user/editadvanced.php

   1 <?php // $Id$
   2
   3     require_once('../config.php');
   4     require_once($CFG->libdir.'/gdlib.php');
   5     require_once($CFG->libdir.'/adminlib.php');
   6     require_once($CFG->dirroot.'/user/editadvanced_form.php');
   7     require_once($CFG->dirroot.'/user/editlib.php');
   8     require_once($CFG->dirroot.'/user/profile/lib.php');
   9
  10     httpsrequired();
  11
  12     $id     = optional_param('id', $USER->id, PARAM_INT);    // user id; -1 if creating new user
  13     $course = optional_param('course', SITEID, PARAM_INT);   // course id (defaults to Site)
  14
  15     if (!$course = get_record('course', 'id', $course)) {
  16         error('Course ID was incorrect');
  17     }
  18     require_login($course->id);
  19
  20     if ($id == -1) {
  21         // creating new user
  22         require_capability('moodle/user:create', get_context_instance(CONTEXT_SYSTEM));
  23         $user = new object();
  24         $user->id = -1;
  25         $user->auth = 'manual';
  26         $user->confirmed = 1;
  27     } else {
  28         // editing existing user
  29         require_capability('moodle/user:update', get_context_instance(CONTEXT_SYSTEM));
  30         if (!$user = get_record('user', 'id', $id)) {
  31             error('User ID was incorrect');
  32         }
  33     }
  34
  35     // remote users cannot be edited
  36     if ($user->id != -1 and is_mnet_remote_user($user)) {
  37         redirect($CFG->wwwroot . "/user/view.php?id=$id&course={$course->id}");
  38     }
  39
  40     $mainadmin = get_admin();
  41     if ($user->id != $USER->id and $user->id == $mainadmin->id) {  // Can't edit primary admin
  42         print_error('adminprimarynoedit');
  43     }
  44
  45     if (isguestuser($user->id)) { // the real guest user can not be edited
  46         print_error('guestnoeditprofileother');
  47     }
  48
  49     //load user preferences
  50     useredit_load_preferences($user);
  51
  52     //Load custom profile fields data
  53     profile_load_data($user);
  54
  55     //create form
  56     $userform = new user_editadvanced_form();
  57     $userform->set_data($user);
  58
  59     if ($usernew = $userform->get_data()) {
  60         add_to_log($course->id, 'user', 'update', "view.php?id=$user->id&course=$course->id", '');
  61
  62         if (empty($usernew->auth)) {
  63             //user editing self
  64             $authplugin = get_auth_plugin($user->auth);
  65             unset($usernew->auth); //can not change/remove
  66         } else {
  67             $authplugin = get_auth_plugin($usernew->auth);
  68         }
  69
  70         $usernew->username     = trim($usernew->username);
  71         $usernew->timemodified = time();
  72
  73         if ($usernew->id == -1) {
  74             //TODO check out if it makes sense to create account with this auth plugin and what to do with the password
  75             unset($usernew->id);
  76             $usernew->mnethostid = $CFG->mnet_localhost_id; // always local user
  77             $usernew->confirmed  = 1;
  78             $usernew->password = hash_internal_user_password($usernew->newpassword);
  79             if (!$usernew->id = insert_record('user', $usernew)) {
  80                 error('Error creating user record');
  81             }
  82         } else {
  83             if (!update_record('user', $usernew)) {
  84                 error('Error updating user record');
  85             }
  86             if (method_exists($authplugin, 'user_update')){
  87                 // pass a true $userold here
  88                 if (! $authplugin->user_update($user, $userform->get_data(false))) {
  89                     // auth update failed, rollback for moodle
  90                     update_record('user', addslashes_object($user));
  91                     error('Failed to update user data on external auth: '.$usernew->auth.
  92                             '. See the server logs for more details.');
  93                 }
  94             };
  95
  96             //set new password if specified
  97             if (!empty($usernew->newpassword)) {
  98                 if ($authplugin->can_change_password()) {
  99                     if (method_exists($authplugin, 'user_update_password')){
 100                         if (!$authplugin->user_update_password($usernew, $usernew->newpassword)){
 101                             error('Failed to update password on external auth: ' . $usernew->auth .
