1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
|
<?php
# Mantis - a php based bugtracking system
# Copyright (C) 2000, 2001 Kenzaburo Ito - kenito@300baud.org
# This program is distributed under the terms and conditions of the GPL
# See the README and LICENSE files for details
?>
<?php include( "core_API.php" ) ?>
<?php login_cookie_check() ?>
<?php
db_connect( $g_hostname, $g_db_username, $g_db_password, $g_database_name );
check_access( ADMINISTRATOR );
# Check for duplicate username
$query = "SELECT username
FROM $g_mantis_user_table
WHERE username='$f_username'";
$result = db_query( $query );
if ( db_num_rows( $result ) > 0 ) {
PRINT "$f_username $s_duplicate_username<p>";
PRINT "<a href=\"$g_manage_create_user_page\">$s_proceed</a>";
exit;
}
if ( $f_password != $f_password_verify ) {
echo "ERROR: passwords do not match";
exit;
}
if ( !isset( $f_protected ) ) {
$f_protected = 0;
} else {
$f_protected = 1;
}
if ( !isset( $f_enabled ) ) {
$f_enabled = 0;
} else {
$f_enabled = 1;
}
# create the almost unique string for each user then insert into the table
$t_cookie_string = create_cookie_string();
$t_password = process_plain_password( $f_password );
$query = "INSERT
INTO $g_mantis_user_table
( id, username, email, password, date_created, last_visit,
access_level, enabled, protected, cookie_string )
VALUES
( null, '$f_username', '$f_email', '$t_password', NOW(), NOW(),
'$f_access_level', '$f_enabled', '$f_protected', '$t_cookie_string')";
$result = db_query( $query );
# Use this for MS SQL: SELECT @@IDENTITY AS 'id'
$t_user_id = db_insert_id();
# Create preferences
$query = "INSERT
INTO $g_mantis_user_pref_table
(id, user_id, project_id,
advanced_report, advanced_view, advanced_update,
refresh_delay, redirect_delay,
email_on_new, email_on_assigned,
email_on_feedback, email_on_resolved,
email_on_closed, email_on_reopened,
email_on_bugnote, email_on_status,
email_on_priority, language)
VALUES
(null, '$t_user_id', '0000000',
'$g_default_advanced_report', '$g_default_advanced_view', '$g_default_advanced_update',
'$g_default_refresh_delay', '$g_default_redirect_delay',
'$g_default_email_on_new', '$g_default_email_on_assigned',
'$g_default_email_on_feedback', '$g_default_email_on_resolved',
'$g_default_email_on_closed', '$g_default_email_on_reopened',
'$g_default_email_on_bugnote', '$g_default_email_on_status',
'$g_default_email_on_priority', '$g_default_language')";
$result = db_query($query);
$t_redirect_url = $g_manage_page;
?>
<?php print_page_top1() ?>
<?php
if ( $result ) {
print_meta_redirect( $t_redirect_url );
}
?>
<?php print_page_top2() ?>
<p>
<div align="center">
<?php
if ( $result ) { # SUCCESS
$f_access_level = get_enum_element( $s_access_levels_enum_string, $f_access_level );
PRINT "$s_created_user_part1 <span class=\"bold\">$f_username</span> $s_created_user_part2 <span class=\"bold\">$f_access_level</span><p>";
} else { # FAILURE
print_sql_error( $query );
}
print_bracket_link( $t_redirect_url, $s_proceed );
?>
</div>
<?php print_page_bot1( __FILE__ ) ?>
|
