librenms/html/pages/preferences.inc.php
2011-03-17 00:09:20 +00:00

71 lines
2.5 KiB
PHP

<?php
echo("<div style='margin: 10px'>");
echo("<h3>User Preferences</h3>");
if ($_POST['action'] == "changepass")
{
if (authenticate($_SESSION['username'],$_POST['old_pass']))
{
if ($_POST['new_pass'] == "" || $_POST['new_pass2'] == "")
{
$changepass_message = "Password must not be blank.";
}
elseif ($_POST['new_pass'] == $_POST['new_pass2'])
{
changepassword($_SESSION['username'],$_POST['new_pass']);
$changepass_message = "Password Changed.";
}
else
{
$changepass_message = "Passwords don't match.";
}
} else {
$changepass_message = "Incorrect password";
}
}
include("includes/update-preferences-password.inc.php");
echo("<div style='width: 800px; background-color: #fff; padding:5px; margin-bottom:10px; float:left;'>");
echo("</div>");
echo("<div style='width: 300px; float: right;'>");
echo("<div style='background-color: #e5e5e5; border: solid #e5e5e5 10px; margin-bottom:10px;'>");
if (passwordscanchange())
{
echo("<div style='font-size: 18px; font-weight: bold; margin-bottom: 5px;'>Change Password</div>");
echo($changepass_message);
echo("<form method='post' action='".$config['baseurl']."/preferences/'><input type=hidden name='action' value='changepass'>
<table>
<tr><td>Old Password</td><td><input type=password name=old_pass autocomplete='off'></input></td></tr>
<tr><td>New Password</td><td><input type=password name=new_pass autocomplete='off'></input></td></tr>
<tr><td>New Password</td><td><input type=password name=new_pass2 autocomplete='off'></input></td></tr>
<tr><td></td><td align=right><input type=submit class=submit></td></tr></table></form>");
echo("</div>");
}
echo("<div style='background-color: #e5e5e5; border: solid #e5e5e5 10px; margin-bottom:10px;'>");
echo("<div style='font-size: 18px; font-weight: bold; margin-bottom: 5px;'>Device Permissions</div>");
if ($_SESSION['userlevel'] == '10') { echo("<strong class='blue'>Global Administrative Access</strong>"); }
if ($_SESSION['userlevel'] == '5') { echo("<strong class='green'>Global Viewing Access</strong>"); }
if ($_SESSION['userlevel'] == '1') {
$perms = mysql_query("SELECT * FROM `devices_perms` AS P, `devices` AS D WHERE `user_id` = '" . $user_id . "' AND P.device_id = D.device_id");
while ($perm = mysql_fetch_array($perms))
{
echo("<a href='?page=device&id=" . $perm['device_id'] . "'>" . $perm['hostname'] . "</a><br />");
$dev_access = 1;
}
if (!$dev_access) { echo("No access!"); }
}
echo("</div>");
echo("</div>");
echo("</div>");
?>