$_REQUEST['user']['Username']));
if ($user_with_my_username and
( ( $uid and ($user_with_my_username->Id() != $uid) ) or !$uid)
) {
$error_message = 'There already exists a user with this Username
';
unset($_REQUEST['redirect']);
return;
}
# What other tests should we do?
if (isset($_REQUEST['user']['MonitorIds']) and is_array($_REQUEST['user']['MonitorIds']))
$_REQUEST['user']['MonitorIds'] = implode(',', $_REQUEST['user']['MonitorIds']);
if (!empty($_REQUEST['user']['Password'])) {
$_REQUEST['user']['Password'] = password_hash($_REQUEST['user']['Password'], PASSWORD_BCRYPT);
} else {
unset($_REQUEST['user']['Password']);
}
if (isset($_REQUEST['user']['Language']) and $_REQUEST['user']['Language']) {
# Verify that the language file exists in the lang directory.
if (!file_exists(ZM_PATH_WEB.'/lang/'.$_REQUEST['user']['Language'].'.php')) {
$error_message .= 'Error setting Language. New value ' .$_REQUEST['user']['Language'].' not saved because '.ZM_PATH_WEB.'/lang/'.$_REQUEST['user']['Language'].'.php doesn\'t exist.
';
ZM\Error($error_message);
unset($_REQUEST['user']['Language']);
unset($_REQUEST['redirect']);
}
}
$changes = $dbUser->changes($_REQUEST['user']);
if (count($changes)) {
if (!$dbUser->save($changes)) {
$error_message .= $dbUser->get_last_error().'
';
unset($_REQUEST['redirect']);
return;
}
if ($uid) {
if ($user and ($dbUser->Username() == $user->Username())) {
# We are the logged in user, need to update the $user object and generate a new auth_hash
$user = ZM\User::find_one(['Enabled'=>1, 'Id'=>$uid]);
# Have to update auth hash in session
zm_session_start();
generateAuthHash(ZM_AUTH_HASH_IPS, true);
session_write_close();
}
}
} # end if changes
foreach (ZM\Group::find() as $g) {
if (isset($_POST['group_permission'])) {
$permission = $g->Group_Permission($dbUser->Id());
if ($permission->Permission() != $_POST['group_permission'][$g->Id()]) {
$permission->save(array('Permission'=>$_POST['group_permission'][$g->Id()]));
$g->Permissions(null); # reload
}
}
}
foreach (ZM\Monitor::find() as $m) {
if (isset($_POST['monitor_permission'])) {
$permission = $dbUser->Monitor_Permission($m->Id());
if ($permission->Permission() != $_POST['monitor_permission'][$m->Id()]) {
$permission->save(array('Permission'=>$_POST['monitor_permission'][$m->Id()]));
}
}
}
$dbUser->Monitor_Permissions(null); # reload
} else if (ZM_USER_SELF_EDIT and ($uid == $user->Id())) {
if (!empty($_REQUEST['user']['Password'])) {
$_REQUEST['user']['Password'] = password_hash($_REQUEST['user']['Password'], PASSWORD_BCRYPT);
} else {
unset($_REQUEST['user']['Password']);
}
if (isset($_REQUEST['user']['Language']) and $_REQUEST['user']['Language']) {
# Verify that the language file exists in the lang directory.
if (!file_exists(ZM_PATH_WEB.'/lang/'.$_REQUEST['user']['Language'].'.php')) {
$error_message .= 'Error setting Language. New value ' .$_REQUEST['user']['Language'].' not saved because '.ZM_PATH_WEB.'/lang/'.$_REQUEST['user']['Language'].'.php doesn\'t exist.
';
ZM\Error($error_message);
unset($_REQUEST['user']['Language']);
unset($_REQUEST['redirect']);
}
}
$fields = array('Password'=>'', 'Language'=>'', 'HomeView'=>'');
$changes = $dbUser->changes(array_intersect_key($_REQUEST['user'], $fields));
if (count($changes)) {
if (!$dbUser->save($changes)) {
$error_message .= $dbUser->get_last_error();
unset($_REQUEST['redirect']);
return;
}
# We are the logged in user, need to update the $user object and generate a new auth_hash
$user = ZM\User::find_one(['Enabled'=>1, 'Id'=>$uid]);
zm_session_start();
generateAuthHash(ZM_AUTH_HASH_IPS, true);
session_write_close();
} # end if changes
} # canEdit(System) or self edit
} // end if $action == user
?>