citywebshop_cms/application/models/admin_users_model.php

<?php

class admin_users_model extends Model {
    
    
    public function getUsers() {
        $result = $this->query("select * from users where status<>'0';");
        return $result;
    }
    
    
    public function loadUser() {
        $user_id = $this->escapeString($_REQUEST['id']);
        $row = $this->query("select * from users where id='".$user_id."';");
        return $row[0];
    }
    
    
    public function saveUser() {
        $data = $this->escapeArray($_REQUEST);
        
        if ($data['user_id']!='') {
            if ($data['tempContainer']!='') {
                $fname = Image_helper::saveImageToFile('avatars',$data['tempContainer']);
                $this->execute("update azonics_users set user_avatar='".$fname."' where user_id='".$data['user_id']."';");
            }
            
            if ($data['tempContainer2']!='') {
                $fname2 = Image_helper::saveImageToFile('headers',$data['tempContainer2']);
                $this->execute("update azonics_users set user_profile_head_image='".$fname2."' where user_id='".$data['user_id']."';");
            }

            if ($data['pass1']!='' && $data['pass2']!='' && $data['pass1']==$data['pass2']) {
                $this->execute("update users set pass='".hash('ripemd160',$data['pass1'])."' WHERE user_id='".$data['user_id']."';");
            }
            
            $this->execute("update users set "
                    . "firstname='".$data['user_first_name']."', "
                    . "lastname='".$data['user_last_name']."', "
                    . "username='".$data['user_nick']."', "
                    . "email='".$data['user_contact_email']."', "
                    . "phone='".$data['user_phone']."', "
                    . "company='".$data['user_company']."', "
                    . "delivery_postal_code='".$data['delivery_postal_code']."', "
                    . "delivery_settlement='".$data['delivery_settlement']."', "
                    . "delivery_address='".$data['delivery_address']."' where id='".$data['user_id']."';");
            
            return true;
        }
        else {
            $checkAlredy = $this->query("select * from users where "
                    . "username='".$data['user_nick']."' and "
                    . "status='1';");
            
            if (sizeof($checkAlredy)>0) {
                return false;
            }
            else {
                if ($data['tempContainer']!='') {
                    $fname = Image_helper::saveImageToFile('avatars',$data['tempContainer']);
                }
                
                if ($data['tempContainer2']!='') {
                    $fname2 = Image_helper::saveImageToFile('header',$data['tempContainer2']);
                }

                $token = hash('ripemd160',$data['user_nick'].$data['pass1']);
                $perma_token = hash('ripemd160',$data['user_nick'].'_'.time());
                
                $this->execute("insert into users set "
                    . "firstname='".$data['user_first_name']."', "
                    . "lastname='".$data['user_last_name']."', "
                    . "username='".$data['user_nick']."', "
                    . "pass='".hash('ripemd160',$data['pass1'])."', "
                    . "email='".$data['user_contact_email']."', "
                    . "phone='".$data['user_phone']."', "
                    . "company='".$data['user_company']."', "
                    . "delivery_postal_code='".$data['delivery_postal_code']."', "
                    . "delivery_settlement='".$data['delivery_settlement']."', "
                    . "delivery_address='".$data['delivery_address']."', "
                    . "permanent_token='".$perma_token."', "
                    . "auto_login_token='".$token."', "
                    . "status='1';");
            
                return true;
            }
        }
    }
    
    
    public function deleteUser() {
        $user_id = $this->escapeString($_REQUEST['id']);
        $this->execute("delete from users where id='".$user_id."';");
        return true;
    }
    
    
    public function setUserState() {
        $user_id = $this->escapeString($_REQUEST['user_id']);
        $res_check = $this->query("select * from users where id='".$user_id."' and status<>'0';");
        if (sizeof($res_check)>0) {
            if ($res_check[0]->status=='1') {
                $this->execute("update users set status='2' where id='".$user_id."';");
            }
            else {
                $this->execute("update users set status='1' where id='".$user_id."';");
            }
            
            return true;
        }
        else {
            return false;
        }
    }
    
    
    public function setUserDefaultMailerState() {
        $user_id = $this->escapeString($_REQUEST['user_id']);
        $this->execute("update azonics_users set user_default_mailer_status='0';");
        $this->execute("update azonics_users set user_default_mailer_status='1' where user_id='".$user_id."';");
        return true;
    }
    
    
}