 102                                     '. See the server logs for more details.');
 103                         }
 104                     } else {
 105                         error('Your external authentication module is misconfigued!');
 106                     }
 107                 }
 108             }
 109         }
 110
 111         //update preferences
 112         useredit_update_user_preference($usernew);
 113
 114         //update user picture
 115         if (!empty($CFG->gdversion)) {
 116             useredit_update_picture($usernew, $userform);
 117         }
 118
 119         // update mail bounces
 120         useredit_update_bounces($user, $usernew);
 121
 122         /// update forum track preference
 123         useredit_update_trackforums($user, $usernew);
 124
 125         // save custom profile fields data
 126         profile_save_data($usernew);
 127
 128         if ($user->id == $USER->id) {
 129             // Override old $USER session variable
 130             $usernew = (array)get_record('user', 'id', $usernew->id); // reload from db
 131             foreach ($usernew as $variable => $value) {
 132                 $USER->$variable = $value;
 133             }
 134             if (!empty($USER->newadminuser)) {
 135                 unset($USER->newadminuser);
 136                 // redirect to admin/ to continue with installation
 137                 redirect("$CFG->wwwroot/$CFG->admin/");
 138             } else {
 139                 redirect("$CFG->wwwroot/user/view.php?id=$USER->id&course=$course->id");
 140             }
 141         } else {
 142             redirect("$CFG->wwwroot/$CFG->admin/user.php");
 143         }
 144         //never reached
 145     }
 146
 147
 148 /// Display page header
 149     if ($user->id == -1 or ($user->id != $USER->id)) {
 150         $adminroot = admin_get_root();
 151         if ($user->id == -1) {
 152             admin_externalpage_setup('addnewuser', $adminroot);
 153             admin_externalpage_print_header($adminroot);
 154         } else {
 155             admin_externalpage_setup('editusers', $adminroot);
 156             admin_externalpage_print_header($adminroot);
 157             $userfullname = fullname($user, true);
 158             print_heading($userfullname);
 159         }
 160     } else if (!empty($USER->newadminuser)) {
 161         $strprimaryadminsetup = get_string('primaryadminsetup');
 162         print_header($strprimaryadminsetup, $strprimaryadminsetup);
 163         print_simple_box(get_string('configintroadmin', 'admin'), 'center', '50%');
 164         echo '<br />';
 165     } else {
 166         $streditmyprofile = get_string('editmyprofile');
 167         $strparticipants  = get_string('participants');
 168         $strnewuser       = get_string('newuser');
 169         $userfullname     = fullname($user, true);
 170         if ($course->id != SITEID) {
 171             print_header("$course->shortname: $streditmyprofile", "$course->fullname: $streditmyprofile",
 172                          "<a href=\"$CFG->wwwroot/course/view.php?id=$course->id\">$course->shortname</a>
 173                           -> <a href=\"index.php?id=$course->id\">$strparticipants</a>
 174                           -> <a href=\"view.php?id=$user->id&amp;course=$course->id\">$userfullname</a>
 175                           -> $streditmyprofile", "");
 176         } else {
 177             print_header("$course->shortname: $streditmyprofile", $course->fullname,
 178                          "<a href=\"view.php?id=$user->id&amp;course=$course->id\">$userfullname</a>
 179                           -> $streditmyprofile", "");
 180         }
 181         /// Print tabs at the top
 182         $showroles = 1;
 183         $currenttab = 'editprofile';
 184         require('tabs.php');
 185     }
 186
 187 /// Finally display THE form
 188     $userform->display();
 189
 190 /// and proper footer
 191     if ($user->id == -1 or ($user->id != $USER->id)) {
 192         admin_externalpage_print_footer($adminroot);
 193     } else if (!empty($USER->newadminuser)) {
 194         print_footer('none');
 195     } else {
 196         print_footer($course);
 197     }
 198
 199 ?>