: text/html; charset=utf-8\n";
|
||||
$headers .= "From: Info JU & MI <$absender>\n";
|
||||
|
||||
$return = @mail($empfaenger, $betreff, $text, $headers);
|
||||
|
||||
if (!$return) { // Abfrage ob Mailversand funktioniert hat
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> BenutzerIn wurde aktualisiert. Es konnte allerdings <b>keine Mail</b> verschickt werden!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> BenutzerIn wurde aktualisiert. Eine Mail mit den Zugangsdaten wurde zugestellt.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
}else{
|
||||
if ($error == 0) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> BenutzerIn wurde aktualisiert.</div>|***|success';
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> BenutzerIn wurde nicht aktualisiert.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if ($function == 'disableuser') {
|
||||
$uid = $_POST['uid'];
|
||||
|
||||
$sql1 = $db->query("UPDATE jumi_admin
|
||||
SET aktiv = '0'
|
||||
WHERE uid = $uid");
|
||||
if (!$sql1) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es gab ein Fehler in der Datenbank: Disable User</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> BenutzerIn wurde gesperrt.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'enableuser') {
|
||||
$uid = $_POST['uid'];
|
||||
|
||||
$sql1 = $db->query("UPDATE jumi_admin
|
||||
SET aktiv = '1'
|
||||
WHERE uid = $uid");
|
||||
if (!$sql1) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es gab ein Fehler in der Datenbank: Enable User</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> BenutzerIn wurde aktiviert.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
?>
|
||||
@ -1,26 +1,26 @@
|
||||
<?php
|
||||
require_once("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'deleteSurvey') {
|
||||
|
||||
$umid = $_POST['id'];
|
||||
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_umfragen_erg_freitext WHERE umid = $umid");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_umfragen_ende WHERE umid = $umid");
|
||||
$stmt4 = $db->query("DELETE FROM jumi_umfragen_ergebnisse WHERE ufid IN (SELECT ufid FROM jumi_umfragen_fragen WHERE umid = $umid)");
|
||||
$stmt4 = $db->query("DELETE FROM jumi_umfragen_antworten WHERE ufid IN (SELECT ufid FROM jumi_umfragen_fragen WHERE umid = $umid)");
|
||||
$stmt5 = $db->query("DELETE FROM jumi_umfragen_fragen WHERE umid = $umid");
|
||||
$stmt6 = $db->query("DELETE FROM jumi_umfragen WHERE umid = $umid");
|
||||
|
||||
|
||||
if ($stmt1 and $stmt2 and $stmt3 and $stmt4 and $stmt5 and $stmt6) {
|
||||
echo "Success";
|
||||
} else {
|
||||
echo "Nicht geklappt";
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
<?php
|
||||
require_once("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'deleteSurvey') {
|
||||
|
||||
$umid = $_POST['id'];
|
||||
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_umfragen_erg_freitext WHERE umid = $umid");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_umfragen_ende WHERE umid = $umid");
|
||||
$stmt4 = $db->query("DELETE FROM jumi_umfragen_ergebnisse WHERE ufid IN (SELECT ufid FROM jumi_umfragen_fragen WHERE umid = $umid)");
|
||||
$stmt4 = $db->query("DELETE FROM jumi_umfragen_antworten WHERE ufid IN (SELECT ufid FROM jumi_umfragen_fragen WHERE umid = $umid)");
|
||||
$stmt5 = $db->query("DELETE FROM jumi_umfragen_fragen WHERE umid = $umid");
|
||||
$stmt6 = $db->query("DELETE FROM jumi_umfragen WHERE umid = $umid");
|
||||
|
||||
|
||||
if ($stmt1 and $stmt2 and $stmt3 and $stmt4 and $stmt5 and $stmt6) {
|
||||
echo "Success";
|
||||
} else {
|
||||
echo "Nicht geklappt";
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
?>
|
||||
@ -1,140 +1,140 @@
|
||||
<?php
|
||||
require_once("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'erfmultiple') {
|
||||
$multiple = $_POST['multiple'];
|
||||
$umid = $_SESSION["umfrageerf_umid"];
|
||||
$ufid = $_SESSION["umfrageerf_ufid"];
|
||||
if($ufid != ''){
|
||||
if (isset($multiple)) {
|
||||
if ($multiple == '1') {
|
||||
$multiple = '1';
|
||||
} else {
|
||||
$multiple = '0';
|
||||
}
|
||||
} else {
|
||||
$multiple = '0';
|
||||
}
|
||||
|
||||
$update = $db->query("UPDATE jumi_umfragen_fragen
|
||||
SET multiple ='$multiple'
|
||||
WHERE ufid = $ufid
|
||||
");
|
||||
if($update){
|
||||
echo "success";
|
||||
}else{
|
||||
echo -1;
|
||||
}
|
||||
|
||||
}else{
|
||||
echo -1;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'save') {
|
||||
$frage = $_POST['frage'];
|
||||
$antwort = $_POST['antwort'];
|
||||
$multiple = $_POST['multiple'];
|
||||
|
||||
|
||||
$umid = $_SESSION["umfrageerf_umid"];
|
||||
|
||||
if (isset($_POST['frage'])) {
|
||||
$frage = $_POST['frage'];
|
||||
}
|
||||
if (isset($_POST['antwort'])) {
|
||||
$antwort = $_POST['antwort'];
|
||||
}
|
||||
|
||||
if (isset($multiple)) {
|
||||
if ($multiple == '1') {
|
||||
$multiple = '1';
|
||||
} else {
|
||||
$multiple = '0';
|
||||
}
|
||||
} else {
|
||||
$multiple = '0';
|
||||
}
|
||||
|
||||
# Gibt es die Frage schon
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_umfragen_fragen WHERE umid='$umid' and frage='$frage'");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
if ($row['Anz'] == '0' and $frage != '') {
|
||||
$sql1 = $db->query("INSERT INTO jumi_umfragen_fragen ( umid
|
||||
, frage
|
||||
, multiple
|
||||
)
|
||||
VALUES
|
||||
( '$umid'
|
||||
, '$frage'
|
||||
, '$multiple'
|
||||
)
|
||||
");
|
||||
$ufid = $db->insert_id;
|
||||
$_SESSION["umfrageerf_ufid"] = $ufid;
|
||||
} else {
|
||||
$ufid = $_SESSION["umfrageerf_ufid"];
|
||||
$update = $db->query("UPDATE jumi_umfragen_fragen
|
||||
SET frage ='$frage'
|
||||
,multiple ='$multiple'
|
||||
WHERE ufid = $ufid
|
||||
");
|
||||
}
|
||||
$ufid = $_SESSION["umfrageerf_ufid"];
|
||||
|
||||
# Gibt es diese Antwort schon
|
||||
$result2 = $db->query("SELECT count(*) Anz FROM jumi_umfragen_antworten WHERE ufid='$ufid' and antwort='$antwort'");
|
||||
$row2 = $result2->fetch_array();
|
||||
if ($row2['Anz'] == '0' and $antwort != '') {
|
||||
$sql1 = $db->query("INSERT INTO jumi_umfragen_antworten ( ufid
|
||||
, antwort
|
||||
)
|
||||
VALUES
|
||||
( '$ufid'
|
||||
, '$antwort'
|
||||
)
|
||||
");
|
||||
$uaid = $db->insert_id;
|
||||
$_SESSION["umfrageerf_uaid"] = $uaid;
|
||||
}
|
||||
echo "success";
|
||||
#echo "<meta http-equiv=\"refresh\" content=\"0; URL=" . $_SERVER['PHP_SELF'] . "?action=fragen&erfassen=1\">";
|
||||
|
||||
}
|
||||
|
||||
|
||||
if ($function == 'delete') {
|
||||
$tabelle = $_POST['tabelle'];
|
||||
$spalte = $_POST['spalte'];
|
||||
$id = $_POST['id'];
|
||||
$stmt = $db->query("DELETE FROM $tabelle WHERE $spalte = $id");
|
||||
if ($stmt) {
|
||||
echo "success: DELETE FROM $tabelle WHERE $spalte = $id";
|
||||
} else {
|
||||
echo "error: DELETE FROM $tabelle WHERE $spalte = $id";
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'deleteQuestion') {
|
||||
|
||||
$id2 = $_POST['id2'];
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_umfragen_antworten WHERE ufid = $id2");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_umfragen_fragen WHERE ufid = $id2");
|
||||
# ggf. bereis Abstimmergebnisse löschen
|
||||
|
||||
# Sonst werden keine neue Fragen erfasst
|
||||
# unset($_SESSION["umfrageerf_ufid"]);
|
||||
|
||||
|
||||
if ($stmt1 and $stmt2) {
|
||||
echo "Success";
|
||||
} else {
|
||||
echo "Error";
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
<?php
|
||||
require_once("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'erfmultiple') {
|
||||
$multiple = $_POST['multiple'];
|
||||
$umid = $_SESSION["umfrageerf_umid"];
|
||||
$ufid = $_SESSION["umfrageerf_ufid"];
|
||||
if($ufid != ''){
|
||||
if (isset($multiple)) {
|
||||
if ($multiple == '1') {
|
||||
$multiple = '1';
|
||||
} else {
|
||||
$multiple = '0';
|
||||
}
|
||||
} else {
|
||||
$multiple = '0';
|
||||
}
|
||||
|
||||
$update = $db->query("UPDATE jumi_umfragen_fragen
|
||||
SET multiple ='$multiple'
|
||||
WHERE ufid = $ufid
|
||||
");
|
||||
if($update){
|
||||
echo "success";
|
||||
}else{
|
||||
echo -1;
|
||||
}
|
||||
|
||||
}else{
|
||||
echo -1;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'save') {
|
||||
$frage = $_POST['frage'];
|
||||
$antwort = $_POST['antwort'];
|
||||
$multiple = $_POST['multiple'];
|
||||
|
||||
|
||||
$umid = $_SESSION["umfrageerf_umid"];
|
||||
|
||||
if (isset($_POST['frage'])) {
|
||||
$frage = $_POST['frage'];
|
||||
}
|
||||
if (isset($_POST['antwort'])) {
|
||||
$antwort = $_POST['antwort'];
|
||||
}
|
||||
|
||||
if (isset($multiple)) {
|
||||
if ($multiple == '1') {
|
||||
$multiple = '1';
|
||||
} else {
|
||||
$multiple = '0';
|
||||
}
|
||||
} else {
|
||||
$multiple = '0';
|
||||
}
|
||||
|
||||
# Gibt es die Frage schon
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_umfragen_fragen WHERE umid='$umid' and frage='$frage'");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
if ($row['Anz'] == '0' and $frage != '') {
|
||||
$sql1 = $db->query("INSERT INTO jumi_umfragen_fragen ( umid
|
||||
, frage
|
||||
, multiple
|
||||
)
|
||||
VALUES
|
||||
( '$umid'
|
||||
, '$frage'
|
||||
, '$multiple'
|
||||
)
|
||||
");
|
||||
$ufid = $db->insert_id;
|
||||
$_SESSION["umfrageerf_ufid"] = $ufid;
|
||||
} else {
|
||||
$ufid = $_SESSION["umfrageerf_ufid"];
|
||||
$update = $db->query("UPDATE jumi_umfragen_fragen
|
||||
SET frage ='$frage'
|
||||
,multiple ='$multiple'
|
||||
WHERE ufid = $ufid
|
||||
");
|
||||
}
|
||||
$ufid = $_SESSION["umfrageerf_ufid"];
|
||||
|
||||
# Gibt es diese Antwort schon
|
||||
$result2 = $db->query("SELECT count(*) Anz FROM jumi_umfragen_antworten WHERE ufid='$ufid' and antwort='$antwort'");
|
||||
$row2 = $result2->fetch_array();
|
||||
if ($row2['Anz'] == '0' and $antwort != '') {
|
||||
$sql1 = $db->query("INSERT INTO jumi_umfragen_antworten ( ufid
|
||||
, antwort
|
||||
)
|
||||
VALUES
|
||||
( '$ufid'
|
||||
, '$antwort'
|
||||
)
|
||||
");
|
||||
$uaid = $db->insert_id;
|
||||
$_SESSION["umfrageerf_uaid"] = $uaid;
|
||||
}
|
||||
echo "success";
|
||||
#echo "<meta http-equiv=\"refresh\" content=\"0; URL=" . $_SERVER['PHP_SELF'] . "?action=fragen&erfassen=1\">";
|
||||
|
||||
}
|
||||
|
||||
|
||||
if ($function == 'delete') {
|
||||
$tabelle = $_POST['tabelle'];
|
||||
$spalte = $_POST['spalte'];
|
||||
$id = $_POST['id'];
|
||||
$stmt = $db->query("DELETE FROM $tabelle WHERE $spalte = $id");
|
||||
if ($stmt) {
|
||||
echo "success: DELETE FROM $tabelle WHERE $spalte = $id";
|
||||
} else {
|
||||
echo "error: DELETE FROM $tabelle WHERE $spalte = $id";
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'deleteQuestion') {
|
||||
|
||||
$id2 = $_POST['id2'];
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_umfragen_antworten WHERE ufid = $id2");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_umfragen_fragen WHERE ufid = $id2");
|
||||
# ggf. bereis Abstimmergebnisse löschen
|
||||
|
||||
# Sonst werden keine neue Fragen erfasst
|
||||
# unset($_SESSION["umfrageerf_ufid"]);
|
||||
|
||||
|
||||
if ($stmt1 and $stmt2) {
|
||||
echo "Success";
|
||||
} else {
|
||||
echo "Error";
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
?>
|
||||
@ -1,265 +1,265 @@
|
||||
<?php
|
||||
require_once ("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'save_with_files')
|
||||
{
|
||||
|
||||
if (isset($_POST) && $_SERVER['REQUEST_METHOD'] == "POST")
|
||||
{
|
||||
## Dieses Script wird für jede Datei einzeln aufgerufen durch vpb_uploader.js. Bei 3 Dateien, 3x
|
||||
$form_datum = $_POST['datum'];
|
||||
$datum_form = preg_replace('/^(\\d{2})\\.(\\d{2})\\.(\\d{4})$/', '$3-$2-$1', $form_datum);
|
||||
$beschreibung = $_POST['beschreibung'];
|
||||
$firma = $_POST['firma'];
|
||||
$art = $_POST['art'];
|
||||
$betrag = $_POST['betrag'];
|
||||
$bemerkung = $_POST['bemerkung'];
|
||||
|
||||
#fid gesetzt, wenn Finanzen bearbeitet wird
|
||||
$fid_edit = $_POST['fid_edit'];
|
||||
|
||||
|
||||
$datum_file = date("Ymd_His_");
|
||||
#$vpb_file_name = strip_tags($_FILES['upload_file']['name']); //File Name
|
||||
$vpb_file_name = str_replace(array(
|
||||
"ä",
|
||||
"ö",
|
||||
"ü",
|
||||
"ß",
|
||||
"Ä",
|
||||
"Ö",
|
||||
"Ü",
|
||||
" "
|
||||
) , array(
|
||||
"ae",
|
||||
"oe",
|
||||
"ue",
|
||||
"ss",
|
||||
"Ae",
|
||||
"Oe",
|
||||
"Ue",
|
||||
"_"
|
||||
) , $_FILES['upload_file']['name']);
|
||||
$originalname = $_FILES['upload_file']['name'];
|
||||
$vpb_file_name = $datum_file . $vpb_file_name;
|
||||
$vpb_file_id = strip_tags($_POST['upload_file_ids']); // File id is gotten from the file name
|
||||
$vpb_file_size = $_FILES['upload_file']['size']; // File Size
|
||||
$vpb_uploaded_files_location = '../media/file_upload/finanzen/'; //This is the directory where uploaded files are saved on your server
|
||||
$vpb_final_location = $vpb_uploaded_files_location . $vpb_file_name; //Directory to save file plus the file to be saved
|
||||
//Without Validation and does not save filenames in the database
|
||||
|
||||
|
||||
|
||||
|
||||
if (move_uploaded_file(strip_tags($_FILES['upload_file']['tmp_name']) , $vpb_final_location))
|
||||
{
|
||||
|
||||
$result = $db->query("SELECT fid
|
||||
FROM jumi_finanzen
|
||||
WHERE datum = '$datum_form'
|
||||
AND beschreibung = '$beschreibung'
|
||||
AND firma = '$firma'
|
||||
AND art = '$art'
|
||||
AND betrag = '$betrag'
|
||||
AND bemerkung = '$bemerkung'
|
||||
");
|
||||
$row = $result->fetch_array();
|
||||
if ($row['fid'] == '' AND $fid_edit == '-1')
|
||||
{
|
||||
$sql1 = $db->query("INSERT INTO jumi_finanzen ( datum
|
||||
, beschreibung
|
||||
, firma
|
||||
, art
|
||||
, betrag
|
||||
, bemerkung
|
||||
)
|
||||
VALUES
|
||||
( '$datum_form'
|
||||
, '$beschreibung'
|
||||
, '$firma'
|
||||
, '$art'
|
||||
, '$betrag'
|
||||
, '$bemerkung'
|
||||
)
|
||||
");
|
||||
$fid = $db->insert_id;
|
||||
}
|
||||
elseif($fid_edit != '-1')
|
||||
{
|
||||
$sql1 = $db->query( "UPDATE jumi_finanzen
|
||||
SET datum = '$datum_form'
|
||||
,beschreibung = '$beschreibung'
|
||||
,firma = '$firma'
|
||||
,art = '$art'
|
||||
,betrag = '$betrag'
|
||||
,bemerkung = '$bemerkung'
|
||||
WHERE fid = $fid_edit
|
||||
" );
|
||||
$fid = $fid_edit;
|
||||
|
||||
}
|
||||
else
|
||||
{
|
||||
$fid = $row['fid'];
|
||||
}
|
||||
$datum = date("Y-m-d H:i:s");
|
||||
$sql2 = $db->query("INSERT INTO jumi_finanzen_uploads ( fid
|
||||
, filename
|
||||
, originalname
|
||||
, uid
|
||||
, datum
|
||||
)
|
||||
VALUES
|
||||
( $fid
|
||||
, '$vpb_final_location'
|
||||
, '$originalname'
|
||||
, $uid
|
||||
, '$datum'
|
||||
)
|
||||
");
|
||||
//Display the file id
|
||||
if ($sql2)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Betrag wurde erfasst!</div>|***|success|***|' . $vpb_file_id;
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Betrag wurde nicht erfasst: Insert Fehler Datenbank.</div>|***|error|***|' . $vpb_file_id;
|
||||
exit;
|
||||
}
|
||||
|
||||
}
|
||||
else
|
||||
{
|
||||
//Display general system error
|
||||
echo 'general_system_error';
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'save_without_files')
|
||||
{
|
||||
$form_datum = $_POST['datum'];
|
||||
$datum_form = preg_replace('/^(\\d{2})\\.(\\d{2})\\.(\\d{4})$/', '$3-$2-$1', $form_datum);
