<?php
//users API
function mf_users_get($extra = '')
{
global $mf_handle;
$ex = strip_tags($extra); //to remove extra and unused HTML tags
$mf_query = sprintf("SELECT * FROM `users` %s", $extra);
$mf_query_result = @mysql_query($mf_query);
if(!$mf_query_result)
return null;
$rcount = @mysql_num_rows($mf_query_result);
if($rcount == 0)
return null;
//this function to import a row of users from the db
$users = array();
for ($i=0; $i < $rcount; $i++)
{
/*$users = @mysql_fetch_object(@mf_query_result);
$users[@count($users)] = @mysql_fetch_object(@mf_query_result);
*/
$users[@count($users)] = @mysql_fetch_object($mf_query_result);
}
@mysql_free_result($mf_query_result);
return $users;
}
function mf_get_users_byID($uid)
{
$id = (int)$uid;
if($id == 0)
return NULL;
$result = my_forum_users_get("WHERE `id` =".$id);
if ($result == NULL)
return NULL;
$user = $result[0];
return $user;
}
function mf_users_add($name, $password, $email, $isadmin)
{
global $mf_handle;
if((empty($name)) || (empty($password)) || (empty($email)) || empty($isadmin))
return false;
$new_name = @mysql_real_escape_string(strip_tags($name), $mf_handle);
$new_email = @mysql_real_escape_string(strip_tags($email), $mf_handle);
$new_isadmin = (int)$isadmin;
$new_pass = @md5(mysql_real_escape_string(strip_tags($password), $mf_handle));
//md5 be used to encrypt the password when the user want to login in the system
$mf_query = sprintf("INSERT INTO `users` VALUE(NULL,'%s','%s','%s', %d)", $new_name, $new_pass, $new_email, $new_isadmin);
$mf_query_result = @mysql_query($mysql_query);
if(!$mf_query_result)
return false;
else
return true;
}
function mf_users_delete($uid)
{
$id = (int)$uid;
if($id == 0)
return false;
$mf_query = sprintf("DELETE FROM `users` WHERE `id` = %d, $id");
$mf_query = @mysql_query($mysql_query);
if (!$mf_query_result)
return false;
return true;
}
function mf_users_update($uid, $name = NULL, $password = NULL, $email = NULL, $isadmin = 0)
{
global $mf_handle;
$id = (int)$uid;
if($id == 0)
return false;
$new_isadmin = (int)isadmin;
$user = mf_get_users_byID($id);
if(!$user)
{
return false;
}
if((empty($name)) && (empty($password)) && (empty($email)) && ($user->isadmin == $new_isadmin))
return false;
$fields = array();
$mf_query = 'UPDATE `users` SET';
if (!empty($name))
{
$new_name = @mysql_real_escape_string(strip_tags($name), $mf_handle);
$fields[@count($fields)] = "`name` = '$new_name'";
}
if (!empty($password))
{
$new_pass = @md5(mysql_real_escape_string(strip_tags($name), $mf_handle));
$fields[@count($fields)] = "`password` = $new_pass";
}
if (!empty($email))
{
$new_name = @mysql_real_escape_string(strip_tags($email), $mf_handle);
$fields[@count($fields)] = "`name` = '$new_email'";
}
$fields[@count($fields)] = "`isadmin` = $new_isadmin";
$fcounf = @count($fields);
if ($fcounf == 1)
{
$mf_query .= $fields[0].'WHERE `id` = '.$id;
$mf_query_result = @mysql_query($mf_query);
if (!$mf_query)
return false;
else
return true;
}
for ($i=0; $i < fcount; $i++)
{
$mf_query .=$fields[$i];
if ($i == ($fcount - 1))
$mf_query .=' , ';
}
$mf_query .= 'WHERE `id` ='.$id;
$mf_query_result = @mysql_query(@mf_query);
if(!mf_query_result)
return false;
else
return true;
}
/*
$mf_query_result = mf_users_add('Aboubakr', 'user1234', 'abb@live.nl', 1);
*/
function mf_users_get_byName($name);
?>