<?
/* K-Rate
(C) Rinalds Uzkalns, 2003-2004. All Rights Reserved
http://turn-k.net

Version: 1.00 (22.09.04)
*/
?>
<?
$ret = $en[ret];
if ($ret == '') $ret = 'add';

//validate
if (str_replace(' ','',$en[acc_id]) == '') $err .= 'No account ID provided<br>';
if (str_replace(' ','',$en[pass]) == '') $err .= 'No password provided<br>';
if (str_replace(' ','',$en[email]) == '') $err .= 'No email provided<br>';

$query = "SELECT * FROM $admtable WHERE adm_user='".$en[acc_id]."'";
$result = sql_query($query);
if (sql_num_rows($result)>0 && $ret!='edit') $err .= 'User with such name already exists';

if ($admin['adm_user'] == 'demo') {
        $err =  '<b>Action disabled for demo account for security reasons!</b>';
        }

if ($err != '') { //error
        $err = '<font color=red>Error:<br>'.$err.'</font><br><br>';
        echo $err;
        $req = ($ret == 'add' ? 'cp_add' : 'edit_cpac');
} else {         //add user to DB
                $en[user] = $en[acc_id];
        if ($ret == 'add') {
                $en[confirmed] = 1;
                $rights = array();
                foreach ($en as $key => $value)
                    if ($value == 'on')
                        $rights[$key] = 1;
                $rights['user'] = $en['user'];
                $rights['pass'] = $en['pass'];
                $rights['email'] = $en['email'];
                new_admin($rights);
                } else {
                $query = '';

                //main privileges
                foreach ($privileges as $key => $value)
                        $perms[$key] = (int)isset($en[$key]);
                        
                //sub privileges
/*                $subp = array();
                foreach ((array)$_POST['subs'] as $key => $value)
                    foreach ($value as $skey => $svalue) {
                        $subp[$key][base64_decode($skey)] = 1;
                        }
                foreach ((array)$subprivileges as $key => $value)
                    foreach ($value as $skey => $svalue) {
                        $subp[$key][$skey] = isset($subp[$key][$skey]) ? $subp[$key][$skey] : 0;
                        }
*/
                $query .= ','.($ret == 'edit' ? $key.'=' : '').(int)isset($en[$key]);
                $query = "UPDATE $admtable SET adm_user='$en[acc_id]', adm_email='$en[email]'".($en['pass']!='[encrypted]' ? ",adm_pass='".md5($en['pass'])."'" : '').", adm_rights='".base64_encode(serialize($perms))."', adm_sub_rights='".base64_encode(serialize($subp))."' WHERE adm_id=".$id;
                sql_query($query);
//                sql_query("UPDATE $membtable SET m_user='$en[acc_id]', m_email='$en[email]'".($en['pass']!='[encrypted]' ? ",m_pass='".md5($en['pass'])."'" : '')." WHERE m_user='$en[user]'");
                }



      if ($en[s_email] == '1') { //send email
        $en[CPanel_ID] = $en[acc_id];
        $en[Password] = $en[pass];
        $em = emailtemplate('../emails/email_cpanel.tpl');
        $body = $em[body];
        $subj = $em[subj];
        mail($en[email], $subj, $body, "From: ".admin_email."\r\n"."Reply-To: ".admin_email."\r\n"    ."X-Mailer: PHP/" . phpversion());
        }

      if ($ret!='edit') {
        echo "<SCRIPT LANGUAGE='JavaScript'>alert ('User ".$ret."ed!')</SCRIPT>";
        }
        else {
        echo '<b>Changes saved for administrator account</b>';
        }

        $en['req'] = 'cp_manage';
}



?>