|
||||
$beschreibung = $_POST['beschreibung'];
|
||||
$firma = $_POST['firma'];
|
||||
$art = $_POST['art'];
|
||||
$betrag = $_POST['betrag'];
|
||||
$bemerkung = $_POST['bemerkung'];
|
||||
#fid gesetzt, wenn Finanzen bearbeitet wird
|
||||
$fid_edit = $_POST['fid_edit'];
|
||||
|
||||
|
||||
$db = dbconnect();
|
||||
|
||||
# Wenn Verlag nicht vorhanden, dann neu anlegen
|
||||
|
||||
|
||||
$datum = date("Y-m-d H:i:s");
|
||||
if($fid_edit == '-1'){
|
||||
$sql1 = $db->query("INSERT INTO jumi_finanzen ( datum
|
||||
, beschreibung
|
||||
, firma
|
||||
, art
|
||||
, betrag
|
||||
, bemerkung
|
||||
)
|
||||
VALUES
|
||||
( '$datum_form'
|
||||
, '$beschreibung'
|
||||
, '$firma'
|
||||
, '$art'
|
||||
, '$betrag'
|
||||
, '$bemerkung'
|
||||
)
|
||||
");
|
||||
if ($sql1)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Betrag wurde erfasst!</div>|***|success|***|';
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Betrag wurde nicht erfasst: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}else{
|
||||
$sql1 = $db->query( "UPDATE jumi_finanzen
|
||||
SET datum = '$datum_form'
|
||||
,beschreibung = '$beschreibung'
|
||||
,firma = '$firma'
|
||||
,art = '$art'
|
||||
,betrag = '$betrag'
|
||||
,bemerkung = '$bemerkung'
|
||||
WHERE fid = $fid_edit
|
||||
" );
|
||||
|
||||
|
||||
if ($sql1)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Betrag wurde bearbeitet!</div>|***|success|***|';
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Betrag wurde nicht bearbeitet: Update Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if ($function == 'delBelegFile') {
|
||||
if (isset($_POST['id'])) {
|
||||
$id = $_POST['id'];
|
||||
}
|
||||
|
||||
$result0 = $db->query("SELECT filename, fid
|
||||
FROM jumi_finanzen_uploads
|
||||
WHERE id = $id;");
|
||||
$row0 = $result0->fetch_array();
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_finanzen_uploads WHERE id= $id");
|
||||
$del = unlink($row0['filename']);
|
||||
|
||||
if ($stmt1 AND $del) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Die Datei wurde gelöscht!</div>|***|success|***|'.$row0['fid'];
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die Datei wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|success|***|'.$row0['fid'];
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if ($function == 'delBeleg') {
|
||||
if (isset($_POST['fid'])) {
|
||||
$fid = $_POST['fid'];
|
||||
}
|
||||
|
||||
$query = "SELECT id, filename, originalname FROM jumi_finanzen_uploads WHERE fid='$fid' ORDER BY datum DESC";
|
||||
$result = $db->query( $query)
|
||||
or die ("Cannot execute query1");
|
||||
|
||||
while ($row = $result->fetch_array()){
|
||||
$del = unlink($row['filename']);
|
||||
}
|
||||
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_finanzen_uploads WHERE fid = $fid;");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_finanzen WHERE fid = $fid");
|
||||
|
||||
|
||||
if ($stmt1 AND $stmt2) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Beleg wurde gelöscht!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Beleg wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
<?php
|
||||
require_once ("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'save_with_files')
|
||||
{
|
||||
|
||||
if (isset($_POST) && $_SERVER['REQUEST_METHOD'] == "POST")
|
||||
{
|
||||
## Dieses Script wird für jede Datei einzeln aufgerufen durch vpb_uploader.js. Bei 3 Dateien, 3x
|
||||
$form_datum = $_POST['datum'];
|
||||
$datum_form = preg_replace('/^(\\d{2})\\.(\\d{2})\\.(\\d{4})$/', '$3-$2-$1', $form_datum);
|
||||
$beschreibung = $_POST['beschreibung'];
|
||||
$firma = $_POST['firma'];
|
||||
$art = $_POST['art'];
|
||||
$betrag = $_POST['betrag'];
|
||||
$bemerkung = $_POST['bemerkung'];
|
||||
|
||||
#fid gesetzt, wenn Finanzen bearbeitet wird
|
||||
$fid_edit = $_POST['fid_edit'];
|
||||
|
||||
|
||||
$datum_file = date("Ymd_His_");
|
||||
#$vpb_file_name = strip_tags($_FILES['upload_file']['name']); //File Name
|
||||
$vpb_file_name = str_replace(array(
|
||||
"ä",
|
||||
"ö",
|
||||
"ü",
|
||||
"ß",
|
||||
"Ä",
|
||||
"Ö",
|
||||
"Ü",
|
||||
" "
|
||||
) , array(
|
||||
"ae",
|
||||
"oe",
|
||||
"ue",
|
||||
"ss",
|
||||
"Ae",
|
||||
"Oe",
|
||||
"Ue",
|
||||
"_"
|
||||
) , $_FILES['upload_file']['name']);
|
||||
$originalname = $_FILES['upload_file']['name'];
|
||||
$vpb_file_name = $datum_file . $vpb_file_name;
|
||||
$vpb_file_id = strip_tags($_POST['upload_file_ids']); // File id is gotten from the file name
|
||||
$vpb_file_size = $_FILES['upload_file']['size']; // File Size
|
||||
$vpb_uploaded_files_location = '../media/file_upload/finanzen/'; //This is the directory where uploaded files are saved on your server
|
||||
$vpb_final_location = $vpb_uploaded_files_location . $vpb_file_name; //Directory to save file plus the file to be saved
|
||||
//Without Validation and does not save filenames in the database
|
||||
|
||||
|
||||
|
||||
|
||||
if (move_uploaded_file(strip_tags($_FILES['upload_file']['tmp_name']) , $vpb_final_location))
|
||||
{
|
||||
|
||||
$result = $db->query("SELECT fid
|
||||
FROM jumi_finanzen
|
||||
WHERE datum = '$datum_form'
|
||||
AND beschreibung = '$beschreibung'
|
||||
AND firma = '$firma'
|
||||
AND art = '$art'
|
||||
AND betrag = '$betrag'
|
||||
AND bemerkung = '$bemerkung'
|
||||
");
|
||||
$row = $result->fetch_array();
|
||||
if ($row['fid'] == '' AND $fid_edit == '-1')
|
||||
{
|
||||
$sql1 = $db->query("INSERT INTO jumi_finanzen ( datum
|
||||
, beschreibung
|
||||
, firma
|
||||
, art
|
||||
, betrag
|
||||
, bemerkung
|
||||
)
|
||||
VALUES
|
||||
( '$datum_form'
|
||||
, '$beschreibung'
|
||||
, '$firma'
|
||||
, '$art'
|
||||
, '$betrag'
|
||||
, '$bemerkung'
|
||||
)
|
||||
");
|
||||
$fid = $db->insert_id;
|
||||
}
|
||||
elseif($fid_edit != '-1')
|
||||
{
|
||||
$sql1 = $db->query( "UPDATE jumi_finanzen
|
||||
SET datum = '$datum_form'
|
||||
,beschreibung = '$beschreibung'
|
||||
,firma = '$firma'
|
||||
,art = '$art'
|
||||
,betrag = '$betrag'
|
||||
,bemerkung = '$bemerkung'
|
||||
WHERE fid = $fid_edit
|
||||
" );
|
||||
$fid = $fid_edit;
|
||||
|
||||
}
|
||||
else
|
||||
{
|
||||
$fid = $row['fid'];
|
||||
}
|
||||
$datum = date("Y-m-d H:i:s");
|
||||
$sql2 = $db->query("INSERT INTO jumi_finanzen_uploads ( fid
|
||||
, filename
|
||||
, originalname
|
||||
, uid
|
||||
, datum
|
||||
)
|
||||
VALUES
|
||||
( $fid
|
||||
, '$vpb_final_location'
|
||||
, '$originalname'
|
||||
, $uid
|
||||
, '$datum'
|
||||
)
|
||||
");
|
||||
//Display the file id
|
||||
if ($sql2)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Betrag wurde erfasst!</div>|***|success|***|' . $vpb_file_id;
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Betrag wurde nicht erfasst: Insert Fehler Datenbank.</div>|***|error|***|' . $vpb_file_id;
|
||||
exit;
|
||||
}
|
||||
|
||||
}
|
||||
else
|
||||
{
|
||||
//Display general system error
|
||||
echo 'general_system_error';
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'save_without_files')
|
||||
{
|
||||
$form_datum = $_POST['datum'];
|
||||
$datum_form = preg_replace('/^(\\d{2})\\.(\\d{2})\\.(\\d{4})$/', '$3-$2-$1', $form_datum);
|
||||
$beschreibung = $_POST['beschreibung'];
|
||||
$firma = $_POST['firma'];
|
||||
$art = $_POST['art'];
|
||||
$betrag = $_POST['betrag'];
|
||||
$bemerkung = $_POST['bemerkung'];
|
||||
#fid gesetzt, wenn Finanzen bearbeitet wird
|
||||
$fid_edit = $_POST['fid_edit'];
|
||||
|
||||
|
||||
$db = dbconnect();
|
||||
|
||||
# Wenn Verlag nicht vorhanden, dann neu anlegen
|
||||
|
||||
|
||||
$datum = date("Y-m-d H:i:s");
|
||||
if($fid_edit == '-1'){
|
||||
$sql1 = $db->query("INSERT INTO jumi_finanzen ( datum
|
||||
, beschreibung
|
||||
, firma
|
||||
, art
|
||||
, betrag
|
||||
, bemerkung
|
||||
)
|
||||
VALUES
|
||||
( '$datum_form'
|
||||
, '$beschreibung'
|
||||
, '$firma'
|
||||
, '$art'
|
||||
, '$betrag'
|
||||
, '$bemerkung'
|
||||
)
|
||||
");
|
||||
if ($sql1)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Betrag wurde erfasst!</div>|***|success|***|';
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Betrag wurde nicht erfasst: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}else{
|
||||
$sql1 = $db->query( "UPDATE jumi_finanzen
|
||||
SET datum = '$datum_form'
|
||||
,beschreibung = '$beschreibung'
|
||||
,firma = '$firma'
|
||||
,art = '$art'
|
||||
,betrag = '$betrag'
|
||||
,bemerkung = '$bemerkung'
|
||||
WHERE fid = $fid_edit
|
||||
" );
|
||||
|
||||
|
||||
if ($sql1)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Betrag wurde bearbeitet!</div>|***|success|***|';
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Betrag wurde nicht bearbeitet: Update Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if ($function == 'delBelegFile') {
|
||||
if (isset($_POST['id'])) {
|
||||
$id = $_POST['id'];
|
||||
}
|
||||
|
||||
$result0 = $db->query("SELECT filename, fid
|
||||
FROM jumi_finanzen_uploads
|
||||
WHERE id = $id;");
|
||||
$row0 = $result0->fetch_array();
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_finanzen_uploads WHERE id= $id");
|
||||
$del = unlink($row0['filename']);
|
||||
|
||||
if ($stmt1 AND $del) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Die Datei wurde gelöscht!</div>|***|success|***|'.$row0['fid'];
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die Datei wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|success|***|'.$row0['fid'];
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if ($function == 'delBeleg') {
|
||||
if (isset($_POST['fid'])) {
|
||||
$fid = $_POST['fid'];
|
||||
}
|
||||
|
||||
$query = "SELECT id, filename, originalname FROM jumi_finanzen_uploads WHERE fid='$fid' ORDER BY datum DESC";
|
||||
$result = $db->query( $query)
|
||||
or die ("Cannot execute query1");
|
||||
|
||||
while ($row = $result->fetch_array()){
|
||||
$del = unlink($row['filename']);
|
||||
}
|
||||
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_finanzen_uploads WHERE fid = $fid;");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_finanzen WHERE fid = $fid");
|
||||
|
||||
|
||||
if ($stmt1 AND $stmt2) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Beleg wurde gelöscht!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Beleg wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
?>
|
||||
@ -1,286 +1,286 @@
|
||||
<?php
|
||||
# https://www.php-einfach.de/experte/php-codebeispiele/loginscript/angemeldet-bleiben/
|
||||
require_once("../config/datenbankanbindung.php");
|
||||
$db = dbconnect();
|
||||
|
||||
$function = $_POST['function'];
|
||||
if(!isset($_SESSION)) { session_start(); }
|
||||
|
||||
if ($function == 'logout') {
|
||||
if($_SESSION['angemeldet_bleiben'] == 1){
|
||||
$identifier = $_COOKIE['identifier'];
|
||||
$securitytoken = $_COOKIE['securitytoken'];
|
||||
$token_neu = sha1($securitytoken);
|
||||
$sql1 = $db->query("DELETE FROM jumi_securitytokens
|
||||
WHERE securitytoken ='$token_neu'
|
||||
AND identifier = '$identifier'
|
||||
");
|
||||
}
|
||||
//Cookies entfernen
|
||||
session_destroy();
|
||||
setcookie("identifier","",time()-(3600*24*365));
|
||||
setcookie("securitytoken","",time()-(3600*24*365));
|
||||
header("location:../dashboard/login.php");
|
||||
}
|
||||
|
||||
|
||||
|
||||
function random_string() {
|
||||
if(function_exists('random_bytes')) {
|
||||
$bytes = random_bytes(16);
|
||||
$str = bin2hex($bytes);
|
||||
} else if(function_exists('openssl_random_pseudo_bytes')) {
|
||||
$bytes = openssl_random_pseudo_bytes(16);
|
||||
$str = bin2hex($bytes);
|
||||
} else if(function_exists('mcrypt_create_iv')) {
|
||||
$bytes = mcrypt_create_iv(16, MCRYPT_DEV_URANDOM);
|
||||
$str = bin2hex($bytes);
|
||||
} else {
|
||||
//Bitte euer_geheim_string durch einen zufälligen String mit >12 Zeichen austauschen
|
||||
$str = md5(uniqid('#!af445bsvjke34vas', true));
|
||||
}
|
||||
return $str;
|
||||
}
|
||||
|
||||
//Automatischer Login
|
||||
#if ($function != 'login') {
|
||||
if ($function == '') {
|
||||
if(!isset($_SESSION['userid']) && isset($_COOKIE['identifier']) && isset($_COOKIE['securitytoken'])) {
|
||||
|
||||
$identifier = $_COOKIE['identifier'];
|
||||
$securitytoken = $_COOKIE['securitytoken'];
|
||||
|
||||
|
||||
$result = $db->query("SELECT * FROM jumi_securitytokens WHERE identifier ='$identifier'");
|
||||
$securitytoken_row = $result->fetch_array();
|
||||
|
||||
## $statement = $pdo->prepare("SELECT * FROM jumi_securitytokens WHERE identifier = ?");
|
||||
## $result = $statement->execute(array($identifier));
|
||||
## $securitytoken_row = $statement->fetch();
|
||||
|
||||
if(sha1($securitytoken) !== $securitytoken_row['securitytoken']) {
|
||||
# die('Ein vermutlich gestohlener Security Token wurde identifiziert');
|
||||
header("location:../dashboard/login.php");
|
||||
} else { //Token war korrekt
|
||||
//Setze neuen Token
|
||||
$neuer_securitytoken = random_string();
|
||||
# $insert = $pdo->prepare("UPDATE jumi_securitytokens SET securitytoken = :securitytoken WHERE identifier = :identifier");
|
||||
# $insert->execute(array('securitytoken' => sha1($neuer_securitytoken), 'identifier' => $identifier));
|
||||
$token_neu = sha1($neuer_securitytoken);
|
||||
$update = $db->query("UPDATE jumi_securitytokens
|
||||
SET securitytoken ='$token_neu'
|
||||
WHERE identifier = '$identifier'
|
||||
");
|
||||
|
||||
|
||||
|
||||
setcookie("identifier",$identifier,time()+(3600*24*365)); //1 Jahr Gültigkeit
|
||||
setcookie("securitytoken",$neuer_securitytoken,time()+(3600*24*365)); //1 Jahr Gültigkeit
|
||||
$_SESSION['angemeldet_bleiben'] = 1;
|
||||
|
||||
//Logge den Benutzer ein
|
||||
$_SESSION['userid'] = $securitytoken_row['uid'];
|
||||
$redirect = $_SESSION['cur_page'];
|
||||
if($redirect != ''){
|
||||
header("location:$redirect");
|
||||
}else{
|
||||
header("location:../dashboard/index.php");
|
||||
}
|
||||
}
|
||||
}else{
|
||||
if(!isset($_SESSION['userid'])){
|
||||
header("location:../dashboard/login.php");
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
if ($function == 'login') {
|
||||
$mail=mb_strtoupper($_POST["mail"]); //remove case sensitivity on the mail
|
||||
$password=$_POST["password"];
|
||||
|
||||
|
||||
if($_POST["mail"] != ""){
|
||||
$_SESSION["global_mail"]=$mail;
|
||||
}
|
||||
|
||||
if($mail == "" OR $password == ""){
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Bitte füllen Sie alle Felder aus!</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
|
||||
|
||||
$result = $db->query("SELECT uid, mail, passwort, aktiv FROM jumi_admin WHERE UPPER(mail)='$mail'");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
if ($row['aktiv'] == '0'){ //verschlüsseltes Passwort überprüfen
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Ihr Benutzeraccount ist inaktiv.</div>|***|error';
|
||||
exit;
|
||||
}else if (md5($password) != $row['passwort'] or $row['mail'] == ''){ //verschlüsseltes Passwort überprüfen
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Bitte prüfen Sie Ihre Zugangsdaten</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
$uid = $row['uid'];
|
||||
|
||||
//Möchte der Nutzer angemeldet beleiben?
