deleteuser.inc

<?
// Copyright 2002 Brian Ronald.  All rights reserved.
// Portable PHP/MySQL Corporate Intranet System
//
// This program is free software; you can redistribute it and/or
// modify it under the terms of the GNU General Public License
// as published by the Free Software Foundation; either version 2
// of the License, or (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program; if not, write to the Free Software
// Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.

//////////////////////////////////////////////////////////////////////////////

// Form to totally remove a user from the system.  Confirmation is not
// required again as the useradmin already clicked delete to get here.

function delete_user_info($table, $msg)
{
   global $mod_userid, $intranet_db, $lang;
   $sql = "DELETE FROM $table WHERE userid = $mod_userid";
   $result = @ mysqli_query($intranet_db,$sql);
   if (!showerror())
   {
      printf('<span class="message">'.$lang[$msg]."</span><br>\n", $mod_userid);
   }
}

if(isset($mod_userid) && $mod_userid == $userid)
{
   print("<span class=\"message\">You can not delete your own account!</span><br>\n");
}
else if(isset($mod_userid))
{
   delete_user_info ('users', 'user_deleted_account');
   delete_user_info ('userdirectory', 'user_deleted_directory');
   delete_user_info ('userflags', 'user_deleted_rights');
   delete_user_info ('userteams', 'user_deleted_teams');
   if (is_writeable($file_store.$fileid))
   {
      @ unlink($file_store."p".$fileid);
      printf("<span class=\"message\">".$lang['user_deleted_photo']."</span><br>\n",$mod_userid);
   }
}
else
{
   $sql = "SELECT * FROM users WHERE userid = $deleteuser";
   $result = @ mysqli_query($intranet_db,$sql);
   $row = mysqli_fetch_array($result,MYSQLI_ASSOC);
   showerror();
   printf("<h2>".$lang['confirm_delete']."</h2>\n".$lang['confirm_delete_user'],$row["firstname"],$row["lastname"]);
   print("<form method=\"post\" id=\"usermod\" action=\"admin.php?callmodule=".rawurlencode($callmodule)."&deleteuser=yes\">\n");
   print("<input type=\"hidden\" name=\"mod_userid\" value=\"$deleteuser\">");
   print("<input class=\"button\" type=\"submit\" name=\"delete\" value=\"".$lang['delete_user']."\">");
   print("</form>\n");
}

$help_keyword="deleteuser";
?>