//TODO: rewrite this, make it cleaner, make it work right, add it common stuff if(!check_perms('admin_create_users')) { error(403); } //Show our beautiful header View::show_header('Create a User'); //Make sure the form was sent if (isset($_POST['Username'])) { authorize(); //Create variables for all the fields $Username = $_POST['Username']; $Email = $_POST['Email']; $Password = $_POST['Password']; //Make sure all the fields are filled in if (!empty($Username) && !empty($Email) && !empty($Password)) { //Create hashes... $Secret=Users::make_secret(); $torrent_pass=Users::make_secret(); //Create the account $DB->query("INSERT INTO users_main (Username,Email,PassHash,torrent_pass,Enabled,PermissionID, Language) VALUES ('".db_string($Username)."','".db_string($Email)."','".db_string(Users::make_crypt_hash($Password))."','".db_string($torrent_pass)."','1','".USER."', 'en')"); //Increment site user count $Cache->increment('stats_user_count'); //Grab the userid $UserID=$DB->inserted_id(); Tracker::update_tracker('add_user', array('id' => $UserID, 'passkey' => $torrent_pass)); //Default stylesheet $DB->query("SELECT ID FROM stylesheets"); list($StyleID)=$DB->next_record(); //Auth key $AuthKey = Users::make_secret(); //Give them a row in users_info $DB->query("INSERT INTO users_info (UserID,StyleID,AuthKey,JoinDate) VALUES ('".db_string($UserID)."','".db_string($StyleID)."','".db_string($AuthKey)."', '".sqltime()."')"); //Redirect to users profile header ("Location: user.php?id=".$UserID); //What to do if we don't have a username, email, or password } elseif (empty($Username)) { //Give the Error -- We do not have a username error("Please supply a username"); } elseif (empty($Email)) { //Give the Error -- We do not have an email address error("Please supply an email address"); } elseif (empty($Password)) { //Give the Error -- We do not have a password error("Please supply a password"); } else { //Uh oh, something went wrong error("Unknown error"); } //Form wasn't sent -- Show form } else { ?>