|
||||
if($_POST['angemeldet_bleiben'] == 1) {
|
||||
|
||||
$identifier = random_string();
|
||||
$securitytoken = random_string();
|
||||
|
||||
# $insert = $pdo->prepare("INSERT INTO jumi_securitytokens (user_id, identifier, securitytoken) VALUES (:user_id, :identifier, :securitytoken)");
|
||||
# $insert->execute(array('user_id' => $user['id'], 'identifier' => $identifier, 'securitytoken' => sha1($securitytoken)));
|
||||
$token_neu = sha1($securitytoken);
|
||||
$result_1 = $db->query("INSERT INTO jumi_securitytokens (uid, identifier, securitytoken) VALUES ('$uid', '$identifier', '$token_neu')");
|
||||
setcookie("identifier",$identifier,time()+(3600*24*365)); //1 Jahr Gültigkeit
|
||||
setcookie("securitytoken",$securitytoken,time()+(3600*24*365)); //1 Jahr Gültigkeit
|
||||
$_SESSION['angemeldet_bleiben'] = 1;
|
||||
}else{
|
||||
$_SESSION['angemeldet_bleiben'] = 0;
|
||||
}
|
||||
|
||||
$datum=date("Y-m-d H:i:s");
|
||||
$ip=getenv("REMOTE_ADDR");
|
||||
$agent=getenv("HTTP_USER_AGENT");
|
||||
$_SESSION['userid'] = $uid;
|
||||
$_SESSION["global_mail"] = $row['mail'];
|
||||
$result_1 = $db->query("INSERT INTO jumi_adminlog (Datum, IP, user_agent, uid) VALUES ('$datum', '$ip', '$agent', '$uid')");
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Login wird durchgeführt</div>|***|success';
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'passwortvergessen') {
|
||||
|
||||
$mail = $_POST['email'];
|
||||
|
||||
$result_pw = $db->query("SELECT uid, aktiv, vorname, nachname, mail FROM jumi_admin WHERE UPPER(mail)=UPPER('$mail')");
|
||||
$row_pw = $result_pw->fetch_array();
|
||||
|
||||
if(!isset($_POST['email']) || empty($_POST['email'])) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Bitte geben Sie eine E-Mail-Adresse ein.</div>|***|error';
|
||||
exit;
|
||||
} elseif($row_pw['aktiv'] == '0') {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Benutzer ist inaktiv. Melden Sie sich beim Administrator.</div>|***|error';
|
||||
exit;
|
||||
}elseif ($row_pw['mail'] == ''){
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Benutzer wurde nicht im System gefunden.</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
$passwortcode = random_string();
|
||||
$pwcode_sha1 = sha1($passwortcode);
|
||||
$uid = $row_pw['uid'];
|
||||
$vorname = $row_pw['vorname'];
|
||||
$nachname = $row_pw['nachname'];
|
||||
# Benutzer auf allen Geräten abmelden
|
||||
|
||||
$sql1 = $db->query("DELETE FROM jumi_securitytokens
|
||||
WHERE uid = '$uid'
|
||||
");
|
||||
|
||||
#
|
||||
$sql1 = $db->query("UPDATE jumi_admin
|
||||
SET passwortcode = '$pwcode_sha1'
|
||||
, passwortcode_time = NOW()
|
||||
WHERE uid = '$uid'
|
||||
");
|
||||
|
||||
$empfaenger = "$mail";
|
||||
$betreff = "Passwort vergessen - JU & MI Portal";
|
||||
$url_passwortcode = 'http://admin.ju-and-mi.de/passwortzuruecksetzen.php?uid='.$row_pw['uid'].'&code='.$passwortcode;
|
||||
$text = "
|
||||
<html>
|
||||
<head>
|
||||
<title>Passwort vergessen - JU & MI Portal</title>
|
||||
</head>
|
||||
<body>
|
||||
<font face='Arial' size='2'>
|
||||
Guten Tag $vorname $nachname!<br><br>
|
||||
für den Account im JU & MI Portal wurde ein neues Passwort angefordert.<br>
|
||||
Um ein neues Passwort zu vergeben, rufen Sie innerhalb der nächsten 24 Stunden die folgende Website auf:
|
||||
<br>
|
||||
<br>
|
||||
$url_passwortcode<br>
|
||||
<br>
|
||||
Sollte Ihnen das Passwort wieder eingefallen sein oder Sie diese nicht angefordert haben, ignorieren Sie bitte diese E-Mail.
|
||||
</body>
|
||||
</html>";
|
||||
$result_absender = $db->query("SELECT wert FROM jumi_parameter WHERE pid = 1");
|
||||
$row_absender = $result_absender->fetch_array();
|
||||
if ($row_absender['wert'] == '') {
|
||||
$absender = 'info@ju-and-mi.de';
|
||||
} else {
|
||||
$absender = $row_absender['wert'];
|
||||
}
|
||||
$headers = "MIME-Version: 1.0\n";
|
||||
$headers .= "Content-type: text/html; charset=utf-8\n";
|
||||
$headers .= "From: Info JU & MI <$absender>\n";
|
||||
|
||||
$return = @mail($empfaenger, $betreff, $text, $headers);
|
||||
|
||||
if (!$return) { // Abfrage ob Mailversand funktioniert hat
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es konnte <b>keine Mail</b> verschickt werden!<br>Wenden Sie sich an den Administrator.</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Eine Mail wurde Ihnen zugestellt.<br><b>Checken Sie auch den Spam Ordner!</b></div>|***|success';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
if ($function == 'resetpasswort') {
|
||||
|
||||
$password_new1 = $_POST['password_new1'];
|
||||
$password_new2 = $_POST['password_new2'];
|
||||
$uid = $_POST['uid'];
|
||||
$code = $_POST['code'];
|
||||
|
||||
$result = $db->query("SELECT uid, vorname, nachname, mail, aktiv, passwortcode, passwortcode_time FROM jumi_admin WHERE uid=$uid");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
#Fehlercheck
|
||||
if(!isset($uid) || !isset($code)) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Leider wurde beim Aufruf dieser Website kein Code zum Zurücksetzen des Passworts übermittelt!</div>|***|error';
|
||||
exit;
|
||||
}elseif ($row === null || $row['passwortcode'] === null ) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es wurde kein passender Benutzer gefunden!</div>|***|error';
|
||||
exit;
|
||||
}elseif($row['aktiv'] == '0') {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Benutzer ist inaktiv. Melden Sie sich beim Administrator.</div>|***|error';
|
||||
exit;
|
||||
}elseif($row['passwortcode_time'] === null || strtotime($row['passwortcode_time']) < (time()-24*3600) ) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Code ist leider abgelaufen. Setzen Sie das Passwort erneut zurück!</div>|***|error';
|
||||
exit;
|
||||
}elseif(sha1($code) != $row['passwortcode']) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der übergebene Code war ungültig.<br>Stellen Sie sicher, dass Sie den genauen Link in der URL aufrufen.</div>|***|error';
|
||||
exit;
|
||||
}elseif ($password_new1 != $password_new2) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das neue Passwort stimmt nicht mit der Wiederholung überein!</div>|***|error';
|
||||
exit;
|
||||
}elseif (strlen($password_new1) < 8) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das neue Passwort muss mindestens 8 Zeichen haben!</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
$password_md5 = md5($password_new1);
|
||||
$update = $db->query("UPDATE jumi_admin
|
||||
SET passwort ='$password_md5'
|
||||
,passwortcode = NULL
|
||||
,passwortcode_time = NULL
|
||||
WHERE uid=$uid
|
||||
");
|
||||
if (!$update) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es liegt ein Fehler in der Datenbank vor!</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Das Passwort wurde geändert!</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
<?php
|
||||
# https://www.php-einfach.de/experte/php-codebeispiele/loginscript/angemeldet-bleiben/
|
||||
require_once("../config/datenbankanbindung.php");
|
||||
$db = dbconnect();
|
||||
|
||||
$function = $_POST['function'];
|
||||
if(!isset($_SESSION)) { session_start(); }
|
||||
|
||||
if ($function == 'logout') {
|
||||
if($_SESSION['angemeldet_bleiben'] == 1){
|
||||
$identifier = $_COOKIE['identifier'];
|
||||
$securitytoken = $_COOKIE['securitytoken'];
|
||||
$token_neu = sha1($securitytoken);
|
||||
$sql1 = $db->query("DELETE FROM jumi_securitytokens
|
||||
WHERE securitytoken ='$token_neu'
|
||||
AND identifier = '$identifier'
|
||||
");
|
||||
}
|
||||
//Cookies entfernen
|
||||
session_destroy();
|
||||
setcookie("identifier","",time()-(3600*24*365));
|
||||
setcookie("securitytoken","",time()-(3600*24*365));
|
||||
header("location:../dashboard/login.php");
|
||||
}
|
||||
|
||||
|
||||
|
||||
function random_string() {
|
||||
if(function_exists('random_bytes')) {
|
||||
$bytes = random_bytes(16);
|
||||
$str = bin2hex($bytes);
|
||||
} else if(function_exists('openssl_random_pseudo_bytes')) {
|
||||
$bytes = openssl_random_pseudo_bytes(16);
|
||||
$str = bin2hex($bytes);
|
||||
} else if(function_exists('mcrypt_create_iv')) {
|
||||
$bytes = mcrypt_create_iv(16, MCRYPT_DEV_URANDOM);
|
||||
$str = bin2hex($bytes);
|
||||
} else {
|
||||
//Bitte euer_geheim_string durch einen zufälligen String mit >12 Zeichen austauschen
|
||||
$str = md5(uniqid('#!af445bsvjke34vas', true));
|
||||
}
|
||||
return $str;
|
||||
}
|
||||
|
||||
//Automatischer Login
|
||||
#if ($function != 'login') {
|
||||
if ($function == '') {
|
||||
if(!isset($_SESSION['userid']) && isset($_COOKIE['identifier']) && isset($_COOKIE['securitytoken'])) {
|
||||
|
||||
$identifier = $_COOKIE['identifier'];
|
||||
$securitytoken = $_COOKIE['securitytoken'];
|
||||
|
||||
|
||||
$result = $db->query("SELECT * FROM jumi_securitytokens WHERE identifier ='$identifier'");
|
||||
$securitytoken_row = $result->fetch_array();
|
||||
|
||||
## $statement = $pdo->prepare("SELECT * FROM jumi_securitytokens WHERE identifier = ?");
|
||||
## $result = $statement->execute(array($identifier));
|
||||
## $securitytoken_row = $statement->fetch();
|
||||
|
||||
if(sha1($securitytoken) !== $securitytoken_row['securitytoken']) {
|
||||
# die('Ein vermutlich gestohlener Security Token wurde identifiziert');
|
||||
header("location:../dashboard/login.php");
|
||||
} else { //Token war korrekt
|
||||
//Setze neuen Token
|
||||
$neuer_securitytoken = random_string();
|
||||
# $insert = $pdo->prepare("UPDATE jumi_securitytokens SET securitytoken = :securitytoken WHERE identifier = :identifier");
|
||||
# $insert->execute(array('securitytoken' => sha1($neuer_securitytoken), 'identifier' => $identifier));
|
||||
$token_neu = sha1($neuer_securitytoken);
|
||||
$update = $db->query("UPDATE jumi_securitytokens
|
||||
SET securitytoken ='$token_neu'
|
||||
WHERE identifier = '$identifier'
|
||||
");
|
||||
|
||||
|
||||
|
||||
setcookie("identifier",$identifier,time()+(3600*24*365)); //1 Jahr Gültigkeit
|
||||
setcookie("securitytoken",$neuer_securitytoken,time()+(3600*24*365)); //1 Jahr Gültigkeit
|
||||
$_SESSION['angemeldet_bleiben'] = 1;
|
||||
|
||||
//Logge den Benutzer ein
|
||||
$_SESSION['userid'] = $securitytoken_row['uid'];
|
||||
$redirect = $_SESSION['cur_page'];
|
||||
if($redirect != ''){
|
||||
header("location:$redirect");
|
||||
}else{
|
||||
header("location:../dashboard/index.php");
|
||||
}
|
||||
}
|
||||
}else{
|
||||
if(!isset($_SESSION['userid'])){
|
||||
header("location:../dashboard/login.php");
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
if ($function == 'login') {
|
||||
$mail=mb_strtoupper($_POST["mail"]); //remove case sensitivity on the mail
|
||||
$password=$_POST["password"];
|
||||
|
||||
|
||||
if($_POST["mail"] != ""){
|
||||
$_SESSION["global_mail"]=$mail;
|
||||
}
|
||||
|
||||
if($mail == "" OR $password == ""){
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Bitte füllen Sie alle Felder aus!</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
|
||||
|
||||
$result = $db->query("SELECT uid, mail, passwort, aktiv FROM jumi_admin WHERE UPPER(mail)='$mail'");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
if ($row['aktiv'] == '0'){ //verschlüsseltes Passwort überprüfen
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Ihr Benutzeraccount ist inaktiv.</div>|***|error';
|
||||
exit;
|
||||
}else if (md5($password) != $row['passwort'] or $row['mail'] == ''){ //verschlüsseltes Passwort überprüfen
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Bitte prüfen Sie Ihre Zugangsdaten</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
$uid = $row['uid'];
|
||||
|
||||
//Möchte der Nutzer angemeldet beleiben?
|
||||
if($_POST['angemeldet_bleiben'] == 1) {
|
||||
|
||||
$identifier = random_string();
|
||||
$securitytoken = random_string();
|
||||
|
||||
# $insert = $pdo->prepare("INSERT INTO jumi_securitytokens (user_id, identifier, securitytoken) VALUES (:user_id, :identifier, :securitytoken)");
|
||||
# $insert->execute(array('user_id' => $user['id'], 'identifier' => $identifier, 'securitytoken' => sha1($securitytoken)));
|
||||
$token_neu = sha1($securitytoken);
|
||||
$result_1 = $db->query("INSERT INTO jumi_securitytokens (uid, identifier, securitytoken) VALUES ('$uid', '$identifier', '$token_neu')");
|
||||
setcookie("identifier",$identifier,time()+(3600*24*365)); //1 Jahr Gültigkeit
|
||||
setcookie("securitytoken",$securitytoken,time()+(3600*24*365)); //1 Jahr Gültigkeit
|
||||
$_SESSION['angemeldet_bleiben'] = 1;
|
||||
}else{
|
||||
$_SESSION['angemeldet_bleiben'] = 0;
|
||||
}
|
||||
|
||||
$datum=date("Y-m-d H:i:s");
|
||||
$ip=getenv("REMOTE_ADDR");
|
||||
$agent=getenv("HTTP_USER_AGENT");
|
||||
$_SESSION['userid'] = $uid;
|
||||
$_SESSION["global_mail"] = $row['mail'];
|
||||
$result_1 = $db->query("INSERT INTO jumi_adminlog (Datum, IP, user_agent, uid) VALUES ('$datum', '$ip', '$agent', '$uid')");
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Login wird durchgeführt</div>|***|success';
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'passwortvergessen') {
|
||||
|
||||
$mail = $_POST['email'];
|
||||
|
||||
$result_pw = $db->query("SELECT uid, aktiv, vorname, nachname, mail FROM jumi_admin WHERE UPPER(mail)=UPPER('$mail')");
|
||||
$row_pw = $result_pw->fetch_array();
|
||||
|
||||
if(!isset($_POST['email']) || empty($_POST['email'])) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Bitte geben Sie eine E-Mail-Adresse ein.</div>|***|error';
|
||||
exit;
|
||||
} elseif($row_pw['aktiv'] == '0') {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Benutzer ist inaktiv. Melden Sie sich beim Administrator.</div>|***|error';
|
||||
exit;
|
||||
}elseif ($row_pw['mail'] == ''){
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Benutzer wurde nicht im System gefunden.</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
$passwortcode = random_string();
|
||||
$pwcode_sha1 = sha1($passwortcode);
|
||||
$uid = $row_pw['uid'];
|
||||
$vorname = $row_pw['vorname'];
|
||||
$nachname = $row_pw['nachname'];
|
||||
# Benutzer auf allen Geräten abmelden
|
||||
|
||||
$sql1 = $db->query("DELETE FROM jumi_securitytokens
|
||||
WHERE uid = '$uid'
|
||||
");
|
||||
|
||||
#
|
||||
$sql1 = $db->query("UPDATE jumi_admin
|
||||
SET passwortcode = '$pwcode_sha1'
|
||||
, passwortcode_time = NOW()
|
||||
WHERE uid = '$uid'
|
||||
");
|
||||
|
||||
$empfaenger = "$mail";
|
||||
$betreff = "Passwort vergessen - JU & MI Portal";
|
||||
$url_passwortcode = 'http://admin.ju-and-mi.de/passwortzuruecksetzen.php?uid='.$row_pw['uid'].'&code='.$passwortcode;
|
||||
$text = "
|
||||
<html>
|
||||
<head>
|
||||
<title>Passwort vergessen - JU & MI Portal</title>
|
||||
</head>
|
||||
<body>
|
||||
<font face='Arial' size='2'>
|
||||
Guten Tag $vorname $nachname!<br><br>
|
||||
für den Account im JU & MI Portal wurde ein neues Passwort angefordert.<br>
|
||||
Um ein neues Passwort zu vergeben, rufen Sie innerhalb der nächsten 24 Stunden die folgende Website auf:
|
||||
<br>
|
||||
<br>
|
||||
$url_passwortcode<br>
|
||||
<br>
|
||||
Sollte Ihnen das Passwort wieder eingefallen sein oder Sie diese nicht angefordert haben, ignorieren Sie bitte diese E-Mail.
|
||||
</body>
|
||||
</html>";
|
||||
$result_absender = $db->query("SELECT wert FROM jumi_parameter WHERE pid = 1");
|
||||
$row_absender = $result_absender->fetch_array();
|
||||
if ($row_absender['wert'] == '') {
|
||||
$absender = 'info@ju-and-mi.de';
|
||||
} else {
|
||||
$absender = $row_absender['wert'];
|
||||
}
|
||||
$headers = "MIME-Version: 1.0\n";
|
||||
$headers .= "Content-type: text/html; charset=utf-8\n";
|
||||
$headers .= "From: Info JU & MI <$absender>\n";
|
||||
|
||||
$return = @mail($empfaenger, $betreff, $text, $headers);
|
||||
|
||||
if (!$return) { // Abfrage ob Mailversand funktioniert hat
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es konnte <b>keine Mail</b> verschickt werden!<br>Wenden Sie sich an den Administrator.</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Eine Mail wurde Ihnen zugestellt.<br><b>Checken Sie auch den Spam Ordner!</b></div>|***|success';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
if ($function == 'resetpasswort') {
|
||||
|
||||
$password_new1 = $_POST['password_new1'];
|
||||
$password_new2 = $_POST['password_new2'];
|
||||
$uid = $_POST['uid'];
|
||||
$code = $_POST['code'];
|
||||
|
||||
$result = $db->query("SELECT uid, vorname, nachname, mail, aktiv, passwortcode, passwortcode_time FROM jumi_admin WHERE uid=$uid");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
#Fehlercheck
|
||||
if(!isset($uid) || !isset($code)) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Leider wurde beim Aufruf dieser Website kein Code zum Zurücksetzen des Passworts übermittelt!</div>|***|error';
|
||||
exit;
|
||||
}elseif ($row === null || $row['passwortcode'] === null ) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es wurde kein passender Benutzer gefunden!</div>|***|error';
|
||||
exit;
|
||||
}elseif($row['aktiv'] == '0') {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Benutzer ist inaktiv. Melden Sie sich beim Administrator.</div>|***|error';
|
||||
exit;
|
||||
}elseif($row['passwortcode_time'] === null || strtotime($row['passwortcode_time']) < (time()-24*3600) ) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Code ist leider abgelaufen. Setzen Sie das Passwort erneut zurück!</div>|***|error';
|
||||
exit;
|
||||
}elseif(sha1($code) != $row['passwortcode']) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der übergebene Code war ungültig.<br>Stellen Sie sicher, dass Sie den genauen Link in der URL aufrufen.</div>|***|error';
|
||||
exit;
|
||||
}elseif ($password_new1 != $password_new2) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das neue Passwort stimmt nicht mit der Wiederholung überein!</div>|***|error';
|
||||
exit;
|
||||
}elseif (strlen($password_new1) < 8) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das neue Passwort muss mindestens 8 Zeichen haben!</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
$password_md5 = md5($password_new1);
|
||||
$update = $db->query("UPDATE jumi_admin
|
||||
SET passwort ='$password_md5'
|
||||
,passwortcode = NULL
|
||||
,passwortcode_time = NULL
|
||||
WHERE uid=$uid
|
||||
");
|
||||
if (!$update) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es liegt ein Fehler in der Datenbank vor!</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Das Passwort wurde geändert!</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
?>
|
||||
File diff suppressed because it is too large
Load Diff
@ -1,197 +1,197 @@
|
||||
<?php
|
||||
require_once("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'notenbuchsave') {
|
||||
if (isset($_POST['notenbuch'])) {
|
||||
$notenbuch = $_POST['notenbuch'];
|
||||
}
|
||||
if (isset($_POST['var_checkliz'])) {
|
||||
$var_checkliz = $_POST['var_checkliz'];
|
||||
}
|
||||
if (isset($_POST['anz_lizenz'])) {
|
||||
$anz_lizenz = $_POST['anz_lizenz'];
|
||||
}
|
||||
|
||||
if (isset($var_checkliz)) {
|
||||
if ($var_checkliz == '1') {
|
||||
$checkliz = '1';
|
||||
} else {
|
||||
$checkliz = '0';
|
||||
}
|
||||
} else {
|
||||
$checkliz = '0';
|
||||
}
|
||||
|
||||
$db = dbconnect();
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_noten_zusammenstellung WHERE upper(bezeichnung)=upper('$notenbuch')");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
if ($notenbuch == '') { //verschlüsseltes Passwort überprüfen
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Notenbuchname darf nicht leer sein.</div>|***|error';
|
||||
exit;
|
||||
} else if ($row['Anz'] > 0) { //verschlüsseltes Passwort überprüfen
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Notenbuchname ist bereits vorhanden.</div>|***|error';
|
||||
exit;
|
||||
} else {
|
||||
|
||||
$sql1 = $db->query("INSERT INTO jumi_noten_zusammenstellung ( bezeichnung, lizenzpflicht, anzahl_lizenz) VALUES ( '$notenbuch', '$checkliz', $anz_lizenz)");
|
||||
if ($sql1) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Das Notenbuch wurde angelegt!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das Notenbuch wurde nicht angelegt: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'notenbuchupdate') {
|
||||
if (isset($_POST['notenbuch'])) {
|
||||
$notenbuch = $_POST['notenbuch'];
|
||||
}
|
||||
if (isset($_POST['var_checkliz'])) {
|
||||
$var_checkliz = $_POST['var_checkliz'];
|
||||
}
|
||||
if (isset($_POST['anz_lizenz'])) {
|
||||
$anz_lizenz = $_POST['anz_lizenz'];
|
||||
}
|
||||
if (isset($_POST['zsid'])) {
|
||||
$zsid = $_POST['zsid'];
|
||||
}
|
||||
|
||||
if (isset($var_checkliz)) {
|
||||
if ($var_checkliz == '1') {
|
||||
$checkliz = '1';
|
||||
} else {
|
||||
$checkliz = '0';
|
||||
$anz_lizenz = '0';
|
||||
}
|
||||
} else {
|
||||
$checkliz = '0';
|
||||
$anz_lizenz = '0';
|
||||
}
|
||||
|
||||
if ($notenbuch == '') { //verschlüsseltes Passwort überprüfen
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Notenbuchname darf nicht leer sein.</div>|***|error';
|
||||
exit;
|
||||
} else {
|
||||
$sql1 = $db->query("UPDATE jumi_noten_zusammenstellung
|
||||
SET bezeichnung ='$notenbuch'
|
||||
,lizenzpflicht='$checkliz'
|
||||
,anzahl_lizenz=$anz_lizenz
|
||||
WHERE zsid = $zsid
|
||||
");
|
||||
|
||||
if ($sql1) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Das Notenbuch wurde geändert!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das Notenbuch wurde nicht geändert: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'editNotenbuch') {
|
||||
if (isset($_POST['zsid'])) {
|
||||
$zsid = $_POST['zsid'];
|
||||
}
|
||||
$result = $db->query("SELECT bezeichnung, lizenzpflicht, anzahl_lizenz FROM jumi_noten_zusammenstellung WHERE zsid=$zsid");
|
||||
$row = $result->fetch_array();
|
||||
echo json_encode($row);
|
||||
|
||||
}
|
||||
|
||||
if ($function == 'erfzuordnung') {
|
||||
if (isset($_POST['jndid'])) {
|
||||
$jndid = $_POST['jndid'];
|
||||
}
|
||||
if (isset($_POST['zsid'])) {
|
||||
$zsid = $_POST['zsid'];
|
||||
}
|
||||
|
||||
$db = dbconnect();
|
||||
$sql1 = $db->query("INSERT INTO jumi_noten_zusammenstellung_zuord ( jndid, zsid) VALUES ( $jndid, $zsid )");
|
||||
if ($sql1) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Die Noten wurden zugewiesen!</div>|***|success|***|' . $jndid;
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die Noten wurden nicht zugewiesen: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'delzuordnung') {
|
||||
if (isset($_POST['jndid'])) {
|
||||
$jndid = $_POST['jndid'];
|
||||
}
|
||||
if (isset($_POST['zsid'])) {
|
||||
$zsid = $_POST['zsid'];
|
||||
}
|
||||
|
||||
$sql1 = $db->query("DELETE FROM jumi_noten_zusammenstellung_zuord WHERE jndid='$jndid' AND zsid='$zsid'");
|
||||
if ($sql1) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Die Noten wurden entfernt!</div>|***|success|***|' . $jndid;
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die Noten wurdne nicht entfernt: DELETE Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'erfNotenUser') {
|
||||
if (isset($_POST['zsid'])) {
|
||||
$zsid = $_POST['zsid'];
|
||||
}
|
||||
if (isset($_POST['csid'])) {
|
||||
$csid = $_POST['csid'];
|
||||
}
|
||||
|
||||
$db = dbconnect();
|
||||
$sql1 = $db->query("INSERT INTO jumi_noten_zus_saenger_zuord ( zsid, csid) VALUES ( $zsid, $csid )");
|
||||
if ($sql1) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Der Benutzer wurde zugewiesen!</div>|***|success|***|' . $zsid;
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Benutzer wurde nicht zugewiesen: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'delNotenUser') {
|
||||
if (isset($_POST['zsid'])) {
|
||||
$zsid = $_POST['zsid'];
|
||||
}
|
||||
if (isset($_POST['csid'])) {
|
||||
$csid = $_POST['csid'];
|
||||
}
|
||||
|
||||
$sql1 = $db->query("DELETE FROM jumi_noten_zus_saenger_zuord WHERE zsid='$zsid' AND csid='$csid'");
|
||||
if ($sql1) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Der Benutzer wurde gelöscht!</div>|***|success|***|' . $zsid;
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Benutzer wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'delZusammenstellung') {
|
||||
if (isset($_POST['zsid'])) {
|
||||
$zsid = $_POST['zsid'];
|
||||
}
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_noten_zusammenstellung_zuord WHERE zsid=$zsid");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_noten_zus_saenger_zuord WHERE zsid= $zsid");
|
||||
$stmt3 = $db->query("DELETE FROM jumi_noten_zusammenstellung WHERE zsid= $zsid");
|
||||
if ($stmt1 and $stmt2 and $stmt3) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Die Rolle wurde gelöscht!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die Rolle wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
<?php
|
||||
require_once("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'notenbuchsave') {
|
||||
if (isset($_POST['notenbuch'])) {
|
||||
$notenbuch = $_POST['notenbuch'];
|
||||
}
|
||||
if (isset($_POST['var_checkliz'])) {
|
||||
$var_checkliz = $_POST['var_checkliz'];
|
||||
}
|
||||
if (isset($_POST['anz_lizenz'])) {
|
||||
$anz_lizenz = $_POST['anz_lizenz'];
|
||||
}
|
||||
|
||||
if (isset($var_checkliz)) {
|
||||
if ($var_checkliz == '1') {
|
||||
$checkliz = '1';
|
||||
} else {
|
||||
$checkliz = '0';
|
||||
}
|
||||
} else {
|
||||
$checkliz = '0';
|
||||
}
|
||||
|
||||
$db = dbconnect();
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_noten_zusammenstellung WHERE upper(bezeichnung)=upper('$notenbuch')");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
if ($notenbuch == '') { //verschlüsseltes Passwort überprüfen
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Notenbuchname darf nicht leer sein.</div>|***|error';
|
||||
exit;
|
||||
} else if ($row['Anz'] > 0) { //verschlüsseltes Passwort überprüfen
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Notenbuchname ist bereits vorhanden.</div>|***|error';
|
||||
exit;
|
||||
} else {
|
||||
|
||||
$sql1 = $db->query("INSERT INTO jumi_noten_zusammenstellung ( bezeichnung, lizenzpflicht, anzahl_lizenz) VALUES ( '$notenbuch', '$checkliz', $anz_lizenz)");
|
||||
if ($sql1) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Das Notenbuch wurde angelegt!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das Notenbuch wurde nicht angelegt: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'notenbuchupdate') {
|
||||
if (isset($_POST['notenbuch'])) {
|
||||
$notenbuch = $_POST['notenbuch'];
|
||||
}
|
||||
if (isset($_POST['var_checkliz'])) {
|
||||
$var_checkliz = $_POST['var_checkliz'];
|
||||
}
|
||||
if (isset($_POST['anz_lizenz'])) {
|
||||
$anz_lizenz = $_POST['anz_lizenz'];
|
||||
}
|
||||
if (isset($_POST['zsid'])) {
|
||||
$zsid = $_POST['zsid'];
|
||||
}
|
||||
|
||||
if (isset($var_checkliz)) {
|
||||
if ($var_checkliz == '1') {
|
||||
$checkliz = '1';
|
||||
} else {
|
||||
$checkliz = '0';
|
||||
$anz_lizenz = '0';
|
||||
}
|
||||
} else {
|
||||
$checkliz = '0';
|
||||
$anz_lizenz = '0';
|
||||
}
|
||||
|
||||
if ($notenbuch == '') { //verschlüsseltes Passwort überprüfen
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Notenbuchname darf nicht leer sein.</div>|***|error';
|
||||
exit;
|
||||
} else {
|
||||
$sql1 = $db->query("UPDATE jumi_noten_zusammenstellung
|
||||
SET bezeichnung ='$notenbuch'
|
||||
,lizenzpflicht='$checkliz'
|
||||
,anzahl_lizenz=$anz_lizenz
|
||||
WHERE zsid = $zsid
|
||||
");
|
||||
|
||||
if ($sql1) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Das Notenbuch wurde geändert!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das Notenbuch wurde nicht geändert: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'editNotenbuch') {
|
||||
if (isset($_POST['zsid'])) {
|
||||
$zsid = $_POST['zsid'];
|
||||
}
|
||||
$result = $db->query("SELECT bezeichnung, lizenzpflicht, anzahl_lizenz FROM jumi_noten_zusammenstellung WHERE zsid=$zsid");
|
||||
$row = $result->fetch_array();
|
||||
echo json_encode($row);
|
||||
|
||||
}
|
||||
|
||||
if ($function == 'erfzuordnung') {
|
||||
if (isset($_POST['jndid'])) {
|
||||
$jndid = $_POST['jndid'];
|
||||
}
|
||||
if (isset($_POST['zsid'])) {
|
||||
$zsid = $_POST['zsid'];
|
||||
}
|
||||
|
||||
$db = dbconnect();
|
||||
$sql1 = $db->query("INSERT INTO jumi_noten_zusammenstellung_zuord ( jndid, zsid) VALUES ( $jndid, $zsid )");
|
||||
if ($sql1) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Die Noten wurden zugewiesen!</div>|***|success|***|' . $jndid;
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die Noten wurden nicht zugewiesen: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'delzuordnung') {
|
||||
if (isset($_POST['jndid'])) {
|
||||
$jndid = $_POST['jndid'];
|
||||
}
|
||||
if (isset($_POST['zsid'])) {
|
||||
$zsid = $_POST['zsid'];
|
||||
}
|
||||
|
||||
$sql1 = $db->query("DELETE FROM jumi_noten_zusammenstellung_zuord WHERE jndid='$jndid' AND zsid='$zsid'");
|
||||
if ($sql1) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Die Noten wurden entfernt!</div>|***|success|***|' . $jndid;
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die Noten wurdne nicht entfernt: DELETE Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'erfNotenUser') {
|
||||
if (isset($_POST['zsid'])) {
|
||||
$zsid = $_POST['zsid'];
|
||||
}
|
||||
if (isset($_POST['csid'])) {
|
||||
$csid = $_POST['csid'];
|
||||
}
|
||||
|
||||
$db = dbconnect();
|
||||
$sql1 = $db->query("INSERT INTO jumi_noten_zus_saenger_zuord ( zsid, csid) VALUES ( $zsid, $csid )");
|
||||
if ($sql1) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Der Benutzer wurde zugewiesen!</div>|***|success|***|' . $zsid;
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Benutzer wurde nicht zugewiesen: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'delNotenUser') {
|
||||
if (isset($_POST['zsid'])) {
|
||||
$zsid = $_POST['zsid'];
|
||||
}
|
||||
if (isset($_POST['csid'])) {
|
||||
$csid = $_POST['csid'];
|
||||
}
|
||||
|
||||
$sql1 = $db->query("DELETE FROM jumi_noten_zus_saenger_zuord WHERE zsid='$zsid' AND csid='$csid'");
|
||||
if ($sql1) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Der Benutzer wurde gelöscht!</div>|***|success|***|' . $zsid;
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Benutzer wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'delZusammenstellung') {
|
||||
if (isset($_POST['zsid'])) {
|
||||
$zsid = $_POST['zsid'];
|
||||
}
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_noten_zusammenstellung_zuord WHERE zsid=$zsid");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_noten_zus_saenger_zuord WHERE zsid= $zsid");
|
||||
$stmt3 = $db->query("DELETE FROM jumi_noten_zusammenstellung WHERE zsid= $zsid");
|
||||
if ($stmt1 and $stmt2 and $stmt3) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Die Rolle wurde gelöscht!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die Rolle wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
?>
|
||||
@ -1,344 +1,344 @@
|
||||
<?php
|
||||
require_once ("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'save_with_files')
|
||||
{
|
||||
|
||||
if (isset($_POST) && $_SERVER['REQUEST_METHOD'] == "POST")
|
||||
{
|
||||
## Dieses Script wird für jede Datei einzeln aufgerufen durch vpb_uploader.js. Bei 3 Dateien, 3x
|
||||
$titel = $_POST['titel'];
|
||||
$liednr = $_POST['liednr'];
|
||||
$verlag = $_POST['verlag'];
|
||||
#csid gesetzt, wenn Member bearbeitet wird
|
||||
$jndid_edit = $_POST['jndid_edit'];
|
||||
$anz_lizenzen = $_POST['anz_lizenzen'];
|
||||
$streamlizenz = $_POST['streamlizenz'];
|
||||
|
||||
if (isset($streamlizenz))
|
||||
{
|
||||
if ($streamlizenz == '1')
|
||||
{
|
||||
$streamlizenz = '1';
|
||||
}
|
||||
else
|
||||
{
|
||||
$streamlizenz = '0';
|
||||
}
|
||||
}
|
||||
else
|
||||
{
|
||||
$streamlizenz = '0';
|
||||
}
|
||||
$datum_file = date("Ymd_His_");
|
||||
#$vpb_file_name = strip_tags($_FILES['upload_file']['name']); //File Name
|
||||
$vpb_file_name = str_replace(array(
|
||||
"ä",
|
||||
"ö",
|
||||
"ü",
|
||||
"ß",
|
||||
"Ä",
|
||||
"Ö",
|
||||
"Ü",
|
||||
" "
|
||||
) , array(
|
||||
"ae",
|
||||
"oe",
|
||||
"ue",
|
||||
"ss",
|
||||
"Ae",
|
||||
"Oe",
|
||||
"Ue",
|
||||
"_"
|
||||
) , $_FILES['upload_file']['name']);
|
||||
$originalname = $_FILES['upload_file']['name'];
|
||||
$vpb_file_name = $datum_file . $vpb_file_name;
|
||||
$vpb_file_id = strip_tags($_POST['upload_file_ids']); // File id is gotten from the file name
|
||||
$vpb_file_size = $_FILES['upload_file']['size']; // File Size
|
||||
$vpb_uploaded_files_location = '../media/file_upload/noten/'; //This is the directory where uploaded files are saved on your server
|
||||
$vpb_final_location = $vpb_uploaded_files_location . $vpb_file_name; //Directory to save file plus the file to be saved
|
||||
//Without Validation and does not save filenames in the database
|
||||
|
||||
|
||||
# Wenn Verlag nicht vorhanden, dann neu anlegen
|
||||
$result_vg = $db->query("SELECT vid
|
||||
FROM jumi_noten_verlag
|
||||
WHERE bezeichnung = '$verlag'
|
||||
LIMIT 1
|
||||
");
|
||||
$row_vg = $result_vg->fetch_array();
|
||||
if($row_vg['vid'] == ''){
|
||||
$sql1 = $db->query("INSERT INTO jumi_noten_verlag ( bezeichnung ) VALUES ( '$verlag' )");
|
||||
$vid = $db->insert_id;
|
||||
}else{
|
||||
$vid=$row_vg['vid'];
|
||||
}
|
||||
|
||||
if (move_uploaded_file(strip_tags($_FILES['upload_file']['tmp_name']) , $vpb_final_location))
|
||||
{
|
||||
$datum = date("Y-m-d H:i:s");
|
||||
|
||||
$result = $db->query("SELECT jndid
|
||||
FROM jumi_noten_daten
|
||||
WHERE titel = '$titel'
|
||||
AND liednr = '$liednr'
|
||||
AND vid = '$vid'
|
||||
AND anz_lizenzen = '$anz_lizenzen'
|
||||
AND streamlizenz = '$streamlizenz'
|
||||
");
|
||||
$row = $result->fetch_array();
|
||||
if ($row['jndid'] == '' AND $jndid_edit == '-1')
|
||||
{
|
||||
$sql1 = $db->query("INSERT INTO jumi_noten_daten ( titel
|
||||
, liednr
|
||||
, vid
|
||||
, anz_lizenzen
|
||||
, streamlizenz
|
||||
, uid
|
||||
, datum
|
||||
)
|
||||
VALUES
|
||||
( '$titel'
|
||||
, '$liednr'
|
||||
, '$vid'
|
||||
, '$anz_lizenzen'
|
||||
, '$streamlizenz'
|
||||
, $uid
|
||||
, '$datum'
|
||||
)
|
||||
");
|
||||
$jndid = $db->insert_id;
|
||||
}
|
||||
elseif($jndid_edit != '-1')
|
||||
{
|
||||
$sql1 = $db->query( "UPDATE jumi_noten_daten
|
||||
SET titel = '$titel'
|
||||
,liednr = '$liednr'
|
||||
,vid = '$vid'
|
||||
,anz_lizenzen = '$anz_lizenzen'
|
||||
,streamlizenz = '$streamlizenz'
|
||||
,uid = '$uid'
|
||||
,datum = '$datum'
|
||||
WHERE jndid_ = $jndid_edit
|
||||
" );
|
||||
$jndid = $jndid_edit;
|
||||
|
||||
# Nicht verwendeter Verlag löschen
|
||||
$query = "SELECT vid FROM jumi_noten_verlag a WHERE vid NOT IN (SELECT vid FROM jumi_noten_daten b WHERE a.vid=b.vid); ";
|
||||
$result = $db->query( $query)
|
||||
or die ("Cannot execute query1");
|
||||
|
||||
while ($row = $result->fetch_array()){
|
||||
$de11 = $db->query( "DELETE FROM jumi_noten_verlag WHERE vid=$row[vid]" );
|
||||
}
|
||||
|
||||
|
||||
|
||||
}
|
||||
else
|
||||
{
|
||||
$jndid = $row['jndid'];
|
||||
}
|
||||
|
||||
$sql2 = $db->query("INSERT INTO jumi_noten_uploads ( jndid
|
||||
, filename
|
||||
, originalname
|
||||
, uid
|
||||
, datum
|
||||
)
|
||||
VALUES
|
||||
( $jndid
|
||||
, '$vpb_final_location'
|
||||
, '$originalname'
|
||||
, $uid
|
||||
, '$datum'
|
||||
)
|
||||
");
|
||||
//Display the file id
|
||||
if ($sql2)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Noten wurden angelegt!</div>|***|success|***|' . $vpb_file_id;
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Noten wurden nicht angelegt: Insert Fehler Datenbank.</div>|***|error|***|' . $vpb_file_id;
|
||||
exit;
|
||||
}
|
||||
|
||||
}
|
||||
else
|
||||
{
|
||||
//Display general system error
|
||||
echo 'general_system_error';
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'save_without_files')
|
||||
{
|
||||
$titel = $_POST['titel'];
|
||||
$liednr = $_POST['liednr'];
|
||||
$verlag = $_POST['verlag'];
|
||||
$jndid_edit = $_POST['jndid_edit'];
|
||||
$anz_lizenzen = $_POST['anz_lizenzen'];
|
||||
$streamlizenz = $_POST['streamlizenz'];
|
||||
|
||||
if (isset($streamlizenz))
|
||||
{
|
||||
if ($streamlizenz == '1')
|
||||
{
|
||||
$streamlizenz = '1';
|
||||
}
|
||||
else
|
||||
{
|
||||
$streamlizenz = '0';
|
||||
}
|
||||
}
|
||||
else
|
||||
{
|
||||
$streamlizenz = '0';
|
||||
}
|
||||
|
||||
$db = dbconnect();
|
||||
|
||||
# Wenn Verlag nicht vorhanden, dann neu anlegen
|
||||
$result_vg = $db->query("SELECT vid
|
||||
FROM jumi_noten_verlag
|
||||
WHERE bezeichnung = '$verlag'
|
||||
LIMIT 1
|
||||
");
|
||||
$row_vg = $result_vg->fetch_array();
|
||||
if($row_vg['vid'] == ''){
|
||||
$sql1 = $db->query("INSERT INTO jumi_noten_verlag ( bezeichnung ) VALUES ( '$verlag' )");
|
||||
$vid = $db->insert_id;
|
||||
}else{
|
||||
$vid=$row_vg['vid'];
|
||||
}
|
||||
|
||||
|
||||
$datum = date("Y-m-d H:i:s");
|
||||
if($jndid_edit == '-1'){
|
||||
$sql1 = $db->query("INSERT INTO jumi_noten_daten ( titel
|
||||
, liednr
|
||||
, vid
|
||||
, anz_lizenzen
|
||||
, streamlizenz
|
||||
, uid
|
||||
, datum
|
||||
)
|
||||
VALUES
|
||||
( '$titel'
|
||||
, '$liednr'
|
||||
, '$vid'
|
||||
, '$anz_lizenzen'
|
||||
, '$streamlizenz'
|
||||
, $uid
|
||||
, '$datum'
|
||||
)
|
||||
");
|
||||
if ($sql1)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Noten wurden bearbeitet!</div>|***|success|***|';
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Noten wurden nicht bearbeitet: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}else{
|
||||
$sql1 = $db->query( "UPDATE jumi_noten_daten
|
||||
SET titel = '$titel'
|
||||
,liednr = '$liednr'
|
||||
,vid = '$vid'
|
||||
,anz_lizenzen = '$anz_lizenzen'
|
||||
,streamlizenz = '$streamlizenz'
|
||||
,uid = '$uid'
|
||||
,datum = '$datum'
|
||||
WHERE jndid = $jndid_edit
|
||||
" );
|
||||
|
||||
# Nicht verwendeter Verlag löschen
|
||||
$query = "SELECT vid FROM jumi_noten_verlag a WHERE vid NOT IN (SELECT vid FROM jumi_noten_daten b WHERE a.vid=b.vid); ";
|
||||
$result = $db->query( $query)
|
||||
or die ("Cannot execute query1");
|
||||
|
||||
while ($row = $result->fetch_array()){
|
||||
$de11 = $db->query( "DELETE FROM jumi_noten_verlag WHERE vid=$row[vid]" );
|
||||
}
|
||||
|
||||
|
||||
if ($sql1)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Noten wurden bearbeitet!</div>|***|success|***|';
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Noten wurden nicht bearbeitet: Update Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'delNotenFile') {
|
||||
if (isset($_POST['id'])) {
|
||||
$id = $_POST['id'];
|
||||
}
|
||||
|
||||
$result0 = $db->query("SELECT filename, jndid
|
||||
FROM jumi_noten_uploads
|
||||
WHERE id = $id;");
|
||||
$row0 = $result0->fetch_array();
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_noten_uploads WHERE id= $id");
|
||||
$del = unlink($row0['filename']);
|
||||
|
||||
if ($stmt1 AND $del) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Die Datei wurde gelöscht!</div>|***|success|***|'.$row0['jndid'];
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die Datei wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|success|***|'.$row0['jndid'];
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'delNoten') {
|
||||
if (isset($_POST['jndid'])) {
|
||||
$jndid = $_POST['jndid'];
|
||||
}
|
||||
|
||||
$query = "SELECT id, filename, originalname FROM jumi_noten_uploads WHERE jndid='$jndid' ORDER BY datum DESC";
|
||||
$result = $db->query( $query)
|
||||
or die ("Cannot execute query1");
|
||||
|
||||
while ($row = $result->fetch_array()){
|
||||
$del = unlink($row['filename']);
|
||||
}
|
||||
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_noten_uploads WHERE jndid = $jndid;");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_noten_daten WHERE jndid = $jndid");
|
||||
|
||||
# Nicht verwendeter Verlag löschen
|
||||
$query = "SELECT vid FROM jumi_noten_verlag a WHERE vid NOT IN (SELECT vid FROM jumi_noten_daten b WHERE a.vid=b.vid); ";
|
||||
$result = $db->query( $query)
|
||||
or die ("Cannot execute query1");
|
||||
|
||||
while ($row = $result->fetch_array()){
|
||||
$de11 = $db->query( "DELETE FROM jumi_noten_verlag WHERE vid=$row[vid]" );
|
||||
}
|
||||
|
||||
|
||||
if ($stmt1 AND $stmt2) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> SägerIn wurde gelöscht!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> SägerIn wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
<?php
|
||||
require_once ("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'save_with_files')
|
||||
{
|
||||
|
||||
if (isset($_POST) && $_SERVER['REQUEST_METHOD'] == "POST")
|
||||
{
|
||||
## Dieses Script wird für jede Datei einzeln aufgerufen durch vpb_uploader.js. Bei 3 Dateien, 3x
|
||||
$titel = $_POST['titel'];
|
||||
$liednr = $_POST['liednr'];
|
||||
$verlag = $_POST['verlag'];
|
||||
#csid gesetzt, wenn Member bearbeitet wird
|
||||
$jndid_edit = $_POST['jndid_edit'];
|
||||
$anz_lizenzen = $_POST['anz_lizenzen'];
|
||||
$streamlizenz = $_POST['streamlizenz'];
|
||||
|
||||
if (isset($streamlizenz))
|
||||
{
|
||||
if ($streamlizenz == '1')
|
||||
{
|
||||
$streamlizenz = '1';
|
||||
}
|
||||
else
|
||||
{
|
||||
$streamlizenz = '0';
|
||||
}
|
||||
}
|
||||
else
|
||||
{
|
||||
$streamlizenz = '0';
|
||||
}
|
||||
$datum_file = date("Ymd_His_");
|
||||
#$vpb_file_name = strip_tags($_FILES['upload_file']['name']); //File Name
|
||||
$vpb_file_name = str_replace(array(
|
||||
"ä",
|
||||
"ö",
|
||||
"ü",
|
||||
"ß",
|
||||
"Ä",
|
||||
"Ö",
|
||||
"Ü",
|
||||
" "
|
||||
) , array(
|
||||
"ae",
|
||||
"oe",
|
||||
"ue",
|
||||
"ss",
|
||||
"Ae",
|
||||
"Oe",
|
||||
"Ue",
|
||||
"_"
|
||||
) , $_FILES['upload_file']['name']);
|
||||
$originalname = $_FILES['upload_file']['name'];
|
||||
$vpb_file_name = $datum_file . $vpb_file_name;
|
||||
$vpb_file_id = strip_tags($_POST['upload_file_ids']); // File id is gotten from the file name
|
||||
$vpb_file_size = $_FILES['upload_file']['size']; // File Size
|
||||
$vpb_uploaded_files_location = '../media/file_upload/noten/'; //This is the directory where uploaded files are saved on your server
|
||||
$vpb_final_location = $vpb_uploaded_files_location . $vpb_file_name; //Directory to save file plus the file to be saved
|
||||
//Without Validation and does not save filenames in the database
|
||||
|
||||
|
||||
# Wenn Verlag nicht vorhanden, dann neu anlegen
|
||||
$result_vg = $db->query("SELECT vid
|
||||
FROM jumi_noten_verlag
|
||||
WHERE bezeichnung = '$verlag'
|
||||
LIMIT 1
|
||||
");
|
||||
$row_vg = $result_vg->fetch_array();
|
||||
if($row_vg['vid'] == ''){
|
||||
$sql1 = $db->query("INSERT INTO jumi_noten_verlag ( bezeichnung ) VALUES ( '$verlag' )");
|
||||
$vid = $db->insert_id;
|
||||
}else{
|
||||
$vid=$row_vg['vid'];
|
||||
}
|
||||
|
||||
if (move_uploaded_file(strip_tags($_FILES['upload_file']['tmp_name']) , $vpb_final_location))
|
||||
{
|
||||
$datum = date("Y-m-d H:i:s");
|
||||
|
||||
$result = $db->query("SELECT jndid
|
||||
FROM jumi_noten_daten
|
||||
WHERE titel = '$titel'
|
||||
AND liednr = '$liednr'
|
||||
AND vid = '$vid'
|
||||
AND anz_lizenzen = '$anz_lizenzen'
|
||||
AND streamlizenz = '$streamlizenz'
|
||||
");
|
||||
$row = $result->fetch_array();
|
||||
if ($row['jndid'] == '' AND $jndid_edit == '-1')
|
||||
{
|
||||
$sql1 = $db->query("INSERT INTO jumi_noten_daten ( titel
|
||||
, liednr
|
||||
, vid
|
||||
, anz_lizenzen
|
||||
, streamlizenz
|
||||
, uid
|
||||
, datum
|
||||
)
|
||||
VALUES
|
||||
( '$titel'
|
||||
, '$liednr'
|
||||
, '$vid'
|
||||
, '$anz_lizenzen'
|
||||
, '$streamlizenz'
|
||||
, $uid
|
||||
, '$datum'
|
||||
)
|
||||
");
|
||||
$jndid = $db->insert_id;
|
||||
}
|
||||
elseif($jndid_edit != '-1')
|
||||
{
|
||||
$sql1 = $db->query( "UPDATE jumi_noten_daten
|
||||
SET titel = '$titel'
|
||||
,liednr = '$liednr'
|
||||
,vid = '$vid'
|
||||
,anz_lizenzen = '$anz_lizenzen'
|
||||
,streamlizenz = '$streamlizenz'
|
||||
,uid = '$uid'
|
||||
,datum = '$datum'
|
||||
WHERE jndid_ = $jndid_edit
|
||||
" );
|
||||
$jndid = $jndid_edit;
|
||||
|
||||
# Nicht verwendeter Verlag löschen
|
||||
$query = "SELECT vid FROM jumi_noten_verlag a WHERE vid NOT IN (SELECT vid FROM jumi_noten_daten b WHERE a.vid=b.vid); ";
|
||||
$result = $db->query( $query)
|
||||
or die ("Cannot execute query1");
|
||||
|
||||
while ($row = $result->fetch_array()){
|
||||
$de11 = $db->query( "DELETE FROM jumi_noten_verlag WHERE vid=$row[vid]" );
|
||||
}
|
||||
|
||||
|
||||
|
||||
}
|
||||
else
|
||||
{
|
||||
$jndid = $row['jndid'];
|
||||
}
|
||||
|
||||
$sql2 = $db->query("INSERT INTO jumi_noten_uploads ( jndid
|
||||
, filename
|
||||
, originalname
|
||||
, uid
|
||||
, datum
|
||||
)
|
||||
VALUES
|
||||
( $jndid
|
||||
, '$vpb_final_location'
|
||||
, '$originalname'
|
||||
, $uid
|
||||
, '$datum'
|
||||
)
|
||||
");
|
||||
//Display the file id
|
||||
if ($sql2)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Noten wurden angelegt!</div>|***|success|***|' . $vpb_file_id;
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Noten wurden nicht angelegt: Insert Fehler Datenbank.</div>|***|error|***|' . $vpb_file_id;
|
||||
exit;
|
||||
}
|
||||
|
||||
}
|
||||
else
|
||||
{
|
||||
//Display general system error
|
||||
echo 'general_system_error';
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'save_without_files')
|
||||
{
|
||||
$titel = $_POST['titel'];
|
||||
$liednr = $_POST['liednr'];
|
||||
$verlag = $_POST['verlag'];
|
||||
$jndid_edit = $_POST['jndid_edit'];
|
||||
$anz_lizenzen = $_POST['anz_lizenzen'];
|
||||
$streamlizenz = $_POST['streamlizenz'];
|
||||
|
||||
if (isset($streamlizenz))
|
||||
{
|
||||
if ($streamlizenz == '1')
|
||||
{
|
||||
$streamlizenz = '1';
|
||||
}
|
||||
else
|
||||
{
|
||||
$streamlizenz = '0';
|
||||
}
|
||||
}
|
||||
else
|
||||
{
|
||||
$streamlizenz = '0';
|
||||
}
|
||||
|
||||
$db = dbconnect();
|
||||
|
||||
# Wenn Verlag nicht vorhanden, dann neu anlegen
|
||||
$result_vg = $db->query("SELECT vid
|
||||
FROM jumi_noten_verlag
|
||||
WHERE bezeichnung = '$verlag'
|
||||
LIMIT 1
|
||||
");
|
||||
$row_vg = $result_vg->fetch_array();
|
||||
if($row_vg['vid'] == ''){
|
||||
$sql1 = $db->query("INSERT INTO jumi_noten_verlag ( bezeichnung ) VALUES ( '$verlag' )");
|
||||
$vid = $db->insert_id;
|
||||
}else{
|
||||
$vid=$row_vg['vid'];
|
||||
}
|
||||
|
||||
|
||||
$datum = date("Y-m-d H:i:s");
|
||||
if($jndid_edit == '-1'){
|
||||
$sql1 = $db->query("INSERT INTO jumi_noten_daten ( titel
|
||||
, liednr
|
||||
, vid
|
||||
, anz_lizenzen
|
||||
, streamlizenz
|
||||
, uid
|
||||
, datum
|
||||
)
|
||||
VALUES
|
||||
( '$titel'
|
||||
, '$liednr'
|
||||
, '$vid'
|
||||
, '$anz_lizenzen'
|
||||
, '$streamlizenz'
|
||||
, $uid
|
||||
, '$datum'
|
||||
)
|
||||
");
|
||||
if ($sql1)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Noten wurden bearbeitet!</div>|***|success|***|';
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Noten wurden nicht bearbeitet: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}else{
|
||||
$sql1 = $db->query( "UPDATE jumi_noten_daten
|
||||
SET titel = '$titel'
|
||||
,liednr = '$liednr'
|
||||
,vid = '$vid'
|
||||
,anz_lizenzen = '$anz_lizenzen'
|
||||
,streamlizenz = '$streamlizenz'
|
||||
,uid = '$uid'
|
||||
,datum = '$datum'
|
||||
WHERE jndid = $jndid_edit
|
||||
" );
|
||||
|
||||
# Nicht verwendeter Verlag löschen
|
||||
$query = "SELECT vid FROM jumi_noten_verlag a WHERE vid NOT IN (SELECT vid FROM jumi_noten_daten b WHERE a.vid=b.vid); ";
|
||||
$result = $db->query( $query)
|
||||
or die ("Cannot execute query1");
|
||||
|
||||
while ($row = $result->fetch_array()){
|
||||
$de11 = $db->query( "DELETE FROM jumi_noten_verlag WHERE vid=$row[vid]" );
|
||||
}
|
||||
|
||||
|
||||
if ($sql1)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Noten wurden bearbeitet!</div>|***|success|***|';
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Noten wurden nicht bearbeitet: Update Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'delNotenFile') {
|
||||
if (isset($_POST['id'])) {
|
||||
$id = $_POST['id'];
|
||||
}
|
||||
|
||||
$result0 = $db->query("SELECT filename, jndid
|
||||
FROM jumi_noten_uploads
|
||||
WHERE id = $id;");
|
||||
$row0 = $result0->fetch_array();
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_noten_uploads WHERE id= $id");
|
||||
$del = unlink($row0['filename']);
|
||||
|
||||
if ($stmt1 AND $del) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Die Datei wurde gelöscht!</div>|***|success|***|'.$row0['jndid'];
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die Datei wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|success|***|'.$row0['jndid'];
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'delNoten') {
|
||||
if (isset($_POST['jndid'])) {
|
||||
$jndid = $_POST['jndid'];
|
||||
}
|
||||
|
||||
$query = "SELECT id, filename, originalname FROM jumi_noten_uploads WHERE jndid='$jndid' ORDER BY datum DESC";
|
||||
$result = $db->query( $query)
|
||||
or die ("Cannot execute query1");
|
||||
|
||||
while ($row = $result->fetch_array()){
|
||||
$del = unlink($row['filename']);
|
||||
}
|
||||
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_noten_uploads WHERE jndid = $jndid;");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_noten_daten WHERE jndid = $jndid");
|
||||
|
||||
# Nicht verwendeter Verlag löschen
|
||||
$query = "SELECT vid FROM jumi_noten_verlag a WHERE vid NOT IN (SELECT vid FROM jumi_noten_daten b WHERE a.vid=b.vid); ";
|
||||
$result = $db->query( $query)
|
||||
or die ("Cannot execute query1");
|
||||
|
||||
while ($row = $result->fetch_array()){
|
||||
$de11 = $db->query( "DELETE FROM jumi_noten_verlag WHERE vid=$row[vid]" );
|
||||
}
|
||||
|
||||
|
||||
if ($stmt1 AND $stmt2) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> SägerIn wurde gelöscht!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> SägerIn wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
?>
|
||||
@ -1,30 +1,30 @@
|
||||
<?php
|
||||
require_once("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'saveParameter') {
|
||||
$inputs = $_POST['inputs'];
|
||||
$inputs = json_decode(stripslashes($_POST['inputs']),true);
|
||||
|
||||
$error = 0;
|
||||
foreach($inputs as $parameters){
|
||||
$pid = $parameters['name'];
|
||||
$wert = $parameters['value'];
|
||||
|
||||
$sql1 = $db->query( "UPDATE jumi_parameter
|
||||
SET wert = '$wert'
|
||||
WHERE pid = $pid
|
||||
" );
|
||||
if(!$sql1){
|
||||
$error++;
|
||||
}
|
||||
}
|
||||
if($error == 0){
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Parameter wurden aktualisiert.</div>|***|success';
|
||||
}else{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Parameter wurde nicht aktualisiert.</div>|***|success';
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
<?php
|
||||
require_once("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'saveParameter') {
|
||||
$inputs = $_POST['inputs'];
|
||||
$inputs = json_decode(stripslashes($_POST['inputs']),true);
|
||||
|
||||
$error = 0;
|
||||
foreach($inputs as $parameters){
|
||||
$pid = $parameters['name'];
|
||||
$wert = $parameters['value'];
|
||||
|
||||
$sql1 = $db->query( "UPDATE jumi_parameter
|
||||
SET wert = '$wert'
|
||||
WHERE pid = $pid
|
||||
" );
|
||||
if(!$sql1){
|
||||
$error++;
|
||||
}
|
||||
}
|
||||
if($error == 0){
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Parameter wurden aktualisiert.</div>|***|success';
|
||||
}else{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Parameter wurde nicht aktualisiert.</div>|***|success';
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
?>
|
||||
109
controller/admin_phpmailer.php
Normal file
109
controller/admin_phpmailer.php
Normal file
@ -0,0 +1,109 @@
|
||||
<?php
|
||||
error_reporting(E_ALL);
|
||||
require_once("../config.inc.php");
|
||||
#require('../phpmailer/class.phpmailer.php');
|
||||
|
||||
use PHPMailer\PHPMailer\PHPMailer;
|
||||
use PHPMailer\PHPMailer\Exception;
|
||||
|
||||
require '../PHPMailer6/src/Exception.php';
|
||||
require '../PHPMailer6/src/PHPMailer.php';
|
||||
require '../PHPMailer6/src/SMTP.php';
|
||||
|
||||
$empfaenger = $_POST['empfaenger'];
|
||||
# $empfaenger = "S-1";
|
||||
$mail_bcc = array();
|
||||
|
||||
for ($i = 0; $i < sizeof($empfaenger); $i++) {
|
||||
$trenner = explode("-",$empfaenger[$i]);
|
||||
|
||||
|
||||
if($trenner[0] == 'S'){
|
||||
$query = "select mail
|
||||
from jumi_admin a, jumi_admin_rollen_user_zuord b
|
||||
where a.uid=b.uid
|
||||
and b.rid=$trenner[1]";
|
||||
|
||||
$result = $db->query($query) or die("Cannot execute query");
|
||||
|
||||
while ($row = $result->fetch_array()) {
|
||||
array_push($mail_bcc, "$row[mail]");
|
||||
}
|
||||
}
|
||||
|
||||
if($trenner[0] == 'C'){
|
||||
$query1 = "select mail
|
||||
from jumi_chor_saenger";
|
||||
|
||||
$result1 = $db->query($query1) or die("Cannot execute query1");
|
||||
|
||||
while ($row1 = $result1->fetch_array()) {
|
||||
array_push($mail_bcc, "$row1[mail]");
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
function save_mail($mail)
|
||||
{
|
||||
#$providerMail = 'Gmail';
|
||||
#$providerMailSentFolder = 'Gesendete Objekte';//You can change 'Sent Mail' to any folder
|
||||
#$providerMailImap = 'imap.ionos.de';
|
||||
#$path = "{".$providerMailImap.":993/imap/ssl}[".$providerMail."]/".$providerMailSentFolder;
|
||||
$path = "{imap.ionos.de:993/imap/ssl}INBOX";
|
||||
//Tell your server to open an IMAP connection
|
||||
//using the same username and password as you used for SMTP
|
||||
$imapStream = imap_open($path, $mail->Username, $mail->Password);
|
||||
#$result = imap_append($imapStream, $path, $mail->getSentMIMEMessage());
|
||||
#imap_close($imapStream);
|
||||
#return true;
|
||||
}
|
||||
|
||||
$mail = new PHPMailer();
|
||||
|
||||
try{
|
||||
//Server settings
|
||||
$mail->isSMTP(); //Send using SMTP
|
||||
$mail->SMTPDebug = 0;
|
||||
$mail->Host = 'smtp.ionos.de'; //Set the SMTP server to send through
|
||||
$mail->SMTPAuth = true; //Enable SMTP authentication
|
||||
$mail->Username = 'info@ju-and-mi.de'; //SMTP username
|
||||
$mail->Password = "!S3ge1gP"; //SMTP password
|
||||
$mail->Port = 465; //TCP port to connect to; use 587 if you have set `SMTPSecure = PHPMailer::ENCRYPTION_STARTTLS`
|
||||
$mail->SMTPSecure = PHPMailer::ENCRYPTION_STARTTLS;
|
||||
$mail->SMTPSecure = PHPMailer::ENCRYPTION_SMTPS;
|
||||
|
||||
//Recipients
|
||||
//$mail->SetFrom($_POST["userEmail"], $_POST["userName"]);
|
||||
//$mail->AddReplyTo($_POST["userEmail"], $_POST["userName"]);
|
||||
$mail->SetFrom("info@ju-and-mi.de", "Info JU & MI");
|
||||
$mail->AddAddress("info@ju-and-mi.de", "Info JU & MI");
|
||||
$mail->AddReplyTo("info@ju-and-mi.de", "Info JU & MI");
|
||||
//$mail->addCC('cc@example.com');
|
||||
# foreach($mail_bcc as $empfbcc){
|
||||
# $mail->addBCC("$empfbcc");
|
||||
# }
|
||||
|
||||
|
||||
//Attachments
|
||||
if(sizeof($_FILES["attachment"]["name"]) > 0) {
|
||||
foreach ($_FILES["attachment"]["name"] as $k => $v) {
|
||||
$mail->AddAttachment( $_FILES["attachment"]["tmp_name"][$k], $_FILES["attachment"]["name"][$k] );
|
||||
}
|
||||
}
|
||||
|
||||
//Content
|
||||
$mail->isHTML(true); //Set email format to HTML
|
||||
$mail->Subject = $_POST["subject"];
|
||||
$mail->Body = $_POST["content"];
|
||||
//$mail->AltBody = 'This is the body in plain text for non-HTML mail clients';
|
||||
|
||||
$mail->send();
|
||||
if (save_mail($mail)) {
|
||||
echo "Message saved!";
|
||||
}
|
||||
echo "<p class='success'>Mail Sent Successfully.</p>";
|
||||
} catch (Exception $e) {
|
||||
echo "<p class='error'>Message could not be sent. Mailer Error: {$mail->ErrorInfo}</p>";
|
||||
}
|
||||
|
||||
?>
|
||||
@ -1,149 +1,149 @@
|
||||
<?php
|
||||
require_once("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'rollesave') {
|
||||
if (isset($_POST['rollenname'])) {
|
||||
$rollenname = $_POST['rollenname'];
|
||||
}
|
||||
|
||||
$db = dbconnect();
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_admin_rolle WHERE upper(bezeichnung)=upper('$rollenname')");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
if ($rollenname == ''){ //verschlüsseltes Passwort überprüfen
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Rollenname darf nicht leer sein.</div>|***|error';
|
||||
exit;
|
||||
}else if ($row['Anz'] > 0){ //verschlüsseltes Passwort überprüfen
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Rollenname ist bereits vorhanden.</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
|
||||
$sql1 = $db->query("INSERT INTO jumi_admin_rolle ( bezeichnung ) VALUES ( '$rollenname' )");
|
||||
if($sql1){
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Der Rollenname wurde gespeichert!</div>|***|success';
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Rollenname wurde nicht gespeichert: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if ($function == 'erfzuordnung') {
|
||||
if (isset($_POST['rid'])) {
|
||||
$rid = $_POST['rid'];
|
||||
}
|
||||
if (isset($_POST['meid'])) {
|
||||
$meid = $_POST['meid'];
|
||||
}
|
||||
|
||||
$db = dbconnect();
|
||||
$sql1 = $db->query("INSERT INTO jumi_admin_rollen_rechte_zuord ( rid, meid) VALUES ( $rid, $meid )");
|
||||
if($sql1){
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Das Recht wurde zugewiesen!</div>|***|success|***|'.$rid;
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das Recht wurde nicht zugewiesen: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'delzuordnung') {
|
||||
if (isset($_POST['rid'])) {
|
||||
$rid = $_POST['rid'];
|
||||
}
|
||||
if (isset($_POST['meid'])) {
|
||||
$meid = $_POST['meid'];
|
||||
}
|
||||
|
||||
$sql1 = $db->query("DELETE FROM jumi_admin_rollen_rechte_zuord WHERE rid='$rid' AND meid='$meid'");
|
||||
if($sql1){
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Das Recht wurde gelöscht!</div>|***|success|***|'.$rid;
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das Recht wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if ($function == 'erfuser') {
|
||||
if (isset($_POST['rid'])) {
|
||||
$rid = $_POST['rid'];
|
||||
}
|
||||
if (isset($_POST['uid'])) {
|
||||
$uid = $_POST['uid'];
|
||||
}
|
||||
|
||||
$db = dbconnect();
|
||||
$sql1 = $db->query("INSERT INTO jumi_admin_rollen_user_zuord ( rid, uid) VALUES ( $rid, $uid )");
|
||||
if($sql1){
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Der Benutzer wurde zugewiesen!</div>|***|success|***|'.$rid;
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Benutzer wurde nicht zugewiesen: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'deluser') {
|
||||
if (isset($_POST['rid'])) {
|
||||
$rid = $_POST['rid'];
|
||||
}
|
||||
if (isset($_POST['uid'])) {
|
||||
$uid = $_POST['uid'];
|
||||
}
|
||||
|
||||
$sql1 = $db->query("DELETE FROM jumi_admin_rollen_user_zuord WHERE rid='$rid' AND uid='$uid'");
|
||||
if($sql1){
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Der Benutzer wurde gelöscht!</div>|***|success|***|'.$rid;
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Benutzer wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if ($function == 'delRole') {
|
||||
if (isset($_POST['rid'])) {
|
||||
$rid = $_POST['rid'];
|
||||
}
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_admin_rollen_rechte_zuord WHERE rid= $rid");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_admin_rollen_user_zuord WHERE rid= $rid");
|
||||
$stmt3 = $db->query("DELETE FROM jumi_admin_rolle WHERE rid= $rid");
|
||||
if ($stmt1 AND $stmt2 AND $stmt3) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Die Rolle wurde gelöscht!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die Rolle wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
/*
|
||||
|
||||
if ($function == 'deleteQuestion') {
|
||||
|
||||
$id2 = $_POST['id2'];
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_umfragen_antworten WHERE ufid = $id2");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_umfragen_fragen WHERE ufid = $id2");
|
||||
# ggf. bereis Abstimmergebnisse löschen
|
||||
|
||||
# Sonst werden keine neue Fragen erfasst
|
||||
# unset($_SESSION["umfrageerf_ufid"]);
|
||||
|
||||
|
||||
if ($stmt1 and $stmt2) {
|
||||
echo "Success";
|
||||
} else {
|
||||
echo "Error";
|
||||
}
|
||||
}
|
||||
|
||||
*/
|
||||
<?php
|
||||
require_once("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'rollesave') {
|
||||
if (isset($_POST['rollenname'])) {
|
||||
$rollenname = $_POST['rollenname'];
|
||||
}
|
||||
|
||||
$db = dbconnect();
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_admin_rolle WHERE upper(bezeichnung)=upper('$rollenname')");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
if ($rollenname == ''){ //verschlüsseltes Passwort überprüfen
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Rollenname darf nicht leer sein.</div>|***|error';
|
||||
exit;
|
||||
}else if ($row['Anz'] > 0){ //verschlüsseltes Passwort überprüfen
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Rollenname ist bereits vorhanden.</div>|***|error';
|
||||
exit;
|
||||
}else{
|
||||
|
||||
$sql1 = $db->query("INSERT INTO jumi_admin_rolle ( bezeichnung ) VALUES ( '$rollenname' )");
|
||||
if($sql1){
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Der Rollenname wurde gespeichert!</div>|***|success';
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Rollenname wurde nicht gespeichert: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if ($function == 'erfzuordnung') {
|
||||
if (isset($_POST['rid'])) {
|
||||
$rid = $_POST['rid'];
|
||||
}
|
||||
if (isset($_POST['meid'])) {
|
||||
$meid = $_POST['meid'];
|
||||
}
|
||||
|
||||
$db = dbconnect();
|
||||
$sql1 = $db->query("INSERT INTO jumi_admin_rollen_rechte_zuord ( rid, meid) VALUES ( $rid, $meid )");
|
||||
if($sql1){
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Das Recht wurde zugewiesen!</div>|***|success|***|'.$rid;
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das Recht wurde nicht zugewiesen: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'delzuordnung') {
|
||||
if (isset($_POST['rid'])) {
|
||||
$rid = $_POST['rid'];
|
||||
}
|
||||
if (isset($_POST['meid'])) {
|
||||
$meid = $_POST['meid'];
|
||||
}
|
||||
|
||||
$sql1 = $db->query("DELETE FROM jumi_admin_rollen_rechte_zuord WHERE rid='$rid' AND meid='$meid'");
|
||||
if($sql1){
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Das Recht wurde gelöscht!</div>|***|success|***|'.$rid;
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Das Recht wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if ($function == 'erfuser') {
|
||||
if (isset($_POST['rid'])) {
|
||||
$rid = $_POST['rid'];
|
||||
}
|
||||
if (isset($_POST['uid'])) {
|
||||
$uid = $_POST['uid'];
|
||||
}
|
||||
|
||||
$db = dbconnect();
|
||||
$sql1 = $db->query("INSERT INTO jumi_admin_rollen_user_zuord ( rid, uid) VALUES ( $rid, $uid )");
|
||||
if($sql1){
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Der Benutzer wurde zugewiesen!</div>|***|success|***|'.$rid;
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Benutzer wurde nicht zugewiesen: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'deluser') {
|
||||
if (isset($_POST['rid'])) {
|
||||
$rid = $_POST['rid'];
|
||||
}
|
||||
if (isset($_POST['uid'])) {
|
||||
$uid = $_POST['uid'];
|
||||
}
|
||||
|
||||
$sql1 = $db->query("DELETE FROM jumi_admin_rollen_user_zuord WHERE rid='$rid' AND uid='$uid'");
|
||||
if($sql1){
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Der Benutzer wurde gelöscht!</div>|***|success|***|'.$rid;
|
||||
exit;
|
||||
}else{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Der Benutzer wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if ($function == 'delRole') {
|
||||
if (isset($_POST['rid'])) {
|
||||
$rid = $_POST['rid'];
|
||||
}
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_admin_rollen_rechte_zuord WHERE rid= $rid");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_admin_rollen_user_zuord WHERE rid= $rid");
|
||||
$stmt3 = $db->query("DELETE FROM jumi_admin_rolle WHERE rid= $rid");
|
||||
if ($stmt1 AND $stmt2 AND $stmt3) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Die Rolle wurde gelöscht!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die Rolle wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
/*
|
||||
|
||||
if ($function == 'deleteQuestion') {
|
||||
|
||||
$id2 = $_POST['id2'];
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_umfragen_antworten WHERE ufid = $id2");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_umfragen_fragen WHERE ufid = $id2");
|
||||
# ggf. bereis Abstimmergebnisse löschen
|
||||
|
||||
# Sonst werden keine neue Fragen erfasst
|
||||
# unset($_SESSION["umfrageerf_ufid"]);
|
||||
|
||||
|
||||
if ($stmt1 and $stmt2) {
|
||||
echo "Success";
|
||||
} else {
|
||||
echo "Error";
|
||||
}
|
||||
}
|
||||
|
||||
*/
|
||||
?>
|
||||
@ -1,61 +1,61 @@
|
||||
<?php
|
||||
require_once ("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'titel')
|
||||
{
|
||||
if (isset($_POST["term"]))
|
||||
{
|
||||
$term = mb_strtoupper(trim($_POST["term"]));
|
||||
|
||||
$query = "SELECT distinct titel FROM jumi_noten_daten WHERE upper(titel) LIKE '%" . $term . "%'";
|
||||
$result = $db->query($query) or die("Cannot execute titel");
|
||||
|
||||
if (mysqli_num_rows($result) > 0)
|
||||
{
|
||||
while ($row = $result->fetch_array())
|
||||
{
|
||||
$output[] = array(
|
||||
"label" => $row['titel'],
|
||||
"value" => $row['titel']
|
||||
);
|
||||
}
|
||||
#}else{
|
||||
# $output[] = array("label" => "keine Treffer");
|
||||
|
||||
}
|
||||
|
||||
echo json_encode($output);
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'verlag')
|
||||
{
|
||||
if (isset($_POST["term"]))
|
||||
{
|
||||
$term = mb_strtoupper(trim($_POST["term"]));
|
||||
|
||||
$query = "SELECT distinct bezeichnung FROM jumi_noten_verlag WHERE upper(bezeichnung) LIKE '%" . $term . "%'";
|
||||
$result = $db->query($query) or die("Cannot execute verlag");
|
||||
|
||||
if (mysqli_num_rows($result) > 0)
|
||||
{
|
||||
while ($row = $result->fetch_array())
|
||||
{
|
||||
$output[] = array(
|
||||
"label" => $row['bezeichnung'],
|
||||
"value" => $row['bezeichnung']
|
||||
);
|
||||
}
|
||||
#}else{
|
||||
# $output[] = array("label" => "keine Treffer");
|
||||
|
||||
}
|
||||
|
||||
echo json_encode($output);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
?>
|
||||
|
||||
<?php
|
||||
require_once ("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'titel')
|
||||
{
|
||||
if (isset($_POST["term"]))
|
||||
{
|
||||
$term = mb_strtoupper(trim($_POST["term"]));
|
||||
|
||||
$query = "SELECT distinct titel FROM jumi_noten_daten WHERE upper(titel) LIKE '%" . $term . "%'";
|
||||
$result = $db->query($query) or die("Cannot execute titel");
|
||||
|
||||
if (mysqli_num_rows($result) > 0)
|
||||
{
|
||||
while ($row = $result->fetch_array())
|
||||
{
|
||||
$output[] = array(
|
||||
"label" => $row['titel'],
|
||||
"value" => $row['titel']
|
||||
);
|
||||
}
|
||||
#}else{
|
||||
# $output[] = array("label" => "keine Treffer");
|
||||
|
||||
}
|
||||
|
||||
echo json_encode($output);
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'verlag')
|
||||
{
|
||||
if (isset($_POST["term"]))
|
||||
{
|
||||
$term = mb_strtoupper(trim($_POST["term"]));
|
||||
|
||||
$query = "SELECT distinct bezeichnung FROM jumi_noten_verlag WHERE upper(bezeichnung) LIKE '%" . $term . "%'";
|
||||
$result = $db->query($query) or die("Cannot execute verlag");
|
||||
|
||||
if (mysqli_num_rows($result) > 0)
|
||||
{
|
||||
while ($row = $result->fetch_array())
|
||||
{
|
||||
$output[] = array(
|
||||
"label" => $row['bezeichnung'],
|
||||
"value" => $row['bezeichnung']
|
||||
);
|
||||
}
|
||||
#}else{
|
||||
# $output[] = array("label" => "keine Treffer");
|
||||
|
||||
}
|
||||
|
||||
echo json_encode($output);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
?>
|
||||
|
||||
|
||||
@ -1,51 +1,51 @@
|
||||
<?PHP
|
||||
// Generates a strong password of N length containing at least one lower case letter,
|
||||
// one uppercase letter, one digit, and one special character. The remaining characters
|
||||
// in the password are chosen at random from those four sets.
|
||||
//
|
||||
// The available characters in each set are user friendly - there are no ambiguous
|
||||
// characters such as i, l, 1, o, 0, etc. This, coupled with the $add_dashes option,
|
||||
// makes it much easier for users to manually type or speak their passwords.
|
||||
//
|
||||
// Note: the $add_dashes option will increase the length of the password by
|
||||
// floor(sqrt(N)) characters.
|
||||
|
||||
function generateStrongPassword($length = 8, $add_dashes = false, $available_sets = 'luds')
|
||||
{
|
||||
$sets = array();
|
||||
if(strpos($available_sets, 'l') !== false)
|
||||
$sets[] = 'abcdefghjkmnpqrstuvwxyz';
|
||||
if(strpos($available_sets, 'u') !== false)
|
||||
$sets[] = 'ABCDEFGHJKMNPQRSTUVWXYZ';
|
||||
if(strpos($available_sets, 'd') !== false)
|
||||
$sets[] = '23456789';
|
||||
if(strpos($available_sets, 's') !== false)
|
||||
$sets[] = '!@#$%&*?';
|
||||
|
||||
$all = '';
|
||||
$password = '';
|
||||
foreach($sets as $set)
|
||||
{
|
||||
$password .= $set[array_rand(str_split($set))];
|
||||
$all .= $set;
|
||||
}
|
||||
|
||||
$all = str_split($all);
|
||||
for($i = 0; $i < $length - count($sets); $i++)
|
||||
$password .= $all[array_rand($all)];
|
||||
|
||||
$password = str_shuffle($password);
|
||||
|
||||
if(!$add_dashes)
|
||||
return $password;
|
||||
|
||||
$dash_len = floor(sqrt($length));
|
||||
$dash_str = '';
|
||||
while(strlen($password) > $dash_len)
|
||||
{
|
||||
$dash_str .= substr($password, 0, $dash_len) . '-';
|
||||
$password = substr($password, $dash_len);
|
||||
}
|
||||
$dash_str .= $password;
|
||||
return $dash_str;
|
||||
}
|
||||
<?PHP
|
||||
// Generates a strong password of N length containing at least one lower case letter,
|
||||
// one uppercase letter, one digit, and one special character. The remaining characters
|
||||
// in the password are chosen at random from those four sets.
|
||||
//
|
||||
// The available characters in each set are user friendly - there are no ambiguous
|
||||
// characters such as i, l, 1, o, 0, etc. This, coupled with the $add_dashes option,
|
||||
// makes it much easier for users to manually type or speak their passwords.
|
||||
//
|
||||
// Note: the $add_dashes option will increase the length of the password by
|
||||
// floor(sqrt(N)) characters.
|
||||
|
||||
function generateStrongPassword($length = 8, $add_dashes = false, $available_sets = 'luds')
|
||||
{
|
||||
$sets = array();
|
||||
if(strpos($available_sets, 'l') !== false)
|
||||
$sets[] = 'abcdefghjkmnpqrstuvwxyz';
|
||||
if(strpos($available_sets, 'u') !== false)
|
||||
$sets[] = 'ABCDEFGHJKMNPQRSTUVWXYZ';
|
||||
if(strpos($available_sets, 'd') !== false)
|
||||
$sets[] = '23456789';
|
||||
if(strpos($available_sets, 's') !== false)
|
||||
$sets[] = '!@#$%&*?';
|
||||
|
||||
$all = '';
|
||||
$password = '';
|
||||
foreach($sets as $set)
|
||||
{
|
||||
$password .= $set[array_rand(str_split($set))];
|
||||
$all .= $set;
|
||||
}
|
||||
|
||||
$all = str_split($all);
|
||||
for($i = 0; $i < $length - count($sets); $i++)
|
||||
$password .= $all[array_rand($all)];
|
||||
|
||||
$password = str_shuffle($password);
|
||||
|
||||
if(!$add_dashes)
|
||||
return $password;
|
||||
|
||||
$dash_len = floor(sqrt($length));
|
||||
$dash_str = '';
|
||||
while(strlen($password) > $dash_len)
|
||||
{
|
||||
$dash_str .= substr($password, 0, $dash_len) . '-';
|
||||
$password = substr($password, $dash_len);
|
||||
}
|
||||
$dash_str .= $password;
|
||||
return $dash_str;
|
||||
}
|
||||
|
||||
@ -1,155 +1,155 @@
|
||||
<?php
|
||||
require_once("../config/datenbankanbindung.php");
|
||||
$db = dbconnect();
|
||||
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'membersave') {
|
||||
$vorname = trim($_POST['vorname']);
|
||||
$nachname = trim($_POST['nachname']);
|
||||
$mail = trim($_POST['mail']);
|
||||
$alter16 = trim($_POST['alter16']);
|
||||
$singstimme = $_POST['singstimme'];
|
||||
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_admin WHERE mail = '$mail'");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
#Fehlercheck
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_chor_saenger WHERE mail = '$mail'");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
if ($row['Anz'] != "0") {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> User ist im System bereits vorhanden!</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
if (!filter_var($mail, FILTER_VALIDATE_EMAIL)) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Geben Sie eine gültige Mailadresse ein!</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
|
||||
$error = 0;
|
||||
|
||||
$datum = date("Y-m-d H:i:s");
|
||||
$sql1 = $db->query("INSERT INTO jumi_chor_saenger ( vorname
|
||||
, nachname
|
||||
, mail
|
||||
, singstimme
|
||||
, alter16
|
||||
, selfreg_date
|
||||
)
|
||||
VALUES
|
||||
( '$vorname'
|
||||
, '$nachname'
|
||||
, '$mail'
|
||||
, '$singstimme'
|
||||
, '$alter16'
|
||||
, '$datum'
|
||||
)
|
||||
");
|
||||
if (!$sql1) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es gab ein Fehler in der Datenbank: Insert User</div>|***|error';
|
||||
$error++;
|
||||
exit;
|
||||
}
|
||||
|
||||
if ($error == 0) {
|
||||
$empfaenger = "$mail";
|
||||
$betreff = "Anmeldung JU & MI";
|
||||
if($alter16 == '1'){
|
||||
$text = "
|
||||
<html>
|
||||
<head>
|
||||
<title>Registrierung JU & MI</title>
|
||||
</head>
|
||||
<body>
|
||||
<font face='Arial' size='2'>
|
||||
Hallo $vorname!<br><br>
|
||||
schön, dass du dich für den Jugendchor registriert hast!<br><br>
|
||||
Im Anhang befindet sich eine Einverständniserklärung. Diese benötigen wir unter anderem,
|
||||
dass wir den Jugendchor im Livestream zeigen dürfen.<br>
|
||||
Wir würden uns ebenso freuen, wenn wir eure Zusage für unsere Kanäle in den sozialen Medien bekommen würden..<br>
|
||||
<br><br>
|
||||
Bitte unterschreibt das Formular und schickt es an uns zurück. Die Mailadresse lautet: <a mailto='info@ju-and-mi.de'>info@ju-and-mi.de</a>
|
||||
Falls ihr das Dokument nicht einscannen könnt, reicht ein gut lesbares Foto oder gebt uns das Formular <b>vor</b> einem Jugendgottesdienst zurück.
|
||||
<p>
|
||||
Vielen Dank,<br>
|
||||
euer JU & MI Team
|
||||
</body>
|
||||
</html>";
|
||||
}else{
|
||||
$text = "
|
||||
<html>
|
||||
<head>
|
||||
<title>Registrierung JU & MI</title>
|
||||
</head>
|
||||
<body>
|
||||
<font face='Arial' size='2'>
|
||||
Hallo $vorname!<br><br>
|
||||
schön, dass du dich für den Jugendchor registriert hast!<br><br>
|
||||
Im Anhang befindet sich eine Einverständniserklärung. Diese benötigen wir unter anderem,
|
||||
dass wir den Jugendchor im Livestream zeigen dürfen.<br>
|
||||
Wir würden uns ebenso freuen, wenn wir eure Zusage für unsere Kanäle in den sozialen Medien bekommen würden.
|
||||
<br><br>
|
||||
Da du noch keine 16 Jahre alt bist, müssen deine Eltern/Sorgesberechtigte auf dem beigefügten Formular unterschreiben.<br>
|
||||
Sobald ihr das Einverständnis habt, schickt es an uns zurück. Die Mailadresse lautet: <a mailto='info@ju-and-mi.de'>info@ju-and-mi.de</a>.<br>
|
||||
Falls ihr das Dokument nicht einscannen könnt, reicht ein gut lesbares Foto oder gebt uns das Formular <b>vor</b> einem Jugendgottesdienst zurück.
|
||||
<p>
|
||||
Vielen Dank,<br>
|
||||
euer JU & MI Team
|
||||
</body>
|
||||
</html>";
|
||||
|
||||
}
|
||||
|
||||
|
||||
$result_absender = $db->query("SELECT wert FROM jumi_parameter WHERE pid = 1");
|
||||
$row_absender = $result_absender->fetch_array();
|
||||
if ($row_absender['wert'] == '') {
|
||||
$absender = 'info@ju-and-mi.de';
|
||||
} else {
|
||||
$absender = $row_absender['wert'];
|
||||
}
|
||||
$datei = "../media/Einwilligungserklaerung_personenbezogene_Daten.pdf";
|
||||
$boundary = "PHP-mixed-".md5(time());
|
||||
#$headers = "MIME-Version: 1.0\n";
|
||||
#$headers .= "Content-type: text/html; charset=utf-8\n";
|
||||
$headers .= "From: Info JU & MI <$absender>\n";
|
||||
$headers .= "Reply-To: Info JU & MI <$absender>\n";
|
||||
$headers .= "Content-Type: multipart/mixed; boundary=\"".$boundary."\"\n";
|
||||
#$headers .= " boundary=\"".$boundary."\"\r\n";
|
||||
|
||||
$size = filesize($datei);
|
||||
$data = file_get_contents($datei);
|
||||
$type = mime_content_type($datei);
|
||||
$name = basename($datei);
|
||||
|
||||
$data = chunk_split(base64_encode($data));
|
||||
$boundWithPre = "\n--".$boundary;
|
||||
|
||||
$message .= "--".$boundary."\r\n";
|
||||
$message .= "Content-Type: text/html; charset=\"UTF-8\"\r\n";
|
||||
$message .= "Content-Transfer-Encoding: 8bit\r\n\r\n";
|
||||
$message .= $text."\r\n";
|
||||
|
||||
# Anhang ab hier
|
||||
$message .= $boundWithPre;
|
||||
$message .= "\nContent-Type: application/octet-stream; name=\"".$name."\"";
|
||||
$message .= "\nContent-Transfer-Encoding: base64\n";
|
||||
$message .= "\nContent-Disposition: attachment\n";
|
||||
$message .= $data;
|
||||
$message .= $boundWithPre."--";
|
||||
|
||||
$return = @mail($empfaenger, $betreff, $message, $headers);
|
||||
|
||||
if (!$return) { // Abfrage ob Mailversand funktioniert hat
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Vielen Dank für die Registrierung. Es konnte allerdings <b>keine Mail</b> verschickt werden!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Vielen Dank für die Registrierung. Eine Mail mit weiteren Hinweisen wurde an dich geschickt.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
<?php
|
||||
require_once("../config/datenbankanbindung.php");
|
||||
$db = dbconnect();
|
||||
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'membersave') {
|
||||
$vorname = trim($_POST['vorname']);
|
||||
$nachname = trim($_POST['nachname']);
|
||||
$mail = trim($_POST['mail']);
|
||||
$alter16 = trim($_POST['alter16']);
|
||||
$singstimme = $_POST['singstimme'];
|
||||
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_admin WHERE mail = '$mail'");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
#Fehlercheck
|
||||
$result = $db->query("SELECT count(*) Anz FROM jumi_chor_saenger WHERE mail = '$mail'");
|
||||
$row = $result->fetch_array();
|
||||
|
||||
if ($row['Anz'] != "0") {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> User ist im System bereits vorhanden!</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
if (!filter_var($mail, FILTER_VALIDATE_EMAIL)) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Geben Sie eine gültige Mailadresse ein!</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
|
||||
$error = 0;
|
||||
|
||||
$datum = date("Y-m-d H:i:s");
|
||||
$sql1 = $db->query("INSERT INTO jumi_chor_saenger ( vorname
|
||||
, nachname
|
||||
, mail
|
||||
, singstimme
|
||||
, alter16
|
||||
, selfreg_date
|
||||
)
|
||||
VALUES
|
||||
( '$vorname'
|
||||
, '$nachname'
|
||||
, '$mail'
|
||||
, '$singstimme'
|
||||
, '$alter16'
|
||||
, '$datum'
|
||||
)
|
||||
");
|
||||
if (!$sql1) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es gab ein Fehler in der Datenbank: Insert User</div>|***|error';
|
||||
$error++;
|
||||
exit;
|
||||
}
|
||||
|
||||
if ($error == 0) {
|
||||
$empfaenger = "$mail";
|
||||
$betreff = "Anmeldung JU & MI";
|
||||
if($alter16 == '1'){
|
||||
$text = "
|
||||
<html>
|
||||
<head>
|
||||
<title>Registrierung JU & MI</title>
|
||||
</head>
|
||||
<body>
|
||||
<font face='Arial' size='2'>
|
||||
Hallo $vorname!<br><br>
|
||||
schön, dass du dich für den Jugendchor registriert hast!<br><br>
|
||||
Im Anhang befindet sich eine Einverständniserklärung. Diese benötigen wir unter anderem,
|
||||
dass wir den Jugendchor im Livestream zeigen dürfen.<br>
|
||||
Wir würden uns ebenso freuen, wenn wir eure Zusage für unsere Kanäle in den sozialen Medien bekommen würden..<br>
|
||||
<br><br>
|
||||
Bitte unterschreibt das Formular und schickt es an uns zurück. Die Mailadresse lautet: <a mailto='info@ju-and-mi.de'>info@ju-and-mi.de</a>
|
||||
Falls ihr das Dokument nicht einscannen könnt, reicht ein gut lesbares Foto oder gebt uns das Formular <b>vor</b> einem Jugendgottesdienst zurück.
|
||||
<p>
|
||||
Vielen Dank,<br>
|
||||
euer JU & MI Team
|
||||
</body>
|
||||
</html>";
|
||||
}else{
|
||||
$text = "
|
||||
<html>
|
||||
<head>
|
||||
<title>Registrierung JU & MI</title>
|
||||
</head>
|
||||
<body>
|
||||
<font face='Arial' size='2'>
|
||||
Hallo $vorname!<br><br>
|
||||
schön, dass du dich für den Jugendchor registriert hast!<br><br>
|
||||
Im Anhang befindet sich eine Einverständniserklärung. Diese benötigen wir unter anderem,
|
||||
dass wir den Jugendchor im Livestream zeigen dürfen.<br>
|
||||
Wir würden uns ebenso freuen, wenn wir eure Zusage für unsere Kanäle in den sozialen Medien bekommen würden.
|
||||
<br><br>
|
||||
Da du noch keine 16 Jahre alt bist, müssen deine Eltern/Sorgesberechtigte auf dem beigefügten Formular unterschreiben.<br>
|
||||
Sobald ihr das Einverständnis habt, schickt es an uns zurück. Die Mailadresse lautet: <a mailto='info@ju-and-mi.de'>info@ju-and-mi.de</a>.<br>
|
||||
Falls ihr das Dokument nicht einscannen könnt, reicht ein gut lesbares Foto oder gebt uns das Formular <b>vor</b> einem Jugendgottesdienst zurück.
|
||||
<p>
|
||||
Vielen Dank,<br>
|
||||
euer JU & MI Team
|
||||
</body>
|
||||
</html>";
|
||||
|
||||
}
|
||||
|
||||
|
||||
$result_absender = $db->query("SELECT wert FROM jumi_parameter WHERE pid = 1");
|
||||
$row_absender = $result_absender->fetch_array();
|
||||
if ($row_absender['wert'] == '') {
|
||||
$absender = 'info@ju-and-mi.de';
|
||||
} else {
|
||||
$absender = $row_absender['wert'];
|
||||
}
|
||||
$datei = "../media/Einwilligungserklaerung_personenbezogene_Daten.pdf";
|
||||
$boundary = "PHP-mixed-".md5(time());
|
||||
#$headers = "MIME-Version: 1.0\n";
|
||||
#$headers .= "Content-type: text/html; charset=utf-8\n";
|
||||
$headers .= "From: Info JU & MI <$absender>\n";
|
||||
$headers .= "Reply-To: Info JU & MI <$absender>\n";
|
||||
$headers .= "Content-Type: multipart/mixed; boundary=\"".$boundary."\"\n";
|
||||
#$headers .= " boundary=\"".$boundary."\"\r\n";
|
||||
|
||||
$size = filesize($datei);
|
||||
$data = file_get_contents($datei);
|
||||
$type = mime_content_type($datei);
|
||||
$name = basename($datei);
|
||||
|
||||
$data = chunk_split(base64_encode($data));
|
||||
$boundWithPre = "\n--".$boundary;
|
||||
|
||||
$message .= "--".$boundary."\r\n";
|
||||
$message .= "Content-Type: text/html; charset=\"UTF-8\"\r\n";
|
||||
$message .= "Content-Transfer-Encoding: 8bit\r\n\r\n";
|
||||
$message .= $text."\r\n";
|
||||
|
||||
# Anhang ab hier
|
||||
$message .= $boundWithPre;
|
||||
$message .= "\nContent-Type: application/octet-stream; name=\"".$name."\"";
|
||||
$message .= "\nContent-Transfer-Encoding: base64\n";
|
||||
$message .= "\nContent-Disposition: attachment\n";
|
||||
$message .= $data;
|
||||
$message .= $boundWithPre."--";
|
||||
|
||||
$return = @mail($empfaenger, $betreff, $message, $headers);
|
||||
|
||||
if (!$return) { // Abfrage ob Mailversand funktioniert hat
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Vielen Dank für die Registrierung. Es konnte allerdings <b>keine Mail</b> verschickt werden!</div>|***|success';
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Vielen Dank für die Registrierung. Eine Mail mit weiteren Hinweisen wurde an dich geschickt.</div>|***|success';
|
||||
exit;
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
?>
|
||||
Reference in New Issue
Block a user